Re: AIX gets 64 bit COBOL but still none for Z/os ...

2009-01-14 Thread Tom Grieve
On Wed, 14 Jan 2009 15:32:00 +0900, Timothy Sipples e99...@jp.ibm.com wrote:

Ed Gould writes:
Yes there is. Just last month the *OLD* table problem popped up.
User needs LARGE in storage table (10G). Her only option was to.
write the file to a VSAM data set and do inquiries on it with
I/O. The run time (even with CI's in memory) was about 4 hours..
She did a rough quicky assembler and it was less that 10 minutes
(elapsed on both numbers).

If you've got CICS, how about using a 64-bit container? This feature is
available starting in CICS Transaction Server Version 3.2 (in 2007), when
containers were moved above the bar. They should be quite transparent to
your 31-bit application. (Just call CICS and let it do the lifting.) It's
hard to say what CPU time you'd see, but my guess is it'd be closer to the
10 minute number for a comparable run.

Sorry, but CICS can't help in this case. The container still needs to be
constructed below the bar, so the size is restricted to what can be fitted
into EDSA storage.

Tom Grieve
CICS Development
IBM Hursley Park

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


ISPF mixed mode query

2009-01-14 Thread Tommy Tsui
Hi all,

When I to edit a DBCS string with =3.4 and E command the dataset , the
DBCS characters cannot be showed correctly. Is it assume mixed mode or
operation mode?
How comes I use the ED  my.datasets.DBCS , it shows all DBCS
characters correctly. Of course, =3.2 with mixed mode option can also
display the DBCS character correctly.

Any help will be appreciated.

thanks and regards

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Chris Mason
Itschak

Let's see I have got your problem straight.

You have two VTAM nodes, VTAMA and VTAMB. There is a CICS application 
running in each node, CICSA and CICSB. You want to allow CICSA to have 
sessions with CICSB and you want to prevent all other possible sessions 
between VTAMA and VTAMB, say from a terminal subordinate to VTAMA, 
TERMA, in session with CICSB or TSOB and from a terminal subordinate to 
VTAMB, TERMB, in session with CICSA or TSOA.

Let us now go back to the beginning of VTAM time, or actually not quite so far 
back - the early '70s, before SNA even[1] - but to the late '70s when VTAM 
got cross-domain function from being purely single domain before - and you 
had to start paying for it!

If you wanted actually to have a cross-domain session you needed to roll up 
your sleeves and get defining.

First of all you needed to arrange that the SSCP of one VTAM could be in 
session with the SSCP of the other VTAM:

In VTAMA's VTAMLST

 VBUILD TYPE=CDRM
VTAMACDRM ISTATUS=ACTIVE,VPACING=63   the home CDRM
VTAMBCDRM ISTATUS=ACTIVE,VPACING=63   one of the away CDRMs

In VTAMB's VTAMLST

 VBUILD TYPE=CDRM
VTAMACDRM ISTATUS=ACTIVE,VPACING=63   one of the away CDRMs
VTAMBCDRM ISTATUS=ACTIVE,VPACING=63   the home CDRM

Note how only the comments change; this allows you to use the same 
definition in all VTAMLSTs - as long as you omit the comments which would 
now become confusing!

Scanning the operands of the CDRM statement today I'm guessing that these 
two, ISTATUS and VPACING, are the only two available when the CDRM 
statement was first introduced.

On the principle that the default value for an operand represents the 
behaviour before whatever function introduced with the operand was 
introduced, we can see that the two important operands to which I want to 
draw your attention have the following values:

CDRDYN=NO[2]
CDRSC=REQ[3]

The footnotes have the explanations of what these operands actually do. I 
imagine that VTAM system programmers have been habitually coding 
CDRDYN=YES and CDRSC=OPT for so long - copied from some redbook sample 
like as not -  that they have forgotten that these operands have these other 
values with just the effect you want.

Thus that's all you need to prevent all cross-domain sessions.

Except that with the introduction of APPN in VTAM, CDRDYN got sort-of 
copied to the start options so you need to make sure that CDRDYN=NO is 
specified in the start options.

But now you need to permit those sessions you actually want.

Here's where the hard work used to come in when cross-domain was first 
available. However for you it's easy since there is only one session you want 
to allow.

In VTAMA's VTAMLST

 VBUILD TYPE=CDRSC
CICSBCDRSC CDRM=VTAMB,ISTATUS=ACTIVE

In VTAMB's VTAMLST

 VBUILD TYPE=CDRSC
CICSACDRSC CDRM=VTAMA,ISTATUS=ACTIVE

Again, I can't see CDRSC statement operands other than the two I've shown 
being relevant.

QED!

And there's no need to reach for your cheque book buying products which 
offer no function - for you anyhow - other than VTAM provides at no extra 
cost.[4]

If you have other systems, domains, and you want sessions to be established 
with those other domains with dynamic definition of CDRSCs, you need to be 
sure that you so specify the CDRM definitions that only VTAMB resources are 
restricted.

For example, you will need to ensure that VTAMB's definition of the VTAMA 
CDRM specifies CDRSC=REQ in order to prevent TERMA from being defined as a 
CDRSC within VTAMB and thus is allowed to have a session with CICSB given 
that CICSB has a CDRSC definition within VTAMA.

Chris Mason

[1] Not a lot of people remember that!

[2] quote

Specifies whether the host CDRM is authorized to dynamically define CDRSC 
representations of cross-domain or cross-network resources when a session 
request is received from or sent to an adjacent SSCP or CP.

CDRDYN=NO

Causes the failure of any cross-domain or cross-network session request for a 
cross-domain or cross-network resource that has no predefined CDRSC entry.

CDRDYN=YES

Authorizes dynamic definition of cross-domain or cross-network resources by 
the host CDRM, eliminating the need to predefine certain CDRSCs. Both origin 
logical units and destination logical units can be dynamically defined. Note 
that for subarea nodes (HOSTSA start option is specified), the DYNLU=YES 
operand is meaningful only when CDRDYN=YES.

Notes:

1. To allow dynamic resource definition, code CDRDYN=YES on the CDRM 
definition statement for the VTAM host CDRM and CDRSC=OPT on the CDRM 
definition statement for the owning SSCP.

2. An intermediate host can also build dynamic definitions for CDRSCs.

3. The CDRDYN start option overrides the CDRDYN operand value. You can use 
the MODIFY VTAMOPTS command to change the value of CDRDYN.

/quote

[3] quote

Determines whether resources owned by the CDRM being defined by this 
statement can be dynamically defined at the time a 

Re: VSM Changes in z/OS 1.10: Beta Systems Software

2009-01-14 Thread Shane
On Wed, 2009-01-14 at 06:51 +0100, Barbara Nitz wrote:
...
 3. Beta Systems said that they have been using C (or C+ or C++ or
 something)  for *years* *without* the need for LE. And I thought
 *that* was only available as MetalC starting with 1.10.

Not displaying an (ex-)IBMers bias are you Barbara ???.
I suspect Dave Rivers (amongst others probably) might be able to suggest
how such a thing might be possible.

Shane ...

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Chris Mason
Tony

  I also want to block the ability to enter logon applid command (may be by 
userid, even of the solution will require entering userid  password). How to 
achive that?

 I doubt you can do that with USS, but I may be wrong.

Interesting!

This would appear to depend on how the LU was defined to VTAM.

If a LOCAL statement is used, there is no avoiding the SSCPFM operand 
specifying SSCPFM=USS3270 (or SSCPFM=USS3275) which implies that 
Unformatted System Services (USS) commands will always be valid - and 
interpreted by VTAM's protocol conversion logic for pre/non-SNA channel-
attached 3270 devices. These days this support covers OSA-ICC and the like.

If an LU statement is used, following VBUILD TYPE=SWNET or VBUILD 
TYPE=LOCAL for example, the SSCPFM operands could be set to SSCPFM=FSS 
which should make it impossible to enter USS commands - I would expect 
although I've never tried it - any volunteers?

If SSCPFM=FSS does work as a way to block the use of USS commands, in 
order to allow the LU to get into session, the LOGAPPL operand will be needed, 
perhaps to log onto a session manager application if many business 
applications are to be accessed.

Now if you are using the Communications Server (CS) TN3270 server for 
access to the SNA part of the network, again USS tables can be used. 
However, if access is restricted with the RESTRICTAPPL statement, even if 
the USS table is used, the solicitor panel will (also) be used in order to 
validate the user with a userid and password. Again, this isn't something I've 
tried but this is what the description of the RESTRICTAPPL statement in the 
CS IP Configuration Guide tells me in Chapter 10, Accessing remote hosts 
using Telnet, Mapping methods, Application mapping statements.

However, this may not be what Itschak wants since it is checking access in 
VTAMA for access to CICSB rather than checking access in VTAMB.

 But there is nothing to say you have to provide a USS screen to your users.

Indeed, you need to code up an USS table in order to be able to present an 
USS message 10. If you don't code up an USS table, you will get the default 
commands and messages so just not having an USS message 10 has no effect 
on preventing the entry of a LOGON APPLID(xxx) command. A user just has to 
have the wit to know that he/she can enter the command even if the 
emulation window is blank. Actually, if he/she is SNA-3270-savvy, he/she will 
know to look for a stick man symbol at the lower left of the window or, 
strictly if the emulation faithfully follows 3270 device behaviour, to press 
the 
key combination corresponding to SysReq in order to change the symbol from 
a question mark to a stick man.

That's why I told Itschak before that entry of LOGON APPLID(xxx) cannot be 
prevented by techniques in coding the USS table. However, fiddling with the 
SSCPFM operand is something I hadn't considered before!

Note that, by coding alternative USS LOGON (and LOGOFF) commands, you do 
not prevent use of the default commands. It's a bit like ISTINCLM and the 
MODETAB operand.

Chris Mason

On Tue, 13 Jan 2009 18:53:37 -0500, Tony Harminc 
tz...@attglobal.net wrote:

2009/1/13 Itschak Mugzach imugz...@gmail.com

 Please have a look at this scenario:

 CICS of organization A is connected (LU6.2 Connection) to CICS of
 organization B. No problem with that. I looked into the CDRM and found
 some other application of organization B defined in VTAMLST of 
oranization
 A. Tried LOGON APPLID(xxx) and gpt the GMtran of org. B (if it is the
 default, I can travel in this CICS...). I also riched TSO logon etc.

 Now, I want to block (at) org b ability to get to org a applications
 other then the CICS connection that was agreed between Org A and B. 
Is
 this possible?

Sure, but you have to code up a VTAM Session Management Exit (SME).
This is described in the SNA Customization book. The summary says The
session management exit is a multi-function exit that you can use to
control and manage LU-LU session-related functions. You can use the
exit to authorize session establishments, obtain session accounting
data, and better manage SSCP and GWPATH selection.

Coding a basic SME is not too difficult, but getting it to do what you
want flexibly is a little harder. You could just hard code the
sessions to be allowed, or those to be denied, but then if somone
changes the naming conventions, you have a problem.

There is at least one commercial product, Blockade For MVS, which has
been around for a long time (since 1988), that manages and authorizes
SNA sessions in a very flexible way based on RACF permissions, and
also provides management of 3270 logons via a session manager. This
was developed by Blockade, was acquired by Proginet in 2005, and has
recently been acquired by Beta Systems Software. I guess I should
mention that I work there...

 I also want to block the ability to enter logon applid command (may be by
 userid, even of the solution will require entering userid  

Re: MVS 4 minute 'outage' (update)

2009-01-14 Thread JE Thinnes
We were able to recreate this problem in a controlled environment last night.  
A dump was taken right as the 'hang' ended.  

IBM's first take (more to come today) - WLM SRVCLASS=TESTONL has a 
RESOURCE cap.  The DB2 batch job causes the cap to be reached.  

Because we have so many address spaces in this service class (80+ test 
address spaces (AS)
DB2 - 2 subsystem with 11+ AS
IMS - 6 subsystems with 37 AS which includes MPRs
CICS - 31 regions)
WLM caps all the address spaces, when it gets finished, it is time to uncap 
them all - then it repeats.

When this SRVCLASS was set up there were many fewer address spaces using 
it.

Time for a review.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VSM Changes in z/OS 1.10: Beta Systems Software

2009-01-14 Thread Hunkeler Peter (KIUK 3)
The IBM code fixed by PTF UK42299 is linked into and thus distributed
with the ISV product.


