Re: AIX gets 64 bit COBOL but still none for Z/os ...
On Wed, 14 Jan 2009 15:32:00 +0900, Timothy Sipples e99...@jp.ibm.com wrote: Ed Gould writes: Yes there is. Just last month the *OLD* table problem popped up. User needs LARGE in storage table (10G). Her only option was to. write the file to a VSAM data set and do inquiries on it with I/O. The run time (even with CI's in memory) was about 4 hours.. She did a rough quicky assembler and it was less that 10 minutes (elapsed on both numbers). If you've got CICS, how about using a 64-bit container? This feature is available starting in CICS Transaction Server Version 3.2 (in 2007), when containers were moved above the bar. They should be quite transparent to your 31-bit application. (Just call CICS and let it do the lifting.) It's hard to say what CPU time you'd see, but my guess is it'd be closer to the 10 minute number for a comparable run. Sorry, but CICS can't help in this case. The container still needs to be constructed below the bar, so the size is restricted to what can be fitted into EDSA storage. Tom Grieve CICS Development IBM Hursley Park -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
ISPF mixed mode query
Hi all, When I to edit a DBCS string with =3.4 and E command the dataset , the DBCS characters cannot be showed correctly. Is it assume mixed mode or operation mode? How comes I use the ED my.datasets.DBCS , it shows all DBCS characters correctly. Of course, =3.2 with mixed mode option can also display the DBCS character correctly. Any help will be appreciated. thanks and regards -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
Itschak Let's see I have got your problem straight. You have two VTAM nodes, VTAMA and VTAMB. There is a CICS application running in each node, CICSA and CICSB. You want to allow CICSA to have sessions with CICSB and you want to prevent all other possible sessions between VTAMA and VTAMB, say from a terminal subordinate to VTAMA, TERMA, in session with CICSB or TSOB and from a terminal subordinate to VTAMB, TERMB, in session with CICSA or TSOA. Let us now go back to the beginning of VTAM time, or actually not quite so far back - the early '70s, before SNA even[1] - but to the late '70s when VTAM got cross-domain function from being purely single domain before - and you had to start paying for it! If you wanted actually to have a cross-domain session you needed to roll up your sleeves and get defining. First of all you needed to arrange that the SSCP of one VTAM could be in session with the SSCP of the other VTAM: In VTAMA's VTAMLST VBUILD TYPE=CDRM VTAMACDRM ISTATUS=ACTIVE,VPACING=63 the home CDRM VTAMBCDRM ISTATUS=ACTIVE,VPACING=63 one of the away CDRMs In VTAMB's VTAMLST VBUILD TYPE=CDRM VTAMACDRM ISTATUS=ACTIVE,VPACING=63 one of the away CDRMs VTAMBCDRM ISTATUS=ACTIVE,VPACING=63 the home CDRM Note how only the comments change; this allows you to use the same definition in all VTAMLSTs - as long as you omit the comments which would now become confusing! Scanning the operands of the CDRM statement today I'm guessing that these two, ISTATUS and VPACING, are the only two available when the CDRM statement was first introduced. On the principle that the default value for an operand represents the behaviour before whatever function introduced with the operand was introduced, we can see that the two important operands to which I want to draw your attention have the following values: CDRDYN=NO[2] CDRSC=REQ[3] The footnotes have the explanations of what these operands actually do. I imagine that VTAM system programmers have been habitually coding CDRDYN=YES and CDRSC=OPT for so long - copied from some redbook sample like as not - that they have forgotten that these operands have these other values with just the effect you want. Thus that's all you need to prevent all cross-domain sessions. Except that with the introduction of APPN in VTAM, CDRDYN got sort-of copied to the start options so you need to make sure that CDRDYN=NO is specified in the start options. But now you need to permit those sessions you actually want. Here's where the hard work used to come in when cross-domain was first available. However for you it's easy since there is only one session you want to allow. In VTAMA's VTAMLST VBUILD TYPE=CDRSC CICSBCDRSC CDRM=VTAMB,ISTATUS=ACTIVE In VTAMB's VTAMLST VBUILD TYPE=CDRSC CICSACDRSC CDRM=VTAMA,ISTATUS=ACTIVE Again, I can't see CDRSC statement operands other than the two I've shown being relevant. QED! And there's no need to reach for your cheque book buying products which offer no function - for you anyhow - other than VTAM provides at no extra cost.[4] If you have other systems, domains, and you want sessions to be established with those other domains with dynamic definition of CDRSCs, you need to be sure that you so specify the CDRM definitions that only VTAMB resources are restricted. For example, you will need to ensure that VTAMB's definition of the VTAMA CDRM specifies CDRSC=REQ in order to prevent TERMA from being defined as a CDRSC within VTAMB and thus is allowed to have a session with CICSB given that CICSB has a CDRSC definition within VTAMA. Chris Mason [1] Not a lot of people remember that! [2] quote Specifies whether the host CDRM is authorized to dynamically define CDRSC representations of cross-domain or cross-network resources when a session request is received from or sent to an adjacent SSCP or CP. CDRDYN=NO Causes the failure of any cross-domain or cross-network session request for a cross-domain or cross-network resource that has no predefined CDRSC entry. CDRDYN=YES Authorizes dynamic definition of cross-domain or cross-network resources by the host CDRM, eliminating the need to predefine certain CDRSCs. Both origin logical units and destination logical units can be dynamically defined. Note that for subarea nodes (HOSTSA start option is specified), the DYNLU=YES operand is meaningful only when CDRDYN=YES. Notes: 1. To allow dynamic resource definition, code CDRDYN=YES on the CDRM definition statement for the VTAM host CDRM and CDRSC=OPT on the CDRM definition statement for the owning SSCP. 2. An intermediate host can also build dynamic definitions for CDRSCs. 3. The CDRDYN start option overrides the CDRDYN operand value. You can use the MODIFY VTAMOPTS command to change the value of CDRDYN. /quote [3] quote Determines whether resources owned by the CDRM being defined by this statement can be dynamically defined at the time a
Re: VSM Changes in z/OS 1.10: Beta Systems Software
On Wed, 2009-01-14 at 06:51 +0100, Barbara Nitz wrote: ... 3. Beta Systems said that they have been using C (or C+ or C++ or something) for *years* *without* the need for LE. And I thought *that* was only available as MetalC starting with 1.10. Not displaying an (ex-)IBMers bias are you Barbara ???. I suspect Dave Rivers (amongst others probably) might be able to suggest how such a thing might be possible. Shane ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
Tony I also want to block the ability to enter logon applid command (may be by userid, even of the solution will require entering userid password). How to achive that? I doubt you can do that with USS, but I may be wrong. Interesting! This would appear to depend on how the LU was defined to VTAM. If a LOCAL statement is used, there is no avoiding the SSCPFM operand specifying SSCPFM=USS3270 (or SSCPFM=USS3275) which implies that Unformatted System Services (USS) commands will always be valid - and interpreted by VTAM's protocol conversion logic for pre/non-SNA channel- attached 3270 devices. These days this support covers OSA-ICC and the like. If an LU statement is used, following VBUILD TYPE=SWNET or VBUILD TYPE=LOCAL for example, the SSCPFM operands could be set to SSCPFM=FSS which should make it impossible to enter USS commands - I would expect although I've never tried it - any volunteers? If SSCPFM=FSS does work as a way to block the use of USS commands, in order to allow the LU to get into session, the LOGAPPL operand will be needed, perhaps to log onto a session manager application if many business applications are to be accessed. Now if you are using the Communications Server (CS) TN3270 server for access to the SNA part of the network, again USS tables can be used. However, if access is restricted with the RESTRICTAPPL statement, even if the USS table is used, the solicitor panel will (also) be used in order to validate the user with a userid and password. Again, this isn't something I've tried but this is what the description of the RESTRICTAPPL statement in the CS IP Configuration Guide tells me in Chapter 10, Accessing remote hosts using Telnet, Mapping methods, Application mapping statements. However, this may not be what Itschak wants since it is checking access in VTAMA for access to CICSB rather than checking access in VTAMB. But there is nothing to say you have to provide a USS screen to your users. Indeed, you need to code up an USS table in order to be able to present an USS message 10. If you don't code up an USS table, you will get the default commands and messages so just not having an USS message 10 has no effect on preventing the entry of a LOGON APPLID(xxx) command. A user just has to have the wit to know that he/she can enter the command even if the emulation window is blank. Actually, if he/she is SNA-3270-savvy, he/she will know to look for a stick man symbol at the lower left of the window or, strictly if the emulation faithfully follows 3270 device behaviour, to press the key combination corresponding to SysReq in order to change the symbol from a question mark to a stick man. That's why I told Itschak before that entry of LOGON APPLID(xxx) cannot be prevented by techniques in coding the USS table. However, fiddling with the SSCPFM operand is something I hadn't considered before! Note that, by coding alternative USS LOGON (and LOGOFF) commands, you do not prevent use of the default commands. It's a bit like ISTINCLM and the MODETAB operand. Chris Mason On Tue, 13 Jan 2009 18:53:37 -0500, Tony Harminc tz...@attglobal.net wrote: 2009/1/13 Itschak Mugzach imugz...@gmail.com Please have a look at this scenario: CICS of organization A is connected (LU6.2 Connection) to CICS of organization B. No problem with that. I looked into the CDRM and found some other application of organization B defined in VTAMLST of oranization A. Tried LOGON APPLID(xxx) and gpt the GMtran of org. B (if it is the default, I can travel in this CICS...). I also riched TSO logon etc. Now, I want to block (at) org b ability to get to org a applications other then the CICS connection that was agreed between Org A and B. Is this possible? Sure, but you have to code up a VTAM Session Management Exit (SME). This is described in the SNA Customization book. The summary says The session management exit is a multi-function exit that you can use to control and manage LU-LU session-related functions. You can use the exit to authorize session establishments, obtain session accounting data, and better manage SSCP and GWPATH selection. Coding a basic SME is not too difficult, but getting it to do what you want flexibly is a little harder. You could just hard code the sessions to be allowed, or those to be denied, but then if somone changes the naming conventions, you have a problem. There is at least one commercial product, Blockade For MVS, which has been around for a long time (since 1988), that manages and authorizes SNA sessions in a very flexible way based on RACF permissions, and also provides management of 3270 logons via a session manager. This was developed by Blockade, was acquired by Proginet in 2005, and has recently been acquired by Beta Systems Software. I guess I should mention that I work there... I also want to block the ability to enter logon applid command (may be by userid, even of the solution will require entering userid
Re: MVS 4 minute 'outage' (update)
We were able to recreate this problem in a controlled environment last night. A dump was taken right as the 'hang' ended. IBM's first take (more to come today) - WLM SRVCLASS=TESTONL has a RESOURCE cap. The DB2 batch job causes the cap to be reached. Because we have so many address spaces in this service class (80+ test address spaces (AS) DB2 - 2 subsystem with 11+ AS IMS - 6 subsystems with 37 AS which includes MPRs CICS - 31 regions) WLM caps all the address spaces, when it gets finished, it is time to uncap them all - then it repeats. When this SRVCLASS was set up there were many fewer address spaces using it. Time for a review. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VSM Changes in z/OS 1.10: Beta Systems Software
