Heartland Payment Systems: Largest Data Breach in History?

2009-01-21 Thread Timothy Sipples
There's a disturbing story about another data security breach, this one at
Heartland Payment Systems, the #6 card processor in the United States.
Here's the Washington Post's story:

http://voices.washingtonpost.com/securityfix/2009/01/payment_processor_breach_may_b.html

AP, Reuters, and all the other major news outlets are carrying the story,
too. It appears this breach is the largest ever reported. Full details on
the incident are not yet available, but it appears to be yet another case
of malware insertion into one or more Microsoft Windows servers, server(s)
involved in credit and debit card processing. Heartland acknowledges they
only found out about the breach until well after the fact, and only from
Visa and Mastercard which both spotted suspicious transactions. (Heartland
claims the breach only compromised credit card numbers and names, but
that doesn't fully square with the fact there are suspicious transactions.
Hopefully we'll learn more.)

Heartland has set up a Web site with information concerning the breach:

http://www.2008breach.com

but apparently they don't have sufficiently scalable Web architecture -- I
haven't been able to get through to that Web site for several hours. Their
main company Web site (Windows-based, according to netcraft.com) is also
impossible to access at present. Heartland filed an 8-K with the Securities
and Exchange Commission concerning this incident.

The general profile of this incident is eerily similar to the Cardsystems
incident in 2005, only bigger.

It's probably worth mentioning (again) the IT industry's unique system
integrity statement, available exclusively with z/OS:

http://www-03.ibm.com/servers/eserver/zseries/zos/racf/zos_integrity_statement.html

- - - - -
Timothy Sipples
IBM Consulting Enterprise Software Architect
Based in Tokyo, Serving IBM Japan / Asia-Pacific
E-Mail: timothy.sipp...@us.ibm.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Heartland Payment Systems: Largest Data Breach in History?

2009-01-21 Thread Martin Packer
If it doesn't scale maybe the damage is limited. :-) Or maybe it takes 
just one transaction to be a DoS attack. :-)

I know, I know, one shouldn't mock... :-)

Martin Packer
Performance Consultant
IBM United Kingdom Ltd
+44-20-8832-5167
+44-7802-245-584

email: martin_pac...@uk.ibm.com

Twitter ID: MartinPacker

They're figuring out that collaboration isn't a productivity hit, it 
makes them smarter. Sam Palmisano on BlogCentral, 26 November 2008





Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU






--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Hunkeler Peter (KIUK 3)
Swoyer makes some good observations ...

I guess we all know where this leads to. Look at Windoze. If 
anything goes wrong, you're lost. The support people ask you
to first try rebooting and see if it helps..., then we'll
have to do a reinstall

I'm not saying, that making products easier to install and
operate is bad. But, and I think this is the dangerous pitfall
is to believe it makes professionals obsolete. After all,
this is what marketing promisses to management.

Management would be well advised to start today recruiting
and educating new people in the mainframe business. 

My $0.02

-- 
Peter Hunkeler
Credit Suisse

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread R.S.

John Kington wrote:

Are you haevy user of GDGs created *more frequently* than daily?


 
We run a batch job to copy off smf and ims log data whenever a switch 
occurs. Just our kind of normal.


Well... I do use GDG for SMF, but I create one generation a day and use 
DISP=MOD for further offloads.
BTW: In your scenario you don't know how old data do you have! The data 
can be rolled off depending on the amount, not depending on age.


--
Radoslaw Skorupka
Lodz, Poland


--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl

Sd Rejonowy dla m. st. Warszawy 
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, 
nr rejestru przedsibiorców KRS 025237

NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2008 r. kapita zakadowy BRE Banku SA  wynosi 
118.642.672 zote i zosta w caoci wpacony.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


USS file sharing in z/OS - Version Ugrade

2009-01-21 Thread Cwi Jeret
We have Implemented Shared HFS in Our Sysplex with 4 Members , 
a few months ago.

Now, we want to upgrade the SYSTEM of 1 of the 4 members of 
the sysplex with an Updated ROOT ,as part of Maintenace service for that 
system , but leaving the 3 other members in the old state.

As reccomended in UNIX System Services Planning in Chapter :
7.6.2 Adding a system-specific or version root file system to your shared file 
system configuration
we added the new ROOT as a new Version to the file system .
This new root will be the default root for the upgraded system after IPL .

