Re: Can I tell whether a site is Linux on z
if http://bahn.hafas.de is Linux on z I doubt it, but when I see my neighbour again, I'll ask him. Might take a while, though. Regards, Barbara Nitz -- Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Hazards of Not IPL'ing Regularly
[ snip ] Some of our customers though schedule IPL's every week, ... just because they always have. AKA hysterical reasons. :-) Well, how about severe storage leaks in all the 'new' stuff? (Like Websphere application server, java)? We regularly IPL those lpars once a week to get them to clean up their storage. Has reduced the out-of-storage abends Regards, Barbara Nitz -- Pt! Schon das coole Video vom GMX MultiMessenger gesehen? Der Eine für Alle: http://www.gmx.net/de/go/messenger03 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Hazards of Not IPL'ing Regularly
Timothy Sipples wrote: [...] I've run into many customers running single production LPARs -- including a decent sized bank for their core online banking, believe it or not -- and the pmPS is a major step forward and near enough free so that they can implement it without any real financial burden. Unless your application needs some maintenance window, not the z/OS. Or your CPC needs some maint. window. In such case it could happen that your sysplex can work fine, but the application needs a break. Usually business needs some *service* (application available), not perfectly working z/OS or sysplex. In such case pmPS is not worth too much. Even rich man PS will no give to much. My €0.02 -- Radoslaw Skorupka Lodz, Poland -- BRE Bank SA ul. Senatorska 18 00-950 Warszawa www.brebank.pl Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237 NIP: 526-021-50-88 Wedug stanu na dzie 01.01.2008 r. kapita zakadowy BRE Banku SA wynosi 118.642.672 zote i zosta w caoci wpacony. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
Is there a way I can tell if http://bahn.hafas.de is Linux on z. Not really. Netcraft shows that it is running Linux, but trying to narrow it down beyond that is not particularly easy. O/S fingerprinting has several well known techniques. As, of course, has cloaking in response. Shane ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
Well if this is the same company, it seems that some of the company runs SUSE Linux on Intel/AMD and zSeries along with some other OS on zSeries. They don't mention what the other OS is. http://www.novell.com/success/deutsche_bahn.html The software that they use HAFAS is avaliable for IBM Mainframes: http://www.hacon.de/hafas_e/konzept.shtml -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
More info: http://www.ibm.com/news/us/en/2005/02/2005_02_03.html http://www-01.ibm.com/webcasts/WCPGateway.wss? jadeAction=WEBCAST_LAUNCHPAGE_HANDLERWCP_WEBCAST_ID_KEY=071 0011 http://www-03.ibm.com/press/us/en/pressrelease/7498.wss Seb. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
USS Connection problem
We just migrated our DB2 subsystems in test to DB2 V8. Now the PeopleSoft process schedulers connections to DB2 fail. We get messages: Time allotted to check status of Scheduler expired. This may be due to the time to load all the libraries. We have been unable to determine the cause. We are z/OS 1.7. Any ideas? Jerry -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: cbt
You can use AMBLIST program. visconde 2008/8/4, ben lam [EMAIL PROTECTED]: I have to write a program that lists the csects of a program object and their properties, such as size, address, etc. Is there something I can use on the cbt tape? Thanks Ben _ Your PC, mobile phone, and online services work together like never before. http://clk.atdmt.com/MRT/go/108587394/direct/01/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Hazards of Not IPL'ing Regularly
A storage leak of that nature can be an indication of a problem in Websphere or the application itself. If your developers have run out of options trying to debug it, check for APARs against Websphere, or open a PMR. Barbara Nitz wrote: [ snip ] Some of our customers though schedule IPL's every week, ... just because they always have. AKA hysterical reasons. :-) Well, how about severe storage leaks in all the 'new' stuff? (Like Websphere application server, java)? We regularly IPL those lpars once a week to get them to clean up their storage. Has reduced the out-of-storage abends Regards, Barbara Nitz -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 rich.smrcina at vmassist.com http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19, 2009 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SMP Receive from network problem?
Is anyone else having this problem today? 220 lindsey.boulder.ibm.com FTP server (Version wu-2.6.2(5) Custom Thu Dec 8 12:55:22 MST 2005) ready. NAME (download3.boulder.ibm.com:AIMJ): B407x535 USER B407x535 331 Password required for B407x535. PASSWORD: PASS 530 Download not currently allowed for your location. Std Return Code = 26530, Error Code = 00011 QUIT 221 Goodbye. -- Mark Jacobs Time Customer Service Tampa, FL The power of the Executive to cast a man into prison without formulating any charge known to the law, and particularly to deny him the judgment of his peers, is in the highest degree odious and is the foundation of all totalitarian government whether Nazi or Communist. Sir Winston Churchill -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: cbt
I am not sure if the requestor is doing this for education or if there is something missing that other tools do not provide. I am thinking of the LKED Map or ISPF 3.4, etc. Plus I believe that there are several free products that can do similar functions. (PDS?) Possibly IPCS could also help? AMBLIST is also good. Lizette You can use AMBLIST program. visconde 2008/8/4, ben lam [EMAIL PROTECTED]: I have to write a program that lists the csects of a program object and their properties, such as size, address, etc. Is there something I can use on the cbt tape? Thanks Ben -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
couple dataset problem at IPL?
This is the first time that this has happened and I am confused. What would make a couple dataset go bad? We have a two system, basic sysplex. This weekend, we IPL'ed both systems. Our procedure is to take down SY1 first, and reIPL it. When SY1 is up, then shutdown SY2 and reIPL. On the IPL of SY1, we got messages: IXC268I THE COUPLE DATA SETS SPECIFIED IN COUPLE11 ARE IN AN INCONSISTEN T STATE IXC275I COUPLE DATA SETS SPECIFIED IN COUPLE11 ARE 168 PRIMARY: SYS1.LIH1.XCFCDS01 ON VOLSER LIHTS4 ALTERNATE: SYS1.LIH1.XCFCDS02 ON VOLSER LIHTS6 IXC273I XCF ATTEMPTING TO RESOLVE THE COUPLE DATA SETS IXC275I RESOLVED COUPLE DATA SETS ARE 170 PRIMARY: SYS1.LIH1.XCFCDS01 ON VOLSER LIHTS4 ALTERNATE: NONE USED I did a SETXCF to make SYS1.LIH1.XCFCDS02 the alternate. SETXCF COUPLE,ACOUPLE=SYS1.LIH1.XCFCDS02 IXC309I SETXCF COUPLE,ACOUPLE REQUEST FOR SYSPLEX WAS ACCEPTED IXC260I ALTERNATE COUPLE DATA SET REQUEST FROM SYSTEM 583 LIH1 FOR SYSPLEX IS NOW BEING PROCESSED. DATA SET: SYS1.LIH1.XCFCDS02 IEF196I IEF237I 2103 ALLOCATED TO SYS00099 IXC251I NEW ALTERNATE DATA SET 585 SYS1.LIH1.XCFCDS02 FOR SYSPLEX HAS BEEN MADE AVAILABLE On SY2 at IPL, we got: *IXC267E PROCESSING WITHOUT AN ALTERNATE 801 COUPLE DATA SET FOR SYSPLEX. ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE. *IXC267E PROCESSING WITHOUT AN ALTERNATE 802 COUPLE DATA SET FOR WLM. ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE. IEF196I IEF237I 2802 ALLOCATED TO SYS3 *IXC267E PROCESSING WITHOUT AN ALTERNATE 803 COUPLE DATA SET FOR LOGR. ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE. I issued the SETXCF commands to activate the alternates, and got the message: SETXCF COUPLE,TYPE=LOGR,ACOUPLE=SYS1.LIH1.LOGRCD01 IXC309I SETXCF COUPLE,ACOUPLE REQUEST FOR LOGR WAS ACCEPTED IXC260I ALTERNATE COUPLE DATA SET REQUEST FROM SYSTEM 750 DEV1 FOR LOGR IS NOW BEING PROCESSED. DATA SET: SYS1.LIH1.LOGRCD01 IEF196I IEF237I 2103 ALLOCATED TO SYS00100 IXC248E COUPLE DATA SET 752 SYS1.LIH1.LOGRCD01 ON VOLSER LIHTS6 FOR LOGR MAY BE IN USE BY ANOTHER SYSPLEX. 28 IXC247D REPLY U TO ACCEPT USE OR D TO DENY USE OF THE COUPLE DATA SET FOR LOGR. IEE600I REPLY TO 28 IS;U IXC251I NEW ALTERNATE DATA SET 757 SYS1.LIH1.LOGRCD01 FOR LOGR HAS BEEN MADE AVAILABLE Any ideas? -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology The information contained in this e-mail message may be privileged and/or confidential. It is for intended addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication is strictly prohibited and could, in certain circumstances, be a criminal offense. If you have received this e-mail in error, please notify the sender by reply and delete this message without copying or disclosing it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: cbt
Lizette Koehler wrote: I am not sure if the requestor is doing this for education or if there is something missing that other tools do not provide. I am thinking of the LKED Map or ISPF 3.4, etc. Plus I believe that there are several free products that can do similar functions. (PDS?) Possibly IPCS could also help? Regrettably not. Contents supervisor doesn't generally keep anything in storage (dumped or not) that would support identifying CSECTs within programs in memory. The z/OS nucleus is the sole exception that IPCS component code exploits. Individual components do tend to keep information around so that their ESTAE and FRR recovery routines can fill in that symptom accurately should ABENDs occur, but there's no generally-accepted place to look for that information at this time. -- Bob Wright - [EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
EXHPDM DOMMAND - DISPLAY ALL CONNECTIONS
Hi, I am trying to display all the connections that are active in EXHPDM. I tried the following commands but I get an error: SOV06049E SOV06070W HPDM D C ALL DETAIL HPDM DISPLAY CONNECTION DETAIL /HPDM D C * If I insert a connection ID, the command works, however it doesn't when I try the ALL. The ALL command works when I display the STREAM Could someone suggest some other command that I could try? I checked the doc and the only command I found was HPDM DISPLAY CONNECTION DETAIL, which didn't work. Find a better answer, faster with the new Yahoo!7 Search. www.yahoo7.com.au/search -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: couple dataset problem at IPL?
