Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Barbara Nitz
if http://bahn.hafas.de is Linux on z

I doubt it, but when I see my neighbour again, I'll ask him. Might take a 
while, though.

Regards, Barbara Nitz
-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Hazards of Not IPL'ing Regularly

2008-08-04 Thread Barbara Nitz
 [ snip ] Some of our customers though schedule IPL's every 
 week, ... just because they always have. 
AKA hysterical reasons. :-)

Well, how about severe storage leaks in all the 'new' stuff? (Like Websphere 
application server, java)? We regularly IPL those lpars once a week to get them 
to clean up their storage. Has reduced the out-of-storage abends 

Regards, Barbara Nitz
-- 
Pt! Schon das coole Video vom GMX MultiMessenger gesehen?
Der Eine für Alle: http://www.gmx.net/de/go/messenger03

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Hazards of Not IPL'ing Regularly

2008-08-04 Thread R.S.

Timothy Sipples wrote:
[...]

I've run into many customers running single production LPARs -- including a
decent sized bank for their core online banking, believe it or not -- and
the pmPS is a major step forward and near enough free so that they can
implement it without any real financial burden.


Unless your application needs some maintenance window, not the z/OS. Or 
your CPC needs some maint. window.
In such case it could happen that your sysplex can work fine, but the 
application needs a break. Usually business needs some *service* 
(application available), not perfectly working z/OS or sysplex.
In such case pmPS is not worth too much. Even rich man PS will no 
give to much.

My €0.02

--
Radoslaw Skorupka
Lodz, Poland


--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl

Sd Rejonowy dla m. st. Warszawy 
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, 
nr rejestru przedsibiorców KRS 025237

NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2008 r. kapita zakadowy BRE Banku SA  wynosi 
118.642.672 zote i zosta w caoci wpacony.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Shane
  Is there a way I can tell if http://bahn.hafas.de is Linux on z.
 
 Not really.  Netcraft shows that it is running Linux, but trying to narrow it 
 down beyond that is not particularly easy.

O/S fingerprinting has several well known techniques. As, of course, has
cloaking in response.

Shane ...

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread John Giltner
Well if this is the same company, it seems that some of the company runs
SUSE Linux on Intel/AMD and zSeries along with some other OS on zSeries. 
They don't mention what the other OS is.

http://www.novell.com/success/deutsche_bahn.html

The software that they use HAFAS is avaliable for IBM Mainframes:

http://www.hacon.de/hafas_e/konzept.shtml

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Sebastian Welton
More info:

http://www.ibm.com/news/us/en/2005/02/2005_02_03.html

http://www-01.ibm.com/webcasts/WCPGateway.wss?
jadeAction=WEBCAST_LAUNCHPAGE_HANDLERWCP_WEBCAST_ID_KEY=071
0011

http://www-03.ibm.com/press/us/en/pressrelease/7498.wss

Seb.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



USS Connection problem

2008-08-04 Thread Jerry Fuchs
We just migrated our DB2 subsystems in test to DB2 V8. Now the PeopleSoft 
process schedulers connections to DB2 fail. We get messages:

Time allotted to check status of Scheduler expired. 
This may be due to the time to load all the libraries.

We have been unable to determine the cause. We are z/OS 1.7.

Any ideas? 

Jerry

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: cbt

2008-08-04 Thread carlos roberto visconde
You can use AMBLIST program.

visconde


2008/8/4, ben lam [EMAIL PROTECTED]:

 I have to write a program that lists the csects of a program object and
 their properties, such as size, address, etc. Is there something I can use
 on the cbt tape?
 Thanks
 Ben
 _
 Your PC, mobile phone, and online services work together like never before.
 http://clk.atdmt.com/MRT/go/108587394/direct/01/
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Hazards of Not IPL'ing Regularly

2008-08-04 Thread Rich Smrcina
A storage leak of that nature can be an indication of a problem in 
Websphere or the application itself.  If your developers have run out of 
options trying to debug it, check for APARs against Websphere, or open a 
PMR.


Barbara Nitz wrote:
[ snip ] Some of our customers though schedule IPL's every 
week, ... just because they always have. 

AKA hysterical reasons. :-)


Well, how about severe storage leaks in all the 'new' stuff? (Like Websphere application server, java)? We regularly IPL those lpars once a week to get them to clean up their storage. Has reduced the out-of-storage abends 


Regards, Barbara Nitz


--
Rich Smrcina
VM Assist, Inc.
Phone: 414-491-6001
Ans Service:  360-715-2467
rich.smrcina at vmassist.com
http://www.linkedin.com/in/richsmrcina

Catch the WAVV!  http://www.wavv.org
WAVV 2009 - Orlando, FL - May 15-19, 2009

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



SMP Receive from network problem?

2008-08-04 Thread Mark Jacobs
Is anyone else having this problem today?

220 lindsey.boulder.ibm.com FTP server (Version wu-2.6.2(5) Custom Thu
Dec 8 12:55:22 MST 2005)
ready. 
NAME
(download3.boulder.ibm.com:AIMJ): 
   


B407x535 

 USER
B407x535  
331 Password required for
B407x535.
PASSWORD:  

   


 


PASS   
530 Download not currently allowed for your
location.  
Std Return Code = 26530, Error Code =
00011

QUIT   
221
Goodbye.   

-- 
Mark Jacobs
Time Customer Service
Tampa, FL


The power of the Executive to cast a man into prison without 
formulating any charge known to the law, and particularly to 
deny him the judgment of his peers, is in the highest degree 
odious and is the foundation of all totalitarian government 
whether Nazi or Communist.

Sir Winston Churchill

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: cbt

2008-08-04 Thread Lizette Koehler
I am not sure if the requestor is doing this for education or 
if there is something missing that other tools do not provide.

I am thinking of the LKED Map or ISPF 3.4, etc.  Plus I believe 
that there are several free products that can do similar functions. (PDS?)

Possibly IPCS could also help?

AMBLIST is also good.

Lizette

 
 You can use AMBLIST program.
 
 visconde
 
 
 2008/8/4, ben lam [EMAIL PROTECTED]:
 
  I have to write a program that lists the csects of a program object
 and
  their properties, such as size, address, etc. Is there something I
 can use
  on the cbt tape?
  Thanks
  Ben

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



couple dataset problem at IPL?

2008-08-04 Thread McKown, John
This is the first time that this has happened and I am confused. What
would make a couple dataset go bad? We have a two system, basic
sysplex. This weekend, we IPL'ed both systems. Our procedure is to take
down SY1 first, and reIPL it. When SY1 is up, then shutdown SY2 and
reIPL. On the IPL of SY1, we got messages:

IXC268I THE COUPLE DATA SETS SPECIFIED IN COUPLE11 ARE IN AN INCONSISTEN
T STATE
IXC275I COUPLE DATA SETS SPECIFIED IN COUPLE11 ARE 168
PRIMARY:   SYS1.LIH1.XCFCDS01
ON VOLSER LIHTS4
ALTERNATE: SYS1.LIH1.XCFCDS02
ON VOLSER LIHTS6
IXC273I XCF ATTEMPTING TO RESOLVE THE COUPLE DATA SETS
IXC275I RESOLVED COUPLE DATA SETS ARE 170
PRIMARY:   SYS1.LIH1.XCFCDS01
ON VOLSER LIHTS4
ALTERNATE:
NONE USED

I did a SETXCF to make SYS1.LIH1.XCFCDS02 the alternate.

SETXCF COUPLE,ACOUPLE=SYS1.LIH1.XCFCDS02
IXC309I SETXCF COUPLE,ACOUPLE REQUEST FOR SYSPLEX WAS ACCEPTED
IXC260I ALTERNATE COUPLE DATA SET REQUEST FROM SYSTEM 583
LIH1 FOR SYSPLEX IS NOW BEING PROCESSED.
DATA SET:  SYS1.LIH1.XCFCDS02
IEF196I IEF237I 2103 ALLOCATED TO SYS00099
IXC251I NEW ALTERNATE DATA SET 585
SYS1.LIH1.XCFCDS02
FOR SYSPLEX HAS BEEN MADE AVAILABLE

On SY2 at IPL, we got:

*IXC267E PROCESSING WITHOUT AN ALTERNATE 801
 COUPLE DATA SET FOR SYSPLEX.
 ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE.
*IXC267E PROCESSING WITHOUT AN ALTERNATE 802
 COUPLE DATA SET FOR WLM.
 ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE.
 IEF196I IEF237I 2802 ALLOCATED TO SYS3
*IXC267E PROCESSING WITHOUT AN ALTERNATE 803
 COUPLE DATA SET FOR LOGR.
 ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE.

I issued the SETXCF commands to activate the alternates, and got the
message:

SETXCF COUPLE,TYPE=LOGR,ACOUPLE=SYS1.LIH1.LOGRCD01
IXC309I SETXCF COUPLE,ACOUPLE REQUEST FOR LOGR WAS ACCEPTED
IXC260I ALTERNATE COUPLE DATA SET REQUEST FROM SYSTEM 750
DEV1 FOR LOGR IS NOW BEING PROCESSED.
DATA SET:  SYS1.LIH1.LOGRCD01
IEF196I IEF237I 2103 ALLOCATED TO SYS00100
IXC248E COUPLE DATA SET 752
SYS1.LIH1.LOGRCD01 ON VOLSER LIHTS6
FOR LOGR MAY BE IN USE BY ANOTHER SYSPLEX.
28 IXC247D REPLY U TO ACCEPT USE OR D TO DENY USE OF THE COUPLE DATA SET
 FOR LOGR.
IEE600I REPLY TO 28 IS;U
IXC251I NEW ALTERNATE DATA SET 757
SYS1.LIH1.LOGRCD01
FOR LOGR HAS BEEN MADE AVAILABLE


Any ideas?

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: cbt

2008-08-04 Thread Robert Wright

Lizette Koehler wrote:
I am not sure if the requestor is doing this for education or 
if there is something missing that other tools do not provide.