The IBM code fixed by PTF UK42299 is linked into and thus distributed with the ISV product. Somewhere in this thread APAR OA27291 was mentioned. I just had a look at it and I think the examples are in error. Here is an extract from it: Consider the following examples to better understand VSM behavior in z/OS 1.10 prior to this APAR compared to z/OS 1.9. The following examples assume: 1. Beginning with storage mapped as shown below. 2. The getmain will be satisfied as needed from the FQE and/or FBQE shown. DQE: Addr 0001A000 Size 1000 TCB: 009FF050 SP/K: 2/ 8 FQE: Addr 0001AC00 Size C00 TCB: 009FF050 SP/K: 2/ 8 FBQE: Addr 0001B000 Size 6000 The FQE cannot have a start address of 0001AC00 and a size of C00 if it belongs to a DQE for X'1000' bytes. It is difficult so say what is correct not knowing what GETMAIN/FREEMAIN request were done so far. I assume (from a comment further down) that it was meant to show a single GETMAIN for X'C00' bytes has been done. The corresponding CBs look like this: DQE: Addr 0001A000 Size 1000 TCB: 009FF050 SP/K: 2/ 8 FQE: Addr 0001A000 Size 400 TCB: 009FF050 SP/K: 2/ 8 FBQE: Addr 0001B000 Size 6000 Not shown in the APAR text, the corresponding CBs under z/OS V1.10 would look like this: DQE: Addr 0001A000 Size 1000 TCB: 009FF050 SP/K: 2/ 8 FQE: Addr 0001AC00 Size 400 TCB: 009FF050 SP/K: 2/ 8 FBQE: Addr 0001B000 Size 6000 The erroneous combiniation FQE: Addr 0001AC00 Size C00 TCB: 009FF050 SP/K: 2/ 8 has been copied down through all the samples. Am I missing something here? -- Peter Hunkeler Credit Suisse -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Eclipse articles
I know this is not directly applicable. However, there may be mainframe shops which are using the RDz (or whatever IBM is calling it this week) IDE in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of Eclipse. These articles may help. http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4 Tiny URL: http://preview.tinyurl.com/9u5phz -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Eclipse articles
Excellent tip! Thanks. John McKown wrote: I know this is not directly applicable. However, there may be mainframe shops which are using the RDz (or whatever IBM is calling it this week) IDE in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of Eclipse. These articles may help. http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4 Tiny URL: http://preview.tinyurl.com/9u5phz -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19, 2009 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
DFSORT ICEPRMxx z/OS 1.10 Query
Hi Folks I am installing z/OS 1.10 and I am converting my usermod for ICEAMx to the new ICEPRMxx member of parmlib. My current usermod (which I have inherited) has values for Z14=YES and Z29=YES, but I cannot find these parameters documented anywhere. I have specified Z14 and Z29 =YES in ICEPRMxx and run ICEOPT which has successfully installed the options which I can subsequently display with an ICETOOL DEFAULTS. For completeness I would like to know what these two parms control. Any pointers gratefully received. Andrew Metcalfe Barclays Bank -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
In response to a Wed, 14 Jan 2009 08:00:36 +0200 message from Itschak Mugzach imugz...@gmail.com: You seem to be mixing terminology, and possibly causing confusion, Itschak. (Though I think Chris understands what you've said and has provided some good pointers.) You start out by saying Now, there is no way to stop some one in org A to simply logon to org B CICS. Logging on to CICS is controlled by the user ID and password provided during the CICS signon processing. You go on to say: Believe me, I tried it and accessed many vtam applications. few of them where no protected well. Some of them uses default ACB names. the ability to finally logon into is depend on the level of security implemented at org B. What you're talking about there is NOT logging on to CICS but connecting to org B's system, via VTAM, and logging on to other VTAM applications they have, not CICS. I'm not disputing that you were able to do that, but I feel it's important to properly express what has happened and thus, perhaps, avoid confusion. And yes, the ability to logon to B's applications, if you can reach B via an LU2 connection, is dependent on the security implemented at B and in its applications. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
Walt, I might used worng wording, but when I said LOGON to CICS (or any other VTAM application on partner sight, I ment it. The only limit I have when Pentesting is the partner company to agree for the signon. I have seen few sites using no GMTRAN at all, so you signon to CICS with no password and get the default user auth! There are also few other VTAM applications that uses internal userid and passowrd that is stored in a file. NDM is a sumple for super user that is described in a parameter library. ITschak On Wed, Jan 14, 2009 at 4:42 PM, Walt Farrell wfarr...@us.ibm.com wrote: In response to a Wed, 14 Jan 2009 08:00:36 +0200 message from Itschak Mugzach imugz...@gmail.com: You seem to be mixing terminology, and possibly causing confusion, Itschak. (Though I think Chris understands what you've said and has provided some good pointers.) You start out by saying Now, there is no way to stop some one in org A to simply logon to org B CICS. Logging on to CICS is controlled by the user ID and password provided during the CICS signon processing. You go on to say: Believe me, I tried it and accessed many vtam applications. few of them where no protected well. Some of them uses default ACB names. the ability to finally logon into is depend on the level of security implemented at org B. What you're talking about there is NOT logging on to CICS but connecting to org B's system, via VTAM, and logging on to other VTAM applications they have, not CICS. I'm not disputing that you were able to do that, but I feel it's important to properly express what has happened and thus, perhaps, avoid confusion. And yes, the ability to logon to B's applications, if you can reach B via an LU2 connection, is dependent on the security implemented at B and in its applications. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
2074 configuration problem
I am trying to configure our new 2074s. When I boot the machine I get a message indicating that the network is unreachable. I have verified the IP address and subnet mask specifications. My network people tell me that I have to specify the gateway also but I see no place where this is specified. Any ideas? Thanks Jerry Fuchs Senior Systems Engineer Wendy's Arby's Group One Dave Thomas Blvd. Dublin, Ohio 43017 (614) 764-3594 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: MVS 4 minute 'outage' (update)
On Wed, 14 Jan 2009 06:22:51 -0600, JE Thinnes jethin...@aol.com wrote: We were able to recreate this problem in a controlled environment last night. A dump was taken right as the 'hang' ended. IBM's first take (more to come today) - WLM SRVCLASS=TESTONL has a RESOURCE cap. The DB2 batch job causes the cap to be reached. Because we have so many address spaces in this service class (80+ test address spaces (AS) DB2 - 2 subsystem with 11+ AS IMS - 6 subsystems with 37 AS which includes MPRs CICS - 31 regions) WLM caps all the address spaces, when it gets finished, it is time to uncap them all - then it repeats. When this SRVCLASS was set up there were many fewer address spaces using it. Time for a review. Strange that it would lock out CONSOLE. What else is IBM saying is going on at the time (locks held etc.)? -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:mark.zel...@zurichna.com z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: MVS 4 minute 'outage' (update)
IBM is still digesting the dump. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
System Install and Catalogs
Working on my first system upgrade 1.7 to 1.9. I selected a software install option. I am up to and ran the RECATDS job so all the z1.9 dsn's are in a separate z1.9 catalog that contains only the 1.9 files. When I Ipl 1.9 I would like to use my existing (z1.7) system's master catalog, but as it stands now it will not know about any new dataset names on the 1.9 system. I am looking to find how other folks handle sync'ing any new dataset names to an existing mcat or deleting names no longer required from the 1.7 system. Manually checking file names between the systems leaves alot of room for human error. I know IDCAMS provides MERGECAT but I have never used it and don't know if there are pit falls with it. Any information on how you handle this situation is appreciated. FYI- I did add in the new omvs HFS's files as they are named uniquely. Matt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: DFSORT ICEPRMxx z/OS 1.10 Query
Andrew Metcalfe wrote on 01/14/2009 06:36:33 AM I am installing z/OS 1.10 and I am converting my usermod for ICEAMx to the new ICEPRMxx member of parmlib. My current usermod (which I have inherited) has values for Z14=YES and Z29=YES, but I cannot find these parameters documented anywhere. I have specified Z14 and Z29 =YES in ICEPRMxx and run ICEOPT which has successfully installed the options which I can subsequently display with an ICETOOL DEFAULTS. For completeness I would like to know what these two parms control. Any pointers gratefully received. Andrew, DFSORT's Zn and Yn installation options are undocumented options that IBM can offer to customers to change the behavior of DFSORT from its normal, documented way of operating. These undocumented options are available with DFSORT's new ICEPRMxx support as well as with the old ICEMAC support. I'll send you a note offline with more information about the particular Zn options you asked about. Frank Yaeger - DFSORT Development Team (IBM) - yae...@us.ibm.com Specialties: FINDREP, WHEN=GROUP, DATASORT, ICETOOL, Symbols, Migration = DFSORT/MVS is on the Web at http://www.ibm.com/storage/dfsort/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach Walt, I might used worng wording, but when I said LOGON to CICS (or any other VTAM application on partner sight, I ment it. The only limit I have when Pentesting is the partner company to agree for the signon. I have seen few sites using no GMTRAN at all, so you signon to CICS with no password and get the default user auth! There are also few other VTAM applications that uses internal userid and passowrd that is stored in a file. NDM is a sumple for super user that is described in a parameter library. It is not possible (without some exit programming) to sign on to CICS without tendering both a user ID and a password. If a CICS region is started with DFHSIT parameter SEC=NO, then CICS itself rejects _any_ sign-on attempt (i.e., you cannot sign on at all); you're in (as the default CICS user) by virtue of having connected, and can execute any transaction defined in that region. At the VTAM level, you cannot prevent connecting to a foreign CICS except via requiring explicit CDRSC definitions, as others have already noted. Otherwise, if your VTAM can find the requested CICS, a session will be established (i.e., you will be connected). At the CICS level (i.e., once you are connected to CICS), access to the CICS region itself can be controlled via a RACF APPL profile, but that authorization is not (cannot be) checked until sign-on is attempted. This requires that CICS be started with DFHSIT parameter SEC=YES, at minimum. -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
C without LE [was: RE: VSM Changes in z/OS 1.10: Beta Systems Software]
-Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Barbara Nitz Sent: Wednesday, January 14, 2009 12:52 AM To: IBM-MAIN@bama.ua.edu Subject: Re: VSM Changes in z/OS 1.10: Beta Systems Software Snipped 3. Beta Systems said that they have been using C (or C+ or C++ or something) for *years* *without* the need for LE. And I thought *that* was only available as MetalC starting with 1.10. Systems Programming C (SPC) has been available as part of the regular IBM C compiler for a long time now. You give up access to all LE functions and limit yourself to a defined subset of C library functions. The startup code is not dynamic and requires static links (so does LE startup code...), but SPC is quite functional for some purposes. Peter This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System Install and Catalogs