The only time I have seen this is afer a hard crash of a system in a sysplex and IPL without the system is down reply on the surviving members of the sysplex. Perhaps you IPL'ed SY1 before it had withdrawn (completely) from the sysplex? The bad cds's would then be seen by SY2. snip This is the first time that this has happened and I am confused. What would make a couple dataset go bad? We have a two system, basic sysplex. This weekend, we IPL'ed both systems. Our procedure is to take down SY1 first, and reIPL it. When SY1 is up, then shutdown SY2 and reIPL. On the IPL of SY1, we got messages: . . . Remainder deleted /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: HSM tape devices selection
Victor, It depends on what you are coding in your rules. If you are talking about the input tape, and it is a VTAPE (I am assuming you are using CA-VTAPE) managed volume, then VTAPE will intercept the EDL and remove everything but drives owned by him. If your esoteric in the HSM parms is pointing to the esoteric VTAPE then only those 8 devices will be on the original EDL. If you are talking about the output tape, for your recycle process, then the EDL will be whatever you have coded in the RECYCLEOUTPUT(MIGRATION() BACKUP()) parm. If it is set to 3490 then all 16 drives will be in the EDL. If it is coded VTAPE then only the 8 drives will be in the EDL. HTH. ThanksRick -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Victor Zhang Sent: Sunday, August 03, 2008 1:02 AM To: IBM-MAIN@BAMA.UA.EDU Subject: HSM tape devices selection Hi HSM experts, One question regarding TAPE device selection for HSM: Suppose there are A000-A00F(total 16) devices defined in this systems and all 16 devices are 3490 devices, they are compatible. Suppose EDT name VTAPE defined and contains only first 8 devices(A000-A007), and when HSM requires to modify a tape volumes, for example doing RECYCLE, what tape devices will in included in initial EDL? Will only 8 devices(A000-A007) included or will all 16 devices be included? Regards Victor -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: couple dataset problem at IPL?
On Mon, 4 Aug 2008 08:00:36 -0500, McKown, John [EMAIL PROTECTED] wrote: This is the first time that this has happened and I am confused. What would make a couple dataset go bad? We have a two system, basic sysplex. This weekend, we IPL'ed both systems. Our procedure is to take down SY1 first, and reIPL it. When SY1 is up, then shutdown SY2 and reIPL. On the IPL of SY1, we got messages: snip Do both systems share the same master catalog? Do the COUPLExx members specify the couple data set names and the volser or just the data set names? Are all couple data set types in use listed in the COUPLExx members? Regards, Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:[EMAIL PROTECTED] z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMP Receive from network problem?
Yes, I've encountered the same problem this morning. Anyone else? Has anyone reported it? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: couple dataset problem at IPL?
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Staller, Allan Sent: Monday, August 04, 2008 8:22 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: couple dataset problem at IPL? The only time I have seen this is afer a hard crash of a system in a sysplex and IPL without the system is down reply on the surviving members of the sysplex. Perhaps you IPL'ed SY1 before it had withdrawn (completely) from the sysplex? The bad cds's would then be seen by SY2. Could be. I was not on-site at the time. The person doing the IPL is quite good, so it would seem unlikely, but not impossible. -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology The information contained in this e-mail message may be privileged and/or confidential. It is for intended addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication is strictly prohibited and could, in certain circumstances, be a criminal offense. If you have received this e-mail in error, please notify the sender by reply and delete this message without copying or disclosing it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: couple dataset problem at IPL?
[snip] snip Do both systems share the same master catalog? Do the COUPLExx members specify the couple data set names and the volser or just the data set names? Are all couple data set types in use listed in the COUPLExx members? Regards, Mark -- They do NOT share a master cat (not my choice - by direction). The couple datasets are catalogued in each mcat and are referred to via the catalog entry (dsn only in couple member). All of the couple datasets are listed in the COUPLEnn member. These have not changed since we went to the basic sysplex. -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology The information contained in this e-mail message may be privileged and/or confidential. It is for intended addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication is strictly prohibited and could, in certain circumstances, be a criminal offense. If you have received this e-mail in error, please notify the sender by reply and delete this message without copying or disclosing it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: How to change the ISPF code page?
In [EMAIL PROTECTED], on 07/22/2008 at 11:56 AM, Edward Jaffe [EMAIL PROTECTED] said: Content-Type: text/plain; charset=ISO-8859-1; format=flowed So far so good. Content-Transfer-Encoding: 7bit That's only valid for 7-bit data, e.g., ASCII. For 8 bit data, e.g., ISO-8859-1, you need, e.g., 8bit, base64, (bletch!) quoted-printable. It figures. The characters got munged by email. The characters were never correct. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: How to change the ISPF code page?
In [EMAIL PROTECTED], on 07/22/2008 at 05:23 PM, Gerhard Postpischil [EMAIL PROTECTED] said: They're both wrong G Mine are x'BA' and x'BB', and they work wonderfully. With or without GE? And for what software? As I recall, some software expects BA/BB while other software expects AD/BD. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF I (Input) Screen with z/OS 1.9
Just want to give an udpate on this issue. IBM has opened OA26013 for me, if anyone else is interested. Curt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: How to change the ISPF code page?
In [EMAIL PROTECTED], on 07/22/2008 at 02:54 PM, Patrick O'Keefe [EMAIL PROTECTED] said: They may helped us out by giving us a non-standard default keyboard map. My advice would be to run a TPUT and VTAM buffer trace to see what data are actually being sent, then take it from there. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: cbt
Bob is absolutely correct. I needed CSECT information for a project I was working on that was analyzing a dump using IPCS. I ended up dynamically calling AMBLIST, feeding it control statements and then parsing it's output. The process was to automate checking whether a client had certain patches applied to their software at the time of an abend. The problem was I never knew which patch was to be checked so it wasn't something we wanted to build a static checker for. snip Regrettably not. Contents supervisor doesn't generally keep anything in storage (dumped or not) that would support identifying CSECTs within programs in memory... /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
You can try running Steve Gibson's IDSERVE from http://www.grc.com/id/idserve.htm. It interrogates and displays the http headers from the webserver. Jeff Beech-Garwood Systems Programmer Mainframe Network Support US Bank, EP-MN-02NS 651-962-3809 Clark F Morris [EMAIL PROTECTED] Sent by: IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU 08/03/2008 05:25 PM Please respond to IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU To IBM-MAIN@BAMA.UA.EDU cc Subject Can I tell whether a site is Linux on z Is there a way I can tell if http://bahn.hafas.de is Linux on z. If it is that says interesting things about whether z series might be able to handle google. The site does timetable lookup, trip planning, etc. and apparently is among the best for planning European trips. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html U.S. BANCORP made the following annotations - Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. - -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMP Receive from network problem?
I've been informed that IBM is aware that multiple customers are having similar problems. They are working on it . . . -- David -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: couple dataset problem at IPL?