I am thinking of the LKED Map or ISPF 3.4, etc.  Plus I believe 
that there are several free products that can do similar functions. (PDS?)


Possibly IPCS could also help?
  
Regrettably not.  Contents supervisor doesn't generally keep anything in 
storage (dumped or not) that would support identifying CSECTs within 
programs in memory.  The z/OS nucleus is the sole exception that IPCS 
component code exploits.  Individual components do tend to keep 
information around so that their ESTAE and FRR recovery routines can 
fill in that symptom accurately should ABENDs occur, but there's no 
generally-accepted place to look for that information at this time.


--
Bob Wright - [EMAIL PROTECTED]

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



EXHPDM DOMMAND - DISPLAY ALL CONNECTIONS

2008-08-04 Thread John Dawes
Hi,
 
I am trying to display all the connections that are active in EXHPDM.  I tried 
the following commands but I get an error: SOV06049E  SOV06070W
 
HPDM D C ALL DETAIL
HPDM DISPLAY CONNECTION DETAIL
/HPDM D C *
 
If I insert a connection ID, the command works, however it doesn't when I try 
the ALL.  The ALL command works when I display the STREAM
 
Could someone suggest some other command that I could try?  I checked the doc 
and the only command I found was HPDM DISPLAY CONNECTION DETAIL, which didn't 
work.
 
   


  Find a better answer, faster with the new Yahoo!7 Search. 
www.yahoo7.com.au/search

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: couple dataset problem at IPL?

2008-08-04 Thread Staller, Allan
The only time I have seen this is afer a hard crash of a system in a
sysplex and IPL without the system is down reply on the surviving
members of the sysplex.

Perhaps you IPL'ed SY1 before it had withdrawn (completely) from the
sysplex? The bad cds's would then be seen by SY2.

snip
This is the first time that this has happened and I am confused. What
would make a couple dataset go bad? We have a two system, basic
sysplex. This weekend, we IPL'ed both systems. Our procedure is to take
down SY1 first, and reIPL it. When SY1 is up, then shutdown SY2 and
reIPL. On the IPL of SY1, we got messages:
.
.
.
Remainder deleted
/snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: HSM tape devices selection

2008-08-04 Thread Adams, Rick
Victor,

It depends on what you are coding in your rules.  

If you are talking about the input tape, and it is a VTAPE (I am
assuming you are using CA-VTAPE) managed volume, then VTAPE will
intercept the EDL and remove everything but drives owned by him. If your
esoteric in the HSM parms is pointing to the esoteric VTAPE then only
those 8 devices will be on the original EDL.

If you are talking about the output tape, for your recycle process, then
the EDL will be whatever you have coded in the
RECYCLEOUTPUT(MIGRATION() BACKUP()) parm.  If it is set to 3490
then all 16 drives will be in the EDL.  If it is coded VTAPE then only
the 8 drives will be in the EDL.

HTH.

ThanksRick

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Victor Zhang
Sent: Sunday, August 03, 2008 1:02 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: HSM tape devices selection

Hi HSM experts,
One question regarding TAPE device selection for HSM:
Suppose there are A000-A00F(total 16) devices defined in this systems
and all 
16 devices are 3490 devices, they are compatible. Suppose EDT name VTAPE

defined and contains only first 8 devices(A000-A007), and when HSM
requires 
to modify a tape volumes, for example doing RECYCLE, what tape devices
will 
in included in initial EDL? Will only 8 devices(A000-A007) included or
will all 16 
devices be included?

Regards
Victor

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: couple dataset problem at IPL?

2008-08-04 Thread Mark Zelden
On Mon, 4 Aug 2008 08:00:36 -0500, McKown, John
[EMAIL PROTECTED] wrote:

This is the first time that this has happened and I am confused. What
would make a couple dataset go bad? We have a two system, basic
sysplex. This weekend, we IPL'ed both systems. Our procedure is to take
down SY1 first, and reIPL it. When SY1 is up, then shutdown SY2 and
reIPL. On the IPL of SY1, we got messages:

snip

Do both systems share the same master catalog?  Do the COUPLExx 
members specify the couple data set names and the volser or just the 
data set names?  Are all couple data set types in use listed in the COUPLExx 
members? 

Regards,

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:[EMAIL PROTECTED]
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: SMP Receive from network problem?

2008-08-04 Thread David Magee
Yes, I've encountered the same problem this morning. Anyone else? Has anyone
reported it?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: couple dataset problem at IPL?

2008-08-04 Thread McKown, John
 -Original Message-
 From: IBM Mainframe Discussion List 
 [mailto:[EMAIL PROTECTED] On Behalf Of Staller, Allan
 Sent: Monday, August 04, 2008 8:22 AM
 To: IBM-MAIN@BAMA.UA.EDU
 Subject: Re: couple dataset problem at IPL?
 
 The only time I have seen this is afer a hard crash of a system in a
 sysplex and IPL without the system is down reply on the surviving
 members of the sysplex.
 
 Perhaps you IPL'ed SY1 before it had withdrawn (completely) from the
 sysplex? The bad cds's would then be seen by SY2.

Could be. I was not on-site at the time. The person doing the IPL is
quite good, so it would seem unlikely, but not impossible.

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: couple dataset problem at IPL?

2008-08-04 Thread McKown, John
[snip]
 snip
 
 Do both systems share the same master catalog?  Do the COUPLExx 
 members specify the couple data set names and the volser or just the 
 data set names?  Are all couple data set types in use listed 
 in the COUPLExx 
 members? 
 
 Regards,
 
 Mark
 --

They do NOT share a master cat (not my choice - by direction). The
couple datasets are catalogued in each mcat and are referred to via the
catalog entry (dsn only in couple member). All of the couple datasets
are listed in the COUPLEnn member. These have not changed since we went
to the basic sysplex.

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: How to change the ISPF code page?

2008-08-04 Thread Shmuel Metz (Seymour J.)
In [EMAIL PROTECTED], on 07/22/2008
   at 11:56 AM, Edward Jaffe [EMAIL PROTECTED] said:

Content-Type: text/plain; charset=ISO-8859-1; format=flowed

So far so good.

Content-Transfer-Encoding: 7bit

That's only valid for 7-bit data, e.g., ASCII. For 8 bit data, e.g.,
ISO-8859-1, you need, e.g., 8bit, base64, (bletch!) quoted-printable.

It figures. The characters got munged by email.

The characters were never correct. 
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: How to change the ISPF code page?

2008-08-04 Thread Shmuel Metz (Seymour J.)
In [EMAIL PROTECTED], on 07/22/2008
   at 05:23 PM, Gerhard Postpischil [EMAIL PROTECTED] said:

They're both wrong G  Mine are x'BA' and x'BB', and they work 
wonderfully.

With or without GE? And for what software? As I recall, some software
expects BA/BB while other software expects AD/BD.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: SDSF I (Input) Screen with z/OS 1.9

2008-08-04 Thread Curt Thompson
Just want to give an udpate on this issue.  IBM has opened OA26013 for me, if 
anyone else is interested.

Curt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: How to change the ISPF code page?

2008-08-04 Thread Shmuel Metz (Seymour J.)
In [EMAIL PROTECTED], on 07/22/2008
   at 02:54 PM, Patrick O'Keefe [EMAIL PROTECTED] said:

They may
helped us out by giving us a non-standard default keyboard map.

My advice would be to run a TPUT and VTAM buffer trace to see what data
are actually being sent, then take it from there.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: cbt

2008-08-04 Thread Hardee, Charles H
Bob is absolutely correct.

I needed CSECT information for a project I was working on that was
analyzing a dump using IPCS. I ended up dynamically calling AMBLIST,
feeding it control statements and then parsing it's output.
The process was to automate checking whether a client had certain
patches applied to their software at the time of an abend. The problem
was I never knew which patch was to be checked so it wasn't something we
wanted to build a static checker for.

snip   
Regrettably not.  Contents supervisor doesn't generally keep anything in

storage (dumped or not) that would support identifying CSECTs within 
programs in memory...
/snip 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Jeff Beech-Garwood
You can try running Steve Gibson's IDSERVE from 
http://www.grc.com/id/idserve.htm. It interrogates and displays the http 
headers from the webserver.

Jeff Beech-Garwood
Systems Programmer
Mainframe Network Support
US Bank, EP-MN-02NS
651-962-3809



Clark F Morris [EMAIL PROTECTED] 
Sent by: IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU
08/03/2008 05:25 PM
Please respond to
IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU


To
IBM-MAIN@BAMA.UA.EDU
cc

Subject
Can I tell whether a site is Linux on z






Is there a way I can tell if http://bahn.hafas.de is Linux on z.  If
it is that says interesting things about whether z series might be
able to handle google.  The site does timetable lookup, trip planning,
etc. and apparently is among the best for planning European trips.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



U.S. BANCORP made the following annotations
-
Electronic Privacy Notice. This e-mail, and any attachments, contains 
information that is, or may be, covered by electronic communications privacy 
laws, and is also confidential and proprietary in nature. If you are not the 
intended recipient, please be advised that you are legally prohibited from 
retaining, using, copying, distributing, or otherwise disclosing this 
information in any manner. Instead, please reply to the sender that you have 
received this communication in error, and then immediately delete it. Thank you 
in advance for your cooperation.



-


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: SMP Receive from network problem?

2008-08-04 Thread David Magee
I've been informed that IBM is aware that multiple customers are having
similar problems. They are working on it . . .
--
David

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: couple dataset problem at IPL?

2008-08-04 Thread Skip Robinson
All these symptoms are consistent with a case of 'lost CDS', where XCF has
determined for whatever reason that the missing CDS is 'defective'. I
haven't seen this condition for years, but it has happened--and not always
traceable to a clear cause. The number one suspect is volume RESERVE. If
XCF cannot complete I/O to a CDS for even a short period, the dataset will
be declared unusable and removed from the configuration. When this
situation occurs, XCF puts out a complaining or two and rolls on. Like
having your spare tire go flat. You probably won't notice until you have to
move the bodies in the trunk to pull the spare out. If you have all syslog
since the previous IPL, you will most certainly find a flurry of IX*
messages chronicling the CDS removal.