Somewhere in this thread APAR OA27291 was mentioned. I just had a look
at it and I think the examples are in error. Here is an extract from 
it:

  Consider the following examples to better understand VSM
  behavior in z/OS 1.10 prior to this APAR compared to z/OS 1.9.
  The following examples assume:
  1. Beginning with storage mapped as shown below.
  2. The getmain will be satisfied as needed from the FQE and/or
 FBQE shown.
  
  DQE:  Addr 0001A000 Size 1000  TCB: 009FF050 SP/K:   2/ 8
   FQE: Addr 0001AC00 Size  C00  TCB: 009FF050 SP/K:   2/ 8
  FBQE: Addr 0001B000 Size 6000

The FQE cannot have a start address of 0001AC00 and a size of C00 if
it belongs to a DQE for X'1000' bytes. It is difficult so say what
is correct not knowing what GETMAIN/FREEMAIN request were done so
far.

I assume (from a comment further down) that it was meant to show
a single GETMAIN for X'C00' bytes has been done. The corresponding
CBs look like this:

  DQE:  Addr 0001A000 Size 1000  TCB: 009FF050 SP/K:   2/ 8
   FQE: Addr 0001A000 Size  400  TCB: 009FF050 SP/K:   2/ 8
  FBQE: Addr 0001B000 Size 6000

Not shown in the APAR text, the corresponding CBs under z/OS V1.10
would look like this:

  DQE:  Addr 0001A000 Size 1000  TCB: 009FF050 SP/K:   2/ 8
   FQE: Addr 0001AC00 Size  400  TCB: 009FF050 SP/K:   2/ 8
  FBQE: Addr 0001B000 Size 6000

The erroneous combiniation

   FQE: Addr 0001AC00 Size  C00  TCB: 009FF050 SP/K:   2/ 8
 
has been copied down through all the samples.


Am I missing something here?

-- 
Peter Hunkeler
Credit Suisse

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Eclipse articles

2009-01-14 Thread John McKown
I know this is not directly applicable. However, there may be mainframe
shops which are using the RDz (or whatever IBM is calling it this week) IDE
in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of
Eclipse. These articles may help. 

http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4

Tiny URL: http://preview.tinyurl.com/9u5phz

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Eclipse articles

2009-01-14 Thread Rich Smrcina

Excellent tip!  Thanks.

John McKown wrote:

I know this is not directly applicable. However, there may be mainframe
shops which are using the RDz (or whatever IBM is calling it this week) IDE
in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of
Eclipse. These articles may help. 


http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4

Tiny URL: http://preview.tinyurl.com/9u5phz

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html




--
Rich Smrcina
VM Assist, Inc.
Phone: 414-491-6001
Ans Service:  360-715-2467
http://www.linkedin.com/in/richsmrcina

Catch the WAVV!  http://www.wavv.org
WAVV 2009 - Orlando, FL - May 15-19, 2009

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


DFSORT ICEPRMxx z/OS 1.10 Query

2009-01-14 Thread Andrew Metcalfe
Hi Folks

I am installing z/OS 1.10 and I am converting my usermod for ICEAMx to the 
new ICEPRMxx member of parmlib. My current usermod (which I have inherited) 
has values for Z14=YES and Z29=YES, but I cannot find these parameters 
documented anywhere.

I have specified Z14 and Z29 =YES in ICEPRMxx and run ICEOPT which has 
successfully installed the options which I can subsequently display with an 
ICETOOL DEFAULTS. For completeness I would like to know what these two 
parms control.

Any pointers gratefully received.

Andrew Metcalfe
Barclays Bank

 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Walt Farrell
In response to a Wed, 14 Jan 2009 08:00:36 +0200 message from Itschak
Mugzach imugz...@gmail.com:

You seem to be mixing terminology, and possibly causing confusion, Itschak.
 (Though I think Chris understands what you've said and has provided some
good pointers.)

You start out by saying
 Now, there is no way to stop some one in org A to simply logon to org B
 CICS.

Logging on to CICS is controlled by the user ID and password provided during
the CICS signon processing.

You go on to say:
Believe me, I tried it and accessed many vtam applications. few of
them where no protected well. Some of them uses default ACB names. the
ability to finally logon into is depend on the level of security implemented
at org B. 

What you're talking about there is NOT logging on to CICS but connecting
to org B's system, via VTAM, and logging on to other VTAM applications they
have, not CICS.

I'm not disputing that you were able to do that, but I feel it's important
to properly express what has happened and thus, perhaps, avoid confusion.

And yes, the ability to logon to B's applications, if you can reach B via an
LU2 connection, is dependent on the security implemented at B and in its
applications.

-- 
  Walt Farrell, CISSP
  IBM STSM, z/OS Security Design

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Itschak Mugzach
Walt, I might used worng wording, but when I said LOGON to CICS (or any
other VTAM application on partner sight, I ment it. The only limit I
have when Pentesting is the partner company to agree for the signon.
I have seen few sites using no GMTRAN at all, so you signon to CICS with no
password and get the default user auth! There are also few other VTAM
applications that uses internal userid and passowrd that is stored in a
file. NDM is a sumple for super user that is described in a parameter
library.

ITschak

On Wed, Jan 14, 2009 at 4:42 PM, Walt Farrell wfarr...@us.ibm.com wrote:

 In response to a Wed, 14 Jan 2009 08:00:36 +0200 message from Itschak
 Mugzach imugz...@gmail.com:

 You seem to be mixing terminology, and possibly causing confusion, Itschak.
  (Though I think Chris understands what you've said and has provided some
 good pointers.)

 You start out by saying
  Now, there is no way to stop some one in org A to simply logon to org
 B
  CICS.

 Logging on to CICS is controlled by the user ID and password provided
 during
 the CICS signon processing.

 You go on to say:
 Believe me, I tried it and accessed many vtam applications. few of
 them where no protected well. Some of them uses default ACB names. the
 ability to finally logon into is depend on the level of security
 implemented
 at org B.

 What you're talking about there is NOT logging on to CICS but connecting
 to org B's system, via VTAM, and logging on to other VTAM applications they
 have, not CICS.

 I'm not disputing that you were able to do that, but I feel it's important
 to properly express what has happened and thus, perhaps, avoid confusion.

 And yes, the ability to logon to B's applications, if you can reach B via
 an
 LU2 connection, is dependent on the security implemented at B and in its
 applications.

 --
  Walt Farrell, CISSP
  IBM STSM, z/OS Security Design

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


2074 configuration problem

2009-01-14 Thread Jerry Fuchs
I am trying to configure our new 2074s. When I boot the machine I get a 
message indicating that the network is unreachable.

I have verified the IP address and subnet mask specifications.

My network people tell me that I have to specify the gateway also but I 
see no place where this is specified.

Any ideas?

Thanks

Jerry Fuchs
Senior Systems Engineer
Wendy's Arby's Group
One Dave Thomas Blvd.
Dublin, Ohio 43017
(614) 764-3594

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: MVS 4 minute 'outage' (update)

2009-01-14 Thread Mark Zelden
On Wed, 14 Jan 2009 06:22:51 -0600, JE Thinnes jethin...@aol.com wrote:

We were able to recreate this problem in a controlled environment last night.
A dump was taken right as the 'hang' ended.

IBM's first take (more to come today) - WLM SRVCLASS=TESTONL has a
RESOURCE cap.  The DB2 batch job causes the cap to be reached.

Because we have so many address spaces in this service class (80+ test
address spaces (AS)
DB2 - 2 subsystem with 11+ AS
IMS - 6 subsystems with 37 AS which includes MPRs
CICS - 31 regions)
WLM caps all the address spaces, when it gets finished, it is time to uncap
them all - then it repeats.

When this SRVCLASS was set up there were many fewer address spaces using
it.

Time for a review.


Strange that it would lock out CONSOLE.  What else is IBM saying is going
on at the time (locks held etc.)?

--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: MVS 4 minute 'outage' (update)

2009-01-14 Thread JE Thinnes
IBM is still digesting the dump.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


System Install and Catalogs

2009-01-14 Thread Matt Dazzo
Working on my first system upgrade 1.7 to 1.9. I selected a software install 
option. I am up to and ran the RECATDS job so all the z1.9 dsn's are in a 
separate z1.9 catalog that contains only the 1.9 files.

When I Ipl 1.9 I would like to use my existing (z1.7) system's master catalog, 
but as it stands now it will not know about any new dataset names on the 1.9 
system. I am looking to find how other folks handle sync'ing any new dataset 
names to an existing mcat or deleting names no longer required from the 1.7 
system. Manually checking file names between the systems leaves alot of room 
for human error. I know IDCAMS provides MERGECAT but I have never used it and 
don't know if there are pit falls with it. Any information on how you handle 
this situation is appreciated. 
 
FYI- I did add in the new omvs HFS's files as they are named uniquely.
 
Matt


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: DFSORT ICEPRMxx z/OS 1.10 Query

2009-01-14 Thread Frank Yaeger
Andrew Metcalfe wrote on 01/14/2009 06:36:33 AM
 I am installing z/OS 1.10 and I am converting my usermod for ICEAMx to
the
 new ICEPRMxx member of parmlib. My current usermod (which I have
inherited)
 has values for Z14=YES and Z29=YES, but I cannot find these parameters
 documented anywhere.

 I have specified Z14 and Z29 =YES in ICEPRMxx and run ICEOPT which has
 successfully installed the options which I can subsequently display with
an
 ICETOOL DEFAULTS. For completeness I would like to know what these two
 parms control.

 Any pointers gratefully received.

Andrew,

DFSORT's Zn and Yn installation options are undocumented options that IBM
can
offer to customers to change the behavior of DFSORT from its normal,
documented
way of operating.  These undocumented options are available with DFSORT's
new
ICEPRMxx support as well as with the old ICEMAC support.

I'll send you a note offline with more information about the particular
Zn options you asked about.

Frank Yaeger - DFSORT Development Team (IBM) - yae...@us.ibm.com
Specialties: FINDREP, WHEN=GROUP, DATASORT, ICETOOL, Symbols, Migration

 = DFSORT/MVS is on the Web at http://www.ibm.com/storage/dfsort/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Chase, John
 -Original Message-
 From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach
 
 Walt, I might used worng wording, but when I said LOGON to CICS (or
any
 other VTAM application on partner sight, I ment it. The only limit I
 have when Pentesting is the partner company to agree for the signon.
 I have seen few sites using no GMTRAN at all, so you signon to CICS
with no
 password and get the default user auth! There are also few other VTAM
 applications that uses internal userid and passowrd that is stored in
a
 file. NDM is a sumple for super user that is described in a parameter
 library.

It is not possible (without some exit programming) to sign on to CICS
without tendering both a user ID and a password.  If a CICS region is
started with DFHSIT parameter SEC=NO, then CICS itself rejects _any_
sign-on attempt (i.e., you cannot sign on at all); you're in (as the
default CICS user) by virtue of having connected, and can execute any
transaction defined in that region.

At the VTAM level, you cannot prevent connecting to a foreign CICS
except via requiring explicit CDRSC definitions, as others have already
noted.  Otherwise, if your VTAM can find the requested CICS, a session
will be established (i.e., you will be connected).

At the CICS level (i.e., once you are connected to CICS), access to
the CICS region itself can be controlled via a RACF APPL profile, but
that authorization is not (cannot be) checked until sign-on is
attempted.  This requires that CICS be started with DFHSIT parameter
SEC=YES, at minimum.

-jc-

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


C without LE [was: RE: VSM Changes in z/OS 1.10: Beta Systems Software]

2009-01-14 Thread Farley, Peter x23353
 -Original Message-
 From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
 Behalf Of Barbara Nitz
 Sent: Wednesday, January 14, 2009 12:52 AM
 To: IBM-MAIN@bama.ua.edu
 Subject: Re: VSM Changes in z/OS 1.10: Beta Systems Software
Snipped 
 3. Beta Systems said that they have been using C (or C+ or C++ or
 something)  for *years* *without* the need for LE. And I thought
*that*
 was only available as MetalC starting with 1.10.

Systems Programming C (SPC) has been available as part of the regular
IBM C compiler for a long time now.  You give up access to all LE
functions and limit yourself to a defined subset of C library functions.
The startup code is not dynamic and requires static links (so does LE
startup code...), but SPC is quite functional for some purposes.