All these symptoms are consistent with a case of 'lost CDS', where XCF has determined for whatever reason that the missing CDS is 'defective'. I haven't seen this condition for years, but it has happened--and not always traceable to a clear cause. The number one suspect is volume RESERVE. If XCF cannot complete I/O to a CDS for even a short period, the dataset will be declared unusable and removed from the configuration. When this situation occurs, XCF puts out a complaining or two and rolls on. Like having your spare tire go flat. You probably won't notice until you have to move the bodies in the trunk to pull the spare out. If you have all syslog since the previous IPL, you will most certainly find a flurry of IX* messages chronicling the CDS removal. You might not notice any of this until the next IPL. Years ago we created an automation routine to notify us loudly and clearly that we had lost a CDS. I forget the message(s) we key on, but I could dig into it if requested. The last episode probably predated Health Checker. The current (1.9) HC does not seem to specifically list 'CDS consistency', but there are a couple of XCF checks that I would expect to holler if a named pair was not intact. Meanwhile, make sure that all CDSs live on their own volumes. It seems wasteful to dedicate that much space to a handful of smallish data sets, but the effects of a sysplex wide outage far outweigh the unused cylinders. Also watch out for full volume backups that might grab a volume for an extended period. Better not to back up CDS volumes at all. . . JO.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile [EMAIL PROTECTED] McKown, John [EMAIL PROTECTED] THMARKETS.COM To Sent by: IBM IBM-MAIN@BAMA.UA.EDU Mainframe cc Discussion List [EMAIL PROTECTED] Subject .EDU couple dataset problem at IPL? 08/04/2008 06:00 AM Please respond to IBM Mainframe Discussion List [EMAIL PROTECTED] .EDU This is the first time that this has happened and I am confused. What would make a couple dataset go bad? We have a two system, basic sysplex. This weekend, we IPL'ed both systems. Our procedure is to take down SY1 first, and reIPL it. When SY1 is up, then shutdown SY2 and reIPL. On the IPL of SY1, we got messages: IXC268I THE COUPLE DATA SETS SPECIFIED IN COUPLE11 ARE IN AN INCONSISTEN T STATE IXC275I COUPLE DATA SETS SPECIFIED IN COUPLE11 ARE 168 PRIMARY: SYS1.LIH1.XCFCDS01 ON VOLSER LIHTS4 ALTERNATE: SYS1.LIH1.XCFCDS02 ON VOLSER LIHTS6 IXC273I XCF ATTEMPTING TO RESOLVE THE COUPLE DATA SETS IXC275I RESOLVED COUPLE DATA SETS ARE 170 PRIMARY: SYS1.LIH1.XCFCDS01 ON VOLSER LIHTS4 ALTERNATE: NONE USED I did a SETXCF to make SYS1.LIH1.XCFCDS02 the alternate. SETXCF COUPLE,ACOUPLE=SYS1.LIH1.XCFCDS02 IXC309I SETXCF COUPLE,ACOUPLE REQUEST FOR SYSPLEX WAS ACCEPTED IXC260I ALTERNATE COUPLE DATA SET REQUEST FROM SYSTEM 583 LIH1 FOR SYSPLEX IS NOW BEING PROCESSED. DATA SET: SYS1.LIH1.XCFCDS02 IEF196I IEF237I 2103 ALLOCATED TO SYS00099 IXC251I NEW ALTERNATE DATA SET 585 SYS1.LIH1.XCFCDS02 FOR SYSPLEX HAS BEEN MADE AVAILABLE On SY2 at IPL, we got: *IXC267E PROCESSING WITHOUT AN ALTERNATE 801 COUPLE DATA SET FOR SYSPLEX. ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE. *IXC267E PROCESSING WITHOUT AN ALTERNATE 802 COUPLE DATA SET FOR WLM. ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE. IEF196I IEF237I 2802 ALLOCATED TO SYS3 *IXC267E PROCESSING WITHOUT AN ALTERNATE 803 COUPLE DATA SET FOR LOGR. ISSUE SETXCF COMMAND TO ACTIVATE A NEW ALTERNATE. I
Re: couple dataset problem at IPL?
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Skip Robinson Sent: Monday, August 04, 2008 10:13 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: couple dataset problem at IPL? All these symptoms are consistent with a case of 'lost CDS', where XCF has determined for whatever reason that the missing CDS is 'defective'. I haven't seen this condition for years, but it has happened--and not always traceable to a clear cause. The number one suspect is volume RESERVE. If XCF cannot complete I/O to a CDS for even a short period, the dataset will be declared unusable and removed from the configuration. When this situation occurs, XCF puts out a complaining or two and rolls on. Like having your spare tire go flat. You probably won't notice until you have to move the bodies in the trunk to pull the spare out. If you have all syslog since the previous IPL, you will most certainly find a flurry of IX* messages chronicling the CDS removal. You might not notice any of this until the next IPL. Years ago we created an automation routine to notify us loudly and clearly that we had lost a CDS. I forget the message(s) we key on, but I could dig into it if requested. The last episode probably predated Health Checker. The current (1.9) HC does not seem to specifically list 'CDS consistency', but there are a couple of XCF checks that I would expect to holler if a named pair was not intact. Meanwhile, make sure that all CDSs live on their own volumes. It seems wasteful to dedicate that much space to a handful of smallish data sets, but the effects of a sysplex wide outage far outweigh the unused cylinders. Also watch out for full volume backups that might grab a volume for an extended period. Better not to back up CDS volumes at all. . . JO.Skip Robinson Now that may be a real possibility!! The CDSes are on system infrastructure volumes. And they get an occasional RESERVE. -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology The information contained in this e-mail message may be privileged and/or confidential. It is for intended addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication is strictly prohibited and could, in certain circumstances, be a criminal offense. If you have received this e-mail in error, please notify the sender by reply and delete this message without copying or disclosing it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
On Mon, Aug 4, 2008 at 10:40 AM, in message [EMAIL PROTECTED], Jeff Beech-Garwood [EMAIL PROTECTED] wrote: You can try running Steve Gibson's IDSERVE from http://www.grc.com/id/idserve.htm. It interrogates and displays the http headers from the webserver. You'll see something like this: $ lynx --dump --head http://bahn.hafas.de/bin/query.exe/d HTTP/1.1 200 OK Date: Mon, 04 Aug 2008 15:20:51 GMT Server: Apache Connection: close Content-Type: text/html; charset=ISO-8859-1 It tells you Apache is running, hence the id the server name, but not on what OS, since Apache runs on so many. Mark Post -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
On Mon, Aug 4, 2008 at 7:31 AM, in message [EMAIL PROTECTED], John Giltner [EMAIL PROTECTED] wrote: Well if this is the same company, it seems that some of the company runs SUSE Linux on Intel/AMD and zSeries along with some other OS on zSeries. While Deutsche Bahn is one of our customers, including on System z, that's not the same company as is being discussed here. Mark Post -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
On Mon, Aug 4, 2008 at 6:34 AM, in message [EMAIL PROTECTED], Shane [EMAIL PROTECTED] wrote: -snip- O/S fingerprinting has several well known techniques. As, of course, has cloaking in response. And this company has done their job in that area. Only two ports open on the system (or the firewalls front-ending the system more likely), so not enough information to get a good fingerprint. While personally frustrating, it's good to see someone out there can get it right. :) Mark Post -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Firewall
On Mon, Aug 4, 2008 at 1:48 AM, in message [EMAIL PROTECTED], Timothy Sipples [EMAIL PROTECTED] wrote: -snip- There are some alternatives, fortunately. Tivoli Access Manager for e-business might be one, as an example. Also, most Linux distributions have built-in firewall capabilities, including Novell and Red Hat. _All_ Linux distributions have built-in firewalls. It's literally part of the kernel. You can choose to use it or not, but it's only a few keystrokes away. Interestingly, a lot of the so-called hardware firewalls on the market today are actually running Linux under the covers. The manufacturers have added value by wrapping the firewall capability with a (hopefully) easy to use human interface so that you don't have to be an iptables expert to get things set up the way you want them. (Although there are also open source packages out there that will let you do similar things, some of which use a GUI, etc.) Mark Post -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Hazards of Not IPL'ing Regularly
I didn't get my annual February IPL for production until June this year. We just don't IPL. George Subject: Hazards of Not IPL'ing Regularly -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: secure ftp on the mainframe