You might not notice any of this until the next IPL. Years ago we created
an automation routine to notify us loudly and clearly that we had lost a
CDS. I forget the message(s) we key on, but I could dig into it if
requested. The last episode probably predated Health Checker. The current
(1.9) HC does not seem to specifically list 'CDS consistency', but there
are a couple of XCF checks that I would expect to holler if a named pair
was not intact.

Meanwhile, make sure that all CDSs live on their own volumes. It seems
wasteful to dedicate that much space to a handful of smallish data sets,
but the effects of a sysplex wide outage far outweigh the unused cylinders.
Also watch out for full volume backups that might grab a volume for an
extended period. Better not to back up CDS volumes at all.

.
.
JO.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
[EMAIL PROTECTED]


   
 McKown, John
 [EMAIL PROTECTED] 
 THMARKETS.COM To 
 Sent by: IBM  IBM-MAIN@BAMA.UA.EDU
 Mainframe  cc 
 Discussion List   
 [EMAIL PROTECTED] Subject 
 .EDU couple dataset problem at IPL?  
   
   
 08/04/2008 06:00  
 AM
   
   
 Please respond to 
   IBM Mainframe   
  Discussion List  
 [EMAIL PROTECTED] 
   .EDU   
   
   




This is the first time that this has happened and I am confused. What
would make a couple dataset go bad? We have a two system, basic
sysplex. This weekend, we IPL'ed both systems. Our procedure is to take
down SY1 first, and reIPL it. When SY1 is up, then shutdown SY2 and
reIPL. On the IPL of SY1, we got messages:

IXC268I THE COUPLE DATA SETS SPECIFIED IN COUPLE11 ARE IN AN INCONSISTEN
T STATE
IXC275I COUPLE DATA SETS SPECIFIED IN COUPLE11 ARE 168
PRIMARY:   SYS1.LIH1.XCFCDS01
ON VOLSER LIHTS4
ALTERNATE: SYS1.LIH1.XCFCDS02
ON VOLSER LIHTS6
IXC273I XCF ATTEMPTING TO RESOLVE THE COUPLE DATA SETS
IXC275I RESOLVED COUPLE DATA SETS ARE 170
PRIMARY:   SYS1.LIH1.XCFCDS01
ON VOLSER LIHTS4
ALTERNATE:
NONE USED

I did a SETXCF to make SYS1.LIH1.XCFCDS02 the alternate.

SETXCF COUPLE,ACOUPLE=SYS1.LIH1.XCFCDS02
IXC309I SETXCF COUPLE,ACOUPLE REQUEST FOR SYSPLEX WAS ACCEPTED
IXC260I ALTERNATE COUPLE DATA SET REQUEST FROM SYSTEM 583
LIH1 FOR SYSPLEX IS NOW BEING PROCESSED.
DATA SET:  SYS1.LIH1.XCFCDS02
IEF196I IEF237I 2103 ALLOCATED TO SYS00099
IXC251I NEW ALTERNATE DATA SET 585
SYS1.LIH1.XCFCDS02
FOR SYSPLEX HAS BEEN MADE AVAILABLE

On SY2 at IPL, we got:

*IXC267E PROCESSING WITHOUT AN ALTERNATE 801
 COUPLE DATA SET FOR SYSPLEX.
 ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE.
*IXC267E PROCESSING WITHOUT AN ALTERNATE 802
 COUPLE DATA SET FOR WLM.
 ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE.
 IEF196I IEF237I 2802 ALLOCATED TO SYS3
*IXC267E PROCESSING WITHOUT AN ALTERNATE 803
 COUPLE DATA SET FOR LOGR.
 ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE.

I 

Re: couple dataset problem at IPL?

2008-08-04 Thread McKown, John
 -Original Message-
 From: IBM Mainframe Discussion List 
 [mailto:[EMAIL PROTECTED] On Behalf Of Skip Robinson
 Sent: Monday, August 04, 2008 10:13 AM
 To: IBM-MAIN@BAMA.UA.EDU
 Subject: Re: couple dataset problem at IPL?
 
 All these symptoms are consistent with a case of 'lost CDS', 
 where XCF has
 determined for whatever reason that the missing CDS is 'defective'. I
 haven't seen this condition for years, but it has 
 happened--and not always
 traceable to a clear cause. The number one suspect is volume 
 RESERVE. If
 XCF cannot complete I/O to a CDS for even a short period, the 
 dataset will
 be declared unusable and removed from the configuration. When this
 situation occurs, XCF puts out a complaining or two and rolls on. Like
 having your spare tire go flat. You probably won't notice 
 until you have to
 move the bodies in the trunk to pull the spare out. If you 
 have all syslog
 since the previous IPL, you will most certainly find a flurry of IX*
 messages chronicling the CDS removal.
 
 You might not notice any of this until the next IPL. Years 
 ago we created
 an automation routine to notify us loudly and clearly that we 
 had lost a
 CDS. I forget the message(s) we key on, but I could dig into it if
 requested. The last episode probably predated Health Checker. 
 The current
 (1.9) HC does not seem to specifically list 'CDS 
 consistency', but there
 are a couple of XCF checks that I would expect to holler if a 
 named pair
 was not intact.
 
 Meanwhile, make sure that all CDSs live on their own volumes. It seems
 wasteful to dedicate that much space to a handful of smallish 
 data sets,
 but the effects of a sysplex wide outage far outweigh the 
 unused cylinders.
 Also watch out for full volume backups that might grab a volume for an
 extended period. Better not to back up CDS volumes at all.
 
 .
 .
 JO.Skip Robinson

Now that may be a real possibility!! The CDSes are on system
infrastructure volumes. And they get an occasional RESERVE.

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Mark Post
 On Mon, Aug 4, 2008 at 10:40 AM, in message
[EMAIL PROTECTED], Jeff
Beech-Garwood [EMAIL PROTECTED] wrote: 
 You can try running Steve Gibson's IDSERVE from 
 http://www.grc.com/id/idserve.htm. It interrogates and displays the http 
 headers from the webserver.

You'll see something like this:
$ lynx --dump --head http://bahn.hafas.de/bin/query.exe/d
HTTP/1.1 200 OK
Date: Mon, 04 Aug 2008 15:20:51 GMT
Server: Apache
Connection: close
Content-Type: text/html; charset=ISO-8859-1

It tells you Apache is running, hence the id the server name, but not on what 
OS, since Apache runs on so many.


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Mark Post
 On Mon, Aug 4, 2008 at  7:31 AM, in message
[EMAIL PROTECTED], John Giltner
[EMAIL PROTECTED] wrote: 
 Well if this is the same company, it seems that some of the company runs
 SUSE Linux on Intel/AMD and zSeries along with some other OS on zSeries. 

While Deutsche Bahn is one of our customers, including on System z, that's not 
the same company as is being discussed here.


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Mark Post
 On Mon, Aug 4, 2008 at  6:34 AM, in message [EMAIL PROTECTED],
Shane [EMAIL PROTECTED] wrote: 
-snip-
 O/S fingerprinting has several well known techniques. As, of course, has
 cloaking in response.

And this company has done their job in that area.  Only two ports open on the 
system (or the firewalls front-ending the system more likely), so not enough 
information to get a good fingerprint.  While personally frustrating, it's good 
to see someone out there can get it right.  :)


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Firewall

2008-08-04 Thread Mark Post
 On Mon, Aug 4, 2008 at  1:48 AM, in message
[EMAIL PROTECTED], Timothy
Sipples [EMAIL PROTECTED] wrote: 
-snip-
 There are some alternatives, fortunately. Tivoli Access Manager for
 e-business might be one, as an example. Also, most Linux distributions have
 built-in firewall capabilities, including Novell and Red Hat.

_All_ Linux distributions have built-in firewalls.  It's literally part of the 
kernel.  You can choose to use it or not, but it's only a few keystrokes away.  
Interestingly, a lot of the so-called hardware firewalls on the market today 
are actually running Linux under the covers.  The manufacturers have added 
value by wrapping the firewall capability with a (hopefully) easy to use human 
interface so that you don't have to be an iptables expert to get things set up 
the way you want them.  (Although there are also open source packages out there 
that will let you do similar things, some of which use a GUI, etc.)


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Hazards of Not IPL'ing Regularly

2008-08-04 Thread George Allen Bly
I didn't get my annual February IPL for production until June this year.

We just don't IPL.

George


Subject: Hazards of Not IPL'ing Regularly

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: secure ftp on the mainframe

2008-08-04 Thread Ulrich Boche

Rafael Fernandez L. wrote:

Nobody mentioned ftp with GSSAPI (kerberos) ?

Ignacio Landín Villegas
 

Probably because there is rarely anyone using it.

Furthermore, it was all but unusable for a long time: although the 
Kerberos ticket provided the cross-reference with the RACF userid, 
support for SECURE_PASSWORD OPTIONAL was not available until, IIRC, 
z/OS V1R7 or V1R8. Nobody wants to go through the installation of 
Kerberos with FTP on z/OS if you don't even get single sign-on.


Also, if you use Kerberos with z/OS and Windows, the only common 
encryption algorithm is DES with 56-bit keys. Windows doesn't support 
Triple DES and z/OS doesn't support RC4. AES support (128- or 256-bit 
keys) requires z/OS V1R9 and Windows Vista and/or Windows Server 2008.


(Sorry, sent my posting just to the newsgroup in my first attempt).
--
Ulrich Boche
SVA GmbH, Germany
IBM Business Partner

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Diehl, Gary (MVSSupport)
IDServe worked for me.  This isn't clearly z/OS but one can infer.
This is what I got back from our own book server which is hosted on Z.