The problem is that File Systems mounted currently with their Mountpoint on 
the Old Root , prevent these File Systems to mount their Mountpoint on the 
New Root for the Upgraded SYSTEM.
In this situation we cannot run the Applications running these File systems
on the Upgraded member of the SYSPLEX

Does anyone know a solution for this problem ?

Cwi Jeret 
Bank-Hapoalim T.A
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Ted MacNEIL
Well... I do use GDG for SMF, but I create one generation a day and use 
DISP=MOD for further offloads.

Risky choice.
What happens if the offloading job fails for some reason?
You could lose all the accumulated data.


BTW: In your scenario you don't know how old data do you have! The data can be 
rolled off depending on the amount, not depending on age.

Do you expect your SMF data to be dumped more than 255 times a day?
The key is to switch at midnight, consolidate, and then delete the day's dumps.

-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread R.S.

Ted MacNEIL wrote:

Well... I do use GDG for SMF, but I create one generation a day and use 
DISP=MOD for further offloads.


Risky choice.
What happens if the offloading job fails for some reason?
You could lose all the accumulated data.

Why ?
The only problem that can occur is lost record segment (VBS format). It 
can be easily fixed. BTW: my datasets are never filled up - multivolume, 
ext-PS, space constraint relief, reduce space allocation...




BTW: In your scenario you don't know how old data do you have! The data can be 
rolled off depending on the amount, not depending on age.


Do you expect your SMF data to be dumped more than 255 times a day?
The key is to switch at midnight, consolidate, and then delete the day's dumps.

Sounds better.


--
Radoslaw Skorupka
Lodz, Poland


--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl

Sąd Rejonowy dla m. st. Warszawy 
XII Wydział Gospodarczy Krajowego Rejestru Sądowego, 
nr rejestru przedsiębiorców KRS 025237

NIP: 526-021-50-88
Według stanu na dzień 01.01.2008 r. kapitał zakładowy BRE Banku SA  wynosi 
118.642.672 złote i został w całości wpłacony.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Controlling use of MSU's with WLM

2009-01-21 Thread Dick de Groot
Thanks for the information, Thats right i would like to be sure that Cics
gets the necessary MSU's if the machine is software capped.

2009/1/20 Kelman, Tom thomas.kel...@commercebank.com

 Except that the CPU service units used in controlling resource groups
 are the hardware service units.  I believe that the original poster
 wants to define based on the software MSUs used for sub-capacity
 pricing.  It just appears to me that he's trying to control software
 costs.  That's just a guess since it wasn't specified.  As of right now
 one cannot define resource groups in terms of software MSUs.

 Tom Kelman
 Enterprise Capacity Planner
 Commerce Bank of Kansas City
 (816) 760-7632
  -Original Message-
  From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
  Behalf Of Ted MacNEIL
  Sent: Tuesday, January 20, 2009 11:06 AM
  To: IBM-MAIN@bama.ua.edu
  Subject: Re: Controlling use of MSU's with WLM
 
  You can use resource groups for percentage of LPAR share but I would
 like
  to do it on MSU value.
 
  Unless they changed it, since I've last been involved with WLM,
 resource
  groups are defined as unnormalised CPU service units.
  Since MSU stands for 'Millions of Service Units', I'll leave the
  calculation up to the student. (8-{]}
 
  -
  Too busy driving to stop for gas!
 
  --
  For IBM-MAIN subscribe / signoff / archive access instructions,
  send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
  Search the archives at http://bama.ua.edu/archives/ibm-main.html



 *
 If you wish to communicate securely with Commerce Bank and its
 affiliates, you must log into your account under Online Services at
 http://www.commercebank.com or use the Commerce Bank Secure
 Email Message Center at https://securemail.commercebank.com

 NOTICE: This electronic mail message and any attached files are
 confidential. The information is exclusively for the use of the
 individual or entity intended as the recipient. If you are not
 the intended recipient, any use, copying, printing, reviewing,
 retention, disclosure, distribution or forwarding of the message
 or any attached file is not authorized and is strictly prohibited.
 If you have received this electronic mail message in error, please
 advise the sender by reply electronic mail immediately and
 permanently delete the original transmission, any attachments
 and any copies of this message from your computer system.