I never produce a new master cat with a new release install unless there is some compelling reason to do so. My sandbox system has its own master cat so catalog compatibility can be checked there before deploying elsewhere. If you use indirect cataloging for the system resident data sets, the only thing you need to do is indirectly catalog the new ones. Make note of any obsolete ones so you can uncatalog them once 1.9 is production and their is no chance of going back to 1.7. When implementing into a test or production system, the catalog deltas can be applied there. I know you want to avoid human error but the differences are usually small as long as you're not making too large of a jump in releases. If you want to be picky (careful?), I guess some easy Rexx code code be written to compare LISTCAT output. Also, I tend to use a separate catalog for all those system resident data sets that do not start with HLQ SYS1 (eg, CEE). Indirect cataloging works with usercats as well as with mastercats (really no difference). This was made possible by IBM providing a 'volser' parm in link list and LPA list. Just makes for a cleaner master cat. HTH Guy Gardoit z/OS Systems Programmer On Wed, Jan 14, 2009 at 10:39 AM, Matt Dazzo mda...@pch.com wrote: Working on my first system upgrade 1.7 to 1.9. I selected a software install option. I am up to and ran the RECATDS job so all the z1.9 dsn's are in a separate z1.9 catalog that contains only the 1.9 files. When I Ipl 1.9 I would like to use my existing (z1.7) system's master catalog, but as it stands now it will not know about any new dataset names on the 1.9 system. I am looking to find how other folks handle sync'ing any new dataset names to an existing mcat or deleting names no longer required from the 1.7 system. Manually checking file names between the systems leaves alot of room for human error. I know IDCAMS provides MERGECAT but I have never used it and don't know if there are pit falls with it. Any information on how you handle this situation is appreciated. FYI- I did add in the new omvs HFS's files as they are named uniquely. Matt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
Please have a look at this scenario: CICS of organization A is connected (LU6.2 Connection) to CICS oforganization B. No problem with that. I looked into the CDRM and found some other application of organization B defined in VTAMLST of oranization A. Tried LOGON APPLID(xxx) and gpt the GMtran of org. B (if it is the default, I can travel in this CICS...). I also riched TSO logon etc. Now, I want to block (at) org b ability to get to org a applications other then the CICS connection that was agreed between Org A and B. Is this possible? -unsnip--- This is entirely possible and there are some commercial products that will handle this very well. Look around for a product named TPX. It used to be offered by Duquesne Systems; I think it comes from CA now, after a number of various and sundry corporate acquisitions. -- Rick -- Remember that if you’re not the lead dog, the view never changes. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: another IBM meaning for NIP
-snip-- I'm sorry I can't help myself! Many years ago, we had a quite a bit of Series/1 equipment, which was largely customer set up. Once I needed to move an attachment card from one cpu to another. As was their want, IBM charged a (nominal) fee to amend their records as to what feature was on what machine. ( remember, the customer himself [me in this case] actually performed this movement). We later got an invoice from IBM which said something like reinstallation(N.I.P) of xyz attachment card I assumed that NIP stood for some thing like Now Installed Part/Product or similar. I was later informed that no, NIP in fact stood for Non Ibm Person ( i.e. me, in this case). That, I thought, put me in my place!. Phil Steele ( still a N.I.P, but I know quite a few others... I am not alone in this regard) ---unsnip- At the risk of being sarcastic, if I were in your management chain, I'd be raising six kinds of great unholy HE** when IBM bills me for MY employee's time taking actions on MY behalf. A purely nominal fee for record updating is one thing; I'll be HANGED before I pay someone else for doing what MY employee is doing on MY payroll! -- Rick -- Remember that if you’re not the lead dog, the view never changes. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: 2074 configuration problem
If I remember correctly, it is under lan configuration, set route statements, on the 2074 CAx setup menu. I believe the default entry is for the gateway. I think this is what you would need. route -fh route add default 10.10.10.251 -hopcount 1 route add -net 10.10.10.251 -netmask 255.0.0.0 -hopcount 1 Just use your own IP addresses. I am not 100% sure as I use explicit routing to my PCs and the gateway is the second entry on the route statement. It is the only way I can limit access to the 2074s. Whenever I make changes to the IP info, I use the native TCP/IP configuration utility under OS/2. Thanks Bill Bishop Specialist Mainframe Support Group Server Development Support Toyota Motor Engineering Manufacturing North America, Inc. bill.bis...@tema.toyota.com (502) 570-6143 Jerry Fuchs jerry.fu...@wendysarbys.com Sent by: IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu 01/14/2009 10:25 AM Please respond to IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu To IBM-MAIN@bama.ua.edu cc Subject 2074 configuration problem I am trying to configure our new 2074s. When I boot the machine I get a message indicating that the network is unreachable. I have verified the IP address and subnet mask specifications. My network people tell me that I have to specify the gateway also but I see no place where this is specified. Any ideas? Thanks Jerry Fuchs Senior Systems Engineer Wendy's Arby's Group One Dave Thomas Blvd. Dublin, Ohio 43017 (614) 764-3594 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: 2074 configuration problem
It's been a long time, but I seem to recall a tab in the general IP configuration area where you defined gateways. HTH -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Jerry Fuchs Sent: Wednesday, January 14, 2009 9:22 AM To: IBM-MAIN@bama.ua.edu Subject: 2074 configuration problem I am trying to configure our new 2074s. When I boot the machine I get a message indicating that the network is unreachable. I have verified the IP address and subnet mask specifications. My network people tell me that I have to specify the gateway also but I see no place where this is specified. Any ideas? Thanks Jerry Fuchs Senior Systems Engineer Wendy's Arby's Group One Dave Thomas Blvd. Dublin, Ohio 43017 (614) 764-3594 NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System Install and Catalogs
I agree completely about manually checking catalogs leaves a lot of room for human error. Check out Alastair Gray's work for building and comparing catalogs at http://www.cbttape.org/ftp/cbt/CBT542.zip Don Imbriale -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Matt Dazzo Sent: Wednesday, January 14, 2009 10:39 AM To: IBM-MAIN@bama.ua.edu Subject: System Install and Catalogs Working on my first system upgrade 1.7 to 1.9. I selected a software install option. I am up to and ran the RECATDS job so all the z1.9 dsn's are in a separate z1.9 catalog that contains only the 1.9 files. When I Ipl 1.9 I would like to use my existing (z1.7) system's master catalog, but as it stands now it will not know about any new dataset names on the 1.9 system. I am looking to find how other folks handle sync'ing any new dataset names to an existing mcat or deleting names no longer required from the 1.7 system. Manually checking file names between the systems leaves alot of room for human error. I know IDCAMS provides MERGECAT but I have never used it and don't know if there are pit falls with it. Any information on how you handle this situation is appreciated. FYI- I did add in the new omvs HFS's files as they are named uniquely. Matt Generally, this communication is for informational purposes only and it is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. In the event you are receiving the offering materials attached below related to your interest in hedge funds or private equity, this communication may be intended as an offer or solicitation for the purchase or sale of such fund(s). All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to UK legal entities. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
Itschak I see you are there and able to respond. Since we haven't heard a Thanks Chris that exactly meets my requirements. I must assume that my purely VTAM solution using CDRM statement operands and CDRSC statements where necessary didn't somehow answer your needs. I'd rather like to know why since it's so straightforward. And, of course, I'm still trying to have you avoid any unnecessary expense! So let's try again from the beginning. CICS of organization A is connected (LU6.2 Connection) to CICS of organization B. No problem with that. Translation: There is a CICSA-CICSB set of sessions. (being LU 6.2 it will be a set of sessions rather than a single session.). Whatever measures are taken to prevent other sessions being established need to allow this set of sessions to be established. I looked into the CDRM and found some other application (probably plural applications) of organization B defined in VTAMLST of oranization A. Translation: I browsed the CDRSC (CDRM was corrected in a following post to CDRSC) major node VTAMLST member or members in the VTAMA VTAMLST library and found other CDRSC statements presumably corresponding to other applications, some of them other CICS applications. (The fact some were other CICS applications is mentioned in a following post.) Tried LOGON APPLID(xxx) and gpt the GMtran of org. B (if it is the default, I can travel in this CICS...). Translation: I succeeded in logging onto one or more CICS applications in VTAMB, CICSB, CICSB1 ..., using the names I found in the CDRSC statements and I was presented with the Good Morning messages. Assuming there is no CICS-level security imposed, I can enter transactions in these CICS applications. I also riched TSO logon etc. Translation: I also succeeded in logging onto the TSO application in VTAMB, TSOB, as far as the logon panel. And I succeeded in logging onto other applications. Now, I want to block (at) org b ability to get to org a applications other then the CICS connection that was agreed between Org A and B. Translation: Having seen what I can do as a user associated with VTAMA in accessing applications in VTAMB, I am concerned that a user associated with VTAMB can access applications in VTAMA, the VTAM with which I am working. I want to prevent a user associated with VTAMB accessing applications in VTAMA. Is this possible? Translation: None needed! Answer: Assuming you have the authority to change VTAM definitions, in the VBUILD TYPE=CDRM member in VTAMA VTAMLST, change the VTAMB CDRM statement to specify CDRSC=REQ and do *not* define any of the end-user LUs associated with, owned by, VTAMB as CDRSCs. That way none of the VTAMB end-users can initiate a session with any of the VTAMA applications - exactly what I think you want to achieve. In order still to be able to set up the CICSA-CICSB sessions, you will need to define a CDRSC in VTAMA for CICSB as CICSB CDRSC CDRM=VTAMB within a VBUILD TYPE=CDRSC member. Hitherto, I expect this CDRSC will have been defined dynamically because you specified CDRSC=OPT for VTAMB and CDRDYN=YES is in effect for your local CDRM. Walt, these are not just pointers, this is chapter and verse! To continue: I also want to block the ability to enter logon applid command (may be by userid, even of the solution will require entering userid password). How to achive that? Answer: Presumably you are talking about blocking the use of LOGON APPLID (xxx) at VTAMB for the VTAMA applications. When stated like that, this is clearly undesirable since it would prevent end-users in VTAMB accessing applications in VTAMB! Also, unless that trick of using SSCPFM=FSS works and that value can be applied to the VTAM definition, there is no way actually to prevent the use of the default USS LOGON and LOGOFF commands. If the end-users in VTAMB access SNA by means of a TN3270 server, then use of RESTRICTAPPL can impose use of a userid and password as described in the Communications Server IP Configuration Guide. What other alternatives are offered to connect to vtam applications when USS tab is displaied, other then LOG APPLID and selecting from the uss tab? I mean, is there any bypass to LOG APPLID if blocked? Translation: What other alternatives are offered to connect to VTAM applications when USS message 10 is displayed other then LOGON APPLID(xxx) *or* selecting from LOGON command aliases defined in the USS table? I mean, is there any bypass to LOGON APPLID(xxx) if blocked? Answer: Use of the interpret table can, in effect, bypass the use of commands defined in the USS table. The usual alternative to use of USS LOGON commands in order to initiate sessions from end-user LUs is to use a session manager with which a session is established by means of a LOGAPPL operand on the LU (or LOCAL) statement definition. - Now, there is no way to stop some one in org A to simply logon to org B CICS. Answer: Oh yes there is - see above.