HTTP/1.1 200 Document follows 
Server: IBM HTTP Server/V5R3M0
Date: Mon, 04 Aug 2008 15:53:29 GMT
Connection: close
Accept-Ranges: bytes
Content-Location: home.html
Content-Type: text/html
Content-Length: 3061
Last-Modified: Fri, 27 Jun 2008 14:59:09 GMT
Query complete.

Server identified itself as: IBM HTTP Server/V5R3M0

Gary Diehl
Systems Administration

The truth leaves no room for feelings of superiority.  Such feelings
are nothing but lying vanities. - James L. Ferrell
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Jeff Beech-Garwood
Sent: Monday, August 04, 2008 9:41 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Can I tell whether a site is Linux on z

You can try running Steve Gibson's IDSERVE from 
http://www.grc.com/id/idserve.htm. It interrogates and displays the http

headers from the webserver.

Jeff Beech-Garwood
Systems Programmer
Mainframe Network Support
US Bank, EP-MN-02NS
651-962-3809



Clark F Morris [EMAIL PROTECTED] 
Sent by: IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU
08/03/2008 05:25 PM
Please respond to
IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU


To
IBM-MAIN@BAMA.UA.EDU
cc

Subject
Can I tell whether a site is Linux on z






Is there a way I can tell if http://bahn.hafas.de is Linux on z.  If
it is that says interesting things about whether z series might be
able to handle google.  The site does timetable lookup, trip planning,
etc. and apparently is among the best for planning European trips.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



U.S. BANCORP made the following annotations
-
Electronic Privacy Notice. This e-mail, and any attachments, contains
information that is, or may be, covered by electronic communications
privacy laws, and is also confidential and proprietary in nature. If you
are not the intended recipient, please be advised that you are legally
prohibited from retaining, using, copying, distributing, or otherwise
disclosing this information in any manner. Instead, please reply to the
sender that you have received this communication in error, and then
immediately delete it. Thank you in advance for your cooperation.



-


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Edward Jaffe

John Giltner wrote:

Edward Jaffe wrote:
http://www.pcworld.com/businesscenter/article/149022/faq_how_to_dodge_the_dns_bug.html 

http://www.computerworld.com/action/article.do?command=viewArticleBasicarticleId=9110622 


http://www.doxpara.com/

Is z/OS vulnerable? If not, why not? If so, what is the fixing APAR?



It might be, but the way I am reading the information about the 
vulnerability you have to have your DNS server setup for recursion.  
Do you have your z/OS based DNS server(s) setup for recursion?


Recursion is the norm for DNS. I've never seen a DNS set up any other way.

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Ed Finnell
 
In a message dated 8/4/2008 11:08:59 A.M. Central Daylight Time,  
[EMAIL PROTECTED] writes:

Recursion is the norm for DNS. I've never seen a DNS set up any other  way.



But isn't that out of ignorance or  pre-exploitation? I was pondering the CSS 
server samples for VIEW with  recursion inside the nest and no-recursion 
external but don't see a way to  measure. Most likely traffic dependant. 
Alternatively, guess we could run 9  internal and 4.9 external but don't know 
who 
that's gonna clobber  either.







**Looking for a car that's sporty, fun and fits in your budget? 
Read reviews on AOL Autos.  
(http://autos.aol.com/cars-BMW-128-2008/expert-review?ncid=aolaut000517 
)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Mark Post
 On Mon, Aug 4, 2008 at 11:58 AM, in message
[EMAIL PROTECTED],
Diehl, Gary (MVSSupport) [EMAIL PROTECTED] wrote: 
 IDServe worked for me.  This isn't clearly z/OS but one can infer.
 This is what I got back from our own book server which is hosted on Z.
 
 HTTP/1.1 200 Document follows 
 Server: IBM HTTP Server/V5R3M0

I agree that it is _likely_ z/OS, but if you look at Nationwide's site, it will 
also say it is running IBM HTTP Server, and I know from talking to the folks 
there that they are running IHS on Linux for System z.  The difference being 
(from what I see) is:
Server: IBM_HTTP_Server
versus your
Server: IBM HTTP Server/V5R3M0

I don't know if that's configurable or not.  I believe it is for Apache, since 
many Apache sites report more details:
Server: Apache/1.3.27 (Unix) PHP/4.3.1
while the bahn.hafas.de site simply says:
Server: Apache


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Hazards of Not IPL'ing Regularly

2008-08-04 Thread Scott Barry
On Sat, 2 Aug 2008 19:25:29 -0500, Jim Marshall [EMAIL PROTECTED] wrote:

Had an outage in the middle of this week due to the following reported to me:

IBM completed its analysis of the dump shipped and concluded the problem is
associated with APAR OA23299.  APAR OA23299 is associated with long
running enclave that has been active for weeks in a service class with
response time goals such as WebSphere Application Server.  Apparently, this
can cause a negative index value and an overlay of storage.

Seems to me the LPAR had gone about 4+ weeks or more without being
IPL'ed. The appearance of it made us think it was some problem in device
support associated with PPRC (which we do not run) or maybe SRDF-A.

Until the APAR can be applied, we took the outage early Sunday morning to
reboot all the LPARs and will each Sunday.

Jim (WashDC)


Does this mean that I need to stop my car on a long-duration trip every ???
miles, just in case there might be a software glitch waiting to happen?  

Given legacy methodologies and data center procedures, I can only imagine
explaining to today's end-users that they cannot work on a particular day,
simply because of an IPL or other outage or because we're running backups,
just because that's the way we do things.

Come on, we're no longer living in the Bedrock era, Barny.  This is so
swatting at flies with a Buick, people.

Scott Barry
SBBWorks, Inc.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



SHARE MVS/SCP (z/OS) Project Get Involved Meeting! Sun Aug 10 5:30pm at SHARE in San Jose http://www.share.org/

2008-08-04 Thread Knutson, Sam
Hi,

 

If you will be at SHARE in San Jose, CA USA Aug 10 -15
http://www.share.org/  and want to have more fun here is a great place
to start.  You can meet some of the IBM and Customer folks who help put
together the MVS/SCP (MVSE nee z/OS) 28xx sessions at SHARE.   You can
come and say Hi! we won't tie you to a chair and make you volunteer for
anything:-)   You may find that if you get involved a little bit even
doing small jobs and get to know other folks that you will get a lot
more out of SHARE.  We always finish in time to get to the Reception.

 

2801 MVS/SCP Project Volunteer Coordination

Times:  Aug 10 Sun, 5:30pm, Convention Center, Concourse Level,Room A2

 

In this Sunday working session, you will have an opportunity to meet
some of the volunteers who work behind the scenes to make the SHARE
Conference one of the best places to get education on many topics. This
is an informal session where we ask people to volunteer to chair
sessions, pass along information from SHARE and the MVS Program, cover
changes in our organization, and then open the session for general
comments and questions. During this session, you will have time to let
us know what types of sessions are valuable to you. SHARE sessions are a
two-way communication medium; the speaker is sharing information with
you and is looking for you to share your opinions and comments. This is
a valuable place to meet up with the volunteers and project
representatives, who can introduce you to other volunteers,
representatives from IBM, vendor representatives and speakers. 

To find out more about the MVS SCP project and volunteers before the
conference, go to the SHARE website, click the Volunteer Center tab,
select Projects/Programs and click on MVS SCP Project. Check out the web
page after the conference, too. Stop in and determine what you can do to
help the conference and sessions run smoothly. We are always looking for
new people to join and new ideas. You might even find that we have
people in the room who have an answer to your question.

 

Best Regards, 

Sam Knutson, GEICO Performance and Availability
Management
SHARE MVS/SCP Project Manager 
mailto:[EMAIL PROTECTED] 
(office)  301.986.3574 

Think big, act bold, start simple, grow fast...

 

 

 

 

 

 

 

 

 

 

 


This email/fax message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution of this
email/fax is prohibited. If you are not the intended recipient, please
destroy all paper and electronic copies of the original message.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread John Giltner
After re-looking at it, I don't think it is Linux at all.

If you go http://bahn.hafas.de/ you will see you are re-directed to:

http://bahn.hafas.de/bin/query.exe/d

Notice the query.exe.I would say off hand that this is a Windows box. 
However, they could be running Wine under Linux or just doing the .exe to
throw people off.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: couple dataset problem at IPL?

2008-08-04 Thread McKown, John
 -Original Message-
 From: IBM Mainframe Discussion List 
 [mailto:[EMAIL PROTECTED] On Behalf Of Skip Robinson
 Sent: Monday, August 04, 2008 10:13 AM
 To: IBM-MAIN@BAMA.UA.EDU
 Subject: Re: couple dataset problem at IPL?
 
 All these symptoms are consistent with a case of 'lost CDS', 
 where XCF has
 determined for whatever reason that the missing CDS is 'defective'. I
 haven't seen this condition for years, but it has 
 happened--and not always
 traceable to a clear cause. The number one suspect is volume 
 RESERVE. If
 XCF cannot complete I/O to a CDS for even a short period, the 
 dataset will
 be declared unusable and removed from the configuration. When this
 situation occurs, XCF puts out a complaining or two and rolls on. Like
 having your spare tire go flat. You probably won't notice 
 until you have to
 move the bodies in the trunk to pull the spare out. If you 
 have all syslog
 since the previous IPL, you will most certainly find a flurry of IX*
 messages chronicling the CDS removal.
 
 You might not notice any of this until the next IPL. Years 
 ago we created
 an automation routine to notify us loudly and clearly that we 
 had lost a
 CDS. I forget the message(s) we key on, but I could dig into it if
 requested. The last episode probably predated Health Checker. 
 The current
 (1.9) HC does not seem to specifically list 'CDS 
 consistency', but there
 are a couple of XCF checks that I would expect to holler if a 
 named pair
 was not intact.
 
 Meanwhile, make sure that all CDSs live on their own volumes. It seems
 wasteful to dedicate that much space to a handful of smallish 
 data sets,
 but the effects of a sysplex wide outage far outweigh the 
 unused cylinders.
 Also watch out for full volume backups that might grab a volume for an
 extended period. Better not to back up CDS volumes at all.
 