 *

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html




-- 
Met vriendelijke groeten/With kind regards

Dick de Groot

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Unix File names EKM and dates

2009-01-21 Thread Hunkeler Peter (KIUK 3)
[snip] In our case, I have turned off all AUDIT
recording except for errors, and made the metadata.xml 
files 8 MB, [snip]

Out of interest, what do you mean you made the metadata.xml
files 8 MB? You don't allocate storage when you create
a UNIX file. It grows as programs write to it.



I've got some offline communication with Lizette and from that
I conclude that even in a sysplex shared file system environment
each EKM instance will need its own home directory to store such
data as the metadata.xml, the audit log, the debug files. 

If this is correct, one will need to treat the EKM home
like /etc, /var, /tmp, so there is no need to have one config
file per EKM instance. It seems that all may access 
identically named files (symlinks as per my previous suggestion)
in their respective home.

-- 
Peter Hunkeler
Credit Suisse

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: 3278 device Hardware support

2009-01-21 Thread Shmuel Metz (Seymour J.)
In listserv%200901151738575340.0...@bama.ua.edu, on 01/15/2009
   at 05:38 PM, Patrick O'Keefe patrick.oke...@wamu.net said:

Others have answered yesfor what you are probably asking.
z/OS still apparently supports the device (i.e. device types 3277  and
3791, I think) 

No, 3277 and 3791 are older devices than the 3278. But AFAIK the 3277 and
3278 are still supported. I'd advice specifying the 3278 as a generic 3270
to give you more flexibility.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: MODIFY VTAMOPTS,TCPNAME=

2009-01-21 Thread Chris Mason
Luke

Ah! Self-imposed FUD!

Since I saw this only because I review archives, I didn't respond immediately. 
If I had I would have asked why you wanted to bother changing the TCPNAME 
parameter to unspecified, i.e. *BLANKS* as unspecified is presented in the 
DISPLAY VTAMOPTS messages.

Although, as Pat pointed out, VTAM bends over backwards - possibly only 
from V1R8 since there are massive additional notes following the TCPNAME 
start option description in the Resource Definition Reference manual of this 
release with revision bars - in order to pick up the slightest hint as to where 
to find an Enterprise Extender static VIPA, the clearest way to define the 
interaction between the two sides of the Communications Server (CS) 
product, SNA (VTAM) and IP, on the VTAM side for Enterprise Extender 
support is as follows:

1. Specify the CS IP instance address space name with the TCPNAME start 
option, a mandatory step if you have a CINET environment even if you are 
running only one such address space at the time you try to activate the 
Enterprise Extender lines[1].

2. Specify either the IPADDR or HOSTNAME operand on the XCA major node 
GROUP statement in order to identify the local static VIPA supported by the 
CS IP address space identified in the TCPNAME start option.

The TCPNAME start option has no other purpose in life and so there is no harm 
in having it specified, correctly if you really need Enterprise Extender or 
whatever you like - excluding not being specified at all it would appear - if 
you 
are not proposing to use Enterprise Extender.

Note that Enterprise Extender definitions have evolved over the years/MVS 
releases, and what I propose is not the only way to define those 
operands/start options but it is the best practice today - and, with any luck, 
will stay best practice.  

One - perhaps optimistic - way to approach the matter is to regard the fact 
the VTAM developers have not bothered to allow you to blank out the 
TCPNAME start option as indeed confirmation that a bogus, as Pat put it, 
name cannot do any harm - assuming, of course, you don't actually need to 
run Enterprise Extender.

[1] Where I work from time to time, today included as it happens, I tried to 
introduce Enterprise Extender support *without* specifying the TCPNAME 
operand. My understanding at the time was that, if there was only one CS IP 
address space running, it would be selected automatically. Wrong! VTAM is 
not clever enough to be quite so flexible! The idea that the TCPNAME operand 
might not need to be specified was taken from my notes on the topic which 
were composed back in 2001 and which - I am obliged to believe! - was true 
at the time, probably at the OS/390 V2R10 level of Communications Server.

Chris Mason

On Tue, 20 Jan 2009 15:07:37 -0600, Rabbe, Luke 
luke.ra...@countryfinancial.com wrote:

I guess I don't know the complete effect of setting this value.  If
there's a chance that setting it could disrupt our network I wanted to
be able to change it back.