Some kind of hint!!!
Hi Listers, (xposted to VSE-L and OS/390 List) I need to read an IBM 3490 cartridge recorded by OS/390 program in a Linux system. If this works fine in intel server, I can migrate it to Linux under mainframe later. I have a 3490-E01 (scsi interface) connected to an IBM x236 system. Until here no problem. Tape has a record type of VB (126-1295) and some fields into record are defined as PIC 9(xxx) comp-3. I got this from mainframe cobol program, since today I read it in our mainframe system, using a cobol program. (read tape and write a pds file) Since I´m no an expert in cobol or other programm language and in Linux plataform, my questions are: There is any open source software or not that can read this record and resolve comp-3 fields? If no software availalble, any one has a sample how to read this record using any linux plataform language? Thanks for comments and hints. -- Carlos Alberto Bodra VM/VSE System Consultant Sao Paulo - Brazil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: 2074 configuration problem
Jerry, After you update the LAN configuration, You would have to use function key F4 to add routing statements. This would make sure every time you reboot the information stays intact. In the screen add a default route to your gateway. route add default your-gateway-ip -hopcount 1 If I remember correctly, there should be already one example on that screen with rem in front of it (Commented out). Thanks Natarajan Jerry Fuchs jerry.fu...@wendysarbys.com 1/14/2009 7:22 AM I am trying to configure our new 2074s. When I boot the machine I get a message indicating that the network is unreachable. I have verified the IP address and subnet mask specifications. My network people tell me that I have to specify the gateway also but I see no place where this is specified. Any ideas? Thanks Jerry Fuchs Senior Systems Engineer Wendy's Arby's Group One Dave Thomas Blvd. Dublin, Ohio 43017 (614) 764-3594 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE OF CONFIDENTIALITY The information contained in this communication, including but not limited to any accompanying document(s) and/or attachment(s), is privileged and confidential and is intended solely for the above-named individual(s). If you are not the intended recipient, please be advised that any distribution, copying, disclosure, and/or use of the information contained herein is strictly prohibited. If you received this communication in error, please destroy all copies of the communication, whether in electronic or hard copy format, and immediately contact the Security Office at EDFUND at (916) 526-7539 or securityoff...@edfund.org. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VSM Changes in z/OS 1.10: Beta Systems Software
IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu wrote on 01/14/2009 08:27:05 AM: Somewhere in this thread APAR OA27291 was mentioned. I just had a look at it and I think the examples are in error. Here is an extract from it: Consider the following examples to better understand VSM behavior in z/OS 1.10 prior to this APAR compared to z/OS 1.9. The following examples assume: 1. Beginning with storage mapped as shown below. 2. The getmain will be satisfied as needed from the FQE and/or FBQE shown. DQE: Addr 0001A000 Size 1000 TCB: 009FF050 SP/K: 2/ 8 FQE: Addr 0001AC00 Size C00 TCB: 009FF050 SP/K: 2/ 8 FBQE: Addr 0001B000 Size 6000 The FQE cannot have a start address of 0001AC00 and a size of C00 if it belongs to a DQE for X'1000' bytes. It is difficult so say what is correct not knowing what GETMAIN/FREEMAIN request were done so far. I assume (from a comment further down) that it was meant to show a single GETMAIN for X'C00' bytes has been done. The corresponding CBs look like this: DQE: Addr 0001A000 Size 1000 TCB: 009FF050 SP/K: 2/ 8 FQE: Addr 0001A000 Size 400 TCB: 009FF050 SP/K: 2/ 8 FBQE: Addr 0001B000 Size 6000 Not shown in the APAR text, the corresponding CBs under z/OS V1.10 would look like this: DQE: Addr 0001A000 Size 1000 TCB: 009FF050 SP/K: 2/ 8 FQE: Addr 0001AC00 Size 400 TCB: 009FF050 SP/K: 2/ 8 FBQE: Addr 0001B000 Size 6000 The erroneous combiniation FQE: Addr 0001AC00 Size C00 TCB: 009FF050 SP/K: 2/ 8 has been copied down through all the samples. Am I missing something here? Thanks for catching that typo - it will be corrected. Five of us reviewed that APAR text, but that is the difficulty with proofreading - sometimes the brain just thinks it sees what it expects to see. Jim Mulder z/OS System Test IBM Corp. Poughkeepsie, NY -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
John, Do you want me to surprise you? As your new president said: yes, we can. Sec=YES has nothing to do with the signon procedure of CICS and how users get identified. As you know, each terminal runs the dfltuser (from SIT) if no user signed on. Its is well documented in the manuals. This is where I start when doing Pentest. Itschak On Wed, Jan 14, 2009 at 5:57 PM, Chase, John jch...@ussco.com wrote: -Original Message- From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach Walt, I might used worng wording, but when I said LOGON to CICS (or any other VTAM application on partner sight, I ment it. The only limit I have when Pentesting is the partner company to agree for the signon. I have seen few sites using no GMTRAN at all, so you signon to CICS with no password and get the default user auth! There are also few other VTAM applications that uses internal userid and passowrd that is stored in a file. NDM is a sumple for super user that is described in a parameter library. It is not possible (without some exit programming) to sign on to CICS without tendering both a user ID and a password. If a CICS region is started with DFHSIT parameter SEC=NO, then CICS itself rejects _any_ sign-on attempt (i.e., you cannot sign on at all); you're in (as the default CICS user) by virtue of having connected, and can execute any transaction defined in that region. At the VTAM level, you cannot prevent connecting to a foreign CICS except via requiring explicit CDRSC definitions, as others have already noted. Otherwise, if your VTAM can find the requested CICS, a session will be established (i.e., you will be connected). At the CICS level (i.e., once you are connected to CICS), access to the CICS region itself can be controlled via a RACF APPL profile, but that authorization is not (cannot be) checked until sign-on is attempted. This requires that CICS be started with DFHSIT parameter SEC=YES, at minimum. -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
Hi Chris, You answers are just exectly what I was looking for. I RTFMed a little as well and have my ideas. For example, I looked into the USS TAB code and found that a I can force some input rules, ;like blocking LOG APPLID. I didn't respond as I am still learning your answer, BTW, I want to thanks all those who responded, I learened from all, even from those that delt with my wrong wording. Many thanks, Itschak On Wed, Jan 14, 2009 at 7:01 PM, Chris Mason chrisma...@belgacom.netwrote: Itschak I see you are there and able to respond. Since we haven't heard a Thanks Chris that exactly meets my requirements. I must assume that my purely VTAM solution using CDRM statement operands and CDRSC statements where necessary didn't somehow answer your needs. I'd rather like to know why since it's so straightforward. And, of course, I'm still trying to have you avoid any unnecessary expense! So let's try again from the beginning. CICS of organization A is connected (LU6.2 Connection) to CICS of organization B. No problem with that. Translation: There is a CICSA-CICSB set of sessions. (being LU 6.2 it will be a set of sessions rather than a single session.). Whatever measures are taken to prevent other sessions being established need to allow this set of sessions to be established. I looked into the CDRM and found some other application (probably plural applications) of organization B defined in VTAMLST of oranization A. Translation: I browsed the CDRSC (CDRM was corrected in a following post to CDRSC) major node VTAMLST member or members in the VTAMA VTAMLST library and found other CDRSC statements presumably corresponding to other applications, some of them other CICS applications. (The fact some were other CICS applications is mentioned in a following post.) Tried LOGON APPLID(xxx) and gpt the GMtran of org. B (if it is the default, I can travel in this CICS...). Translation: I succeeded in logging onto one or more CICS applications in VTAMB, CICSB, CICSB1 ..., using the names I found in the CDRSC statements and I was presented with the Good Morning messages. Assuming there is no CICS-level security imposed, I can enter transactions in these CICS applications. I also riched TSO logon etc. Translation: I also succeeded in logging onto the TSO application in VTAMB, TSOB, as far as the logon panel. And I succeeded in logging onto other applications. Now, I want to block (at) org b ability to get to org a applications other then the CICS connection that was agreed between Org A and B. Translation: Having seen what I can do as a user associated with VTAMA in accessing applications in VTAMB, I am concerned that a user associated with VTAMB can access applications in VTAMA, the VTAM with which I am working. I want to prevent a user associated with VTAMB accessing applications in VTAMA. Is this possible? Translation: None needed! Answer: Assuming you have the authority to change VTAM definitions, in the VBUILD TYPE=CDRM member in VTAMA VTAMLST, change the VTAMB CDRM statement to specify CDRSC=REQ and do *not* define any of the end-user LUs associated with, owned by, VTAMB as CDRSCs. That way none of the VTAMB end-users can initiate a session with any of the VTAMA applications - exactly what I think you want to achieve. In order still to be able to set up the CICSA-CICSB sessions, you will need to define a CDRSC in VTAMA for CICSB as CICSB CDRSC CDRM=VTAMB within a VBUILD TYPE=CDRSC member. Hitherto, I expect this CDRSC will have been defined dynamically because you specified CDRSC=OPT for VTAMB and CDRDYN=YES is in effect for your local CDRM. Walt, these are not just pointers, this is chapter and verse! To continue: I also want to block the ability to enter logon applid command (may be by userid, even of the solution will require entering userid password). How to achive that? Answer: Presumably you are talking about blocking the use of LOGON APPLID (xxx) at VTAMB for the VTAMA applications. When stated like that, this is clearly undesirable since it would prevent end-users in VTAMB accessing applications in VTAMB! Also, unless that trick of using SSCPFM=FSS works and that value can be applied to the VTAM definition, there is no way actually to prevent the use of the default USS LOGON and LOGOFF commands. If the end-users in VTAMB access SNA by means of a TN3270 server, then use of RESTRICTAPPL can impose use of a userid and password as described in the Communications Server IP Configuration Guide. What other alternatives are offered to connect to vtam applications when USS tab is displaied, other then LOG APPLID and selecting from the uss tab? I mean, is there any bypass to LOG APPLID if blocked? Translation: What other alternatives are offered to connect to VTAM applications when USS message 10 is displayed other then LOGON APPLID(xxx) *or* selecting from LOGON command aliases defined in the USS table?