 .
 .
 JO.Skip Robinson

I finally found the messages. You are correct. The volume containing the
CDSes was RESERVEd for too long a time. The message occurred 55 days
ago. Nobody noticed.

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Jack . Hamilton
Or they might be running OpenVMS. 

--
Jack Hamilton
Management Information  Analysis - Analytic Information Services
Kaiser Foundation Health Plan, Inc.
1950 Franklin Street, Oakland, California 94612
+1 510 987-1556 (KP tieline 8-427-1556)

NOTE:  This email document and attachments are covered by CA Evidence Code 
§1157 and CA Health and Safety Code §1370.

NOTICE TO RECIPIENT:  If you are not the intended recipient of this 
e-mail, you are prohibited from sharing, copying, or otherwise using or 
disclosing its contents.  If you have received this e-mail in error, 
please notify the sender immediately by reply e-mail and permanently 
delete this e-mail and any attachments without reading, forwarding or 
saving them.  Thank you.




John Giltner [EMAIL PROTECTED] 
Sent by: IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU
08/04/2008 10:46 AM
Please respond to
IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU


To
IBM-MAIN@BAMA.UA.EDU
cc

Subject
Re: [IBM-MAIN] Can I tell whether a site is Linux on z





After re-looking at it, I don't think it is Linux at all.

If you go http://bahn.hafas.de/ you will see you are re-directed to:

http://bahn.hafas.de/bin/query.exe/d

Notice the query.exe.I would say off hand that this is a Windows box.
However, they could be running Wine under Linux or just doing the .exe 
to
throw people off.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Clark Morris
On 4 Aug 2008 04:31:11 -0700, in bit.listserv.ibm-main you wrote:

Well if this is the same company, it seems that some of the company runs
SUSE Linux on Intel/AMD and zSeries along with some other OS on zSeries. 
They don't mention what the other OS is.

http://www.novell.com/success/deutsche_bahn.html

The software that they use HAFAS is avaliable for IBM Mainframes:

http://www.hacon.de/hafas_e/konzept.shtml

Since the Hafas software allows the person using the site to plan a
door to door trip that can involve public transit agencies,
considerable ability to access databases and look things up is needed.
My guess is that it requires considerable compute power.  That was why
I was astounded when a poster on another group made the statement that
this ran on Linux on a mainframe.  If true this could give us quite a
talking point since people on the rail newsgroups I frequent claim
that Hafas for Deutsche Bahn is one of the better sites for trip
planning and getting rail travel information including transit
connections.  It IS accessible in English, French, obviously German
and several other languages.  Notes on Z doesn't impress me, Hafas
timetable and trip planning software does.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Problems that occur in production

2008-08-04 Thread John Mattson
Basic rule of the universe.  Right is a very very small subset of all 
possiblities.  Wrong is an almost infinite superset consisting of 
everything except what is Right.   Wherever possible test for right and 
reject everything else. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Problems that occur in production

2008-08-04 Thread Howard Brazee
On 4 Aug 2008 12:08:38 -0700, [EMAIL PROTECTED] (John Mattson)
wrote:

Basic rule of the universe.  Right is a very very small subset of all 
possiblities.  Wrong is an almost infinite superset consisting of 
everything except what is Right.   Wherever possible test for right and 
reject everything else. 

Of course when our work is supposed to be right for users,
management, government, customers, the enterprise, and stay right as
conditions change - defining this right is problematical.

Most all wars these days are fought between people who are Right (and
Righteous).   Most of the most political hatred is between people who
are Right.And every time we have a committee setting up
requirements for a new system, we have acrimony as different needs and
wants conflict.

That said - the big problem with programmer unit testing is that we
tend to be to focused on testing what we think is right.   The
everything else category doesn't get enough testing, as it is much
more poorly defined.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Patrick O'Keefe
On Mon, 4 Aug 2008 12:30:47 EDT, Ed Finnell [EMAIL PROTECTED] 
wrote:

...
[EMAIL PROTECTED] writes:

Recursion is the norm for DNS. I've never seen a DNS set up any 
other  way.
...

But isn't that out of ignorance or  pre-exploitation? ...

I don't think it's out of ignorance at all.  As I understand it, the
whole concept of DNS lookups is built around recursion - I don't 
know, but know does.  The only 2 real choices are I'll go ask
him or You go ask him.  (Maybe only the first is considered
recursive.  I don't know DNS processing that well.  I'm not even 
sure the 2nd option is part of standard DNS processing.)

I thought this newly surfaced vulnerability was based on I don't
know, but he knows something that's close processing - something
I'd never heard of before this past weekend. 

In any case it sounds like the vulnerability is not due to a bug
but due to the DNS architecture.  I can't imagine what the fix
is unless it is disabling the in-bailiwick processing.

BTW, a forwarding/caching name server on MVS is not directly
vulnerable, but will, of course, cache the bad address resolved
by a name server that has been corrupted.  And then it's cache
is just as poisoned as a vulnerable server's.  Clearing the cache
often lessens even that problem, but it sort of lessens the value
of a DNS cache, too.

Pat O'Keefe
  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Edward Jaffe

Patrick O'Keefe wrote:

I thought this newly surfaced vulnerability was based on I don't
know, but he knows something that's close processing - something
I'd never heard of before this past weekend. 


In any case it sounds like the vulnerability is not due to a bug
but due to the DNS architecture.  I can't imagine what the fix
is unless it is disabling the in-bailiwick processing.
  


IIUC, the fix randomizes the DNS source port and transaction ids. Dan 
Kaminsky is supposed to give full details at Black Hat in a couple of days.


--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Edward Jaffe

Ed Finnell wrote:
But isn't that out of ignorance or  pre-exploitation? I was pondering the CSS 
server samples for VIEW with  recursion inside the nest and no-recursion 
external but don't see a way to  measure. Most likely traffic dependant. 
  


52% of servers being tested at Kaminsky's site -- 
http://www.doxpara.com/ -- are still vulnerable. (This includes my home 
broadband ISP cox.net. :-(  )


Kaminsky alleges that far more than 52% of [DNS] servers are vulnerable.

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



INLINE JCL PROC Question

2008-08-04 Thread Howard Rifkind
I’m trying to create an inline procedure using the JCL below.
My questions is how should I set up the PARM parameter of %PARM2TMP to be used 
inline.  If it’s inline I don’t need to dig it out of the SYSPROC DD…correct?

Where in this JCL would the inline clist go if it could be done?

Thanks.


//PST0020 EXEC PGM=IKJEFT1A,
// REGION=1M,   
// PARM='%PARM2TMP PARM2TMP FUNCTION', 
// COND=(5,LT)  
//SYSPROC  DD  DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST  
//SYSTSPRT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) 
//SYSINDD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) 
//SYSPRINT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) 
//TMPFILE  DD  DISP=(NEW,CATLG),
// SPACE=(CYL,(1,1),RLSE),  
// DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80),  
// UNIT=SYSDA,  
// DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE 
//SPXTAPE  DD  DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG,  
// DISP=(NEW,CATLG),
// UNIT=SYSDA,  
// DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132), 
// SPACE=(CYL,(1,1),RLSE) 
//SYSTSIN  DD  DUMMY  
//*   
// PEND   
//*   
// EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823   
//*   



  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Anne Lynn Wheeler
The following message is a courtesy copy of an article
that has been posted to bit.listserv.ibm-main as well.


[EMAIL PROTECTED] (Patrick O'Keefe) writes:
 I don't think it's out of ignorance at all.  As I understand it, the
 whole concept of DNS lookups is built around recursion - I don't 
 know, but know does.  The only 2 real choices are I'll go ask
 him or You go ask him.  (Maybe only the first is considered
 recursive.  I don't know DNS processing that well.  I'm not even 
 sure the 2nd option is part of standard DNS processing.)

the domain name infrastructure is sort of a combination of a hierarchy
and mesh. both clients and servers can point to any place in the
infrastructure (servers point to other places in the infrastructure for
information that they aren't the authoritative server).  both clients
and servers may cache information from other places in the
infrastructure. Lists of other servers to ask (used by both clients and
servers) frequently have a minimum of two ... but sometimes can have
dozens (somewhat blurs the distinction between what is client and what
is server).

most ISP clients get automatically setup to point at the DNS servers
run by that ISP. For something a little different, here is a service
that is advertising itself as a preferred alternative to default
ISP DNS servers ... goes into some detail about DNS as part of
supporting their claims as to being better:
http://www.opendsn.com/

slightly older post with several references about the domain name
infrastructure vulnerabiilty
http://www.garlic.com/~lynn/2008j.html#87 CLIs and GUIs

also mentions that the inventor of DNS having earlier done a stint at
the science center
http://www.garlic.com/~lynn/subtopic.html#545tech

recent post on the subject in a.f.c ng
http://www.garlic.com/~lynn/2008k.html#78 Secure64 Develops First Automated 
DNSSEC Signing Application to Help Secure the Internet Worldwide

and repeat in thread in comp.arch
http://www.garlic.com/~lynn/2008k.html#79 Larrabee details: Yes, it is based on 
the Pentium. :-)

above mentions that one of the founders of Secure64 had also worked
on 801/risc
http://www.garlic.com/~lynn/subtopic.html#801

however, it doesn't mention that they had also earlier been responsible
for dual-address space mode on 3033.

-- 
40+yrs virtualization experience (since Jan68), online at home since Mar70

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Anne Lynn Wheeler
The following message is a courtesy copy of an article
that has been posted to bit.listserv.ibm-main as well.


oops, finger slip
http://www.opendns.com/

-- 
40+yrs virtualization experience (since Jan68), online at home since Mar70

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: INLINE JCL PROC Question

2008-08-04 Thread Howard Rifkind
Reason I'm asking is that I want to execute the rexx exec with a trace and see 
what's going on.