Rafael Fernandez L. wrote: Nobody mentioned ftp with GSSAPI (kerberos) ? Ignacio Landín Villegas Probably because there is rarely anyone using it. Furthermore, it was all but unusable for a long time: although the Kerberos ticket provided the cross-reference with the RACF userid, support for SECURE_PASSWORD OPTIONAL was not available until, IIRC, z/OS V1R7 or V1R8. Nobody wants to go through the installation of Kerberos with FTP on z/OS if you don't even get single sign-on. Also, if you use Kerberos with z/OS and Windows, the only common encryption algorithm is DES with 56-bit keys. Windows doesn't support Triple DES and z/OS doesn't support RC4. AES support (128- or 256-bit keys) requires z/OS V1R9 and Windows Vista and/or Windows Server 2008. (Sorry, sent my posting just to the newsgroup in my first attempt). -- Ulrich Boche SVA GmbH, Germany IBM Business Partner -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
IDServe worked for me. This isn't clearly z/OS but one can infer. This is what I got back from our own book server which is hosted on Z. HTTP/1.1 200 Document follows Server: IBM HTTP Server/V5R3M0 Date: Mon, 04 Aug 2008 15:53:29 GMT Connection: close Accept-Ranges: bytes Content-Location: home.html Content-Type: text/html Content-Length: 3061 Last-Modified: Fri, 27 Jun 2008 14:59:09 GMT Query complete. Server identified itself as: IBM HTTP Server/V5R3M0 Gary Diehl Systems Administration The truth leaves no room for feelings of superiority. Such feelings are nothing but lying vanities. - James L. Ferrell -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Beech-Garwood Sent: Monday, August 04, 2008 9:41 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Can I tell whether a site is Linux on z You can try running Steve Gibson's IDSERVE from http://www.grc.com/id/idserve.htm. It interrogates and displays the http headers from the webserver. Jeff Beech-Garwood Systems Programmer Mainframe Network Support US Bank, EP-MN-02NS 651-962-3809 Clark F Morris [EMAIL PROTECTED] Sent by: IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU 08/03/2008 05:25 PM Please respond to IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU To IBM-MAIN@BAMA.UA.EDU cc Subject Can I tell whether a site is Linux on z Is there a way I can tell if http://bahn.hafas.de is Linux on z. If it is that says interesting things about whether z series might be able to handle google. The site does timetable lookup, trip planning, etc. and apparently is among the best for planning European trips. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html U.S. BANCORP made the following annotations - Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. - -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
John Giltner wrote: Edward Jaffe wrote: http://www.pcworld.com/businesscenter/article/149022/faq_how_to_dodge_the_dns_bug.html http://www.computerworld.com/action/article.do?command=viewArticleBasicarticleId=9110622 http://www.doxpara.com/ Is z/OS vulnerable? If not, why not? If so, what is the fixing APAR? It might be, but the way I am reading the information about the vulnerability you have to have your DNS server setup for recursion. Do you have your z/OS based DNS server(s) setup for recursion? Recursion is the norm for DNS. I've never seen a DNS set up any other way. -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
In a message dated 8/4/2008 11:08:59 A.M. Central Daylight Time, [EMAIL PROTECTED] writes: Recursion is the norm for DNS. I've never seen a DNS set up any other way. But isn't that out of ignorance or pre-exploitation? I was pondering the CSS server samples for VIEW with recursion inside the nest and no-recursion external but don't see a way to measure. Most likely traffic dependant. Alternatively, guess we could run 9 internal and 4.9 external but don't know who that's gonna clobber either. **Looking for a car that's sporty, fun and fits in your budget? Read reviews on AOL Autos. (http://autos.aol.com/cars-BMW-128-2008/expert-review?ncid=aolaut000517 ) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
On Mon, Aug 4, 2008 at 11:58 AM, in message [EMAIL PROTECTED], Diehl, Gary (MVSSupport) [EMAIL PROTECTED] wrote: IDServe worked for me. This isn't clearly z/OS but one can infer. This is what I got back from our own book server which is hosted on Z. HTTP/1.1 200 Document follows Server: IBM HTTP Server/V5R3M0 I agree that it is _likely_ z/OS, but if you look at Nationwide's site, it will also say it is running IBM HTTP Server, and I know from talking to the folks there that they are running IHS on Linux for System z. The difference being (from what I see) is: Server: IBM_HTTP_Server versus your Server: IBM HTTP Server/V5R3M0 I don't know if that's configurable or not. I believe it is for Apache, since many Apache sites report more details: Server: Apache/1.3.27 (Unix) PHP/4.3.1 while the bahn.hafas.de site simply says: Server: Apache Mark Post -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Hazards of Not IPL'ing Regularly
On Sat, 2 Aug 2008 19:25:29 -0500, Jim Marshall [EMAIL PROTECTED] wrote: Had an outage in the middle of this week due to the following reported to me: IBM completed its analysis of the dump shipped and concluded the problem is associated with APAR OA23299. APAR OA23299 is associated with long running enclave that has been active for weeks in a service class with response time goals such as WebSphere Application Server. Apparently, this can cause a negative index value and an overlay of storage. Seems to me the LPAR had gone about 4+ weeks or more without being IPL'ed. The appearance of it made us think it was some problem in device support associated with PPRC (which we do not run) or maybe SRDF-A. Until the APAR can be applied, we took the outage early Sunday morning to reboot all the LPARs and will each Sunday. Jim (WashDC) Does this mean that I need to stop my car on a long-duration trip every ??? miles, just in case there might be a software glitch waiting to happen? Given legacy methodologies and data center procedures, I can only imagine explaining to today's end-users that they cannot work on a particular day, simply because of an IPL or other outage or because we're running backups, just because that's the way we do things. Come on, we're no longer living in the Bedrock era, Barny. This is so swatting at flies with a Buick, people. Scott Barry SBBWorks, Inc. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SHARE MVS/SCP (z/OS) Project Get Involved Meeting! Sun Aug 10 5:30pm at SHARE in San Jose http://www.share.org/
Hi, If you will be at SHARE in San Jose, CA USA Aug 10 -15 http://www.share.org/ and want to have more fun here is a great place to start. You can meet some of the IBM and Customer folks who help put together the MVS/SCP (MVSE nee z/OS) 28xx sessions at SHARE. You can come and say Hi! we won't tie you to a chair and make you volunteer for anything:-) You may find that if you get involved a little bit even doing small jobs and get to know other folks that you will get a lot more out of SHARE. We always finish in time to get to the Reception. 2801 MVS/SCP Project Volunteer Coordination Times: Aug 10 Sun, 5:30pm, Convention Center, Concourse Level,Room A2 In this Sunday working session, you will have an opportunity to meet some of the volunteers who work behind the scenes to make the SHARE Conference one of the best places to get education on many topics. This is an informal session where we ask people to volunteer to chair sessions, pass along information from SHARE and the MVS Program, cover changes in our organization, and then open the session for general comments and questions. During this session, you will have time to let us know what types of sessions are valuable to you. SHARE sessions are a two-way communication medium; the speaker is sharing information with you and is looking for you to share your opinions and comments. This is a valuable place to meet up with the volunteers and project representatives, who can introduce you to other volunteers, representatives from IBM, vendor representatives and speakers. To find out more about the MVS SCP project and volunteers before the conference, go to the SHARE website, click the Volunteer Center tab, select Projects/Programs and click on MVS SCP Project. Check out the web page after the conference, too. Stop in and determine what you can do to help the conference and sessions run smoothly. We are always looking for new people to join and new ideas. You might even find that we have people in the room who have an answer to your question. Best Regards, Sam Knutson, GEICO Performance and Availability Management SHARE MVS/SCP Project Manager mailto:[EMAIL PROTECTED] (office) 301.986.3574 Think big, act bold, start simple, grow fast... This email/fax message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email/fax is prohibited. If you are not the intended recipient, please destroy all paper and electronic copies of the original message. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
After re-looking at it, I don't think it is Linux at all. If you go http://bahn.hafas.de/ you will see you are re-directed to: http://bahn.hafas.de/bin/query.exe/d Notice the query.exe.I would say off hand that this is a Windows box. However, they could be running Wine under Linux or just doing the .exe to throw people off. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: couple dataset problem at IPL?