Peter


This message and any attachments are intended only for the use of the addressee 
and
may contain information that is privileged and confidential. If the reader of 
the 
message is not the intended recipient or an authorized representative of the
intended recipient, you are hereby notified that any dissemination of this
communication is strictly prohibited. If you have received this communication in
error, please notify us immediately by e-mail and delete the message and any
attachments from your system.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: System Install and Catalogs

2009-01-14 Thread Guy Gardoit
I never produce a new master cat with a new release install unless there is
some compelling reason to do so.  My sandbox system has its own master cat
so catalog compatibility can be checked there before deploying elsewhere.
If you use indirect cataloging for the system resident data sets, the only
thing you need to do is indirectly catalog the new ones.  Make note of any
obsolete ones so you can uncatalog them once 1.9 is production and their is
no chance of going back to 1.7.   When implementing into a test or
production system, the catalog deltas can be applied there.  I know you want
to avoid human error but the differences are usually small as long as you're
not making too large of a jump in releases.  If you want to be picky
(careful?), I guess some easy Rexx code code be written to compare LISTCAT
output.

Also, I tend to use a separate catalog for all those system resident data
sets that do not start with HLQ SYS1  (eg, CEE).  Indirect cataloging
works with usercats as well as with mastercats (really no difference).
This was made possible by IBM providing a 'volser' parm in link list and LPA
list.   Just makes for a cleaner master cat.

HTH
Guy Gardoit
z/OS Systems Programmer

On Wed, Jan 14, 2009 at 10:39 AM, Matt Dazzo mda...@pch.com wrote:

 Working on my first system upgrade 1.7 to 1.9. I selected a software
 install option. I am up to and ran the RECATDS job so all the z1.9 dsn's are
 in a separate z1.9 catalog that contains only the 1.9 files.

 When I Ipl 1.9 I would like to use my existing (z1.7) system's master
 catalog, but as it stands now it will not know about any new dataset names
 on the 1.9 system. I am looking to find how other folks handle sync'ing any
 new dataset names to an existing mcat or deleting names no longer required
 from the 1.7 system. Manually checking file names between the systems leaves
 alot of room for human error. I know IDCAMS provides MERGECAT but I have
 never used it and don't know if there are pit falls with it. Any information
 on how you handle this situation is appreciated.

 FYI- I did add in the new omvs HFS's files as they are named uniquely.

 Matt


 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Rick Fochtman

Please have a look at this scenario:

CICS of organization A is connected (LU6.2 Connection) to CICS 
oforganization B. No problem with that. I looked into the CDRM and 
found some other application of organization B defined in VTAMLST of 
oranization A. Tried LOGON APPLID(xxx) and gpt the GMtran of org. B 
(if it is the default, I can travel in this CICS...). I also riched TSO 
logon etc.


Now, I want to block (at) org b ability to get to org a applications 
other then the CICS connection that was agreed between Org A and B. 
Is this possible?

-unsnip---
This is entirely possible and there are some commercial products that 
will handle this very well. Look around for a product named TPX. It used 
to be offered by Duquesne Systems; I think it comes from CA now, after a 
number of various and sundry corporate acquisitions.


--
Rick
--
Remember that if you’re not the lead dog, the view never changes.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: another IBM meaning for NIP

2009-01-14 Thread Rick Fochtman

-snip--
I'm sorry I can't help myself!

Many years ago, we had a quite a bit of Series/1 equipment, which was 
largely customer set up.


Once I needed to move an attachment card from one cpu to another. As was 
their want, IBM charged a (nominal) fee to amend their records as to 
what feature was on what machine. ( remember, the customer himself [me 
in this case] actually performed this movement).


We later got an invoice from IBM which said something like 
reinstallation(N.I.P) of xyz attachment card I assumed that NIP stood 
for some thing like Now Installed Part/Product or similar. I was later 
informed that no, NIP in fact stood for Non Ibm Person ( i.e. me, in 
this case). That, I thought, put me in my place!.


Phil Steele ( still a N.I.P, but I know quite a few others... I am not 
alone in this regard)

---unsnip-
At the risk of being sarcastic, if I were in your management chain, I'd 
be raising six kinds of great unholy HE** when IBM bills me for MY 
employee's time taking actions on MY behalf. A purely nominal fee for 
record updating is one thing; I'll be HANGED before I pay someone else 
for doing what MY employee is doing on MY payroll!


--
Rick
--
Remember that if you’re not the lead dog, the view never changes.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: 2074 configuration problem

2009-01-14 Thread William Bishop
If I remember correctly, it is under lan configuration, set route 
statements, on the 2074 CAx setup menu.

I believe the default entry is for the gateway.  I think this is what you 
would need.

route -fh
route add default 10.10.10.251 -hopcount 1
route add -net 10.10.10.251 -netmask 255.0.0.0 -hopcount 1

Just use your own IP addresses.

I am not 100% sure as I use explicit routing to my PCs and the gateway is 
the second entry on the route statement.  It is the only way I can limit 
access to the 2074s.

Whenever I make changes to the IP info, I use the native TCP/IP 
configuration utility under OS/2.

Thanks

Bill Bishop

Specialist
Mainframe Support Group
Server Development  Support
Toyota Motor Engineering  Manufacturing North America, Inc.
bill.bis...@tema.toyota.com
(502) 570-6143



Jerry Fuchs jerry.fu...@wendysarbys.com 
Sent by: IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu
01/14/2009 10:25 AM
Please respond to
IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu


To
IBM-MAIN@bama.ua.edu
cc

Subject
2074 configuration problem






I am trying to configure our new 2074s. When I boot the machine I get a 
message indicating that the network is unreachable.

I have verified the IP address and subnet mask specifications.

My network people tell me that I have to specify the gateway also but I 
see no place where this is specified.

Any ideas?

Thanks

Jerry Fuchs
Senior Systems Engineer
Wendy's Arby's Group
One Dave Thomas Blvd.
Dublin, Ohio 43017
(614) 764-3594

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: 2074 configuration problem

2009-01-14 Thread Hal Merritt
It's been a long time, but I seem to recall a tab in the general IP 
configuration area where you defined gateways.  

HTH

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Jerry Fuchs
Sent: Wednesday, January 14, 2009 9:22 AM
To: IBM-MAIN@bama.ua.edu
Subject: 2074 configuration problem

I am trying to configure our new 2074s. When I boot the machine I get a 
message indicating that the network is unreachable.

I have verified the IP address and subnet mask specifications.

My network people tell me that I have to specify the gateway also but I 
see no place where this is specified.

Any ideas?

Thanks

Jerry Fuchs
Senior Systems Engineer
Wendy's Arby's Group
One Dave Thomas Blvd.
Dublin, Ohio 43017
(614) 764-3594

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: System Install and Catalogs

2009-01-14 Thread Imbriale, Donald
I agree completely about manually checking catalogs leaves a lot of room
for human error.

Check out Alastair Gray's work for building and comparing catalogs at
http://www.cbttape.org/ftp/cbt/CBT542.zip

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Matt Dazzo
Sent: Wednesday, January 14, 2009 10:39 AM
To: IBM-MAIN@bama.ua.edu
Subject: System Install and Catalogs

Working on my first system upgrade 1.7 to 1.9. I selected a software
install option. I am up to and ran the RECATDS job so all the z1.9 dsn's
are in a separate z1.9 catalog that contains only the 1.9 files.

When I Ipl 1.9 I would like to use my existing (z1.7) system's master
catalog, but as it stands now it will not know about any new dataset
names on the 1.9 system. I am looking to find how other folks handle
sync'ing any new dataset names to an existing mcat or deleting names no
longer required from the 1.7 system. Manually checking file names
between the systems leaves alot of room for human error. I know IDCAMS
provides MERGECAT but I have never used it and don't know if there are
pit falls with it. Any information on how you handle this situation is
appreciated. 
 
FYI- I did add in the new omvs HFS's files as they are named uniquely.
 
Matt

Generally, this communication is for informational purposes only
and it is not intended as an offer or solicitation for the purchase
or sale of any financial instrument or as an official confirmation
of any transaction. In the event you are receiving the offering
materials attached below related to your interest in hedge funds or
private equity, this communication may be intended as an offer or
solicitation for the purchase or sale of such fund(s).  All market
prices, data and other information are not warranted as to
completeness or accuracy and are subject to change without notice.
Any comments or statements made herein do not necessarily reflect
those of JPMorgan Chase  Co., its subsidiaries and affiliates.

This transmission may contain information that is privileged,
confidential, legally privileged, and/or exempt from disclosure
under applicable law. If you are not the intended recipient, you
are hereby notified that any disclosure, copying, distribution, or
use of the information contained herein (including any reliance
thereon) is STRICTLY PROHIBITED. Although this transmission and any
attachments are believed to be free of any virus or other defect
that might affect any computer system into which it is received and
opened, it is the responsibility of the recipient to ensure that it
is virus free and no responsibility is accepted by JPMorgan Chase 
Co., its subsidiaries and affiliates, as applicable, for any loss
or damage arising in any way from its use. If you received this
transmission in error, please immediately contact the sender and
destroy the material in its entirety, whether in electronic or hard
copy format. Thank you.
Please refer to http://www.jpmorgan.com/pages/disclosures for
disclosures relating to UK legal entities.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Chris Mason
Itschak

I see you are there and able to respond. Since we haven't heard a Thanks 
Chris that exactly meets my requirements. I must assume that my purely 
VTAM solution using CDRM statement operands and CDRSC statements where 
necessary didn't somehow answer your needs. I'd rather like to know why 
since it's so straightforward.

And, of course, I'm still trying to have you avoid any unnecessary expense!

So let's try again from the beginning.

 CICS of organization A is connected (LU6.2 Connection) to CICS of 
organization B. No problem with that.

Translation: There is a CICSA-CICSB set of sessions. (being LU 6.2 it will be a 
set of sessions rather than a single session.). Whatever measures are taken 
to prevent other sessions being established need to allow this set of sessions 
to be established.

 I looked into the CDRM and found some other application (probably 
plural applications) of organization B defined in VTAMLST of oranization 
A.

Translation: I browsed the CDRSC (CDRM was corrected in a following post to 
CDRSC) major node VTAMLST member or members in the VTAMA VTAMLST 
library and found other CDRSC statements presumably corresponding to other 
applications, some of them other CICS applications. (The fact some were 
other CICS applications is mentioned in a following post.)

 Tried LOGON APPLID(xxx) and gpt the GMtran of org. B (if it is the
default, I can travel in this CICS...).

Translation: I succeeded in logging onto one or more CICS applications in 
VTAMB, CICSB, CICSB1 ..., using the names I found in the CDRSC statements 
and I was presented with the Good Morning messages. Assuming there is no 
CICS-level security imposed, I can enter transactions in these CICS 
applications.

 I also riched TSO logon etc.

Translation: I also succeeded in logging onto the TSO application in VTAMB, 
TSOB, as far as the logon panel. And I succeeded in logging onto other 
applications.

 Now, I want to block (at) org b ability to get to org a applications 
 other 
then the CICS connection that was agreed between Org A and B.

Translation: Having seen what I can do as a user associated with VTAMA in 
accessing applications in VTAMB, I am concerned that a user associated with 
VTAMB can access applications in VTAMA, the VTAM with which I am working. 
I want to prevent a user associated with VTAMB accessing applications in 
VTAMA.

 Is this possible?

Translation: None needed!

Answer: Assuming you have the authority to change VTAM definitions, in the 
VBUILD TYPE=CDRM member in VTAMA VTAMLST, change the VTAMB CDRM 
statement to specify CDRSC=REQ and do *not* define any of the end-user 
LUs associated with, owned by, VTAMB as CDRSCs. That way none of the 
VTAMB end-users can initiate a session with any of the VTAMA applications - 
exactly what I think you want to achieve. In order still to be able to set up 
the CICSA-CICSB sessions, you will need to define a CDRSC in VTAMA for 
CICSB as CICSB CDRSC CDRM=VTAMB within a VBUILD TYPE=CDRSC member. 
Hitherto, I expect this CDRSC will have been defined dynamically because you 
specified CDRSC=OPT for VTAMB and CDRDYN=YES is in effect for your local 
CDRM.