Re: AIX gets 64 bit COBOL but still none for Z/os ...
Clark Morris cfmpub...@ns.sympatico.ca wrote: Dave Rivers wrote: Just to add a quick note to that, a popular option for our users is to write a quick-n-dirty C function to handle the 64-bit data (directly callable from 31-bit COBOL). Since there is NOTHING in the 1985 COBOL standard, let alone the 2002 standard that would prohibit having a 10 gigabyte table, why should someone have to program a work around in 2009? How long has the z series had 64 bit addressing? When did C/C++ get it? When did DB2 get it? If 64 bit is good and useful for Websphere and if Websphere is strategic, then why can't COBOL routines run in the 64 bit Websphere? Very good points I was just saying that, given realities - here's a work-around some people have found helpful. Of course, if we want to rail against realities - that's a different beastie all together :-) And, I can completely understand it :-) - Dave Rivers - -- riv...@dignus.comWork: (919) 676-0847 Get your mainframe programming tools at http://www.dignus.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 15:07:10 -0200, Carlos Bodra cbo...@terra.com.br wrote: Hi Listers, (xposted to VSE-L and OS/390 List) I need to read an IBM 3490 cartridge recorded by OS/390 program in a Linux system. If this works fine in intel server, I can migrate it to Linux under mainframe later. I have a 3490-E01 (scsi interface) connected to an IBM x236 system. Until here no problem. Tape has a record type of VB (126-1295) and some fields into record are defined as PIC 9(xxx) comp-3. I got this from mainframe cobol program, since today I read it in our mainframe system, using a cobol program. (read tape and write a pds file) Since I´m no an expert in cobol or other programm language and in Linux plataform, my questions are: There is any open source software or not that can read this record and resolve comp-3 fields? I am not aware of any package which will do that, if this is what you mean. COMP-3 fields are packed decimal. It is rather easy to convert these into an integer. The number of bytes that are taken for a PIC S9(n) COMP-3 field is (n+2)/2 and ignore the remainder. E.g. PIC S9(1) COMP-3 is 1 byte. PIC S9(2) COMP-3 is 2 bytes, as is PIC S9(3). And so on. Now, if there is no S in front of the 9, then the data is forced to be positive. Some C code which can convert from COMP-3 to int: int toint(unsigned char* packed, int digits) { int bytes=(digits+2)1; int n=bytes-1; int i,j; int result=0; for (i=1;in;i++) { result=100*j+10*(*packed1)+(*packed 0x0f); packed++; /* examine next byte */ } result=10*result+(*packed1); i=*packed 0x0f; if (i==11 || i==13) result=-result; /* negative sign */ return result; } If no software availalble, any one has a sample how to read this record using any linux plataform language? I've used Java to do something similar. I must assume that you already know how to read the file on tape. I don't know how to do that. But assume that the variable tape is the open()'ed FILE *. You must read every record yourself. This will be a bit complicated because the file is variable blocked. That means that every physical tape record consists of a BDW (Block Descriptor Word), followed by one or more logical records. Each logical record is prefixed with a RDW (Record Descriptor Word). My, this is getting complicated. The following C code should perhaps help. But I cannot test it (the same as the above). #include stdio.h #include string.h #include stdlib.h static char buffer[32768]; static int buf_off=32768; static int block_length=0; static int record_length=0; size_t doread(char *record, FILE *tape) { unsigned char bdw[2]; if (buf_off = block_length) { block_read:; fread(bdw,2,1,tape); /* read the block descriptor */ block_length=bdw[1]8|bdw[2]-4; fread(bdw,2,1,tape); /* read and skip 2 bytes */ if (block_length0) { fread(buffer,block_length,1,tape); } else goto block_read; } record_length=buffer[buf_off]8|buffer[buf_off+1]-4; buf_off+=4; if (buf_off+record_lengthblock_length) return -1; if (record_length0) { memcpy(record,buffer+buf_off,record_length); } return record_length; } Note that the above copies the current logical record into your memory area. It also returns the length of the amount of data copied. The length could be zero. If the routine returns a -1, that means that there is a problem with the file (or a bug in my code). Thanks for comments and hints. -- Carlos Alberto Bodra VM/VSE System Consultant Sao Paulo - Brazil Hope this is of some use to you. -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 12:39:05 -0600, John McKown joa...@swbell.net wrote: Some C code which can convert from COMP-3 to int: int toint(unsigned char* packed, int digits) { int bytes=(digits+2)1; int n=bytes-1; int i,j; int result=0; for (i=1;in;i++) { result=100*j+10*(*packed1)+(*packed 0x0f); packed++; /* examine next byte */ } result=10*result+(*packed1); i=*packed 0x0f; if (i==11 || i==13) result=-result; /* negative sign */ return result; } The for is wrong. It should be: for (i=0;in;i++) { -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
RSU0812
Is it just me, or has something delayed this? Usually I seemed to get the email around the 8th of the month. Dave Gibney Information Technology Services Washington State Univsersity -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
AIX gets 64 bit COBOL but still none for Z/os ...
I understand your desire for 64-bit COBOL. I would suggest that if you WANT 64-bit COBOL, that you have your company submit a marketing requirement and reference SHARE requirement: SSLNGC0413607 Support 64 bit and web-oriented development in COBOL Unless you want a 64-bit COBOL that can't communicate with 31-bit COBOL, you might also want to submit marketing requirements that reference all of the following 3 SHARE requirements - SSLNGC0513631 LE - Phase 1 - Mixed 64/31-bit AMODE Toleration - SSLNGC0513632 LE - Phase 2 - Mixed 64/31-bit AMODE Cooperation - SSLNGC0513633 LE - Phase 3 - Full Mixed 64/31-bit Amode Support All 4 of these requirements are currently in the recognized response area. *** However, because you mentioned 1985 COBOL standard, you should know/understand that just as the '85 Standard would ALLOW for 2G+ tables, it would also consider a COBOL compiler that only supported 32K tables (as OS/VS COBOL did) to be conforming. It simply does not get into maximum/minimum issues for things like this. (Neither does the 2002 COBOL which is the only currently official COBOL Standard, now that the '85 Standard has been superseded) Thomas David Rivers riv...@dignus.com wrote in message news:200901141813.n0eidnyi008...@dave.dignus.com... Clark Morris cfmpub...@ns.sympatico.ca wrote: Dave Rivers wrote: Just to add a quick note to that, a popular option for our users is to write a quick-n-dirty C function to handle the 64-bit data (directly callable from 31-bit COBOL). Since there is NOTHING in the 1985 COBOL standard, let alone the 2002 standard that would prohibit having a 10 gigabyte table, why should someone have to program a work around in 2009? How long has the z series had 64 bit addressing? When did C/C++ get it? When did DB2 get it? If 64 bit is good and useful for Websphere and if Websphere is strategic, then why can't COBOL routines run in the 64 bit Websphere? Very good points I was just saying that, given realities - here's a work-around some people have found helpful. Of course, if we want to rail against realities - that's a different beastie all together :-) And, I can completely understand it :-) - Dave Rivers - -- riv...@dignus.comWork: (919) 676-0847 Get your mainframe programming tools at http://www.dignus.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RSU0812
On Wed, 14 Jan 2009 10:48:34 -0800, Gibney, Dave gib...@wsu.edu wrote: Is it just me, or has something delayed this? Usually I seemed to get the email around the 8th of the month. Holidays? I just received an email yesterday that the CST testing had been completed, so it should be available soon. Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:mark.zel...@zurichna.com z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RSU0812
It is available for download at shopZ. I guess just e-mail didn't go out. Natarajan Gibney, Dave gib...@wsu.edu 1/14/2009 10:48 AM Is it just me, or has something delayed this? Usually I seemed to get the email around the 8th of the month. Dave Gibney Information Technology Services Washington State Univsersity NOTICE OF CONFIDENTIALITY The information contained in this communication, including but not limited to any accompanying document(s) and/or attachment(s), is privileged and confidential and is intended solely for the above-named individual(s). If you are not the intended recipient, please be advised that any distribution, copying, disclosure, and/or use of the information contained herein is strictly prohibited. If you received this communication in error, please destroy all copies of the communication, whether in electronic or hard copy format, and immediately contact the Security Office at EDFUND at (916) 526-7539 or securityoff...@edfund.org. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Has your company outsourced to Satyam?