Luke

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Patrick O'Keefe
Sent: Tuesday, January 20, 2009 3:04 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: MODIFY VTAMOPTS,TCPNAME=

On Tue, 20 Jan 2009 12:55:37 -0600, Rabbe, Luke
luke.ra...@countryfinancial.com wrote:

...
I modified VTAMOPTS to give TCPNAME a value.
...
Now I want to change it back to the initial value of *BLANKS*, but
VTAM
won't let me enter a blank or the value *BLANKS* in the modify
command.
Has anyone ever done this or have any suggestions?  ...

I looked and don't see that as an option. It's tricky because
TCPNAME is one of three sort of equivalent options: TCPNAME,
HOSTNAME, IPADDR.  One of these, but any one of them, is
required if your Enterprise Extender XCA def does not specify
an IP addr or host name of its source VIPA.  None of them is
required if your EE XCA defs specify IPADDR or HOSTNAME.

Given that, I'm not sure what you are trying to accomplish by
setting the TCPNAME back to blanks.Are you trying to make
sure that any EE XCA def without HOSTNAME or IPADDR fails?
I think you could just as well set TCPNAME to a bogus name.
Then any EE XCA defs without HOSTANAME or IPADDR would
be ineffective because the default stack would not be found.

Pat O'Keefe

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMS and System Temporary Datasets

2009-01-21 Thread Spencer, Mike
Bob,
IMO going back and updating JCL seems like a lot of work.  As Ted says,
the ISV products are designed to work with SMS and non-SMS data sets.
These X37 and allocation ISV products were around long before DFSMS and
are pretty good at what they do.  As I stated already, many of the
recovery actions that these products perform are actually more efficient
than DFSMS.  What happens in the future after you have removed VAM when
the application grows and your JCL changes are no longer adequate
enough; BAM!  JCL, X37 abend.  This condition would be true for other
permanent data sets as well.  I've been using the StopX37/EasyPOOL
product since I got into IT back in 1989 and could not do without it (I
installed DFSMS in 1991).  I let DFSMS do it's thing where appropriate,
and StopX37/II where appropriate.  Plus StopX37/II does work that DFSMS
does not perform.   

Michael Spencer

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Lester, Bob
Sent: Tuesday, January 20, 2009 5:22 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: SMS and System Temporary Datasets

Hi Ted,

  I do have other SMS-managed data.  I'm just doing the conversion a bit
backwards. ;-)

  I can see that the issue, in my current environment, is that I tell
VAM (CA-Allocate) to bail out of it's ASR (EXIT CODE(0)) if it sees a
non-null Storage Class.  We are hoping to be able to eliminate VAM from
the mix.  My intent with the extent problem is to identify which dsns
are being twiddled by VAM and (for System Temporary dsns) update the
space allocation in the JCL.  For permanent dsns being change by VAM, I
can either change the JCL to specify data class, or let SMS just add
additional volumes.

  Thanks for the reply!  Sounds like SMS-managed System Temporary files
is a good thing.  

BobL

 -Original Message-
 From: IBM Mainframe Discussion List
 [mailto:ibm-m...@bama.ua.edu] On Behalf Of Ted MacNEIL
 Sent: Tuesday, January 20, 2009 2:15 PM
 To: IBM-MAIN@bama.ua.edu
 Subject: Re: SMS and System Temporary Datasets
 
 My options seem to be:
 1) plow thru all System Temporary allocations being increased by 
 CA-Allocate and update the JCL, or
 2) Leave System Temporary datasets non-SMS.
 
 At the risk of repeating myself, what makes you think these are 
 mutually exclusive?
 Are you assuming that you can't do both in an SMS environment? You 
 can.
 Are you assuming SMS will manage the 'extent problem', and you can get

 rid of the product? You can't.
 
 -
 Too busy driving to stop for gas!
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions, send 
 email to lists...@bama.ua.edu with the
 message: GET IBM-MAIN INFO Search the archives at 
 http://bama.ua.edu/archives/ibm-main.html
 
 


--
This e-mail transmission may contain information that is proprietary,
privileged and/or confidential and is intended exclusively for the
person(s) to whom it is addressed. Any use, copying, retention or
disclosure by any person other than the intended recipient or the
intended recipient's designees is strictly prohibited. If you are not
the intended recipient or their designee, please notify the sender
immediately by return e-mail and delete all copies. OppenheimerFunds
may, at its sole discretion, monitor, review, retain and/or disclose the
content of all email communications. 