Walt, these are not just pointers, this is chapter and verse!

To continue:

 I also want to block the ability to enter logon applid command (may be by 
userid, even of the solution will require entering userid  password). How to 
achive that?

Answer: Presumably you are talking about blocking the use of LOGON APPLID
(xxx) at VTAMB for the VTAMA applications. When stated like that, this is 
clearly undesirable since it would prevent end-users in VTAMB accessing 
applications in VTAMB! Also, unless that trick of using SSCPFM=FSS works 
and that value can be applied to the VTAM definition, there is no way actually 
to prevent the use of the default USS LOGON and LOGOFF commands.

If the end-users in VTAMB access SNA by means of a TN3270 server, then 
use of RESTRICTAPPL can impose use of a userid and password as described in 
the Communications Server IP Configuration Guide.

 What other alternatives are offered to connect to vtam applications when 
USS tab is displaied, other then LOG APPLID and selecting from the uss tab? I 
mean, is there any bypass to LOG APPLID if blocked?

Translation: What other alternatives are offered to connect to VTAM 
applications when USS message 10 is displayed other then LOGON APPLID(xxx) 
*or* selecting from LOGON command aliases defined in the USS table? I mean, 
is there any bypass to LOGON APPLID(xxx) if blocked?

Answer: Use of the interpret table can, in effect, bypass the use of 
commands defined in the USS table.

The usual alternative to use of USS LOGON commands in order to initiate 
sessions from end-user LUs is to use a session manager with which a session 
is established by means of a LOGAPPL operand on the LU (or LOCAL) 
statement definition.

-

 Now, there is no way to stop some one in org A to simply logon to org B 
CICS.

Answer: Oh yes there is - see above.

 

Some kind of hint!!!

2009-01-14 Thread Carlos Bodra

Hi Listers, (xposted to VSE-L and OS/390 List)

I need to read an IBM 3490 cartridge recorded by OS/390 program in a 
Linux system. If this works fine in intel server, I can migrate it to 
Linux under mainframe later.


I have a 3490-E01 (scsi interface) connected to an  IBM x236 system. 
Until here no problem.


Tape has a record type of VB (126-1295) and some fields into record are 
defined as PIC 9(xxx) comp-3. I got this from mainframe  cobol program, 
since today
I read it in our mainframe system, using a cobol program. (read tape and 
write a pds file)


Since I´m no an expert in cobol or other programm language and in Linux 
plataform, my questions are:


There is any open source software or not  that can read this record and 
resolve comp-3 fields?
If no software availalble, any one has a sample how to read this record 
using any linux plataform language?


Thanks for comments and hints.

--
Carlos Alberto Bodra
VM/VSE System Consultant
Sao Paulo - Brazil


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: 2074 configuration problem

2009-01-14 Thread Natarajan Mohan
Jerry,

After you update the LAN configuration, You would have to use function key F4 
to add routing statements. This would make sure every time you reboot the 
information stays intact.
In the screen add a default route to your gateway.

route add default your-gateway-ip -hopcount 1

If I remember correctly, there should be already one example on that screen 
with rem in front of it (Commented out). 

Thanks
Natarajan

 Jerry Fuchs jerry.fu...@wendysarbys.com 1/14/2009 7:22 AM 
I am trying to configure our new 2074s. When I boot the machine I get a 
message indicating that the network is unreachable.

I have verified the IP address and subnet mask specifications.

My network people tell me that I have to specify the gateway also but I 
see no place where this is specified.

Any ideas?

Thanks

Jerry Fuchs
Senior Systems Engineer
Wendy's Arby's Group
One Dave Thomas Blvd.
Dublin, Ohio 43017
(614) 764-3594

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

NOTICE OF CONFIDENTIALITY 

The information contained in this communication, including but not limited to 
any accompanying document(s) and/or attachment(s), is privileged and 
confidential and is intended solely for the above-named individual(s). If you 
are not the intended recipient, please be advised that any distribution, 
copying, disclosure, and/or use of the information contained herein is strictly 
prohibited. If you received this communication in error, please destroy all 
copies of the communication, whether in electronic or hard copy format, and 
immediately contact the Security Office at EDFUND at (916) 526-7539 or 
securityoff...@edfund.org. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VSM Changes in z/OS 1.10: Beta Systems Software

2009-01-14 Thread Jim Mulder
IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu wrote on 01/14/2009 
08:27:05 AM:

 Somewhere in this thread APAR OA27291 was mentioned. I just had a look
 at it and I think the examples are in error. Here is an extract from 
 it:
 
   Consider the following examples to better understand VSM
   behavior in z/OS 1.10 prior to this APAR compared to z/OS 1.9.
   The following examples assume:
   1. Beginning with storage mapped as shown below.
   2. The getmain will be satisfied as needed from the FQE and/or
  FBQE shown.
 
   DQE:  Addr 0001A000 Size 1000  TCB: 009FF050 SP/K:   2/ 8
FQE: Addr 0001AC00 Size  C00  TCB: 009FF050 SP/K:   2/ 8
   FBQE: Addr 0001B000 Size 6000
 
 The FQE cannot have a start address of 0001AC00 and a size of C00 if
 it belongs to a DQE for X'1000' bytes. It is difficult so say what
 is correct not knowing what GETMAIN/FREEMAIN request were done so
 far.
 
 I assume (from a comment further down) that it was meant to show
 a single GETMAIN for X'C00' bytes has been done. The corresponding
 CBs look like this:
 
   DQE:  Addr 0001A000 Size 1000  TCB: 009FF050 SP/K:   2/ 8
FQE: Addr 0001A000 Size  400  TCB: 009FF050 SP/K:   2/ 8
   FBQE: Addr 0001B000 Size 6000
 
 Not shown in the APAR text, the corresponding CBs under z/OS V1.10
 would look like this:
 
   DQE:  Addr 0001A000 Size 1000  TCB: 009FF050 SP/K:   2/ 8
FQE: Addr 0001AC00 Size  400  TCB: 009FF050 SP/K:   2/ 8
   FBQE: Addr 0001B000 Size 6000
 
 The erroneous combiniation
 
FQE: Addr 0001AC00 Size  C00  TCB: 009FF050 SP/K:   2/ 8
 
 has been copied down through all the samples.
 
 
 Am I missing something here?

  Thanks for catching that typo - it will be corrected.
Five of us reviewed that APAR text, but that is the difficulty 
with proofreading - sometimes the brain just thinks it sees 
what it expects to see. 

Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Itschak Mugzach
John, Do you want me to surprise you? As your new president said: yes, we
can. Sec=YES has nothing to do with the signon procedure of CICS and how
users get identified. As you know, each terminal runs the dfltuser (from
SIT) if no user signed on. Its is well documented in the  manuals.  This is
where I start when doing Pentest.



Itschak

On Wed, Jan 14, 2009 at 5:57 PM, Chase, John jch...@ussco.com wrote:

  -Original Message-
  From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach
 
  Walt, I might used worng wording, but when I said LOGON to CICS (or
 any
  other VTAM application on partner sight, I ment it. The only limit I
  have when Pentesting is the partner company to agree for the signon.
  I have seen few sites using no GMTRAN at all, so you signon to CICS
 with no
  password and get the default user auth! There are also few other VTAM
  applications that uses internal userid and passowrd that is stored in
 a
  file. NDM is a sumple for super user that is described in a parameter
  library.

 It is not possible (without some exit programming) to sign on to CICS
 without tendering both a user ID and a password.  If a CICS region is
 started with DFHSIT parameter SEC=NO, then CICS itself rejects _any_
 sign-on attempt (i.e., you cannot sign on at all); you're in (as the
 default CICS user) by virtue of having connected, and can execute any
 transaction defined in that region.

 At the VTAM level, you cannot prevent connecting to a foreign CICS
 except via requiring explicit CDRSC definitions, as others have already
 noted.  Otherwise, if your VTAM can find the requested CICS, a session
 will be established (i.e., you will be connected).

 At the CICS level (i.e., once you are connected to CICS), access to
 the CICS region itself can be controlled via a RACF APPL profile, but
 that authorization is not (cannot be) checked until sign-on is
 attempted.  This requires that CICS be started with DFHSIT parameter
 SEC=YES, at minimum.

-jc-

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Itschak Mugzach
Hi Chris,

You answers are just exectly what I was looking for. I RTFMed a little as
well and have my ideas. For example, I looked into the USS TAB code and
found that a I can force some input rules, ;like blocking LOG APPLID. I
didn't respond as I am still learning your answer, BTW, I want to thanks all
those who responded, I learened from all, even from those that delt with my
wrong wording.

Many thanks,

Itschak



On Wed, Jan 14, 2009 at 7:01 PM, Chris Mason chrisma...@belgacom.netwrote:

 Itschak

 I see you are there and able to respond. Since we haven't heard a Thanks
 Chris that exactly meets my requirements. I must assume that my purely
 VTAM solution using CDRM statement operands and CDRSC statements where
 necessary didn't somehow answer your needs. I'd rather like to know why
 since it's so straightforward.

 And, of course, I'm still trying to have you avoid any unnecessary expense!

 So let's try again from the beginning.

  CICS of organization A is connected (LU6.2 Connection) to CICS of
 organization B. No problem with that.

 Translation: There is a CICSA-CICSB set of sessions. (being LU 6.2 it will
 be a
 set of sessions rather than a single session.). Whatever measures are taken
 to prevent other sessions being established need to allow this set of
 sessions
 to be established.

  I looked into the CDRM and found some other application (probably
 plural applications) of organization B defined in VTAMLST of
 oranization A.

 Translation: I browsed the CDRSC (CDRM was corrected in a following post to
 CDRSC) major node VTAMLST member or members in the VTAMA VTAMLST
 library and found other CDRSC statements presumably corresponding to other
 applications, some of them other CICS applications. (The fact some were
 other CICS applications is mentioned in a following post.)

  Tried LOGON APPLID(xxx) and gpt the GMtran of org. B (if it is the
 default, I can travel in this CICS...).

 Translation: I succeeded in logging onto one or more CICS applications in
 VTAMB, CICSB, CICSB1 ..., using the names I found in the CDRSC statements
 and I was presented with the Good Morning messages. Assuming there is no
 CICS-level security imposed, I can enter transactions in these CICS
 applications.

  I also riched TSO logon etc.

 Translation: I also succeeded in logging onto the TSO application in VTAMB,
 TSOB, as far as the logon panel. And I succeeded in logging onto other
 applications.

  Now, I want to block (at) org b ability to get to org a applications
 other
 then the CICS connection that was agreed between Org A and B.

 Translation: Having seen what I can do as a user associated with VTAMA in
 accessing applications in VTAMB, I am concerned that a user associated with
 VTAMB can access applications in VTAMA, the VTAM with which I am working.
 I want to prevent a user associated with VTAMB accessing applications in
 VTAMA.

  Is this possible?

 Translation: None needed!

 Answer: Assuming you have the authority to change VTAM definitions, in the
 VBUILD TYPE=CDRM member in VTAMA VTAMLST, change the VTAMB CDRM
 statement to specify CDRSC=REQ and do *not* define any of the end-user
 LUs associated with, owned by, VTAMB as CDRSCs. That way none of the
 VTAMB end-users can initiate a session with any of the VTAMA applications -
 exactly what I think you want to achieve. In order still to be able to set
 up
 the CICSA-CICSB sessions, you will need to define a CDRSC in VTAMA for
 CICSB as CICSB CDRSC CDRM=VTAMB within a VBUILD TYPE=CDRSC member.
 Hitherto, I expect this CDRSC will have been defined dynamically because
 you
 specified CDRSC=OPT for VTAMB and CDRDYN=YES is in effect for your local
 CDRM.

 Walt, these are not just pointers, this is chapter and verse!

 To continue:

  I also want to block the ability to enter logon applid command (may be by
 userid, even of the solution will require entering userid  password). How
 to
 achive that?

 Answer: Presumably you are talking about blocking the use of LOGON APPLID
 (xxx) at VTAMB for the VTAMA applications. When stated like that, this is
 clearly undesirable since it would prevent end-users in VTAMB accessing
 applications in VTAMB! Also, unless that trick of using SSCPFM=FSS works
 and that value can be applied to the VTAM definition, there is no way
 actually
 to prevent the use of the default USS LOGON and LOGOFF commands.