--- On Mon, 8/4/08, Howard Rifkind [EMAIL PROTECTED] wrote:

 From: Howard Rifkind [EMAIL PROTECTED]
 Subject: INLINE JCL PROC Question
 To: IBM-MAIN@BAMA.UA.EDU
 Date: Monday, August 4, 2008, 4:58 PM
 I’m trying to create an inline procedure using the JCL
 below.
 My questions is how should I set up the PARM parameter of
 %PARM2TMP to be used inline.  If it’s inline I don’t
 need to dig it out of the SYSPROC DD…correct?
 
 Where in this JCL would the inline clist go if it could be
 done?
 
 Thanks.
 
 
 //PST0020 EXEC PGM=IKJEFT1A,   
 
 // REGION=1M,  
 
 // PARM='%PARM2TMP PARM2TMP
 FUNCTION', 
 // COND=(5,LT) 
 
 //SYSPROC  DD  DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST 
 
 //SYSTSPRT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)
 
 //SYSINDD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)
 
 //SYSPRINT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)
 
 //TMPFILE  DD  DISP=(NEW,CATLG),   
 
 // SPACE=(CYL,(1,1),RLSE), 
 
 // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80), 
 
 // UNIT=SYSDA, 
 
 //
 DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE 
 //SPXTAPE  DD 
 DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG,  
 // DISP=(NEW,CATLG),   
 
 // UNIT=SYSDA, 
 
 // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132),
 
 // SPACE=(CYL,(1,1),RLSE) 
 //SYSTSIN  DD  DUMMY  
 //*   
 // PEND   
 //*   
 // EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823   
 //*   
 
 
 
   
 
 --
 For IBM-MAIN subscribe / signoff / archive access
 instructions,
 send email to [EMAIL PROTECTED] with the message: GET
 IBM-MAIN INFO
 Search the archives at
 http://bama.ua.edu/archives/ibm-main.html


  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: INLINE JCL PROC Question

2008-08-04 Thread Pedro Vera
 dig it out of the SYSPROC DD

Not sure I understand your question entirely, but it seems that you mean 
an inline rexx program when you say 'inline proc'... is that correct?

Assuming yes: (there are probably better ways, but I came up with this 
some time ago) you still need SYSPROC, but use a temporary dataset:

//GENER   EXEC PGM=IEBGENER 
//SYSPRINT  DD SYSOUT=9 
//SYSIN DD DUMMY 
//SYSUT1DD DDNAME=CLIST 
//SYSUT2DD DISP=(NEW,PASS),DSN=TMP(SAYIT), 
// UNIT=SYSVIO,SPACE=(TRK,(1,1,1)), 
// DCB=(DSORG=PO,RECFM=FB,LRECL=80,BLKSIZE=3120) 
//CLIST DD *,DLM=#$ 
 /* rexx */
 Parse arg theparms
 Say theparms
#$ 
//* 
//BATCHTSO  EXEC PGM=IKJEFT01,
//  PARM='%SAYIT PARM2TMP FUNCTION'
//SYSPROC   DD DISP=(OLD,DELETE),DSN=TMP 
//SYSTSPRT DD SYSOUT=H 
//SYSTSIN DD DUMMY 



Pedro Vera
phone   (408) 463-4812
internet [EMAIL PROTECTED]

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: INLINE JCL PROC Question

2008-08-04 Thread Steve Comstock

Howard Rifkind wrote:

I’m trying to create an inline procedure using the JCL below.
My questions is how should I set up the PARM parameter of %PARM2TMP 
to be used inline.  If it’s inline I don’t need to dig it out of 
the SYSPROC DD…correct?


Where in this JCL would the inline clist go if it could be done?

Thanks.


//PST0020 EXEC PGM=IKJEFT1A,
// REGION=1M,   
// PARM='%PARM2TMP PARM2TMP FUNCTION', 
// COND=(5,LT)  
//SYSPROC  DD  DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST  
//SYSTSPRT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) 
//SYSINDD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) 
//SYSPRINT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) 
//TMPFILE  DD  DISP=(NEW,CATLG),
// SPACE=(CYL,(1,1),RLSE),  
// DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80),  
// UNIT=SYSDA,  
// DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE 
//SPXTAPE  DD  DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG,  
// DISP=(NEW,CATLG),
// UNIT=SYSDA,  
// DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132), 
// SPACE=(CYL,(1,1),RLSE) 
//SYSTSIN  DD  DUMMY  
//*   
// PEND   
//*   
// EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823   
//*   


Maybe something like this:

//XST0020 PROC
//PST0020 EXEC PGM=IKJEFT1A,
// REGION=1M,
// PARM='%PARM2TMP PARM2TMP FUNCTION',
// COND=(5,LT)
//SYSPROC  DD  DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST
//SYSTSPRT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)
//SYSINDD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)
//SYSPRINT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)
//TMPFILE  DD  DISP=(NEW,CATLG),
// SPACE=(CYL,(1,1),RLSE),
// DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80),
// UNIT=SYSDA,
// DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE
//SPXTAPE  DD  DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG,
// DISP=(NEW,CATLG),
// UNIT=SYSDA,
// DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132),
// SPACE=(CYL,(1,1),RLSE)
//SYSTSIN  DD  DUMMY
//*
// PEND
//*
// EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823
//PST0020.SYSPROC  DD  *
 /* your CLIST here */

You need the PROC statement for instream procs; since you
cannot have inline data in a proc, you need to do an override
or an insert. In this case, you don't even need the SYSPROC DD
statement that's in the proc itself.




Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-393-8716
http://www.trainersfriend.com

  z/OS Application development made easier
* Our classes include
   + How things work
   + Programming examples with realistic applications
   + Starter / skeleton code
   + Complete working programs
   + Useful utilities and subroutines
   + Tips and techniques

== Check out the Trainer's Friend Store to purchase z/OS  ==
== application developer toolkits. Sample code in four==
== programming languages, JCL to Assemble or compile, ==
== bind and test. ==
==   http://www.trainersfriend.com/TTFStore/index.html==

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: INLINE JCL PROC Question

2008-08-04 Thread Mark Zelden
On Mon, 4 Aug 2008 14:15:54 -0700, Howard Rifkind [EMAIL PROTECTED] wrote:

Reason I'm asking is that I want to execute the rexx exec with a trace and
see what's going on.


--- On Mon, 8/4/08, Howard Rifkind [EMAIL PROTECTED] wrote:

 From: Howard Rifkind [EMAIL PROTECTED]
 Subject: INLINE JCL PROC Question
 To: IBM-MAIN@BAMA.UA.EDU
 Date: Monday, August 4, 2008, 4:58 PM
 I’m trying to create an inline procedure using the JCL
 below.
 My questions is how should I set up the PARM parameter of
 %PARM2TMP to be used inline.  If it’s inline I don’t
 need to dig it out of the SYSPROC DD…correct?

 Where in this JCL would the inline clist go if it could be
 done?

 Thanks.


 //PST0020 EXEC PGM=IKJEFT1A,

 // REGION=1M,

 // PARM='%PARM2TMP PARM2TMP
 FUNCTION',
 // COND=(5,LT)

 //SYSPROC  DD  DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST

 //SYSTSPRT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)

 //SYSINDD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)

 //SYSPRINT DD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)

 //TMPFILE  DD  DISP=(NEW,CATLG),

 // SPACE=(CYL,(1,1),RLSE),

 // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80),

 // UNIT=SYSDA,

 //
 DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE
 //SPXTAPE  DD
 DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG,
 // DISP=(NEW,CATLG),

 // UNIT=SYSDA,

 // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132),

 // SPACE=(CYL,(1,1),RLSE)
 //SYSTSIN  DD  DUMMY
 //*
 // PEND
 //*
 // EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823
 //*





You can't execute an inline / instream CLIST / REXX exec from SYSPROC
or SYSEXEC.  However, you can (and I do) execute it from a temp PDS by
adding a prior step that copies the source to the temp PDS.   Two examples
on my website are RACFUDEL and LOGRREXX.  URL below...

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:[EMAIL PROTECTED]
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



NOMAIL Option in TSO/E

2008-08-04 Thread Varun Manocha
Hi List,

Is there a TSO/E command to check if the TSO/E MAIL (or NOMAIL) option is 
set for my user ID? I think I came across some command that lists 
MAIL/NOMAIL option as well (along with other TSO/E profile settings), but 
can't find the command now. I have tried the LU and PROFILE command.

Secondly, is it possible to change this option after logging on to TSO/E 
and then saving it for future sessions? 

I need to change this setting on one of the systems, however, the logon 
panel has been modified such that I do not get the option to 
'select/unselect' the NOMAIL, NONOTICE etc. options. So, I am trying to 
find an alternative.

Thanks for any help.
Varun


Computer Sciences Corporation India Private Limited
Registered Office: Electronics Complex, Software Technology Park, Indore, 
Madhya Pradesh, India
Registered in India No: 10-11210

-
This is a PRIVATE message. If you are not the intended recipient, please 
delete without copying and kindly advise us by e-mail of the mistake in 
delivery. 
NOTE: Regardless of content, this e-mail shall not operate to bind CSC to 
any order or other contract unless pursuant to explicit written agreement 
or government initiative expressly permitting the use of e-mail for such 
purpose.
-

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Edward Jaffe

Edward Jaffe wrote:

Is z/OS vulnerable? If not, why not? If so, what is the fixing APAR?


According to CERT, IBM mainframes are still listed as unknown:

http://www.kb.cert.org/vuls/id/800113
http://www.us-cert.gov/cas/techalerts/TA08-190B.html

But, Internet Systems Consortium (ISC) BIND is listed as vulnerable. 
ISC BIND status -- last updated Aug 1, 2008 -- is here:


http://www.kb.cert.org/vuls/id/MIMG-7E6K7P

Last Wednesday, ATT -- one of the world's largest ISPs -- became the 
first victim of the attack:


http://www.thetechherald.com/article.php/200831/1607/ATT-first-reported-victim-of-DNS-attack-%E2%80%93-HD-Moore-was-NOT-Pwned

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: NOMAIL Option in TSO/E

2008-08-04 Thread Lizette Koehler
In the TSO READY mode issue TSO PROF  (yes you can also do this from ISPF )

It will display all of the TSO/E profile elements - WTPMSG/NOWTPMSG
INTERCOM/NOINTERCOM

I am not sure if it show MAIL/NOMAIL  I think that is on the LOGON Panel.
It might be controlled by the Security Product like RACF in the TSO Segment,
though I could be wrong.