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Skip Robinson Sent: Monday, August 04, 2008 10:13 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: couple dataset problem at IPL? All these symptoms are consistent with a case of 'lost CDS', where XCF has determined for whatever reason that the missing CDS is 'defective'. I haven't seen this condition for years, but it has happened--and not always traceable to a clear cause. The number one suspect is volume RESERVE. If XCF cannot complete I/O to a CDS for even a short period, the dataset will be declared unusable and removed from the configuration. When this situation occurs, XCF puts out a complaining or two and rolls on. Like having your spare tire go flat. You probably won't notice until you have to move the bodies in the trunk to pull the spare out. If you have all syslog since the previous IPL, you will most certainly find a flurry of IX* messages chronicling the CDS removal. You might not notice any of this until the next IPL. Years ago we created an automation routine to notify us loudly and clearly that we had lost a CDS. I forget the message(s) we key on, but I could dig into it if requested. The last episode probably predated Health Checker. The current (1.9) HC does not seem to specifically list 'CDS consistency', but there are a couple of XCF checks that I would expect to holler if a named pair was not intact. Meanwhile, make sure that all CDSs live on their own volumes. It seems wasteful to dedicate that much space to a handful of smallish data sets, but the effects of a sysplex wide outage far outweigh the unused cylinders. Also watch out for full volume backups that might grab a volume for an extended period. Better not to back up CDS volumes at all. . . JO.Skip Robinson I finally found the messages. You are correct. The volume containing the CDSes was RESERVEd for too long a time. The message occurred 55 days ago. Nobody noticed. -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology The information contained in this e-mail message may be privileged and/or confidential. It is for intended addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication is strictly prohibited and could, in certain circumstances, be a criminal offense. If you have received this e-mail in error, please notify the sender by reply and delete this message without copying or disclosing it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
Or they might be running OpenVMS. -- Jack Hamilton Management Information Analysis - Analytic Information Services Kaiser Foundation Health Plan, Inc. 1950 Franklin Street, Oakland, California 94612 +1 510 987-1556 (KP tieline 8-427-1556) NOTE: This email document and attachments are covered by CA Evidence Code §1157 and CA Health and Safety Code §1370. NOTICE TO RECIPIENT: If you are not the intended recipient of this e-mail, you are prohibited from sharing, copying, or otherwise using or disclosing its contents. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and permanently delete this e-mail and any attachments without reading, forwarding or saving them. Thank you. John Giltner [EMAIL PROTECTED] Sent by: IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU 08/04/2008 10:46 AM Please respond to IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU To IBM-MAIN@BAMA.UA.EDU cc Subject Re: [IBM-MAIN] Can I tell whether a site is Linux on z After re-looking at it, I don't think it is Linux at all. If you go http://bahn.hafas.de/ you will see you are re-directed to: http://bahn.hafas.de/bin/query.exe/d Notice the query.exe.I would say off hand that this is a Windows box. However, they could be running Wine under Linux or just doing the .exe to throw people off. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
On 4 Aug 2008 04:31:11 -0700, in bit.listserv.ibm-main you wrote: Well if this is the same company, it seems that some of the company runs SUSE Linux on Intel/AMD and zSeries along with some other OS on zSeries. They don't mention what the other OS is. http://www.novell.com/success/deutsche_bahn.html The software that they use HAFAS is avaliable for IBM Mainframes: http://www.hacon.de/hafas_e/konzept.shtml Since the Hafas software allows the person using the site to plan a door to door trip that can involve public transit agencies, considerable ability to access databases and look things up is needed. My guess is that it requires considerable compute power. That was why I was astounded when a poster on another group made the statement that this ran on Linux on a mainframe. If true this could give us quite a talking point since people on the rail newsgroups I frequent claim that Hafas for Deutsche Bahn is one of the better sites for trip planning and getting rail travel information including transit connections. It IS accessible in English, French, obviously German and several other languages. Notes on Z doesn't impress me, Hafas timetable and trip planning software does. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Problems that occur in production
Basic rule of the universe. Right is a very very small subset of all possiblities. Wrong is an almost infinite superset consisting of everything except what is Right. Wherever possible test for right and reject everything else. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Problems that occur in production
On 4 Aug 2008 12:08:38 -0700, [EMAIL PROTECTED] (John Mattson) wrote: Basic rule of the universe. Right is a very very small subset of all possiblities. Wrong is an almost infinite superset consisting of everything except what is Right. Wherever possible test for right and reject everything else. Of course when our work is supposed to be right for users, management, government, customers, the enterprise, and stay right as conditions change - defining this right is problematical. Most all wars these days are fought between people who are Right (and Righteous). Most of the most political hatred is between people who are Right.And every time we have a committee setting up requirements for a new system, we have acrimony as different needs and wants conflict. That said - the big problem with programmer unit testing is that we tend to be to focused on testing what we think is right. The everything else category doesn't get enough testing, as it is much more poorly defined. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
On Mon, 4 Aug 2008 12:30:47 EDT, Ed Finnell [EMAIL PROTECTED] wrote: ... [EMAIL PROTECTED] writes: Recursion is the norm for DNS. I've never seen a DNS set up any other way. ... But isn't that out of ignorance or pre-exploitation? ... I don't think it's out of ignorance at all. As I understand it, the whole concept of DNS lookups is built around recursion - I don't know, but know does. The only 2 real choices are I'll go ask him or You go ask him. (Maybe only the first is considered recursive. I don't know DNS processing that well. I'm not even sure the 2nd option is part of standard DNS processing.) I thought this newly surfaced vulnerability was based on I don't know, but he knows something that's close processing - something I'd never heard of before this past weekend. In any case it sounds like the vulnerability is not due to a bug but due to the DNS architecture. I can't imagine what the fix is unless it is disabling the in-bailiwick processing. BTW, a forwarding/caching name server on MVS is not directly vulnerable, but will, of course, cache the bad address resolved by a name server that has been corrupted. And then it's cache is just as poisoned as a vulnerable server's. Clearing the cache often lessens even that problem, but it sort of lessens the value of a DNS cache, too. Pat O'Keefe -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
Patrick O'Keefe wrote: I thought this newly surfaced vulnerability was based on I don't know, but he knows something that's close processing - something I'd never heard of before this past weekend. In any case it sounds like the vulnerability is not due to a bug but due to the DNS architecture. I can't imagine what the fix is unless it is disabling the in-bailiwick processing. IIUC, the fix randomizes the DNS source port and transaction ids. Dan Kaminsky is supposed to give full details at Black Hat in a couple of days. -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
Ed Finnell wrote: But isn't that out of ignorance or pre-exploitation? I was pondering the CSS server samples for VIEW with recursion inside the nest and no-recursion external but don't see a way to measure. Most likely traffic dependant. 52% of servers being tested at Kaminsky's site -- http://www.doxpara.com/ -- are still vulnerable. (This includes my home broadband ISP cox.net. :-( ) Kaminsky alleges that far more than 52% of [DNS] servers are vulnerable. -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
INLINE JCL PROC Question
I’m trying to create an inline procedure using the JCL below. My questions is how should I set up the PARM parameter of %PARM2TMP to be used inline. If it’s inline I don’t need to dig it out of the SYSPROC DD…correct? Where in this JCL would the inline clist go if it could be done? Thanks. //PST0020 EXEC PGM=IKJEFT1A, // REGION=1M, // PARM='%PARM2TMP PARM2TMP FUNCTION', // COND=(5,LT) //SYSPROC DD DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST //SYSTSPRT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSINDD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSPRINT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //TMPFILE DD DISP=(NEW,CATLG), // SPACE=(CYL,(1,1),RLSE), // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80), // UNIT=SYSDA, // DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE //SPXTAPE DD DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG, // DISP=(NEW,CATLG), // UNIT=SYSDA, // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132), // SPACE=(CYL,(1,1),RLSE) //SYSTSIN DD DUMMY //* // PEND //* // EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823 //* -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