 If the end-users in VTAMB access SNA by means of a TN3270 server, then
 use of RESTRICTAPPL can impose use of a userid and password as described in
 the Communications Server IP Configuration Guide.

  What other alternatives are offered to connect to vtam applications when
 USS tab is displaied, other then LOG APPLID and selecting from the uss tab?
 I
 mean, is there any bypass to LOG APPLID if blocked?

 Translation: What other alternatives are offered to connect to VTAM
 applications when USS message 10 is displayed other then LOGON APPLID(xxx)
 *or* selecting from LOGON command aliases defined in the USS table? 

Re: AIX gets 64 bit COBOL but still none for Z/os ...

2009-01-14 Thread Thomas David Rivers
Clark Morris cfmpub...@ns.sympatico.ca wrote:
 Dave Rivers wrote:
 Just to add a quick note to that, a popular option
 for our users is to write a quick-n-dirty C function
 to handle the 64-bit data (directly callable from 31-bit
 COBOL).
 
 Since there is NOTHING in the 1985 COBOL standard, let alone the 2002
 standard that would prohibit having a 10 gigabyte table, why should
 someone have to program a work around in 2009?  How long has the z
 series had 64 bit addressing?  When did C/C++ get it?  When did DB2
 get it?  If 64 bit is good and useful for Websphere and if Websphere
 is strategic, then why can't COBOL routines run in the 64 bit
 Websphere? 

 Very good points

 I was just saying that, given realities - here's a work-around
 some people have found helpful.

 Of course, if we want to rail against realities - that's a different
 beastie all together :-)  And, I can completely understand it :-)

- Dave Rivers -

--
riv...@dignus.comWork: (919) 676-0847
Get your mainframe programming tools at http://www.dignus.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread John McKown
On Wed, 14 Jan 2009 15:07:10 -0200, Carlos Bodra cbo...@terra.com.br wrote:

Hi Listers, (xposted to VSE-L and OS/390 List)

I need to read an IBM 3490 cartridge recorded by OS/390 program in a
Linux system. If this works fine in intel server, I can migrate it to
Linux under mainframe later.

I have a 3490-E01 (scsi interface) connected to an  IBM x236 system.
Until here no problem.

Tape has a record type of VB (126-1295) and some fields into record are
defined as PIC 9(xxx) comp-3. I got this from mainframe  cobol program,
since today
I read it in our mainframe system, using a cobol program. (read tape and
write a pds file)

Since I´m no an expert in cobol or other programm language and in Linux
plataform, my questions are:

There is any open source software or not  that can read this record and
resolve comp-3 fields?

I am not aware of any package which will do that, if this is what you mean.
COMP-3 fields are packed decimal. It is rather easy to convert these into
an integer. The number of bytes that are taken for a PIC S9(n) COMP-3 field
is (n+2)/2 and ignore the remainder. E.g. PIC S9(1) COMP-3 is 1 byte. PIC
S9(2) COMP-3 is 2 bytes, as is PIC S9(3). And so on. Now, if there is no S
in front of the 9, then the data is forced to be positive.

Some C code which can convert from COMP-3 to int:

int toint(unsigned char* packed, int digits) {
int bytes=(digits+2)1;
int n=bytes-1;
int i,j;
int result=0;
for (i=1;in;i++) {
result=100*j+10*(*packed1)+(*packed  0x0f);
packed++; /* examine next byte */
}
result=10*result+(*packed1);
i=*packed  0x0f;
if (i==11 || i==13) result=-result; /* negative sign */
return result;
}

If no software availalble, any one has a sample how to read this record
using any linux plataform language?

I've used Java to do something similar. I must assume that you already know
how to read the file on tape. I don't know how to do that. But assume that
the variable tape is the open()'ed FILE *. You must read every record
yourself. This will be a bit complicated because the file is variable
blocked. That means that every physical tape record consists of a BDW (Block
Descriptor Word), followed by one or more logical records. Each logical
record is prefixed with a RDW (Record Descriptor Word). My, this is getting
complicated. The following C code should perhaps help. But I cannot test it
(the same as the above).

#include stdio.h
#include string.h
#include stdlib.h
static char buffer[32768];
static int buf_off=32768;
static int block_length=0;
static int record_length=0;
size_t doread(char *record, FILE *tape) {
unsigned char bdw[2];
if (buf_off = block_length) {
block_read:;
fread(bdw,2,1,tape); /* read the block descriptor */
block_length=bdw[1]8|bdw[2]-4;
fread(bdw,2,1,tape); /* read and skip 2 bytes */
if (block_length0) {
fread(buffer,block_length,1,tape);
} else goto block_read;
}
record_length=buffer[buf_off]8|buffer[buf_off+1]-4;
buf_off+=4;
if (buf_off+record_lengthblock_length) return -1;
if (record_length0) {
memcpy(record,buffer+buf_off,record_length);
}
return record_length;
}


Note that the above copies the current logical record into your memory area.
It also returns the length of the amount of data copied. The length could be
zero. If the routine returns a -1, that means that there is a problem with
the file (or a bug in my code).


Thanks for comments and hints.

--
Carlos Alberto Bodra
VM/VSE System Consultant
Sao Paulo - Brazil

Hope this is of some use to you.

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread John McKown
On Wed, 14 Jan 2009 12:39:05 -0600, John McKown joa...@swbell.net wrote:


Some C code which can convert from COMP-3 to int:

int toint(unsigned char* packed, int digits) {
int bytes=(digits+2)1;
int n=bytes-1;
int i,j;
int result=0;
for (i=1;in;i++) {
result=100*j+10*(*packed1)+(*packed  0x0f);
packed++; /* examine next byte */
}
result=10*result+(*packed1);
i=*packed  0x0f;
if (i==11 || i==13) result=-result; /* negative sign */
return result;
}


The for is wrong. It should be:

for (i=0;in;i++) {

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


RSU0812

2009-01-14 Thread Gibney, Dave
   Is it just me, or has something delayed this? Usually I seemed to get
the email around the 8th of the month.

Dave Gibney
Information Technology Services
Washington State Univsersity

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


AIX gets 64 bit COBOL but still none for Z/os ...

2009-01-14 Thread Bill Klein
I understand your desire for 64-bit COBOL.

I would suggest that if you WANT 64-bit COBOL, that you have your company
submit a marketing requirement and reference SHARE requirement:
 
  SSLNGC0413607  Support 64 bit and web-oriented development in COBOL

Unless you want a 64-bit COBOL that can't communicate with 31-bit COBOL, you
might also want to submit marketing requirements that reference all of the
following 3 SHARE requirements

 - SSLNGC0513631  LE - Phase 1 - Mixed 64/31-bit AMODE Toleration 
 - SSLNGC0513632  LE - Phase 2 - Mixed 64/31-bit AMODE Cooperation 
 - SSLNGC0513633  LE - Phase 3 - Full Mixed 64/31-bit Amode Support 

All 4 of these requirements are currently in the recognized response area.

***

However, because you mentioned 1985 COBOL standard, you should
know/understand that just as the '85 Standard would ALLOW for 2G+ tables, it
would also consider a COBOL compiler that only supported 32K tables (as
OS/VS COBOL did) to be conforming.

It simply does not get into maximum/minimum issues for things like this.
(Neither does the 2002 COBOL which is the only currently official COBOL
Standard, now that the '85 Standard has been superseded)

Thomas David Rivers riv...@dignus.com wrote in message
news:200901141813.n0eidnyi008...@dave.dignus.com...
 Clark Morris cfmpub...@ns.sympatico.ca wrote:
  Dave Rivers wrote:
  Just to add a quick note to that, a popular option
  for our users is to write a quick-n-dirty C function
  to handle the 64-bit data (directly callable from 31-bit
  COBOL).
  
  Since there is NOTHING in the 1985 COBOL standard, let alone the 2002
  standard that would prohibit having a 10 gigabyte table, why should
  someone have to program a work around in 2009?  How long has the z
  series had 64 bit addressing?  When did C/C++ get it?  When did DB2
  get it?  If 64 bit is good and useful for Websphere and if Websphere
  is strategic, then why can't COBOL routines run in the 64 bit
  Websphere? 
 
  Very good points
 
  I was just saying that, given realities - here's a work-around
  some people have found helpful.
 
  Of course, if we want to rail against realities - that's a different
  beastie all together :-)  And, I can completely understand it :-)
 
   - Dave Rivers -
 
 --
 riv...@dignus.comWork: (919) 676-0847
 Get your mainframe programming tools at http://www.dignus.com
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: RSU0812

2009-01-14 Thread Mark Zelden
On Wed, 14 Jan 2009 10:48:34 -0800, Gibney, Dave gib...@wsu.edu wrote:

   Is it just me, or has something delayed this? Usually I seemed to get
the email around the 8th of the month.


Holidays?   

I just received an email yesterday that the CST testing had been completed,
so it should be available soon.

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: RSU0812

2009-01-14 Thread Natarajan Mohan
It is available  for download at shopZ. I guess just e-mail didn't go out.

Natarajan   

 Gibney, Dave gib...@wsu.edu 1/14/2009 10:48 AM 
Is it just me, or has something delayed this? Usually I seemed to get
the email around the 8th of the month.

Dave Gibney
Information Technology Services
Washington State Univsersity



NOTICE OF CONFIDENTIALITY 

The information contained in this communication, including but not limited to 
any accompanying document(s) and/or attachment(s), is privileged and 
confidential and is intended solely for the above-named individual(s). If you 
are not the intended recipient, please be advised that any distribution, 
copying, disclosure, and/or use of the information contained herein is strictly 
prohibited. If you received this communication in error, please destroy all 
copies of the communication, whether in electronic or hard copy format, and 
immediately contact the Security Office at EDFUND at (916) 526-7539 or 
securityoff...@edfund.org. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Has your company outsourced to Satyam?

2009-01-14 Thread Barry Merrill
http://www.nytimes.com/2009/01/08/business/worldbusiness/08satyam.html?ref=technology
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: RSU0812

2009-01-14 Thread Barry Masuda
I downloaded RSU0812 for z/OS 1.9 on Jan. 9, 2009.

- Original Message -
From: Gibney, Dave gib...@wsu.edu
Date: Wednesday, January 14, 2009 8:49 am
Subject: RSU0812
To: IBM-MAIN@bama.ua.edu

Is it just me, or has something delayed this? 
 Usually I seemed to get
 the email around the 8th of the month.
 
 Dave Gibney
 Information Technology Services
 Washington State Univsersity
 
 -
 -
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-
 MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread Walt Farrell
On Wed, 14 Jan 2009 12:39:05 -0600, John McKown joa...@swbell.net wrote:

On Wed, 14 Jan 2009 15:07:10 -0200, Carlos Bodra cbo...@terra.com.br wrote:

...snipped...
I am not aware of any package which will do that, if this is what you mean.
COMP-3 fields are packed decimal. It is rather easy to convert these into
an integer. The number of bytes that are taken for a PIC S9(n) COMP-3 field
is (n+2)/2 and ignore the remainder. E.g. PIC S9(1) COMP-3 is 1 byte. PIC
S9(2) COMP-3 is 2 bytes, as is PIC S9(3). And so on. Now, if there is no S
in front of the 9, then the data is forced to be positive.

Some C code which can convert from COMP-3 to int:
...snipped...

Doesn't he also need to worry about big-endian vs little-endian differences
between the creating machine and the reading machine?  Or does your code
already account for that?

-- 
  Walt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: RSU0812

2009-01-14 Thread Gibney, Dave
   Now I remember the other reason I asked. I noticed RSU0812 on a hiper
I downloaded yesterday?

Yah, holidays, but almost a week?   :) 

I always download and apply check each RSU. I don't always apply and
roll out. I like to know I've got the fix ready if I need it. 

I really need to find the time to set-up the new fancy automated order
and check stuff I hear about :) Then I could just ignore it until I need
it :)

Dave Gibney
Information Technology Services
Washington State Univsersity


-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Barry Masuda
Sent: Wednesday, January 14, 2009 11:10 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: RSU0812

I downloaded RSU0812 for z/OS 1.9 on Jan. 9, 2009.

- Original Message -
From: Gibney, Dave gib...@wsu.edu
Date: Wednesday, January 14, 2009 8:49 am
Subject: RSU0812
To: IBM-MAIN@bama.ua.edu

Is it just me, or has something delayed this? 
 Usually I seemed to get
 the email around the 8th of the month.
 