==

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Richards, Robert B.
For SMF, the key is actually to switch to logstreams and get rid of the
GDGs! :-)

Bob


-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Ted MacNEIL
Sent: Wednesday, January 21, 2009 5:51 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: GDG Question

Well... I do use GDG for SMF, but I create one generation a day and use
DISP=MOD for further offloads.

Risky choice.
What happens if the offloading job fails for some reason?
You could lose all the accumulated data.


BTW: In your scenario you don't know how old data do you have! The data
can be rolled off depending on the amount, not depending on age.

Do you expect your SMF data to be dumped more than 255 times a day?
The key is to switch at midnight, consolidate, and then delete the day's
dumps.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Unix File names EKM and dates

2009-01-21 Thread Jousma, David
Sorry, I mean that in the properties file I coded
Audit.metadata.file.size = 8192 (8MB).  At which time it will roll over
to a new filename and start over.  The only downfall of the current
setup is that when the rollover file reaches max size, it reverts back
to the original.  Too bad they didn't set this up to just rename with a
date, and start fresh.

Regarding your observations about one home per instance, that is
correct, there is not much to share that is not updated.  One thing we
did that is different than documented, is that we put up another
separate copy of JAVA. Since EKM code is delivered with JAVA, in the
JAVA filesystem, we wanted additional stability of only updating EKM
when we chose too, and not when another PTF reloaded JAVA.  Between
that, and the fact that EKM requires customization in the SMPE
controlled JAVA filesystem, I didn't want to go mucking about in SMPE
controlled area's.  So, once *could* mount the EKM instance of JAVA READ
only or Shared, and then have a separate home for the configuration, and
logs.

Regarding your comments about no need for one config file per ekm
instance that is incorrect, *assuming* you have more than one EKM server
for redundancy purposes.  There are settings in the config file that
define how each instance talks to the other via tcpip.

Dave

_
Dave Jousma
Assistant Vice President, Mainframe Services
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB1G
p 616.653.8429
f 616.653.8497


-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Hunkeler Peter (KIUK 3)
Sent: Wednesday, January 21, 2009 6:39 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Unix File names EKM and dates

[snip] In our case, I have turned off all AUDIT
recording except for errors, and made the metadata.xml 
files 8 MB, [snip]

Out of interest, what do you mean you made the metadata.xml
files 8 MB? You don't allocate storage when you create
a UNIX file. It grows as programs write to it.



I've got some offline communication with Lizette and from that
I conclude that even in a sysplex shared file system environment
each EKM instance will need its own home directory to store such
data as the metadata.xml, the audit log, the debug files. 

If this is correct, one will need to treat the EKM home
like /etc, /var, /tmp, so there is no need to have one config
file per EKM instance. It seems that all may access 
identically named files (symlinks as per my previous suggestion)
in their respective home.

-- 
Peter Hunkeler
Credit Suisse

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread R.S.

Richards, Robert B. wrote:

For SMF, the key is actually to switch to logstreams and get rid of the
GDGs! :-)


I considered it and said no. There is no good way to avoid duplicate 
records during offload.


--
Radoslaw Skorupka
Lodz, Poland


--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl

Sd Rejonowy dla m. st. Warszawy 
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, 
nr rejestru przedsibiorców KRS 025237

NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2008 r. kapita zakadowy BRE Banku SA  wynosi 
118.642.672 zote i zosta w caoci wpacony.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: USS file sharing in z/OS - Version Ugrade

2009-01-21 Thread Veilleux, Jon L
We use symbolic links to point to any of the files that are not
distributed as part of the root. This allows us the flexibility to share
files between system roots. When we first build the system root, we add
a /product symbolic link to /usr/lpp which points to a separately
mounted directory (under the system root) where we create subdirectories
to mount all of our products.
There are a couple of SHARE presentations on how to accomplish this.
Feel free to contact me off list if you want more information.
Jon


Jon L. Veilleux 
veilleu...@aetna.com 
(860) 636-2683 


-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Cwi Jeret
Sent: Wednesday, January 21, 2009 5:12 AM
To: IBM-MAIN@bama.ua.edu
Subject: USS file sharing in z/OS - Version Ugrade

We have Implemented Shared HFS in Our Sysplex with 4 Members , a few
months ago.