Lizette


 Hi List,
 
 Is there a TSO/E command to check if the TSO/E MAIL (or NOMAIL) option
 is
 set for my user ID? I think I came across some command that lists
 MAIL/NOMAIL option as well (along with other TSO/E profile settings),
 but
 can't find the command now. I have tried the LU and PROFILE command.
 
 Secondly, is it possible to change this option after logging on to
 TSO/E
 and then saving it for future sessions?
 
 I need to change this setting on one of the systems, however, the logon
 panel has been modified such that I do not get the option to
 'select/unselect' the NOMAIL, NONOTICE etc. options. So, I am trying to
 find an alternative.
 
 Thanks for any help.
 Varun

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: INLINE JCL PROC Question

2008-08-04 Thread Paul Gilmartin
On Mon, 4 Aug 2008 16:31:18 -0500, Mark Zelden wrote:

--- On Mon, 8/4/08, Howard Rifkind wrote:

 //SYSINDD  SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)

That's kinda scary.  But I've occasionally allocated
a temp DS to SYSIN; EXECIO DISKW to it; then used as
input to the next command.

You can't execute an inline / instream CLIST / REXX exec from SYSPROC
or SYSEXEC.  However, you can (and I do) execute it from a temp PDS by
adding a prior step that copies the source to the temp PDS.   Two examples
on my website are RACFUDEL and LOGRREXX.  URL below...

I have sometimes cut this down to a single step by starting the
SYSTSIN with a REPRO.  Has anyone ever submitted a Requirement
for support of instream data in PROCs?  Or for instream Rexx/
CLIST source?

Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

BTW, did I lately notice by accident that PEND is now optional
in library JCL PROCs (used to be forbidden)?  This would be a
major courtesy to customers who want to alternate between INCLUDE
and EXEC of the same member.  (Ah!  I RTFM.  Optional now.  I
suppose someone will complain about the change.)

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Patrick O'Keefe
On Mon, 4 Aug 2008 14:47:58 -0700, Edward Jaffe 
[EMAIL PROTECTED] wrote:

Edward Jaffe wrote:

According to CERT, IBM mainframes are still listed as unknown:
...

For what it's worth, an MVS name server configured as a caching / 
forwarding name server can be protected from a direct attack by
having it listen on the loopback addr - 127.0.0.1.  Then it can 
process resolution requests only from the local RESOLVER.

From what I've read over the last couple days it sounds like typical
cache poisoning attacks involve a flood of requests (and bogus
responses) from the enemy.   If you limit the requests to the local
LPAR the enemy would have to also be on the local LPAR (and we 
all know that anything running on MVS is from an absolutely
trustworthy source).  

This, of course, does not keep a local caching name server from 
caching bogus data received from a corrupted name server.

I have no idea how much of this applies to other mainframe 
operating systems.

Pat O'Keefe  
  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



PARM problem - HELP

2008-08-04 Thread John Norgauer
Here's my error:

10 //PS082   EXEC PGM=BPXBATCH,
 //
   // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp
   // fis-depot-test.ucdavis.edu |su -s bpxbtch'
11 //SYSPRINT  DD SYSOUT=*
12 //STDOUTDD SYSOUT=*
13 //STDERRDD SYSOUT=*
MT NO. MESSAGE

10 IEF642I EXCESSIVE PARAMETER LENGTH IN THE PARM FIELD

Thanks.


John Norgauer
University of California Davis Medical Center
2315 Stockton Blvd
ASB 1300
Sacramento, Ca 95817
916-734-0536

 SYSTEMS PROGRAMMING..  Guilty, until proven innocent !! JN  2004

Hardware eventually breaks - Software eventually works  anon


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Paul Gilmartin
On Mon, 4 Aug 2008 17:02:47 -0400, Anne  Lynn Wheeler wrote:

most ISP clients get automatically setup to point at the DNS servers
run by that ISP. For something a little different, here is a service
that is advertising itself as a preferred alternative to default
ISP DNS servers ... goes into some detail about DNS as part of
supporting their claims as to being better:
http://www.opendsn.com/

(subsequently corrected by the submitter to: http://www.opendns.com/ )

An interesting typo given that opendns.com derives its revenue
by a form of typosquatting.  I tried them for a while, and
quickly abandoned them when I discovered that their typosquatting
rendered my autoproxy script useless.  To their somewhat credit,
their support desk replied promptly to my trouble report with a
suggestion that if I registered (free), I could define a profile
that would disable typosquatting for URLS I specified, such as
my proxy candidates.  I dropped opendns because I simply don't
need any more memberships.

There's a broad word-of-mouth following for some GTE/Level3
nameservers at 4.2.2.1 - 4.2.2.6.  I have no information on
their credibility.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: PARM problem - HELP

2008-08-04 Thread William H. Blair
Your PARM field is too long to fit on one card:

   // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp
   // fis-depot-test.ucdavis.edu |su -s bpxbtch'

The rules of continuation for the PARM field would ostensibly
require that you specify it as follows (that is, the correct
syntax for continuation would be):

   // PARM=('SH echo sftp -b /u/bpxbatch/mccheckftp',
   // 'fis-depot-test.ucdavis.edu |su -s bpxbtch')

where each piece is enclosed in apostrophes, and all
but the last piece is followed by a comma, and all of
the pieces are enclosed in parentheses.

However, doing so will cause a comma to be included in the 
actual PARM information that will be passed to the program.
The JCL will work, and the long PARM will be passed to the
program, but I suspect that the program will not accept the
resulting embedded comma, or do something else undesirable.

As a consequence, I don't think you will be able to 
specify this type and length of PARM field for this
program via JCL.

--
WB

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: PARM problem - HELP

2008-08-04 Thread Steve Comstock

John Norgauer wrote:

Here's my error:

10 //PS082   EXEC PGM=BPXBATCH,
 //
   // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp
   // fis-depot-test.ucdavis.edu |su -s bpxbtch'
11 //SYSPRINT  DD SYSOUT=*
12 //STDOUTDD SYSOUT=*
13 //STDERRDD SYSOUT=*
MT NO. MESSAGE

10 IEF642I EXCESSIVE PARAMETER LENGTH IN THE PARM FIELD

Thanks.


John Norgauer
University of California Davis Medical Center
2315 Stockton Blvd
ASB 1300
Sacramento, Ca 95817
916-734-0536

 SYSTEMS PROGRAMMING..  Guilty, until proven innocent !! JN  2004

Hardware eventually breaks - Software eventually works  anon



Try without any excess spaces in the first PARM line, maybe:

// PARM='SH echo sftp -b /u/bpxbatch/mccheck ftpfis-depot-test.ucdavis.edu |su
// -s bpxbtch'

Those trailing spaces you had in the first line count against your
100 limit. You can even break up a parameter in mid-string if your
data needs it; but the above should work.

Alternatively, you can define SET symbols and concatenate them.


//   SET  PART1='/u/bpxbatch/mccheck'
//   SET  PART2=' ftpfis-depot-test.ucdavis.edu '
//   SET  PART3=' | su -s bpxbtch'
//PS082   EXEC PGM=BPXBATCH,PARM=PART1PART2PART3



Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-393-8716
http://www.trainersfriend.com

  z/OS Application development made easier
* Our classes include
   + How things work
   + Programming examples with realistic applications
   + Starter / skeleton code
   + Complete working programs
   + Useful utilities and subroutines
   + Tips and techniques

== Check out the Trainer's Friend Store to purchase z/OS  ==
== application developer toolkits. Sample code in four==
== programming languages, JCL to Assemble or compile, ==
== bind and test. ==
==   http://www.trainersfriend.com/TTFStore/index.html==

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: PARM problem - HELP

2008-08-04 Thread Bob Rutledge

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/IEA2B670/3.4.1.2?SHELF=EZ2ZO10KDT=20070427231644CASE=

Bob

John Norgauer wrote:

Here's my error:

10 //PS082   EXEC PGM=BPXBATCH,
 //
   // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp
   // fis-depot-test.ucdavis.edu |su -s bpxbtch'
11 //SYSPRINT  DD SYSOUT=*
12 //STDOUTDD SYSOUT=*
13 //STDERRDD SYSOUT=*
MT NO. MESSAGE

10 IEF642I EXCESSIVE PARAMETER LENGTH IN THE PARM FIELD

Thanks.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Shane
 And this company has done their job in that area.  Only two ports open
 on the system (or the firewalls front-ending the system more likely),
 so not enough information to get a good fingerprint.  While personally
 frustrating, it's good to see someone out there can get it right.  :)

If they are doing their job right, they aren't running Linux at all.

Personally were I to publish a site, it would respond to everything
(HTTP, Telnet, ...) as BSD would.

Except on BSD system(s) of course ...   ;-)

Shane ...

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: PARM problem - HELP

2008-08-04 Thread Dooley, Robert
How about moving those into a shell script?

PARM='SH /u/user/my.sh'

/u/user/my.sh would contain the stmts currently on your PARM stmt.

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of John Norgauer
Sent: Monday, August 04, 2008 5:49 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: PARM problem - HELP

Here's my error:

10 //PS082   EXEC PGM=BPXBATCH,
 //
   // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp
   // fis-depot-test.ucdavis.edu |su -s bpxbtch'
11 //SYSPRINT  DD SYSOUT=*
12 //STDOUTDD SYSOUT=*
13 //STDERRDD SYSOUT=*
MT NO. MESSAGE

10 IEF642I EXCESSIVE PARAMETER LENGTH IN THE PARM FIELD

Thanks.