 Dave Gibney
 Information Technology Services
 Washington State Univsersity
 
 -
 -
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-
 MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Chase, John
 -Original Message-
 From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach
 
 John, Do you want me to surprise you? 

You're welcome to try, but be prepared for disappointment.

 As your new president said: yes, we
 can. Sec=YES has nothing to do with the signon procedure of CICS and
 how users get identified. As you know, each terminal runs the dfltuser
 (from SIT) if no user signed on.

It is now clear to me that you understand the distinction I made between
session connection and sign-on, and that you intentionally ignore
that distinction.  Your loss.

Good day, Sir.

-jc-

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-14 Thread Chris Mason
Itschak

 I looked into the USS TAB code and found that a I can force some input 
rules, ;like blocking LOG APPLID.

Actually you can't! Recall I said it was a bit like ISTINCLM and the MODETAB 
operand. You always have the mode table entries in ISTINCLM even if you 
code a MODETAB operand. Similarly, you always have the default USS 
commands LOGON, LOGOFF and IBMTEST even if you code an USS table.

Here is a paragraph from Customizing USS tables in Unformatted system 
services (USS) tables in Chapter 5, User-defined tables and data filter in 
the 
Communications Server SNA Resource Definition Reference manual:

quote

Any changes to VTAM messages or commands should be made with 
supplementary user-defined USS tables. The IBM-supplied USS tables should 
not be changed or removed since they are used to define all commands and 
messages that are not defined in a user-written table. The name of the user-
defined USS table should be different from any of the default tables.

/quote

So, actually, I guess you could clobber the default commands by redefining 
ISTINCDT but you are really not supposed to do that! You might affect IBM's 
willingness to support you if you do clobber ISTINCDT.

You might like to read through my earlier responses again - slowly - since I 
have made this point about not being able to suppress the LOGON command 
before.

In any case, now that you know about redefining your CDRM statements and 
introducing the bare minimum of CDRSC statements, you don't need to worry 
about USS commands.

Chris Mason

On Wed, 14 Jan 2009 20:12:35 +0200, Itschak Mugzach 
imugz...@gmail.com wrote:

Hi Chris,

You answers are just exectly what I was looking for. I RTFMed a little as
well and have my ideas. For example, I looked into the USS TAB code and
found that a I can force some input rules, ;like blocking LOG APPLID. I
didn't respond as I am still learning your answer, BTW, I want to thanks all
those who responded, I learened from all, even from those that delt with my
wrong wording.

Many thanks,

Itschak

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread John McKown
On Wed, 14 Jan 2009 13:18:45 -0600, Walt Farrell wfarr...@us.ibm.com wrote:

Some C code which can convert from COMP-3 to int:
...snipped...

Doesn't he also need to worry about big-endian vs little-endian differences
between the creating machine and the reading machine?  Or does your code
already account for that?

--
  Walt

The code, as shown, will work on either a Big-endian or Small-endian
machine. That's because I process the information byte-by-byte. It does
assume that the source machine, which was stated to be z/OS, is Big-endian.

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread Mark Post
 On 1/14/2009 at 12:07 PM, Carlos Bodra cbo...@terra.com.br wrote: 
-snip-
 Since I*m no an expert in cobol or other programm language and in Linux 
 plataform, my questions are:
 
 There is any open source software or not  that can read this record and 
 resolve comp-3 fields?
 If no software availalble, any one has a sample how to read this record 
 using any linux plataform language?

There is an OpenCOBOL compiler.  It might meet your needs.
http://www.opencobol.org/


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread Mike Bell
The differences are EBCDIC vs ASCII, big endian vs little endian,  the joys
of comp-3 and the ever present joys of character stream IO vs z/os record
handling. I do not know of any utility that will handle these changes
automatically.

As described by others, it can be done on a pc, but it is by no means simple
or easy.

The best answer is to build a utility job on the main frame that will expand
all numerics to character fields. You could even do the ascii conversion ( I
know DFSORT can do all the above conversions - I am not as fast or accurate
as some others but some quality time with the manual will get you there).


Mike

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread Bernd Oppolzer
There must be a programm available somewhere for free, 
that reads a file description (sequence of fields) and 
transfers all binary and decimal fields to char fields of 
suitable length, and it also does EBCDIC / ASCII conversion. 
And: the other direction, too. 

I had it some years ago, but dont recall, where it came from. 
It was C source code. 

I used it on the mainframe, transferred the text file to the PC, 
and used the same program there, for the other direction. 

Maybe you can find it? I would try Google and look 
for EBCDIC conversion. 

Kind regards

Bernd



Am Mittwoch, 14. Januar 2009 20:18 schrieben Sie:

 Doesn't he also need to worry about big-endian vs little-endian differences
 between the creating machine and the reading machine?  Or does your code
 already account for that?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: AIX gets 64 bit COBOL but still none for Z/os ...

2009-01-14 Thread Howard Brazee
On 14 Jan 2009 10:50:31 -0800, wmkl...@ix.netcom.com (Bill Klein)
wrote:

I understand your desire for 64-bit COBOL.

I would suggest that if you WANT 64-bit COBOL, that you have your company
submit a marketing requirement and reference SHARE requirement:

What I don't get is why this is an issue for IBM - sure it would like
to get customers to pay for enhancements that those specific customers
want.But it also wants to position itself strategically for the
future.   Its marketing strength is not to disregard the past, but
show how the past and the future are integrated under one compatible
umbrella.

When various tools are no more compatible than those of multiple
vendor tools that are available for competitors - customers and
prospective customers are more likely to look elsewhere.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread Howard Brazee
If you are going EBCDIC to EBCDIC, there's no problem.   If you're
going EBCDIC to ASCII, I recommend that you do the unpacking before
the FTP or translation.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread John McKown
On Wed, 14 Jan 2009 20:37:08 +0100, Bernd Oppolzer
bernd.oppol...@t-online.de wrote:

There must be a programm available somewhere for free,
that reads a file description (sequence of fields) and
transfers all binary and decimal fields to char fields of
suitable length, and it also does EBCDIC / ASCII conversion.
And: the other direction, too.

That would be very nice!


I had it some years ago, but dont recall, where it came from.
It was C source code.

What! You lost it? crying


I used it on the mainframe, transferred the text file to the PC,
and used the same program there, for the other direction.

Maybe you can find it? I would try Google and look
for EBCDIC conversion.

Kind regards

Bernd

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread Walt Farrell
On Wed, 14 Jan 2009 13:26:20 -0600, John McKown joa...@swbell.net wrote:

The code, as shown, will work on either a Big-endian or Small-endian
machine. That's because I process the information byte-by-byte. It does
assume that the source machine, which was stated to be z/OS, is Big-endian.

Thanks; I hadn't figured that out.

One other question:  In your code you have
result=100*j+10*(*packed1)+(*packed  0x0f);

What's j?  I don't think you ever assigned a value to it.  Did you perhaps mean
result=100*result+10*(*packed1)+(*packed  0x0f);
instead?

-- 

  Walt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread John McKown
On Wed, 14 Jan 2009 12:41:58 -0700, Howard Brazee howard.bra...@cusys.edu
wrote:

If you are going EBCDIC to EBCDIC, there's no problem.   If you're
going EBCDIC to ASCII, I recommend that you do the unpacking before
the FTP or translation.


I totally agree! That is how we used to do it. Everything in the record was
converted to USAGE DISPLAY on the output file, which was then ftp'ed.

However, I gather this is not an option for the OP. For converting internal
binary (COMP) fields, I'd just use the nstoh() function in C. For converting
character fields, then iconv(). If you have HFP floating point, you're on
your own!

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread John McKown
On Wed, 14 Jan 2009 13:56:36 -0600, Walt Farrell wfarr...@us.ibm.com wrote:

On Wed, 14 Jan 2009 13:26:20 -0600, John McKown joa...@swbell.net wrote:

The code, as shown, will work on either a Big-endian or Small-endian
machine. That's because I process the information byte-by-byte. It does
assume that the source machine, which was stated to be z/OS, is Big-endian.

Thanks; I hadn't figured that out.

One other question:  In your code you have
result=100*j+10*(*packed1)+(*packed  0x0f);

What's j?  I don't think you ever assigned a value to it.  Did you perhaps mean
result=100*result+10*(*packed1)+(*packed  0x0f);
instead?


OOPS - I converted from j to result for clarity, but missed a number of
places. I've gotten too used to an IDE which will do a refactor - rename
to save me from myself. I didn't use the IDE on this simple project oops

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: System Install and Catalogs

2009-01-14 Thread Schwarz, Barry A
Since you did an install and not an upgrade, why do you want to use the
old master catalog?  What is missing from the new one that you think you
need?

-Original Message-
From: Matt Dazzo 
Sent: Wednesday, January 14, 2009 7:39 AM
To: IBM-MAIN@bama.ua.edu
Subject: System Install and Catalogs

Working on my first system upgrade 1.7 to 1.9. I selected a software
install option. I am up to and ran the RECATDS job so all the z1.9 dsn's
are in a separate z1.9 catalog that contains only the 1.9 files.

When I Ipl 1.9 I would like to use my existing (z1.7) system's master
catalog, but as it stands now it will not know about any new dataset
names on the 1.9 system. I am looking to find how other folks handle
sync'ing any new dataset names to an existing mcat or deleting names no
longer required from the 1.7 system. Manually checking file names
between the systems leaves alot of room for human error. I know IDCAMS
provides MERGECAT but I have never used it and don't know if there are
pit falls with it. Any information on how you handle this situation is
appreciated. 
 
FYI- I did add in the new omvs HFS's files as they are named uniquely.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: RSU0812

2009-01-14 Thread Jay Howard
Dave, 

   Is it just me, or has something delayed this? Usually I seemed to get
   the email around the 8th of the month.


I received my notice today:

You registered on IBM's Consolidated Service Test (CST) Web site asking 
us to notify you when we've completed testing of a new RSU.  I'm writing 
to tell you we've updated our Web site for the latest RSU service package 
tested, RSU0812.  Refer to your service deliverable (such as ShopzSeries 
or CBPDO) for RSU availability. 

Thanks, 
Jay Howard 
Savannah River Nuclear Solutions



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: C without LE [was: RE: VSM Changes in z/OS 1.10: Beta Systems Software]

2009-01-14 Thread Thomas David Rivers

Farley, Peter x23353 wrote:

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Barbara Nitz
Sent: Wednesday, January 14, 2009 12:52 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: VSM Changes in z/OS 1.10: Beta Systems Software


Snipped 


3. Beta Systems said that they have been using C (or C+ or C++ or
something)  for *years* *without* the need for LE. And I thought


*that*


was only available as MetalC starting with 1.10.



Systems Programming C (SPC) has been available as part of the regular
IBM C compiler for a long time now.  You give up access to all LE
functions and limit yourself to a defined subset of C library functions.
The startup code is not dynamic and requires static links (so does LE
startup code...), but SPC is quite functional for some purposes.

Peter




Just to add to Peter's note... Dignus Systesms/C comes with its
own runtime which is non-LE (or, via a compiler switch, it can operate
compatibly with IBM's compiler.)

Also - Systems/C will operate in a mode _very_ similar to Metal C,
always has.

- Dave Rivers -

--
riv...@dignus.comWork: (919) 676-0847
Get your mainframe programming tools at http://www.dignus.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Fw: Some kind of hint!!!

2009-01-14 Thread Bill Klein
In comp.lang.cobol when someone first comes into the world of migrating
(converting) COBOL created files, we usually point them to Michael Mattias
EXCELLENT web page at:
   http://www.talsystems.com/tsihome_html/downloads/C2IEEE.htm

The bottom-line (as others in the thread have hinted at) is that it is
difficult (not impossible) to convert both numeric and character data in
one pass.  If any of the numeric data is in other than display,
sign-is-separate format (Zoned Decimal in IBM mainframe speak) it becomes
more difficult.

There are lots of tools (none that I know of that are free) that can do
this, but the reason they are complex (and cost money) is that in the case
of records with mixed numeric (packed, binary, floating-point) and character
data, the conversion routine must be able to understand every record in
the file.  In cases where all records have the same layout AND the records
are fixed length, then a simple COBOL program can be created to do this.
(The COBOL can run on the mainframe, on Linux, on Windows - wherever you
have a COBOL compiler).