The following message is a courtesy copy of an article that has been posted to bit.listserv.ibm-main as well. [EMAIL PROTECTED] (Patrick O'Keefe) writes: I don't think it's out of ignorance at all. As I understand it, the whole concept of DNS lookups is built around recursion - I don't know, but know does. The only 2 real choices are I'll go ask him or You go ask him. (Maybe only the first is considered recursive. I don't know DNS processing that well. I'm not even sure the 2nd option is part of standard DNS processing.) the domain name infrastructure is sort of a combination of a hierarchy and mesh. both clients and servers can point to any place in the infrastructure (servers point to other places in the infrastructure for information that they aren't the authoritative server). both clients and servers may cache information from other places in the infrastructure. Lists of other servers to ask (used by both clients and servers) frequently have a minimum of two ... but sometimes can have dozens (somewhat blurs the distinction between what is client and what is server). most ISP clients get automatically setup to point at the DNS servers run by that ISP. For something a little different, here is a service that is advertising itself as a preferred alternative to default ISP DNS servers ... goes into some detail about DNS as part of supporting their claims as to being better: http://www.opendsn.com/ slightly older post with several references about the domain name infrastructure vulnerabiilty http://www.garlic.com/~lynn/2008j.html#87 CLIs and GUIs also mentions that the inventor of DNS having earlier done a stint at the science center http://www.garlic.com/~lynn/subtopic.html#545tech recent post on the subject in a.f.c ng http://www.garlic.com/~lynn/2008k.html#78 Secure64 Develops First Automated DNSSEC Signing Application to Help Secure the Internet Worldwide and repeat in thread in comp.arch http://www.garlic.com/~lynn/2008k.html#79 Larrabee details: Yes, it is based on the Pentium. :-) above mentions that one of the founders of Secure64 had also worked on 801/risc http://www.garlic.com/~lynn/subtopic.html#801 however, it doesn't mention that they had also earlier been responsible for dual-address space mode on 3033. -- 40+yrs virtualization experience (since Jan68), online at home since Mar70 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
The following message is a courtesy copy of an article that has been posted to bit.listserv.ibm-main as well. oops, finger slip http://www.opendns.com/ -- 40+yrs virtualization experience (since Jan68), online at home since Mar70 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: INLINE JCL PROC Question
Reason I'm asking is that I want to execute the rexx exec with a trace and see what's going on. --- On Mon, 8/4/08, Howard Rifkind [EMAIL PROTECTED] wrote: From: Howard Rifkind [EMAIL PROTECTED] Subject: INLINE JCL PROC Question To: IBM-MAIN@BAMA.UA.EDU Date: Monday, August 4, 2008, 4:58 PM I’m trying to create an inline procedure using the JCL below. My questions is how should I set up the PARM parameter of %PARM2TMP to be used inline. If it’s inline I don’t need to dig it out of the SYSPROC DD…correct? Where in this JCL would the inline clist go if it could be done? Thanks. //PST0020 EXEC PGM=IKJEFT1A, // REGION=1M, // PARM='%PARM2TMP PARM2TMP FUNCTION', // COND=(5,LT) //SYSPROC DD DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST //SYSTSPRT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSINDD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSPRINT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //TMPFILE DD DISP=(NEW,CATLG), // SPACE=(CYL,(1,1),RLSE), // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80), // UNIT=SYSDA, // DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE //SPXTAPE DD DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG, // DISP=(NEW,CATLG), // UNIT=SYSDA, // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132), // SPACE=(CYL,(1,1),RLSE) //SYSTSIN DD DUMMY //* // PEND //* // EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823 //* -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: INLINE JCL PROC Question
dig it out of the SYSPROC DD Not sure I understand your question entirely, but it seems that you mean an inline rexx program when you say 'inline proc'... is that correct? Assuming yes: (there are probably better ways, but I came up with this some time ago) you still need SYSPROC, but use a temporary dataset: //GENER EXEC PGM=IEBGENER //SYSPRINT DD SYSOUT=9 //SYSIN DD DUMMY //SYSUT1DD DDNAME=CLIST //SYSUT2DD DISP=(NEW,PASS),DSN=TMP(SAYIT), // UNIT=SYSVIO,SPACE=(TRK,(1,1,1)), // DCB=(DSORG=PO,RECFM=FB,LRECL=80,BLKSIZE=3120) //CLIST DD *,DLM=#$ /* rexx */ Parse arg theparms Say theparms #$ //* //BATCHTSO EXEC PGM=IKJEFT01, // PARM='%SAYIT PARM2TMP FUNCTION' //SYSPROC DD DISP=(OLD,DELETE),DSN=TMP //SYSTSPRT DD SYSOUT=H //SYSTSIN DD DUMMY Pedro Vera phone (408) 463-4812 internet [EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: INLINE JCL PROC Question
Howard Rifkind wrote: I’m trying to create an inline procedure using the JCL below. My questions is how should I set up the PARM parameter of %PARM2TMP to be used inline. If it’s inline I don’t need to dig it out of the SYSPROC DD…correct? Where in this JCL would the inline clist go if it could be done? Thanks. //PST0020 EXEC PGM=IKJEFT1A, // REGION=1M, // PARM='%PARM2TMP PARM2TMP FUNCTION', // COND=(5,LT) //SYSPROC DD DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST //SYSTSPRT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSINDD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSPRINT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //TMPFILE DD DISP=(NEW,CATLG), // SPACE=(CYL,(1,1),RLSE), // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80), // UNIT=SYSDA, // DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE //SPXTAPE DD DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG, // DISP=(NEW,CATLG), // UNIT=SYSDA, // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132), // SPACE=(CYL,(1,1),RLSE) //SYSTSIN DD DUMMY //* // PEND //* // EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823 //* Maybe something like this: //XST0020 PROC //PST0020 EXEC PGM=IKJEFT1A, // REGION=1M, // PARM='%PARM2TMP PARM2TMP FUNCTION', // COND=(5,LT) //SYSPROC DD DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST //SYSTSPRT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSINDD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSPRINT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //TMPFILE DD DISP=(NEW,CATLG), // SPACE=(CYL,(1,1),RLSE), // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80), // UNIT=SYSDA, // DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE //SPXTAPE DD DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG, // DISP=(NEW,CATLG), // UNIT=SYSDA, // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132), // SPACE=(CYL,(1,1),RLSE) //SYSTSIN DD DUMMY //* // PEND //* // EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823 //PST0020.SYSPROC DD * /* your CLIST here */ You need the PROC statement for instream procs; since you cannot have inline data in a proc, you need to do an override or an insert. In this case, you don't even need the SYSPROC DD statement that's in the proc itself. Kind regards, -Steve Comstock The Trainer's Friend, Inc. 303-393-8716 http://www.trainersfriend.com z/OS Application development made easier * Our classes include + How things work + Programming examples with realistic applications + Starter / skeleton code + Complete working programs + Useful utilities and subroutines + Tips and techniques == Check out the Trainer's Friend Store to purchase z/OS == == application developer toolkits. Sample code in four== == programming languages, JCL to Assemble or compile, == == bind and test. == == http://www.trainersfriend.com/TTFStore/index.html== -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: INLINE JCL PROC Question
On Mon, 4 Aug 2008 14:15:54 -0700, Howard Rifkind [EMAIL PROTECTED] wrote: Reason I'm asking is that I want to execute the rexx exec with a trace and see what's going on. --- On Mon, 8/4/08, Howard Rifkind [EMAIL PROTECTED] wrote: From: Howard Rifkind [EMAIL PROTECTED] Subject: INLINE JCL PROC Question To: IBM-MAIN@BAMA.UA.EDU Date: Monday, August 4, 2008, 4:58 PM Iâm trying to create an inline procedure using the JCL below. My questions is how should I set up the PARM parameter of %PARM2TMP to be used inline. If itâs inline I donât need to dig it out of the SYSPROC DDâ¦correct? Where in this JCL would the inline clist go if it could be done? Thanks. //PST0020 EXEC PGM=IKJEFT1A, // REGION=1M, // PARM='%PARM2TMP PARM2TMP FUNCTION', // COND=(5,LT) //SYSPROC DD DISP=SHR,DSN=PRUN.SYSPROG.CUR.CLIST //SYSTSPRT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSINDD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //SYSPRINT DD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) //TMPFILE DD DISP=(NEW,CATLG), // SPACE=(CYL,(1,1),RLSE), // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=80), // UNIT=SYSDA, // DSN=ENV.TMP.SYSPROG.SY0650.JST0020.WORKFILE //SPXTAPE DD DSN=ENV.TMP.SYSPROG.VMFTPR.FUNCTION..LOG, // DISP=(NEW,CATLG), // UNIT=SYSDA, // DCB=(DSORG=PS,RECFM=FB,BLKSIZE=0,LRECL=132), // SPACE=(CYL,(1,1),RLSE) //SYSTSIN DD DUMMY //* // PEND //* // EXEC XST0020,FUNCTION=OPERLOG,ENV=E18823 //* You can't execute an inline / instream CLIST / REXX exec from SYSPROC or SYSEXEC. However, you can (and I do) execute it from a temp PDS by adding a prior step that copies the source to the temp PDS. Two examples on my website are RACFUDEL and LOGRREXX. URL below... Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:[EMAIL PROTECTED] z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
NOMAIL Option in TSO/E
Hi List, Is there a TSO/E command to check if the TSO/E MAIL (or NOMAIL) option is set for my user ID? I think I came across some command that lists MAIL/NOMAIL option as well (along with other TSO/E profile settings), but can't find the command now. I have tried the LU and PROFILE command. Secondly, is it possible to change this option after logging on to TSO/E and then saving it for future sessions? I need to change this setting on one of the systems, however, the logon panel has been modified such that I do not get the option to 'select/unselect' the NOMAIL, NONOTICE etc. options. So, I am trying to find an alternative. Thanks for any help. Varun Computer Sciences Corporation India Private Limited Registered Office: Electronics Complex, Software Technology Park, Indore, Madhya Pradesh, India Registered in India No: 10-11210 - This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. - -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