John Norgauer
University of California Davis Medical Center
2315 Stockton Blvd
ASB 1300
Sacramento, Ca 95817
916-734-0536

 SYSTEMS PROGRAMMING..  Guilty, until proven innocent !! JN
2004

Hardware eventually breaks - Software eventually works  anon


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Problems that occur in production

2008-08-04 Thread Rick Fochtman

snip
I think this whole approach is WRONG!

There are a lot of problems that occur in production.

Rather, hire trained professionals that:
 1. Know how to do their job.
 2. Know how to problem solve.
 3. Employ best practices.

The documentation of everything that could go wrong is a never-ending task.

I thought I saw it all over the last 27 years.

But, somebody always comes along with somethin new to prove me wrong.
unsnip--
One of the permutations of Murphy's Law says that if you design an 
input editor to reject all bad input, some engenious idiot will manage 
to get bad input through it anyway. And unfortunately, it's so very true!


---
The only time politicians tell the truth is when they're calling each 
other liars. :-))


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: cbt

2008-08-04 Thread Rick Fochtman
Ben, there are several module-mapping programs on the CBT TAPE site. 
Have you looked at the AMBLIST Service Aid?


---
I have to write a program that lists the csects of a program object and 
their properties, such as size, address, etc. Is there something I can 
use on the cbt tape?

Thanks

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: PARM problem - HELP

2008-08-04 Thread Paul Gilmartin
On Mon, 4 Aug 2008 18:06:56 -0500, William H. Blair wrote:

The rules of continuation for the PARM field would ostensibly
require that you specify it as follows (that is, the correct
syntax for continuation would be):

   // PARM=('SH echo sftp -b /u/bpxbatch/mccheckftp',
   // 'fis-depot-test.ucdavis.edu |su -s bpxbtch')

where each piece is enclosed in apostrophes, and all
but the last piece is followed by a comma, and all of
the pieces are enclosed in parentheses.

However, doing so will cause a comma to be included in the
actual PARM information that will be passed to the program.
The JCL will work, and the long PARM will be passed to the
program, but I suspect that the program will not accept the
resulting embedded comma, or do something else undesirable.

As a consequence, I don't think you will be able to
specify this type and length of PARM field for this
program via JCL.

This misconception is so prevalent that I wonder whether it
reflects a syntactic rule from days of yore.  I know that's
what I was taught in my first brush with JCL decades ago,
and I never learned better until long pathnames in MVS-OE
impelled me to seek a better answer.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread John Giltner

Edward Jaffe wrote:

John Giltner wrote:

Edward Jaffe wrote:
http://www.pcworld.com/businesscenter/article/149022/faq_how_to_dodge_the_dns_bug.html 

http://www.computerworld.com/action/article.do?command=viewArticleBasicarticleId=9110622 


http://www.doxpara.com/

Is z/OS vulnerable? If not, why not? If so, what is the fixing APAR?



It might be, but the way I am reading the information about the 
vulnerability you have to have your DNS server setup for recursion.  
Do you have your z/OS based DNS server(s) setup for recursion?


Recursion is the norm for DNS. I've never seen a DNS set up any other way.




It's been my experience that most DNS servers for private companies are 
setup to forward to DNS servers that thier ISP provides.  That way they 
rely on their ISP's DNS server's cache and do one query instead of going 
from the root dns servers, to the next level, to the next level, and so on.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?

2008-08-04 Thread Edward Jaffe

John Giltner wrote:

Edward Jaffe wrote:
Recursion is the norm for DNS. I've never seen a DNS set up any other 
way.





It's been my experience that most DNS servers for private companies 
are setup to forward to DNS servers that thier ISP provides.  That way 
they rely on their ISP's DNS server's cache and do one query instead 
of going from the root dns servers, to the next level, to the next 
level, and so on.


I was wrong. Our public name server has been setup with split views. 
It's recursive only for queries coming in from 127.0.0.1, and from 
segments inside the firewall. The server is non-recursive to everyone else.


--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Example of what a very small JCL Interpreter can do to your installation.

2008-08-04 Thread Paul Gilmartin
On Wed, 30 Jul 2008 08:57:49 -0500, Jeff Holst wrote:

Problem came when the 370 arrived and we upgraded to a new COBOL
compiler. Now, a character moveof more that 256 characters were compiled
as a MVCL. For MVCL, when source and target fields overlap, a condition code
is set and no data movement occurs. The new COBOL did not check the
return code, the COBOL move statement effectively became a NO-OP. No
error statments in the COMPILE and the program would either abend when it
later found some field uninitialized or it would produce incorrect results.

I once dealt with a compiler from a vendor I mentioned here recently
(but didn't name then, either).  I looked at the code it generated
for a character move.  If the leftmost character of the target lay
within the source (same criterion as MVCL), it moved character-by-
character in a loop, starting at the right of both operands.  Otherwise
it moved left-to-right, perhaps with MVC or MVCL.  The effect was
that the final content of the target was identical to the initial
content of the source, although the source might be obliterated in
the process.

How did the RM specify the effect of this painstaking effort?  It
stated that if the operands overlapped the result was unpredictable.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Firewall

2008-08-04 Thread Timothy Sipples
Mark Post writes:
_All_ Linux distributions have built-in firewalls. It's literally
part of the kernel.

I was being pedantic I suppose. Distributors can choose to exclude firewall
functions in their particular compiled version of the kernel, and a few do.
None of the major distributors (such as Novell) do that. It's more the
micro-Linux sort of distributions which are trying to squeeze the kernel
into various tiny containers, like embedded devices.

Or Gentoo Linux, in which case everything is your choice. :-)

You can choose to use it or not, but it's only a few keystrokes away.
Interestingly, a lot of the so-called hardware firewalls on the
market today are actually running Linux under the covers.  The
manufacturers have added value by wrapping the firewall capability
with a (hopefully) easy to use human interface so that you don't have
to be an iptables expert to get things set up the way you want them.
(Although there are also open source packages out there that will let
you do similar things, some of which use a GUI, etc.)

Yes, there are many configuration interfaces available for the Linux
firewall functions. A popular example is Firestarter. Novell's standard
YaST interface is also rather good, IMHO.

But in fairness the commercial firewall products tend to have features like
centralized management, monitoring, alerting, intrusion attempt detection,
DoS attempt detection, complex logging and warehouse-type functions, etc.
Most or all of that is available somewhere, but these companies may add
substantial value by packaging it all together in one kit, testing it, and
supporting it as a whole. So it depends.

- - - - -
Timothy Sipples
IBM Consulting Enterprise Software Architect
Specializing in Software Architectures Related to System z
Based in Tokyo, Serving IBM Japan and IBM Asia-Pacific
E-Mail: [EMAIL PROTECTED]
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Can I tell whether a site is Linux on z

2008-08-04 Thread Timothy Sipples
Netcraft.com says the site is Linux, and they tend to be rather accurate so
I'd believe it. There are many reasons why query.exe might appear embedded
in the URL of a Linux-hosted Web site. Some of those reasons have already
been mentioned. Another possible explanation is Mono.

- - - - -
Timothy Sipples
IBM Consulting Enterprise Software Architect
Specializing in Software Architectures Related to System z
Based in Tokyo, Serving IBM Japan and IBM Asia-Pacific
E-Mail: [EMAIL PROTECTED]
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: couple dataset problem at IPL?

2008-08-04 Thread Barbara Nitz
John,

three recommendations from me:
1. Get at least two small volumes (say 100cyl big) reserved exclusively for the 
CDSs. 
2. Do NOT catalog your CDSs! Use them non-catalogued and make sure everyone 
knows that they have to use the name *and* the volser when switching things.
3. Put automation in place that *at least* alerts you to the loss of a CDS/the 
switch to an alternate.

Best regards, Barbara NItz
-- 
Pt! Schon das coole Video vom GMX MultiMessenger gesehen?
Der Eine für Alle: http://www.gmx.net/de/go/messenger03

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: INLINE JCL PROC Question

2008-08-04 Thread Howard Rifkind
Folks, thanks for you advise on this one...


--- On Mon, 8/4/08, Paul Gilmartin [EMAIL PROTECTED] wrote:

 From: Paul Gilmartin [EMAIL PROTECTED]
 Subject: Re: INLINE JCL PROC Question
 To: IBM-MAIN@BAMA.UA.EDU
 Date: Monday, August 4, 2008, 6:31 PM
 On Mon, 4 Aug 2008 16:31:18 -0500, Mark Zelden wrote:
 
 --- On Mon, 8/4/08, Howard Rifkind wrote:
 
  //SYSINDD 
 SYSOUT=(,),OUTPUT=(*.OUT1,*.STD)
 
 That's kinda scary.  But I've occasionally
 allocated
 a temp DS to SYSIN; EXECIO DISKW to it; then used as
 input to the next command.
 
 You can't execute an inline / instream
 CLIST / REXX exec from SYSPROC
 or SYSEXEC.  However, you can (and I do) execute it
 from a temp PDS by
 adding a prior step that copies the source to the temp
 PDS.   Two examples
 on my website are RACFUDEL and LOGRREXX.  URL below...
 
 I have sometimes cut this down to a single step by starting
 the
 SYSTSIN with a REPRO.  Has anyone ever submitted a
 Requirement
 for support of instream data in PROCs?  Or for instream
 Rexx/
 CLIST source?
 
 Mark's MVS Utilities:
 http://home.flash.net/~mzelden/mvsutil.html
 
 BTW, did I lately notice by accident that PEND is now
 optional
 in library JCL PROCs (used to be forbidden)?  This would be
 a
 major courtesy to customers who want to alternate between
 INCLUDE
 and EXEC of the same member.  (Ah!  I RTFM.  Optional now. 
 I
 suppose someone will complain about the change.)
 
 -- gil
 
 --
 For IBM-MAIN subscribe / signoff / archive access
 instructions,
 send email to [EMAIL PROTECTED] with the message: GET
 IBM-MAIN INFO
 Search the archives at
 http://bama.ua.edu/archives/ibm-main.html


  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html