In cases where there are variable length records and multiple record layouts
within the same file, then INTELLIGENT conversion is required.  Each record
must be matched with its correct layout and  character data must be
converted (EBCDIC - ASCII) and numeric data handled correctly
(big-/little-endian, IEEE vs HFP, packed-decimal sign-nibbles, etc).

  ***

The simplest universal solution (which is almost never possible G) is to
get whoever creates the file to define all numeric fields with the COBOL
  USAGE DISPLAY SIGN IS LEADING SEPARATE
(and of course don't use any Unicode or DBCS character data)

When this is done a simple ASCII - EBCDIC conversion of the entire file
will solve everything.

When this can't/wont be done, then you MUST get the COBOL record layout or
layouts and depending on how complex they are, either create a one time
conversion program (in COBOL) or purchase a tool that will do it for you.

John McKown joa...@swbell.net wrote in message
news:listserv%200901141239054661.0...@bama.ua.edu...
 On Wed, 14 Jan 2009 15:07:10 -0200, Carlos Bodra cbo...@terra.com.br
wrote:
 
 Hi Listers, (xposted to VSE-L and OS/390 List)
 
 I need to read an IBM 3490 cartridge recorded by OS/390 program in a
 Linux system. If this works fine in intel server, I can migrate it to
 Linux under mainframe later.
 
 I have a 3490-E01 (scsi interface) connected to an  IBM x236 system.
 Until here no problem.
 
 Tape has a record type of VB (126-1295) and some fields into record are
 defined as PIC 9(xxx) comp-3. I got this from mainframe  cobol program,
 since today
 I read it in our mainframe system, using a cobol program. (read tape and
 write a pds file)
 
 Since I´m no an expert in cobol or other programm language and in Linux
 plataform, my questions are:
 
 There is any open source software or not  that can read this record and
 resolve comp-3 fields?
 
 I am not aware of any package which will do that, if this is what you
mean.
 COMP-3 fields are packed decimal. It is rather easy to convert these
into
 an integer. The number of bytes that are taken for a PIC S9(n) COMP-3
field
 is (n+2)/2 and ignore the remainder. E.g. PIC S9(1) COMP-3 is 1 byte. PIC
 S9(2) COMP-3 is 2 bytes, as is PIC S9(3). And so on. Now, if there is no S
 in front of the 9, then the data is forced to be positive.
 
 Some C code which can convert from COMP-3 to int:
 
 int toint(unsigned char* packed, int digits) {
 int bytes=(digits+2)1;
 int n=bytes-1;
 int i,j;
 int result=0;
 for (i=1;in;i++) {
 result=100*j+10*(*packed1)+(*packed  0x0f);
 packed++; /* examine next byte */
 }
 result=10*result+(*packed1);
 i=*packed  0x0f;
 if (i==11 || i==13) result=-result; /* negative sign */
 return result;
 }
 
 If no software availalble, any one has a sample how to read this record
 using any linux plataform language?
 
 I've used Java to do something similar. I must assume that you already
know
 how to read the file on tape. I don't know how to do that. But assume that
 the variable tape is the open()'ed FILE *. You must read every record
 yourself. This will be a bit complicated because the file is variable
 blocked. That means that every physical tape record consists of a BDW
(Block
 Descriptor Word), followed by one or more logical records. Each logical
 record is prefixed with a RDW (Record Descriptor Word). My, this is
getting
 complicated. The following C code should perhaps help. But I cannot test
it
 (the same as the above).
 
 #include stdio.h
 #include string.h
 #include stdlib.h
 static char buffer[32768];
 static int buf_off=32768;
 static int block_length=0;
 static int record_length=0;
 size_t doread(char *record, FILE *tape) {
 unsigned char bdw[2];
 if (buf_off = block_length) {
 block_read:;
 fread(bdw,2,1,tape); /* read 

Re: RSU0812

2009-01-14 Thread Gibney, Dave
This is the version I've yet to receive:

Dear Dave Gibney,

This e-mail has been sent by IBM to inform you that the RSU0805 and
PUT0805 service levels are now available in the z/OS service packages
orderable through ShopzSeries.



If you no longer wish to receive e-mail notification when a new service
level becomes available then follow the instructions below.
  1. Log on to ShopzSeries
  2. Click on the My profile page link in the left hand navigation
area
  3. Scroll to the bottom of the page and find the check box labeled
  Please notify me when new z/OS preventive service levels
become available,
 and uncheck that box.
  4. Click the Submit button at the bottom of that page.

ShopzSeries is a service provided by IBM US.

*
* Please do not reply to this email, as *
* it was machine generated. *
*



Dave Gibney
Information Technology Services
Washington State Univsersity


-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Jay Howard
Sent: Wednesday, January 14, 2009 11:58 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: RSU0812

Dave, 

   Is it just me, or has something delayed this? Usually I seemed to
get
   the email around the 8th of the month.


I received my notice today:

You registered on IBM's Consolidated Service Test (CST) Web site asking

us to notify you when we've completed testing of a new RSU.  I'm writing

to tell you we've updated our Web site for the latest RSU service
package 
tested, RSU0812.  Refer to your service deliverable (such as ShopzSeries

or CBPDO) for RSU availability. 

Thanks, 
Jay Howard 
Savannah River Nuclear Solutions



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Eclipse articles

2009-01-14 Thread Kirk Wolf
Also of interest may be the IBM JZOS Cookbook, which is a book and an
Eclipse project containing lots of sample code.
It only requires that you have z/OS and the (free) z/OS Java SDK along with
free open source software such as Eclipse, Spring, Ant, Apache java tools,
etc.  It is focused on using the JZOS batch launcher and toolkit (part of
the z/OS Java SDK).  The examples in the cookbook can also be used in
conjunction with the RDz IDE.

The JZOS Cookbook is one of the downloads available from the JZOS alphaworks
site:
http://www.alphaworks.ibm.com/tech/zosjavabatchtk

Questions on the cookbook or sample project can be posted to the JZOS
alphaworks forum

Kirk Wolf
Dovetailed Technologies

On Wed, Jan 14, 2009 at 8:21 AM, John McKown joa...@swbell.net wrote:

 I know this is not directly applicable. However, there may be mainframe
 shops which are using the RDz (or whatever IBM is calling it this week) IDE
 in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of
 Eclipse. These articles may help.


 http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4

 Tiny URL: http://preview.tinyurl.com/9u5phz

 --
 John

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread Kirk Wolf
The JZOS Toolkit has a set of classes that will act as field converters
for all of the COBOL and Assembler datatypes.
You can download a version from alphaWorks and run these on not only z/OS,
but PC.

Also on the JZOS alphaWorks site is a tool that will convert a COBOL
copybook (or Assembler DSECT) into a Java source class that will map an
entire record of fields.  This tool requires that you compile the COBOL
copy book using the z/OS Enterprise COBOL compiler and generate an ADATA
file.  The Java tool will use the ADATA file to build the Java source
code.   You can run the generator tool either on the mainframe or on a PC
(if you download the ADATA file).

There are examples in the latest JZOS Cookbook (available from the same
alphaworks JZOS page), including nifty Ant scripts that generate and submit
JCL generate the classes, run the examples, etc.

To run the code on a PC, you would need to download the binary records from
z/OS (or in your case, a tape).  If the records are variable length, then
you will want to preceed each record with RDWs.   There is example code in
the Cookbook that shows how to read a binary RDW-prefixed file on the PC and
process the records mapped with a Java class generated from a COBOL copy
book.

If you have questions on the tools or the Cookbook, feel free to ask then on
the JZOS alphaworks forum.

See: http://www.alphaworks.ibm.com/tech/zosjavabatchtk

FWIW - the run-time field converter classes are now part of the version of
the JZOS Toolkit that is shipped with the z/OS Java SDK.   So, there is no
reliance at runtime on unsupported alphaWorks tools (the code generated by
the alphaWorks-only tool is yours).

Kirk Wolf
Dovetailed Technologies

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Eclipse articles

2009-01-14 Thread Carlos Cordero
 
Colleagues, 
 
 
Somebody can help me to know what causes the next error at the moment to define 
an Alias in a RACF environment with z/OS V1.7 release? 
 
At the moment to send the request in command line (through the RACF command 
'define alias'); not with the idcams utility; appears the next error:
 
 
   Menu  List  Mode  Functions  Utilities  Help 
 ss 
   ISPF Command Shell   
 Enter TSO or Workstation commands below:   

 === def alias (name ('xm0007') relate ('UCATCOBD.USER'))  



 Place cursor on choice and press enter to Retrieve command 

 = re xm02028 group(admprore   
 = lu xm02028  
 = 
 = 
 = 
 = 
 = 
 = 
 = 
 IDC3018I SECURITY VERIFICATION FAILED+ 
 IDC0014I LASTCC=12 
 IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36
 ***
 
And of course, when we run the Define Alias through the idcams utility, its ok.
 
 
 
Thanks for your Help
 
 
 Date: Wed, 14 Jan 2009 15:35:02 -0600 From: k...@dovetail.com Subject: Re: 
 Eclipse articles To: IBM-MAIN@bama.ua.edu  Also of interest may be the IBM 
 JZOS Cookbook, which is a book and an Eclipse project containing lots of 
 sample code. It only requires that you have z/OS and the (free) z/OS Java 
 SDK along with free open source software such as Eclipse, Spring, Ant, 
 Apache java tools, etc. It is focused on using the JZOS batch launcher and 
 toolkit (part of the z/OS Java SDK). The examples in the cookbook can also 
 be used in conjunction with the RDz IDE.  The JZOS Cookbook is one of the 
 downloads available from the JZOS alphaworks site: 
 http://www.alphaworks.ibm.com/tech/zosjavabatchtk  Questions on the 
 cookbook or sample project can be posted to the JZOS alphaworks forum  
 Kirk Wolf Dovetailed Technologies  On Wed, Jan 14, 2009 at 8:21 AM, John 
 McKown joa...@swbell.net wrote:   I know this is not directly 
 applicable. However, there may be mainframe  shops which are using the RDz 
 (or whatever IBM is calling it this week) IDE  in addition to ISPF. RDz is 
 based on Eclipse. I've never gotten the hang of  Eclipse. These articles 
 may help.
 http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4
Tiny URL: http://preview.tinyurl.com/9u5phz   --  John   
 --  For 
 IBM-MAIN subscribe / signoff / archive access instructions,  send email to 
 lists...@bama.ua.edu with the message: GET IBM-MAIN INFO  Search the 
 archives at http://bama.ua.edu/archives/ibm-main.html   
 -- For 
 IBM-MAIN subscribe / signoff / archive access instructions, send email to 
 lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives 
 at http://bama.ua.edu/archives/ibm-main.html
_
Chatea en Messenger desde Hotmail.
http://download.live.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Def alias error in RACF

2009-01-14 Thread Carlos Cordero
 
Sorry, the subject has been changed, must be like that...
 