http://www.nytimes.com/2009/01/08/business/worldbusiness/08satyam.html?ref=technology -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RSU0812
I downloaded RSU0812 for z/OS 1.9 on Jan. 9, 2009. - Original Message - From: Gibney, Dave gib...@wsu.edu Date: Wednesday, January 14, 2009 8:49 am Subject: RSU0812 To: IBM-MAIN@bama.ua.edu Is it just me, or has something delayed this? Usually I seemed to get the email around the 8th of the month. Dave Gibney Information Technology Services Washington State Univsersity - - For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM- MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 12:39:05 -0600, John McKown joa...@swbell.net wrote: On Wed, 14 Jan 2009 15:07:10 -0200, Carlos Bodra cbo...@terra.com.br wrote: ...snipped... I am not aware of any package which will do that, if this is what you mean. COMP-3 fields are packed decimal. It is rather easy to convert these into an integer. The number of bytes that are taken for a PIC S9(n) COMP-3 field is (n+2)/2 and ignore the remainder. E.g. PIC S9(1) COMP-3 is 1 byte. PIC S9(2) COMP-3 is 2 bytes, as is PIC S9(3). And so on. Now, if there is no S in front of the 9, then the data is forced to be positive. Some C code which can convert from COMP-3 to int: ...snipped... Doesn't he also need to worry about big-endian vs little-endian differences between the creating machine and the reading machine? Or does your code already account for that? -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RSU0812
Now I remember the other reason I asked. I noticed RSU0812 on a hiper I downloaded yesterday? Yah, holidays, but almost a week? :) I always download and apply check each RSU. I don't always apply and roll out. I like to know I've got the fix ready if I need it. I really need to find the time to set-up the new fancy automated order and check stuff I hear about :) Then I could just ignore it until I need it :) Dave Gibney Information Technology Services Washington State Univsersity -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Barry Masuda Sent: Wednesday, January 14, 2009 11:10 AM To: IBM-MAIN@bama.ua.edu Subject: Re: RSU0812 I downloaded RSU0812 for z/OS 1.9 on Jan. 9, 2009. - Original Message - From: Gibney, Dave gib...@wsu.edu Date: Wednesday, January 14, 2009 8:49 am Subject: RSU0812 To: IBM-MAIN@bama.ua.edu Is it just me, or has something delayed this? Usually I seemed to get the email around the 8th of the month. Dave Gibney Information Technology Services Washington State Univsersity - - For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM- MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach John, Do you want me to surprise you? You're welcome to try, but be prepared for disappointment. As your new president said: yes, we can. Sec=YES has nothing to do with the signon procedure of CICS and how users get identified. As you know, each terminal runs the dfltuser (from SIT) if no user signed on. It is now clear to me that you understand the distinction I made between session connection and sign-on, and that you intentionally ignore that distinction. Your loss. Good day, Sir. -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VTAM security issue
Itschak I looked into the USS TAB code and found that a I can force some input rules, ;like blocking LOG APPLID. Actually you can't! Recall I said it was a bit like ISTINCLM and the MODETAB operand. You always have the mode table entries in ISTINCLM even if you code a MODETAB operand. Similarly, you always have the default USS commands LOGON, LOGOFF and IBMTEST even if you code an USS table. Here is a paragraph from Customizing USS tables in Unformatted system services (USS) tables in Chapter 5, User-defined tables and data filter in the Communications Server SNA Resource Definition Reference manual: quote Any changes to VTAM messages or commands should be made with supplementary user-defined USS tables. The IBM-supplied USS tables should not be changed or removed since they are used to define all commands and messages that are not defined in a user-written table. The name of the user- defined USS table should be different from any of the default tables. /quote So, actually, I guess you could clobber the default commands by redefining ISTINCDT but you are really not supposed to do that! You might affect IBM's willingness to support you if you do clobber ISTINCDT. You might like to read through my earlier responses again - slowly - since I have made this point about not being able to suppress the LOGON command before. In any case, now that you know about redefining your CDRM statements and introducing the bare minimum of CDRSC statements, you don't need to worry about USS commands. Chris Mason On Wed, 14 Jan 2009 20:12:35 +0200, Itschak Mugzach imugz...@gmail.com wrote: Hi Chris, You answers are just exectly what I was looking for. I RTFMed a little as well and have my ideas. For example, I looked into the USS TAB code and found that a I can force some input rules, ;like blocking LOG APPLID. I didn't respond as I am still learning your answer, BTW, I want to thanks all those who responded, I learened from all, even from those that delt with my wrong wording. Many thanks, Itschak -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 13:18:45 -0600, Walt Farrell wfarr...@us.ibm.com wrote: Some C code which can convert from COMP-3 to int: ...snipped... Doesn't he also need to worry about big-endian vs little-endian differences between the creating machine and the reading machine? Or does your code already account for that? -- Walt The code, as shown, will work on either a Big-endian or Small-endian machine. That's because I process the information byte-by-byte. It does assume that the source machine, which was stated to be z/OS, is Big-endian. -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On 1/14/2009 at 12:07 PM, Carlos Bodra cbo...@terra.com.br wrote: -snip- Since I*m no an expert in cobol or other programm language and in Linux plataform, my questions are: There is any open source software or not that can read this record and resolve comp-3 fields? If no software availalble, any one has a sample how to read this record using any linux plataform language? There is an OpenCOBOL compiler. It might meet your needs. http://www.opencobol.org/ Mark Post -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
The differences are EBCDIC vs ASCII, big endian vs little endian, the joys of comp-3 and the ever present joys of character stream IO vs z/os record handling. I do not know of any utility that will handle these changes automatically. As described by others, it can be done on a pc, but it is by no means simple or easy. The best answer is to build a utility job on the main frame that will expand all numerics to character fields. You could even do the ascii conversion ( I know DFSORT can do all the above conversions - I am not as fast or accurate as some others but some quality time with the manual will get you there). Mike -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
There must be a programm available somewhere for free, that reads a file description (sequence of fields) and transfers all binary and decimal fields to char fields of suitable length, and it also does EBCDIC / ASCII conversion. And: the other direction, too. I had it some years ago, but dont recall, where it came from. It was C source code. I used it on the mainframe, transferred the text file to the PC, and used the same program there, for the other direction. Maybe you can find it? I would try Google and look for EBCDIC conversion. Kind regards Bernd Am Mittwoch, 14. Januar 2009 20:18 schrieben Sie: Doesn't he also need to worry about big-endian vs little-endian differences between the creating machine and the reading machine? Or does your code already account for that? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AIX gets 64 bit COBOL but still none for Z/os ...
On 14 Jan 2009 10:50:31 -0800, wmkl...@ix.netcom.com (Bill Klein) wrote: I understand your desire for 64-bit COBOL. I would suggest that if you WANT 64-bit COBOL, that you have your company submit a marketing requirement and reference SHARE requirement: What I don't get is why this is an issue for IBM - sure it would like to get customers to pay for enhancements that those specific customers want.But it also wants to position itself strategically for the future. Its marketing strength is not to disregard the past, but show how the past and the future are integrated under one compatible umbrella. When various tools are no more compatible than those of multiple vendor tools that are available for competitors - customers and prospective customers are more likely to look elsewhere. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
If you are going EBCDIC to EBCDIC, there's no problem. If you're going EBCDIC to ASCII, I recommend that you do the unpacking before the FTP or translation. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 20:37:08 +0100, Bernd Oppolzer bernd.oppol...@t-online.de wrote: There must be a programm available somewhere for free, that reads a file description (sequence of fields) and transfers all binary and decimal fields to char fields of suitable length, and it also does EBCDIC / ASCII conversion. And: the other direction, too. That would be very nice! I had it some years ago, but dont recall, where it came from. It was C source code. What! You lost it? crying I used it on the mainframe, transferred the text file to the PC, and used the same program there, for the other direction. Maybe you can find it? I would try Google and look for EBCDIC conversion. Kind regards Bernd -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 13:26:20 -0600, John McKown joa...@swbell.net wrote: The code, as shown, will work on either a Big-endian or Small-endian machine. That's because I process the information byte-by-byte. It does assume that the source machine, which was stated to be z/OS, is Big-endian. Thanks; I hadn't figured that out. One other question: In your code you have result=100*j+10*(*packed1)+(*packed 0x0f); What's j? I don't think you ever assigned a value to it. Did you perhaps mean result=100*result+10*(*packed1)+(*packed 0x0f); instead? -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 12:41:58 -0700, Howard Brazee howard.bra...@cusys.edu wrote: If you are going EBCDIC to EBCDIC, there's no problem. If you're going EBCDIC to ASCII, I recommend that you do the unpacking before the FTP or translation. I totally agree! That is how we used to do it. Everything in the record was converted to USAGE DISPLAY on the output file, which was then ftp'ed. However, I gather this is not an option for the OP. For converting internal binary (COMP) fields, I'd just use the nstoh() function in C. For converting character fields, then iconv(). If you have HFP floating point, you're on your own! -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 13:56:36 -0600, Walt Farrell wfarr...@us.ibm.com wrote: On Wed, 14 Jan 2009 13:26:20 -0600, John McKown joa...@swbell.net wrote: The code, as shown, will work on either a Big-endian or Small-endian machine. That's because I process the information byte-by-byte. It does assume that the source machine, which was stated to be z/OS, is Big-endian. Thanks; I hadn't figured that out. One other question: In your code you have result=100*j+10*(*packed1)+(*packed 0x0f); What's j? I don't think you ever assigned a value to it. Did you perhaps mean result=100*result+10*(*packed1)+(*packed 0x0f); instead? OOPS - I converted from j to result for clarity, but missed a number of places. I've gotten too used to an IDE which will do a refactor - rename to save me from myself. I didn't use the IDE on this simple project oops -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System Install and Catalogs
Since you did an install and not an upgrade, why do you want to use the old master catalog? What is missing from the new one that you think you need? -Original Message- From: Matt Dazzo Sent: Wednesday, January 14, 2009 7:39 AM To: IBM-MAIN@bama.ua.edu Subject: System Install and Catalogs Working on my first system upgrade 1.7 to 1.9. I selected a software install option. I am up to and ran the RECATDS job so all the z1.9 dsn's are in a separate z1.9 catalog that contains only the 1.9 files. When I Ipl 1.9 I would like to use my existing (z1.7) system's master catalog, but as it stands now it will not know about any new dataset names on the 1.9 system. I am looking to find how other folks handle sync'ing any new dataset names to an existing mcat or deleting names no longer required from the 1.7 system. Manually checking file names between the systems leaves alot of room for human error. I know IDCAMS provides MERGECAT but I have never used it and don't know if there are pit falls with it. Any information on how you handle this situation is appreciated. FYI- I did add in the new omvs HFS's files as they are named uniquely. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RSU0812
Dave, Is it just me, or has something delayed this? Usually I seemed to get the email around the 8th of the month. I received my notice today: You registered on IBM's Consolidated Service Test (CST) Web site asking us to notify you when we've completed testing of a new RSU. I'm writing to tell you we've updated our Web site for the latest RSU service package tested, RSU0812. Refer to your service deliverable (such as ShopzSeries or CBPDO) for RSU availability. Thanks, Jay Howard Savannah River Nuclear Solutions -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: C without LE [was: RE: VSM Changes in z/OS 1.10: Beta Systems Software]
Farley, Peter x23353 wrote: -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Barbara Nitz Sent: Wednesday, January 14, 2009 12:52 AM To: IBM-MAIN@bama.ua.edu Subject: Re: VSM Changes in z/OS 1.10: Beta Systems Software Snipped 3. Beta Systems said that they have been using C (or C+ or C++ or something) for *years* *without* the need for LE. And I thought *that* was only available as MetalC starting with 1.10. Systems Programming C (SPC) has been available as part of the regular IBM C compiler for a long time now. You give up access to all LE functions and limit yourself to a defined subset of C library functions. The startup code is not dynamic and requires static links (so does LE startup code...), but SPC is quite functional for some purposes. Peter Just to add to Peter's note... Dignus Systesms/C comes with its own runtime which is non-LE (or, via a compiler switch, it can operate compatibly with IBM's compiler.) Also - Systems/C will operate in a mode _very_ similar to Metal C, always has. - Dave Rivers - -- riv...@dignus.comWork: (919) 676-0847 Get your mainframe programming tools at http://www.dignus.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Fw: Some kind of hint!!!