Edward Jaffe wrote: Is z/OS vulnerable? If not, why not? If so, what is the fixing APAR? According to CERT, IBM mainframes are still listed as unknown: http://www.kb.cert.org/vuls/id/800113 http://www.us-cert.gov/cas/techalerts/TA08-190B.html But, Internet Systems Consortium (ISC) BIND is listed as vulnerable. ISC BIND status -- last updated Aug 1, 2008 -- is here: http://www.kb.cert.org/vuls/id/MIMG-7E6K7P Last Wednesday, ATT -- one of the world's largest ISPs -- became the first victim of the attack: http://www.thetechherald.com/article.php/200831/1607/ATT-first-reported-victim-of-DNS-attack-%E2%80%93-HD-Moore-was-NOT-Pwned -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: NOMAIL Option in TSO/E
In the TSO READY mode issue TSO PROF (yes you can also do this from ISPF ) It will display all of the TSO/E profile elements - WTPMSG/NOWTPMSG INTERCOM/NOINTERCOM I am not sure if it show MAIL/NOMAIL I think that is on the LOGON Panel. It might be controlled by the Security Product like RACF in the TSO Segment, though I could be wrong. Lizette Hi List, Is there a TSO/E command to check if the TSO/E MAIL (or NOMAIL) option is set for my user ID? I think I came across some command that lists MAIL/NOMAIL option as well (along with other TSO/E profile settings), but can't find the command now. I have tried the LU and PROFILE command. Secondly, is it possible to change this option after logging on to TSO/E and then saving it for future sessions? I need to change this setting on one of the systems, however, the logon panel has been modified such that I do not get the option to 'select/unselect' the NOMAIL, NONOTICE etc. options. So, I am trying to find an alternative. Thanks for any help. Varun -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: INLINE JCL PROC Question
On Mon, 4 Aug 2008 16:31:18 -0500, Mark Zelden wrote: --- On Mon, 8/4/08, Howard Rifkind wrote: //SYSINDD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) That's kinda scary. But I've occasionally allocated a temp DS to SYSIN; EXECIO DISKW to it; then used as input to the next command. You can't execute an inline / instream CLIST / REXX exec from SYSPROC or SYSEXEC. However, you can (and I do) execute it from a temp PDS by adding a prior step that copies the source to the temp PDS. Two examples on my website are RACFUDEL and LOGRREXX. URL below... I have sometimes cut this down to a single step by starting the SYSTSIN with a REPRO. Has anyone ever submitted a Requirement for support of instream data in PROCs? Or for instream Rexx/ CLIST source? Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html BTW, did I lately notice by accident that PEND is now optional in library JCL PROCs (used to be forbidden)? This would be a major courtesy to customers who want to alternate between INCLUDE and EXEC of the same member. (Ah! I RTFM. Optional now. I suppose someone will complain about the change.) -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
On Mon, 4 Aug 2008 14:47:58 -0700, Edward Jaffe [EMAIL PROTECTED] wrote: Edward Jaffe wrote: According to CERT, IBM mainframes are still listed as unknown: ... For what it's worth, an MVS name server configured as a caching / forwarding name server can be protected from a direct attack by having it listen on the loopback addr - 127.0.0.1. Then it can process resolution requests only from the local RESOLVER. From what I've read over the last couple days it sounds like typical cache poisoning attacks involve a flood of requests (and bogus responses) from the enemy. If you limit the requests to the local LPAR the enemy would have to also be on the local LPAR (and we all know that anything running on MVS is from an absolutely trustworthy source). This, of course, does not keep a local caching name server from caching bogus data received from a corrupted name server. I have no idea how much of this applies to other mainframe operating systems. Pat O'Keefe -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
PARM problem - HELP
Here's my error: 10 //PS082 EXEC PGM=BPXBATCH, // // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp // fis-depot-test.ucdavis.edu |su -s bpxbtch' 11 //SYSPRINT DD SYSOUT=* 12 //STDOUTDD SYSOUT=* 13 //STDERRDD SYSOUT=* MT NO. MESSAGE 10 IEF642I EXCESSIVE PARAMETER LENGTH IN THE PARM FIELD Thanks. John Norgauer University of California Davis Medical Center 2315 Stockton Blvd ASB 1300 Sacramento, Ca 95817 916-734-0536 SYSTEMS PROGRAMMING.. Guilty, until proven innocent !! JN 2004 Hardware eventually breaks - Software eventually works anon -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
On Mon, 4 Aug 2008 17:02:47 -0400, Anne Lynn Wheeler wrote: most ISP clients get automatically setup to point at the DNS servers run by that ISP. For something a little different, here is a service that is advertising itself as a preferred alternative to default ISP DNS servers ... goes into some detail about DNS as part of supporting their claims as to being better: http://www.opendsn.com/ (subsequently corrected by the submitter to: http://www.opendns.com/ ) An interesting typo given that opendns.com derives its revenue by a form of typosquatting. I tried them for a while, and quickly abandoned them when I discovered that their typosquatting rendered my autoproxy script useless. To their somewhat credit, their support desk replied promptly to my trouble report with a suggestion that if I registered (free), I could define a profile that would disable typosquatting for URLS I specified, such as my proxy candidates. I dropped opendns because I simply don't need any more memberships. There's a broad word-of-mouth following for some GTE/Level3 nameservers at 4.2.2.1 - 4.2.2.6. I have no information on their credibility. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: PARM problem - HELP
Your PARM field is too long to fit on one card: // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp // fis-depot-test.ucdavis.edu |su -s bpxbtch' The rules of continuation for the PARM field would ostensibly require that you specify it as follows (that is, the correct syntax for continuation would be): // PARM=('SH echo sftp -b /u/bpxbatch/mccheckftp', // 'fis-depot-test.ucdavis.edu |su -s bpxbtch') where each piece is enclosed in apostrophes, and all but the last piece is followed by a comma, and all of the pieces are enclosed in parentheses. However, doing so will cause a comma to be included in the actual PARM information that will be passed to the program. The JCL will work, and the long PARM will be passed to the program, but I suspect that the program will not accept the resulting embedded comma, or do something else undesirable. As a consequence, I don't think you will be able to specify this type and length of PARM field for this program via JCL. -- WB -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: PARM problem - HELP
John Norgauer wrote: Here's my error: 10 //PS082 EXEC PGM=BPXBATCH, // // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp // fis-depot-test.ucdavis.edu |su -s bpxbtch' 11 //SYSPRINT DD SYSOUT=* 12 //STDOUTDD SYSOUT=* 13 //STDERRDD SYSOUT=* MT NO. MESSAGE 10 IEF642I EXCESSIVE PARAMETER LENGTH IN THE PARM FIELD Thanks. John Norgauer University of California Davis Medical Center 2315 Stockton Blvd ASB 1300 Sacramento, Ca 95817 916-734-0536 SYSTEMS PROGRAMMING.. Guilty, until proven innocent !! JN 2004 Hardware eventually breaks - Software eventually works anon Try without any excess spaces in the first PARM line, maybe: // PARM='SH echo sftp -b /u/bpxbatch/mccheck ftpfis-depot-test.ucdavis.edu |su // -s bpxbtch' Those trailing spaces you had in the first line count against your 100 limit. You can even break up a parameter in mid-string if your data needs it; but the above should work. Alternatively, you can define SET symbols and concatenate them. // SET PART1='/u/bpxbatch/mccheck' // SET PART2=' ftpfis-depot-test.ucdavis.edu ' // SET PART3=' | su -s bpxbtch' //PS082 EXEC PGM=BPXBATCH,PARM=PART1PART2PART3 Kind regards, -Steve Comstock The Trainer's Friend, Inc. 303-393-8716 http://www.trainersfriend.com z/OS Application development made easier * Our classes include + How things work + Programming examples with realistic applications + Starter / skeleton code + Complete working programs + Useful utilities and subroutines + Tips and techniques == Check out the Trainer's Friend Store to purchase z/OS == == application developer toolkits. Sample code in four== == programming languages, JCL to Assemble or compile, == == bind and test. == == http://www.trainersfriend.com/TTFStore/index.html== -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: PARM problem - HELP
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/IEA2B670/3.4.1.2?SHELF=EZ2ZO10KDT=20070427231644CASE= Bob John Norgauer wrote: Here's my error: 10 //PS082 EXEC PGM=BPXBATCH, // // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp // fis-depot-test.ucdavis.edu |su -s bpxbtch' 11 //SYSPRINT DD SYSOUT=* 12 //STDOUTDD SYSOUT=* 13 //STDERRDD SYSOUT=* MT NO. MESSAGE 10 IEF642I EXCESSIVE PARAMETER LENGTH IN THE PARM FIELD Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
And this company has done their job in that area. Only two ports open on the system (or the firewalls front-ending the system more likely), so not enough information to get a good fingerprint. While personally frustrating, it's good to see someone out there can get it right. :) If they are doing their job right, they aren't running Linux at all. Personally were I to publish a site, it would respond to everything (HTTP, Telnet, ...) as BSD would. Except on BSD system(s) of course ... ;-) Shane ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: PARM problem - HELP