Now, we want to upgrade the SYSTEM of 1 of the 4 members of the sysplex
with an Updated ROOT ,as part of Maintenace service for that system ,
but leaving the 3 other members in the old state.

As reccomended in UNIX System Services Planning in Chapter :
7.6.2 Adding a system-specific or version root file system to your
shared file system configuration
we added the new ROOT as a new Version to the file system .
This new root will be the default root for the upgraded system after IPL
..

The problem is that File Systems mounted currently with their Mountpoint
on the Old Root , prevent these File Systems to mount their Mountpoint
on the New Root for the Upgraded SYSTEM.
In this situation we cannot run the Applications running these File
systems on the Upgraded member of the SYSPLEX

Does anyone know a solution for this problem ?

Cwi Jeret
Bank-Hapoalim T.A
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
This e-mail may contain confidential or privileged information. If
you think you have received this e-mail in error, please advise the
sender by reply e-mail and then delete this e-mail immediately.
Thank you. Aetna   

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMS and System Temporary Datasets

2009-01-21 Thread Spencer, Mike
Bob,
Using Dynamic Volume Count in the DFSMS Dataclas is terribly
inefficient. The Dynamic Volume Count is used to determine the size of
the TIOT, TCTTIOT, and JFCB control blocks when allocating a data set.
What this means is that with a DVC of 58, every data set using this data
class is using 2052 bytes of unused storage (57 x 36 bytes) regardless
of the actual number of logical volumes used. This may not be an issue
depending on your processor hardware, but it does add up as this storage
is never released until the data set is deleted from the system.  The
StopX37 product does not use allocate storage in the same fashion as
DFSMS, so the process is more efficient from a storage standpoint.  
If cost is an issue, I would consider looking at other ISV options.


Michael Spencer

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Lester, Bob
Sent: Tuesday, January 20, 2009 6:10 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: SMS and System Temporary Datasets


 

 -Original Message-
 From: IBM Mainframe Discussion List
 [mailto:ibm-m...@bama.ua.edu] On Behalf Of Gibney, Dave
 Sent: Tuesday, January 20, 2009 2:41 PM
 To: IBM-MAIN@bama.ua.edu
 Subject: Re: SMS and System Temporary Datasets
 
  Are you assuming SMS will manage the 'extent problem', and
 you can get
 rid of the product? You can't.
 
 Maybe not totally, but space constraint relief, extended format and 
 multi-volume can go a long way.
 

  Hi Dave,

This is exactly what I intend.  We use Extended as default in (most
of) our data classes with an initial volume count of 1 and a dynamic
volume count of up to 58.

Thanks!
BobL


--
This e-mail transmission may contain information that is proprietary,
privileged and/or confidential and is intended exclusively for the
person(s) to whom it is addressed. Any use, copying, retention or
disclosure by any person other than the intended recipient or the
intended recipient's designees is strictly prohibited. If you are not
the intended recipient or their designee, please notify the sender
immediately by return e-mail and delete all copies. OppenheimerFunds
may, at its sole discretion, monitor, review, retain and/or disclose the
content of all email communications. 

==

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Mark Zelden
On Wed, 21 Jan 2009 07:08:13 -0500, Richards, Robert B.
robert.richa...@opm.gov wrote:

For SMF, the key is actually to switch to logstreams and get rid of the
GDGs! :-)

Bob


Won't touch it until the offload support is enhanced with better date
selection options (which it still wasn't even in z/OS 1.10).

But we've been here before...

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Compton, John
The thing that's always bugged me about GDG files is they way they are
selected starting with the highest gen # first down to the lowest if you
specify the GDG-base name on a DD.

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Mark Zelden
Sent: 21 January 2009 13:53
To: IBM-MAIN@bama.ua.edu
Subject: Re: GDG Question

On Wed, 21 Jan 2009 07:08:13 -0500, Richards, Robert B.
robert.richa...@opm.gov wrote:

For SMF, the key is actually to switch to logstreams and get rid of the
GDGs! :-)

Bob


Won't touch it until the offload support is enhanced with better date
selection options (which it still wasn't even in z/OS 1.10).

But we've been here before...

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at
http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: USS file sharing in z/OS - Version Ugrade

2009-01-21 Thread Mark Zelden
On Wed, 21 Jan 2009 04:12:01 -0600, Cwi Jeret cwi_je...@yahoo.com wrote:

We have Implemented Shared HFS in Our Sysplex with 4 Members ,
a few months ago.