In comp.lang.cobol when someone first comes into the world of migrating (converting) COBOL created files, we usually point them to Michael Mattias EXCELLENT web page at: http://www.talsystems.com/tsihome_html/downloads/C2IEEE.htm The bottom-line (as others in the thread have hinted at) is that it is difficult (not impossible) to convert both numeric and character data in one pass. If any of the numeric data is in other than display, sign-is-separate format (Zoned Decimal in IBM mainframe speak) it becomes more difficult. There are lots of tools (none that I know of that are free) that can do this, but the reason they are complex (and cost money) is that in the case of records with mixed numeric (packed, binary, floating-point) and character data, the conversion routine must be able to understand every record in the file. In cases where all records have the same layout AND the records are fixed length, then a simple COBOL program can be created to do this. (The COBOL can run on the mainframe, on Linux, on Windows - wherever you have a COBOL compiler). In cases where there are variable length records and multiple record layouts within the same file, then INTELLIGENT conversion is required. Each record must be matched with its correct layout and character data must be converted (EBCDIC - ASCII) and numeric data handled correctly (big-/little-endian, IEEE vs HFP, packed-decimal sign-nibbles, etc). *** The simplest universal solution (which is almost never possible G) is to get whoever creates the file to define all numeric fields with the COBOL USAGE DISPLAY SIGN IS LEADING SEPARATE (and of course don't use any Unicode or DBCS character data) When this is done a simple ASCII - EBCDIC conversion of the entire file will solve everything. When this can't/wont be done, then you MUST get the COBOL record layout or layouts and depending on how complex they are, either create a one time conversion program (in COBOL) or purchase a tool that will do it for you. John McKown joa...@swbell.net wrote in message news:listserv%200901141239054661.0...@bama.ua.edu... On Wed, 14 Jan 2009 15:07:10 -0200, Carlos Bodra cbo...@terra.com.br wrote: Hi Listers, (xposted to VSE-L and OS/390 List) I need to read an IBM 3490 cartridge recorded by OS/390 program in a Linux system. If this works fine in intel server, I can migrate it to Linux under mainframe later. I have a 3490-E01 (scsi interface) connected to an IBM x236 system. Until here no problem. Tape has a record type of VB (126-1295) and some fields into record are defined as PIC 9(xxx) comp-3. I got this from mainframe cobol program, since today I read it in our mainframe system, using a cobol program. (read tape and write a pds file) Since I´m no an expert in cobol or other programm language and in Linux plataform, my questions are: There is any open source software or not that can read this record and resolve comp-3 fields? I am not aware of any package which will do that, if this is what you mean. COMP-3 fields are packed decimal. It is rather easy to convert these into an integer. The number of bytes that are taken for a PIC S9(n) COMP-3 field is (n+2)/2 and ignore the remainder. E.g. PIC S9(1) COMP-3 is 1 byte. PIC S9(2) COMP-3 is 2 bytes, as is PIC S9(3). And so on. Now, if there is no S in front of the 9, then the data is forced to be positive. Some C code which can convert from COMP-3 to int: int toint(unsigned char* packed, int digits) { int bytes=(digits+2)1; int n=bytes-1; int i,j; int result=0; for (i=1;in;i++) { result=100*j+10*(*packed1)+(*packed 0x0f); packed++; /* examine next byte */ } result=10*result+(*packed1); i=*packed 0x0f; if (i==11 || i==13) result=-result; /* negative sign */ return result; } If no software availalble, any one has a sample how to read this record using any linux plataform language? I've used Java to do something similar. I must assume that you already know how to read the file on tape. I don't know how to do that. But assume that the variable tape is the open()'ed FILE *. You must read every record yourself. This will be a bit complicated because the file is variable blocked. That means that every physical tape record consists of a BDW (Block Descriptor Word), followed by one or more logical records. Each logical record is prefixed with a RDW (Record Descriptor Word). My, this is getting complicated. The following C code should perhaps help. But I cannot test it (the same as the above). #include stdio.h #include string.h #include stdlib.h static char buffer[32768]; static int buf_off=32768; static int block_length=0; static int record_length=0; size_t doread(char *record, FILE *tape) { unsigned char bdw[2]; if (buf_off = block_length) { block_read:; fread(bdw,2,1,tape); /* read
Re: RSU0812
This is the version I've yet to receive: Dear Dave Gibney, This e-mail has been sent by IBM to inform you that the RSU0805 and PUT0805 service levels are now available in the z/OS service packages orderable through ShopzSeries. If you no longer wish to receive e-mail notification when a new service level becomes available then follow the instructions below. 1. Log on to ShopzSeries 2. Click on the My profile page link in the left hand navigation area 3. Scroll to the bottom of the page and find the check box labeled Please notify me when new z/OS preventive service levels become available, and uncheck that box. 4. Click the Submit button at the bottom of that page. ShopzSeries is a service provided by IBM US. * * Please do not reply to this email, as * * it was machine generated. * * Dave Gibney Information Technology Services Washington State Univsersity -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Jay Howard Sent: Wednesday, January 14, 2009 11:58 AM To: IBM-MAIN@bama.ua.edu Subject: Re: RSU0812 Dave, Is it just me, or has something delayed this? Usually I seemed to get the email around the 8th of the month. I received my notice today: You registered on IBM's Consolidated Service Test (CST) Web site asking us to notify you when we've completed testing of a new RSU. I'm writing to tell you we've updated our Web site for the latest RSU service package tested, RSU0812. Refer to your service deliverable (such as ShopzSeries or CBPDO) for RSU availability. Thanks, Jay Howard Savannah River Nuclear Solutions -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Eclipse articles
Also of interest may be the IBM JZOS Cookbook, which is a book and an Eclipse project containing lots of sample code. It only requires that you have z/OS and the (free) z/OS Java SDK along with free open source software such as Eclipse, Spring, Ant, Apache java tools, etc. It is focused on using the JZOS batch launcher and toolkit (part of the z/OS Java SDK). The examples in the cookbook can also be used in conjunction with the RDz IDE. The JZOS Cookbook is one of the downloads available from the JZOS alphaworks site: http://www.alphaworks.ibm.com/tech/zosjavabatchtk Questions on the cookbook or sample project can be posted to the JZOS alphaworks forum Kirk Wolf Dovetailed Technologies On Wed, Jan 14, 2009 at 8:21 AM, John McKown joa...@swbell.net wrote: I know this is not directly applicable. However, there may be mainframe shops which are using the RDz (or whatever IBM is calling it this week) IDE in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of Eclipse. These articles may help. http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4 Tiny URL: http://preview.tinyurl.com/9u5phz -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
The JZOS Toolkit has a set of classes that will act as field converters for all of the COBOL and Assembler datatypes. You can download a version from alphaWorks and run these on not only z/OS, but PC. Also on the JZOS alphaWorks site is a tool that will convert a COBOL copybook (or Assembler DSECT) into a Java source class that will map an entire record of fields. This tool requires that you compile the COBOL copy book using the z/OS Enterprise COBOL compiler and generate an ADATA file. The Java tool will use the ADATA file to build the Java source code. You can run the generator tool either on the mainframe or on a PC (if you download the ADATA file). There are examples in the latest JZOS Cookbook (available from the same alphaworks JZOS page), including nifty Ant scripts that generate and submit JCL generate the classes, run the examples, etc. To run the code on a PC, you would need to download the binary records from z/OS (or in your case, a tape). If the records are variable length, then you will want to preceed each record with RDWs. There is example code in the Cookbook that shows how to read a binary RDW-prefixed file on the PC and process the records mapped with a Java class generated from a COBOL copy book. If you have questions on the tools or the Cookbook, feel free to ask then on the JZOS alphaworks forum. See: http://www.alphaworks.ibm.com/tech/zosjavabatchtk FWIW - the run-time field converter classes are now part of the version of the JZOS Toolkit that is shipped with the z/OS Java SDK. So, there is no reliance at runtime on unsupported alphaWorks tools (the code generated by the alphaWorks-only tool is yours). Kirk Wolf Dovetailed Technologies -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Eclipse articles
Colleagues, Somebody can help me to know what causes the next error at the moment to define an Alias in a RACF environment with z/OS V1.7 release? At the moment to send the request in command line (through the RACF command 'define alias'); not with the idcams utility; appears the next error: Menu List Mode Functions Utilities Help ss ISPF Command Shell Enter TSO or Workstation commands below: === def alias (name ('xm0007') relate ('UCATCOBD.USER')) Place cursor on choice and press enter to Retrieve command = re xm02028 group(admprore = lu xm02028 = = = = = = = IDC3018I SECURITY VERIFICATION FAILED+ IDC0014I LASTCC=12 IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36 *** And of course, when we run the Define Alias through the idcams utility, its ok. Thanks for your Help Date: Wed, 14 Jan 2009 15:35:02 -0600 From: k...@dovetail.com Subject: Re: Eclipse articles To: IBM-MAIN@bama.ua.edu Also of interest may be the IBM JZOS Cookbook, which is a book and an Eclipse project containing lots of sample code. It only requires that you have z/OS and the (free) z/OS Java SDK along with free open source software such as Eclipse, Spring, Ant, Apache java tools, etc. It is focused on using the JZOS batch launcher and toolkit (part of the z/OS Java SDK). The examples in the cookbook can also be used in conjunction with the RDz IDE. The JZOS Cookbook is one of the downloads available from the JZOS alphaworks site: http://www.alphaworks.ibm.com/tech/zosjavabatchtk Questions on the cookbook or sample project can be posted to the JZOS alphaworks forum Kirk Wolf Dovetailed Technologies On Wed, Jan 14, 2009 at 8:21 AM, John McKown joa...@swbell.net wrote: I know this is not directly applicable. However, there may be mainframe shops which are using the RDz (or whatever IBM is calling it this week) IDE in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of Eclipse. These articles may help. http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4 Tiny URL: http://preview.tinyurl.com/9u5phz -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Chatea en Messenger desde Hotmail. http://download.live.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Def alias error in RACF