 Date: Wed, 14 Jan 2009 17:19:41 -0600 From: jccorde...@hotmail.com Subject: 
 Re: Eclipse articles To: IBM-MAIN@bama.ua.edu   Colleagues,
 Somebody can help me to know what causes the next error at the moment to 
 define an Alias in a RACF environment with z/OS V1.7 release?   At the 
 moment to send the request in command line (through the RACF command 'define 
 alias'); not with the idcams utility; appears the next error:   Menu List 
 Mode Functions Utilities Help 
 ss
  ISPF Command Shell Enter TSO or Workstation commands below: === def alias 
 (name ('xm0007') relate ('UCATCOBD.USER')) Place cursor on choice and press 
 enter to Retrieve command = re xm02028 group(admprore = lu xm02028 = = = 
 = = = = IDC3018I SECURITY VERIFICATION FAILED+ IDC0014I LASTCC=12 
 IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36 ***  
  And of course, when we run the Define Alias through the idcams utility, its 
 ok.Thanks for your HelpDate: Wed, 14 Jan 2009 15:35:02 -0600 
 From: k...@dovetail.com Subject: Re: Eclipse articles To: 
 IBM-MAIN@bama.ua.edu  Also of interest may be the IBM JZOS Cookbook, which 
 is a book and an Eclipse project containing lots of sample code. It only 
 requires that you have z/OS and the (free) z/OS Java SDK along with free 
 open source software such as Eclipse, Spring, Ant, Apache java tools, etc. 
 It is focused on using the JZOS batch launcher and toolkit (part of the z/OS 
 Java SDK). The examples in the cookbook can also be used in conjunction with 
 the RDz IDE.  The JZOS Cookbook is one of the downloads available from the 
 JZOS alphaworks site: http://www.alphaworks.ibm.com/tech/zosjavabatchtk  
 Questions on the cookbook or sample project can be posted to the JZOS 
 alphaworks forum  Kirk Wolf Dovetailed Technologies  On Wed, Jan 14, 
 2009 at 8:21 AM, John McKown joa...@swbell.net wrote:   I know this is 
 not directly applicable. However, there may be mainframe  shops which are 
 using the RDz (or whatever IBM is calling it this week) IDE  in addition to 
 ISPF. RDz is based on Eclipse. I've never gotten the hang of  Eclipse. 
 These articles may help.
 http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4
Tiny URL: http://preview.tinyurl.com/9u5phz   --  John   
 --  For 
 IBM-MAIN subscribe / signoff / archive access instructions,  send email to 
 lists...@bama.ua.edu with the message: GET IBM-MAIN INFO  Search the 
 archives at http://bama.ua.edu/archives/ibm-main.html   
 -- For 
 IBM-MAIN subscribe / signoff / archive access instructions, send email to 
 lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives 
 at http://bama.ua.edu/archives/ibm-main.html 
 _ Chatea en 
 Messenger desde Hotmail. http://download.live.com 
 -- For 
 IBM-MAIN subscribe / signoff / archive access instructions, send email to 
 lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives 
 at http://bama.ua.edu/archives/ibm-main.html
_
Comunícate rápido y fácil al compartir tu lista de contactos en Windows Live
http://download.live.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Def alias error in RACF

2009-01-14 Thread Steve Comstock

Carlos Cordero wrote:
 
Sorry, the subject has been changed, must be like that...
 

Date: Wed, 14 Jan 2009 17:19:41 -0600 From: jccorde...@hotmail.com Subject: Re: Eclipse articles To: IBM-MAIN@bama.ua.edu   
Colleagues,Somebody can help me to know what causes the next error at the moment to define an Alias in a RACF environment with z/OS V1.7 
release?   At the moment to send the request in command line (through the RACF command 'define alias'); not with the idcams utility; appears the next 
error:   Menu List Mode Functions Utilities Help ss ISPF Command 
Shell Enter TSO or Workstation commands below: === def alias (name ('xm0007') relate ('UCATCOBD.USER')) Place cursor on choice and press enter to 
Retrieve command = re xm02028 group(admprore = lu xm02028 = = = = = = = IDC3018I SECURITY VERIFICATION FAILED+ IDC0014I 
LASTCC=12 IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36 ***   And of course, when we run the Define Alias throug

h the idcams utility, its ok.Thanks for your HelpDate: Wed, 14 Jan 2009 15:35:02 -0600 From: k...@dovetail.com Subject: Re: Eclipse articles To: 
IBM-MAIN@bama.ua.edu  Also of interest may be the IBM JZOS Cookbook, which is a book and an Eclipse project containing lots of sample code. It only requires that you have z/OS and 
the (free) z/OS Java SDK along with free open source software such as Eclipse, Spring, Ant, Apache java tools, etc. It is focused on using the JZOS batch launcher and toolkit (part of 
the z/OS Java SDK). The examples in the cookbook can also be used in conjunction with the RDz IDE.  The JZOS Cookbook is one of the downloads available from the JZOS alphaworks 
site: http://www.alphaworks.ibm.com/tech/zosjavabatchtk  Questions on the cookbook or sample project can be posted to the JZOS alphaworks forum  Kirk Wolf 
Dovetailed Technologies  On Wed, Jan 14, 2009 at 8:21 AM, John McKown joa...@swbell.net wrote:   I know
this is not directly applicable. However, there may be mainframe  shops which are using the RDz (or whatever IBM is calling it this week) IDE  in addition to ISPF. RDz is based on 
Eclipse. I've never gotten the hang of  Eclipse. These articles may help.
http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4   Tiny URL: http://preview.tinyurl.com/9u5phz   --  
John   --  For IBM-MAIN subscribe / signoff / archive access instructions,  send email to 
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO  Search the archives at http://bama.ua.edu/archives/ibm-main.html   
-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: 
GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/i
bm-main.html _ Chatea en 
Messenger desde Hotmail. http://download.live.com 
-- For IBM-MAIN subscribe / 
signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET 
IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html

What are you using to make your email so unreadable? I
see it as one long line.


Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-393-8716
http://www.trainersfriend.com

  z/OS Application development made easier
* Our classes include
   + How things work
   + Programming examples with realistic applications
   + Starter / skeleton code
   + Complete working programs
   + Useful utilities and subroutines
   + Tips and techniques

== Check out the Trainer's Friend Store to purchase z/OS  ==
== application developer toolkits. Sample code in four==
== programming languages, JCL to Assemble or compile, ==
== bind and test. ==
==   http://www.trainersfriend.com/TTFStore/index.html==

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


IRS Mainframe Not Secure Enough

2009-01-14 Thread Kopischke, David G.
From SearchDataCenter today


IRS MAINFRAME NOT SECURE ENOUGH, GOVERNMENT REPORT SAYS
Mark Fontecchio, News Writer

The federal Government Accountability Office (GAO) has released
a report detailing information security issues at the Internal
Revenue Service (IRS), and among them are lax mainframe management
monitoring.

This isn't the first time the GAO has found issues with the IRS'
data centers and mainframes. Last year the GAO found 115 weaknesses
in information security at the IRS. To the agency's credit, 49 of
them have been fixed. But this isn't a two-year thing. There have
been information security problems at the IRS for years.


http://itknowledgeexchange.techtarget.com/mainframe-blog/irs-mainframe-n
ot-secure-enough-government-report-says/?track=NL-576ad=683880asrc=EM_
NLN_5568886uid=279318


--
This e-mail transmission may contain information that is proprietary, 
privileged and/or confidential and is intended exclusively for the person(s) to 
whom it is addressed. Any use, copying, retention or disclosure by any person 
other than the intended recipient or the intended recipient's designees is 
strictly prohibited. If you are not the intended recipient or their designee, 
please notify the sender immediately by return e-mail and delete all copies. 
OppenheimerFunds may, at its sole discretion, monitor, review, retain and/or 
disclose the content of all email communications. 
==

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread Bill Godfrey
On Wed, 14 Jan 2009 12:45:34 -0600, John McKown wrote:

On Wed, 14 Jan 2009 12:39:05 -0600, John McKown wrote:


Some C code which can convert from COMP-3 to int:

int toint(unsigned char* packed, int digits) {
int bytes=(digits+2)1;
int n=bytes-1;
int i,j;
int result=0;
for (i=1;in;i++) {
result=100*j+10*(*packed1)+(*packed  0x0f);
packed++; /* examine next byte */
}
result=10*result+(*packed1);
i=*packed  0x0f;
if (i==11 || i==13) result=-result; /* negative sign */
return result;
}


The for is wrong. It should be:

for (i=0;in;i++) {

--
John

And both of the *packed1 should be *packed4 correct?

Bill

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


BMC Mainview Batch Optimizer

2009-01-14 Thread Reza Heydarpour
Hi,

Are many sites using MBO? 
Pls feel free to Email me off list for feedback.

Regards,
Rez

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Some kind of hint!!!

2009-01-14 Thread John McKown
On Wed, 14 Jan 2009, Bill Godfrey wrote:

 On Wed, 14 Jan 2009 12:45:34 -0600, John McKown wrote:
 
 On Wed, 14 Jan 2009 12:39:05 -0600, John McKown wrote:
 
 
 Some C code which can convert from COMP-3 to int:
 
 int toint(unsigned char* packed, int digits) {
 int bytes=(digits+2)1;
 int n=bytes-1;
 int i,j;
 int result=0;
 for (i=1;in;i++) {
 result=100*j+10*(*packed1)+(*packed  0x0f);
 packed++; /* examine next byte */
 }
 result=10*result+(*packed1);
 i=*packed  0x0f;
 if (i==11 || i==13) result=-result; /* negative sign */
 return result;
 }
 
 
 The for is wrong. It should be:
 
 for (i=0;in;i++) {
 
 --
 John
 
 And both of the *packed1 should be *packed4 correct?
 
 Bill

Right. Knew I should have kept my mouth shut. Or fingers stilled, as the 
case may be.

-- 
Q: What do theoretical physicists drink beer from?
A: Ein Stein.

Maranatha!
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: BMC Mainview Batch Optimizer

2009-01-14 Thread Reza Heydarpour
Also,

What other products are being used (or are you using) to optimize batch jobs?
Are they good?
Worth the overhead? (If any)

If my CPU is 99% already with 5 BATHI (WLM SC), is it a good idea to move 2 
steps out of each job to other adspace, to run in parallel,  end up having 15 
BATHI running? 

TIA,
Rez 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: System Install and Catalogs

2009-01-14 Thread Ed Gould
 
 I never produce a new master cat
 with a new release install unless there is
 some compelling reason to do so.  My sandbox system
 has its own master cat
 so catalog compatibility can be checked there before
 deploying elsewhere.
 If you use indirect cataloging for the system resident data
 sets, the only
 thing you need to do is indirectly catalog the new
 ones.  Make note of any
 obsolete ones so you can uncatalog them once 1.9 is
 production and their is
 no chance of going back to 1.7.   When
 implementing into a test or
 production system, the catalog deltas can be applied
 there.  I know you want
 to avoid human error but the differences are usually small
 as long as you're
 not making too large of a jump in releases.  If you
 want to be picky
 (careful?), I guess some easy Rexx code code be written to
 compare LISTCAT
 output.
 
 Also, I tend to use a separate catalog for all those system
 resident data
 sets that do not start with HLQ SYS1  (eg,
 CEE).  Indirect cataloging
 works with usercats as well as with mastercats (really
 no difference).
 This was made possible by IBM providing a 'volser' parm in
 link list and LPA
 list.   Just makes for a cleaner master
 cat.
 
 HTH
 Guy Gardoit
 z/OS Systems Programmer
---SNIP--

Guy:

Interesting way of doing things and probably OK for most.
What I did (little different than you) is that I really got upset at IBM for 
coming up with foreign names like CEE (and a few others) what I did
was to rename those datasets that are really needed to sys1. Now came the fun 
part deciding which datasets needed to be renamed, what I did especially for 
cee and the stupid TSO products which I personally never used and no one I ever 
ran into used was to again rename them sys1 and not catalog them. We had a rule 
(RACF) also forbidding anyone from accessing any sys1 type datasets except 
specified ones like sys1.help and a few others. That RACF rule kept life simple 
for me a sysprog. No need to worry about cataloging datasets except new ones 
that needed to be handed out (very few in 10+ years if any). 
I didn't need to maintain the mastercat (except for a few here and there)

The good side also that I hardcoded volsers in my SMP/e Proc (and in the smpe 
zone)and it worked reasonably well. I never got to the issue of HFS's but I 
think off the top of my head I would have put a rule in RACF again for no user 
access and the only issue might be in applying maintenance so I am not sure at 
the moment how I would have addressed that.


  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: C without LE [was: RE: VSM Changes in z/OS 1.10: Beta Systems Software]

2009-01-14 Thread Ed Gould
Barbara,


I was looking at your reply and after a few hours this company rang a small 
bell in my head. I couldn't get rid of and I started to vaguely remember a 
product we got in house about 13 years ago. I think (I really could be off in 
this) that it was a product from Europe and I couldn't get it running for 
anything. My memory is poor but I think we had a vaguely similar issue but it 
was with LE and the product. They were (probably) shipping LE modules with 
their product and of course when you relinked the modules they wouldn't because 
of LE issues (module name changes??). Sorry its been years and my memory is 
vague here. I really got pissed because of this and I wrote a two page report 
to my boss taking the product to task for shipping LE modules with their 
product. We turned down their product because of that. I can only remember it 
was from Europe and had a dickens of a time because their doc was in A4 (page 
size) format and it was hell getting it converted
 to the US size. 

Ed



  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html