How about moving those into a shell script? PARM='SH /u/user/my.sh' /u/user/my.sh would contain the stmts currently on your PARM stmt. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of John Norgauer Sent: Monday, August 04, 2008 5:49 PM To: IBM-MAIN@BAMA.UA.EDU Subject: PARM problem - HELP Here's my error: 10 //PS082 EXEC PGM=BPXBATCH, // // PARM='SH echo sftp -b /u/bpxbatch/mccheckftp // fis-depot-test.ucdavis.edu |su -s bpxbtch' 11 //SYSPRINT DD SYSOUT=* 12 //STDOUTDD SYSOUT=* 13 //STDERRDD SYSOUT=* MT NO. MESSAGE 10 IEF642I EXCESSIVE PARAMETER LENGTH IN THE PARM FIELD Thanks. John Norgauer University of California Davis Medical Center 2315 Stockton Blvd ASB 1300 Sacramento, Ca 95817 916-734-0536 SYSTEMS PROGRAMMING.. Guilty, until proven innocent !! JN 2004 Hardware eventually breaks - Software eventually works anon -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Problems that occur in production
snip I think this whole approach is WRONG! There are a lot of problems that occur in production. Rather, hire trained professionals that: 1. Know how to do their job. 2. Know how to problem solve. 3. Employ best practices. The documentation of everything that could go wrong is a never-ending task. I thought I saw it all over the last 27 years. But, somebody always comes along with somethin new to prove me wrong. unsnip-- One of the permutations of Murphy's Law says that if you design an input editor to reject all bad input, some engenious idiot will manage to get bad input through it anyway. And unfortunately, it's so very true! --- The only time politicians tell the truth is when they're calling each other liars. :-)) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: cbt
Ben, there are several module-mapping programs on the CBT TAPE site. Have you looked at the AMBLIST Service Aid? --- I have to write a program that lists the csects of a program object and their properties, such as size, address, etc. Is there something I can use on the cbt tape? Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: PARM problem - HELP
On Mon, 4 Aug 2008 18:06:56 -0500, William H. Blair wrote: The rules of continuation for the PARM field would ostensibly require that you specify it as follows (that is, the correct syntax for continuation would be): // PARM=('SH echo sftp -b /u/bpxbatch/mccheckftp', // 'fis-depot-test.ucdavis.edu |su -s bpxbtch') where each piece is enclosed in apostrophes, and all but the last piece is followed by a comma, and all of the pieces are enclosed in parentheses. However, doing so will cause a comma to be included in the actual PARM information that will be passed to the program. The JCL will work, and the long PARM will be passed to the program, but I suspect that the program will not accept the resulting embedded comma, or do something else undesirable. As a consequence, I don't think you will be able to specify this type and length of PARM field for this program via JCL. This misconception is so prevalent that I wonder whether it reflects a syntactic rule from days of yore. I know that's what I was taught in my first brush with JCL decades ago, and I never learned better until long pathnames in MVS-OE impelled me to seek a better answer. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
Edward Jaffe wrote: John Giltner wrote: Edward Jaffe wrote: http://www.pcworld.com/businesscenter/article/149022/faq_how_to_dodge_the_dns_bug.html http://www.computerworld.com/action/article.do?command=viewArticleBasicarticleId=9110622 http://www.doxpara.com/ Is z/OS vulnerable? If not, why not? If so, what is the fixing APAR? It might be, but the way I am reading the information about the vulnerability you have to have your DNS server setup for recursion. Do you have your z/OS based DNS server(s) setup for recursion? Recursion is the norm for DNS. I've never seen a DNS set up any other way. It's been my experience that most DNS servers for private companies are setup to forward to DNS servers that thier ISP provides. That way they rely on their ISP's DNS server's cache and do one query instead of going from the root dns servers, to the next level, to the next level, and so on. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS BIND9 DNS Vulnerable to Cache Poisoning Attack Problem?
John Giltner wrote: Edward Jaffe wrote: Recursion is the norm for DNS. I've never seen a DNS set up any other way. It's been my experience that most DNS servers for private companies are setup to forward to DNS servers that thier ISP provides. That way they rely on their ISP's DNS server's cache and do one query instead of going from the root dns servers, to the next level, to the next level, and so on. I was wrong. Our public name server has been setup with split views. It's recursive only for queries coming in from 127.0.0.1, and from segments inside the firewall. The server is non-recursive to everyone else. -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Example of what a very small JCL Interpreter can do to your installation.
On Wed, 30 Jul 2008 08:57:49 -0500, Jeff Holst wrote: Problem came when the 370 arrived and we upgraded to a new COBOL compiler. Now, a character moveof more that 256 characters were compiled as a MVCL. For MVCL, when source and target fields overlap, a condition code is set and no data movement occurs. The new COBOL did not check the return code, the COBOL move statement effectively became a NO-OP. No error statments in the COMPILE and the program would either abend when it later found some field uninitialized or it would produce incorrect results. I once dealt with a compiler from a vendor I mentioned here recently (but didn't name then, either). I looked at the code it generated for a character move. If the leftmost character of the target lay within the source (same criterion as MVCL), it moved character-by- character in a loop, starting at the right of both operands. Otherwise it moved left-to-right, perhaps with MVC or MVCL. The effect was that the final content of the target was identical to the initial content of the source, although the source might be obliterated in the process. How did the RM specify the effect of this painstaking effort? It stated that if the operands overlapped the result was unpredictable. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Firewall
Mark Post writes: _All_ Linux distributions have built-in firewalls. It's literally part of the kernel. I was being pedantic I suppose. Distributors can choose to exclude firewall functions in their particular compiled version of the kernel, and a few do. None of the major distributors (such as Novell) do that. It's more the micro-Linux sort of distributions which are trying to squeeze the kernel into various tiny containers, like embedded devices. Or Gentoo Linux, in which case everything is your choice. :-) You can choose to use it or not, but it's only a few keystrokes away. Interestingly, a lot of the so-called hardware firewalls on the market today are actually running Linux under the covers. The manufacturers have added value by wrapping the firewall capability with a (hopefully) easy to use human interface so that you don't have to be an iptables expert to get things set up the way you want them. (Although there are also open source packages out there that will let you do similar things, some of which use a GUI, etc.) Yes, there are many configuration interfaces available for the Linux firewall functions. A popular example is Firestarter. Novell's standard YaST interface is also rather good, IMHO. But in fairness the commercial firewall products tend to have features like centralized management, monitoring, alerting, intrusion attempt detection, DoS attempt detection, complex logging and warehouse-type functions, etc. Most or all of that is available somewhere, but these companies may add substantial value by packaging it all together in one kit, testing it, and supporting it as a whole. So it depends. - - - - - Timothy Sipples IBM Consulting Enterprise Software Architect Specializing in Software Architectures Related to System z Based in Tokyo, Serving IBM Japan and IBM Asia-Pacific E-Mail: [EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Can I tell whether a site is Linux on z
Netcraft.com says the site is Linux, and they tend to be rather accurate so I'd believe it. There are many reasons why query.exe might appear embedded in the URL of a Linux-hosted Web site. Some of those reasons have already been mentioned. Another possible explanation is Mono. - - - - - Timothy Sipples IBM Consulting Enterprise Software Architect Specializing in Software Architectures Related to System z Based in Tokyo, Serving IBM Japan and IBM Asia-Pacific E-Mail: [EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: couple dataset problem at IPL?
John, three recommendations from me: 1. Get at least two small volumes (say 100cyl big) reserved exclusively for the CDSs. 2. Do NOT catalog your CDSs! Use them non-catalogued and make sure everyone knows that they have to use the name *and* the volser when switching things. 3. Put automation in place that *at least* alerts you to the loss of a CDS/the switch to an alternate. Best regards, Barbara NItz -- Pt! Schon das coole Video vom GMX MultiMessenger gesehen? Der Eine für Alle: http://www.gmx.net/de/go/messenger03 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: INLINE JCL PROC Question
Folks, thanks for you advise on this one... --- On Mon, 8/4/08, Paul Gilmartin [EMAIL PROTECTED] wrote: From: Paul Gilmartin [EMAIL PROTECTED] Subject: Re: INLINE JCL PROC Question To: IBM-MAIN@BAMA.UA.EDU Date: Monday, August 4, 2008, 6:31 PM On Mon, 4 Aug 2008 16:31:18 -0500, Mark Zelden wrote: --- On Mon, 8/4/08, Howard Rifkind wrote: //SYSINDD SYSOUT=(,),OUTPUT=(*.OUT1,*.STD) That's kinda scary. But I've occasionally allocated a temp DS to SYSIN; EXECIO DISKW to it; then used as input to the next command. You can't execute an inline / instream CLIST / REXX exec from SYSPROC or SYSEXEC. However, you can (and I do) execute it from a temp PDS by adding a prior step that copies the source to the temp PDS. Two examples on my website are RACFUDEL and LOGRREXX. URL below... I have sometimes cut this down to a single step by starting the SYSTSIN with a REPRO. Has anyone ever submitted a Requirement for support of instream data in PROCs? Or for instream Rexx/ CLIST source? Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html BTW, did I lately notice by accident that PEND is now optional in library JCL PROCs (used to be forbidden)? This would be a major courtesy to customers who want to alternate between INCLUDE and EXEC of the same member. (Ah! I RTFM. Optional now. I suppose someone will complain about the change.) -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html