Sorry, the subject has been changed, must be like that... Date: Wed, 14 Jan 2009 17:19:41 -0600 From: jccorde...@hotmail.com Subject: Re: Eclipse articles To: IBM-MAIN@bama.ua.edu Colleagues, Somebody can help me to know what causes the next error at the moment to define an Alias in a RACF environment with z/OS V1.7 release? At the moment to send the request in command line (through the RACF command 'define alias'); not with the idcams utility; appears the next error: Menu List Mode Functions Utilities Help ss ISPF Command Shell Enter TSO or Workstation commands below: === def alias (name ('xm0007') relate ('UCATCOBD.USER')) Place cursor on choice and press enter to Retrieve command = re xm02028 group(admprore = lu xm02028 = = = = = = = IDC3018I SECURITY VERIFICATION FAILED+ IDC0014I LASTCC=12 IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36 *** And of course, when we run the Define Alias through the idcams utility, its ok.Thanks for your HelpDate: Wed, 14 Jan 2009 15:35:02 -0600 From: k...@dovetail.com Subject: Re: Eclipse articles To: IBM-MAIN@bama.ua.edu Also of interest may be the IBM JZOS Cookbook, which is a book and an Eclipse project containing lots of sample code. It only requires that you have z/OS and the (free) z/OS Java SDK along with free open source software such as Eclipse, Spring, Ant, Apache java tools, etc. It is focused on using the JZOS batch launcher and toolkit (part of the z/OS Java SDK). The examples in the cookbook can also be used in conjunction with the RDz IDE. The JZOS Cookbook is one of the downloads available from the JZOS alphaworks site: http://www.alphaworks.ibm.com/tech/zosjavabatchtk Questions on the cookbook or sample project can be posted to the JZOS alphaworks forum Kirk Wolf Dovetailed Technologies On Wed, Jan 14, 2009 at 8:21 AM, John McKown joa...@swbell.net wrote: I know this is not directly applicable. However, there may be mainframe shops which are using the RDz (or whatever IBM is calling it this week) IDE in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of Eclipse. These articles may help. http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4 Tiny URL: http://preview.tinyurl.com/9u5phz -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Chatea en Messenger desde Hotmail. http://download.live.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Comunícate rápido y fácil al compartir tu lista de contactos en Windows Live http://download.live.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Def alias error in RACF
Carlos Cordero wrote: Sorry, the subject has been changed, must be like that... Date: Wed, 14 Jan 2009 17:19:41 -0600 From: jccorde...@hotmail.com Subject: Re: Eclipse articles To: IBM-MAIN@bama.ua.edu Colleagues,Somebody can help me to know what causes the next error at the moment to define an Alias in a RACF environment with z/OS V1.7 release? At the moment to send the request in command line (through the RACF command 'define alias'); not with the idcams utility; appears the next error: Menu List Mode Functions Utilities Help ss ISPF Command Shell Enter TSO or Workstation commands below: === def alias (name ('xm0007') relate ('UCATCOBD.USER')) Place cursor on choice and press enter to Retrieve command = re xm02028 group(admprore = lu xm02028 = = = = = = = IDC3018I SECURITY VERIFICATION FAILED+ IDC0014I LASTCC=12 IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36 *** And of course, when we run the Define Alias throug h the idcams utility, its ok.Thanks for your HelpDate: Wed, 14 Jan 2009 15:35:02 -0600 From: k...@dovetail.com Subject: Re: Eclipse articles To: IBM-MAIN@bama.ua.edu Also of interest may be the IBM JZOS Cookbook, which is a book and an Eclipse project containing lots of sample code. It only requires that you have z/OS and the (free) z/OS Java SDK along with free open source software such as Eclipse, Spring, Ant, Apache java tools, etc. It is focused on using the JZOS batch launcher and toolkit (part of the z/OS Java SDK). The examples in the cookbook can also be used in conjunction with the RDz IDE. The JZOS Cookbook is one of the downloads available from the JZOS alphaworks site: http://www.alphaworks.ibm.com/tech/zosjavabatchtk Questions on the cookbook or sample project can be posted to the JZOS alphaworks forum Kirk Wolf Dovetailed Technologies On Wed, Jan 14, 2009 at 8:21 AM, John McKown joa...@swbell.net wrote: I know this is not directly applicable. However, there may be mainframe shops which are using the RDz (or whatever IBM is calling it this week) IDE in addition to ISPF. RDz is based on Eclipse. I've never gotten the hang of Eclipse. These articles may help. http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4 Tiny URL: http://preview.tinyurl.com/9u5phz -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/i bm-main.html _ Chatea en Messenger desde Hotmail. http://download.live.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html What are you using to make your email so unreadable? I see it as one long line. Kind regards, -Steve Comstock The Trainer's Friend, Inc. 303-393-8716 http://www.trainersfriend.com z/OS Application development made easier * Our classes include + How things work + Programming examples with realistic applications + Starter / skeleton code + Complete working programs + Useful utilities and subroutines + Tips and techniques == Check out the Trainer's Friend Store to purchase z/OS == == application developer toolkits. Sample code in four== == programming languages, JCL to Assemble or compile, == == bind and test. == == http://www.trainersfriend.com/TTFStore/index.html== -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
IRS Mainframe Not Secure Enough
From SearchDataCenter today IRS MAINFRAME NOT SECURE ENOUGH, GOVERNMENT REPORT SAYS Mark Fontecchio, News Writer The federal Government Accountability Office (GAO) has released a report detailing information security issues at the Internal Revenue Service (IRS), and among them are lax mainframe management monitoring. This isn't the first time the GAO has found issues with the IRS' data centers and mainframes. Last year the GAO found 115 weaknesses in information security at the IRS. To the agency's credit, 49 of them have been fixed. But this isn't a two-year thing. There have been information security problems at the IRS for years. http://itknowledgeexchange.techtarget.com/mainframe-blog/irs-mainframe-n ot-secure-enough-government-report-says/?track=NL-576ad=683880asrc=EM_ NLN_5568886uid=279318 -- This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended exclusively for the person(s) to whom it is addressed. Any use, copying, retention or disclosure by any person other than the intended recipient or the intended recipient's designees is strictly prohibited. If you are not the intended recipient or their designee, please notify the sender immediately by return e-mail and delete all copies. OppenheimerFunds may, at its sole discretion, monitor, review, retain and/or disclose the content of all email communications. == -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009 12:45:34 -0600, John McKown wrote: On Wed, 14 Jan 2009 12:39:05 -0600, John McKown wrote: Some C code which can convert from COMP-3 to int: int toint(unsigned char* packed, int digits) { int bytes=(digits+2)1; int n=bytes-1; int i,j; int result=0; for (i=1;in;i++) { result=100*j+10*(*packed1)+(*packed 0x0f); packed++; /* examine next byte */ } result=10*result+(*packed1); i=*packed 0x0f; if (i==11 || i==13) result=-result; /* negative sign */ return result; } The for is wrong. It should be: for (i=0;in;i++) { -- John And both of the *packed1 should be *packed4 correct? Bill -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
BMC Mainview Batch Optimizer
Hi, Are many sites using MBO? Pls feel free to Email me off list for feedback. Regards, Rez -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Some kind of hint!!!
On Wed, 14 Jan 2009, Bill Godfrey wrote: On Wed, 14 Jan 2009 12:45:34 -0600, John McKown wrote: On Wed, 14 Jan 2009 12:39:05 -0600, John McKown wrote: Some C code which can convert from COMP-3 to int: int toint(unsigned char* packed, int digits) { int bytes=(digits+2)1; int n=bytes-1; int i,j; int result=0; for (i=1;in;i++) { result=100*j+10*(*packed1)+(*packed 0x0f); packed++; /* examine next byte */ } result=10*result+(*packed1); i=*packed 0x0f; if (i==11 || i==13) result=-result; /* negative sign */ return result; } The for is wrong. It should be: for (i=0;in;i++) { -- John And both of the *packed1 should be *packed4 correct? Bill Right. Knew I should have kept my mouth shut. Or fingers stilled, as the case may be. -- Q: What do theoretical physicists drink beer from? A: Ein Stein. Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: BMC Mainview Batch Optimizer
Also, What other products are being used (or are you using) to optimize batch jobs? Are they good? Worth the overhead? (If any) If my CPU is 99% already with 5 BATHI (WLM SC), is it a good idea to move 2 steps out of each job to other adspace, to run in parallel, end up having 15 BATHI running? TIA, Rez -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System Install and Catalogs
I never produce a new master cat with a new release install unless there is some compelling reason to do so. My sandbox system has its own master cat so catalog compatibility can be checked there before deploying elsewhere. If you use indirect cataloging for the system resident data sets, the only thing you need to do is indirectly catalog the new ones. Make note of any obsolete ones so you can uncatalog them once 1.9 is production and their is no chance of going back to 1.7. When implementing into a test or production system, the catalog deltas can be applied there. I know you want to avoid human error but the differences are usually small as long as you're not making too large of a jump in releases. If you want to be picky (careful?), I guess some easy Rexx code code be written to compare LISTCAT output. Also, I tend to use a separate catalog for all those system resident data sets that do not start with HLQ SYS1 (eg, CEE). Indirect cataloging works with usercats as well as with mastercats (really no difference). This was made possible by IBM providing a 'volser' parm in link list and LPA list. Just makes for a cleaner master cat. HTH Guy Gardoit z/OS Systems Programmer ---SNIP-- Guy: Interesting way of doing things and probably OK for most. What I did (little different than you) is that I really got upset at IBM for coming up with foreign names like CEE (and a few others) what I did was to rename those datasets that are really needed to sys1. Now came the fun part deciding which datasets needed to be renamed, what I did especially for cee and the stupid TSO products which I personally never used and no one I ever ran into used was to again rename them sys1 and not catalog them. We had a rule (RACF) also forbidding anyone from accessing any sys1 type datasets except specified ones like sys1.help and a few others. That RACF rule kept life simple for me a sysprog. No need to worry about cataloging datasets except new ones that needed to be handed out (very few in 10+ years if any). I didn't need to maintain the mastercat (except for a few here and there) The good side also that I hardcoded volsers in my SMP/e Proc (and in the smpe zone)and it worked reasonably well. I never got to the issue of HFS's but I think off the top of my head I would have put a rule in RACF again for no user access and the only issue might be in applying maintenance so I am not sure at the moment how I would have addressed that. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: C without LE [was: RE: VSM Changes in z/OS 1.10: Beta Systems Software]
Barbara, I was looking at your reply and after a few hours this company rang a small bell in my head. I couldn't get rid of and I started to vaguely remember a product we got in house about 13 years ago. I think (I really could be off in this) that it was a product from Europe and I couldn't get it running for anything. My memory is poor but I think we had a vaguely similar issue but it was with LE and the product. They were (probably) shipping LE modules with their product and of course when you relinked the modules they wouldn't because of LE issues (module name changes??). Sorry its been years and my memory is vague here. I really got pissed because of this and I wrote a two page report to my boss taking the product to task for shipping LE modules with their product. We turned down their product because of that. I can only remember it was from Europe and had a dickens of a time because their doc was in A4 (page size) format and it was hell getting it converted to the US size. Ed -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html