Now, we want to upgrade the SYSTEM of 1 of the 4 members of
the sysplex with an Updated ROOT ,as part of Maintenace service for that
system , but leaving the 3 other members in the old state.

As reccomended in UNIX System Services Planning in Chapter :
7.6.2 Adding a system-specific or version root file system to your shared file
system configuration
we added the new ROOT as a new Version to the file system .
This new root will be the default root for the upgraded system after IPL .

The problem is that File Systems mounted currently with their Mountpoint on
the Old Root , prevent these File Systems to mount their Mountpoint on the
New Root for the Upgraded SYSTEM.
In this situation we cannot run the Applications running these File systems
on the Upgraded member of the SYSPLEX

Does anyone know a solution for this problem ?


Yes.  Nothing should be mounted off of you version root that is not part
of the OS.  There are 2 scenarios.

For things you share you  mount a directory file system off of your
sysplex root (for shared file systems) and then mount other file 
systems off of that one.  There is no requirement for the directory 
file system, but I've seen a shop's sysplex root grow because all of
the directories / mount points were getting created within the sysplex
root.  This eventually led to a sysplex wide IPL in order to re-create
a larger sysplex root.   Oh... make sure you are using a single
BPXPRMxx member if not already and pay attention to AUTOMOVE / 
UNMOUNT in your MOUNT defintions.  

In the case of something that is in the root that you don't share, 
you do the same sort of thing with symbolic links that is documented
for setting up CRON with a read only root (see Unix System Services
Planning).  This needs to be done each time you do an OS
upgrade (have a new root distributed with ServerPac).

For example, lets say each system has some unique file system
needed to be mounted at  /usr/local (which is in the OS / version root). 
 
1) Create /etc/local  (/etc is chosen because it is already a system
specific file system)

2) Create a symbolic link for /usr/local that points to /etc/local 
 .. so if your maintenance OS / version root is mounted 
at /service

rm -fr /service/usr/local   
ln -s /etc/local /service/usr/local 

3) You need to IPL with the new root that has the symbolic LINK
Mount your file system at MOUNTPOINT('/SYSNAME./etc/local') 
and use the UNMOUNT parm. 

Hope this helps.

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMS and System Temporary Datasets

2009-01-21 Thread Mark Zelden
On Wed, 21 Jan 2009 06:35:09 -0600, Spencer, Mike mike_spen...@bmc.com wrote:

Bob,
Using Dynamic Volume Count in the DFSMS Dataclas is terribly
inefficient. The Dynamic Volume Count is used to determine the size of
the TIOT, TCTTIOT, and JFCB control blocks when allocating a data set.
What this means is that with a DVC of 58, every data set using this data
class is using 2052 bytes of unused storage (57 x 36 bytes) regardless
of the actual number of logical volumes used. This may not be an issue
depending on your processor hardware, but it does add up as this storage
is never released until the data set is deleted from the system.  The
StopX37 product does not use allocate storage in the same fashion as
DFSMS, so the process is more efficient from a storage standpoint.
If cost is an issue, I would consider looking at other ISV options.



It's still much better than the old way (volume count) that stored the
number of entries in the catalog!  :-)

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


What is Bit 4 in 0(R4)?

2009-01-21 Thread Fred van der Windt
For reasons that are somewhat complicated to explain I am looking at the
code that is executed in IGZCPAC after you return from a module called
by a dynamic COBOL CALL. As one would expect not too much is going on.
This is the code path:

067C  5850D004  L R5,4(,R13)   R5 @ previous Save Area
0680  50F05010  STR15,16(,R5)  Store returncode in previous
Save Area
0680  47F0B36A  B @071A

071A  91084000  TMX'08',0(R4)  Test bit 4 in ?
==???
071E  47E0B396  BZ@0746Branch if bit 4 in ? is
zero?   ==???
0722  95069050  CLI   X'06',80(R9) TGT LEVEL INDICATOR = x'06'?
0726  4740B396  BL@0746Branch if level  x'06'
072A  1F77  SRL   R7,R7R7 = 0
072C  50705018  STR7,24(,R5)   Clear R1 in previous Save
Area
0730  47F0B396  B @0746

0746  58D0D004  L R13,4(,R13)  R13 @ previous Save Area
074A  98ECD00C  LMR14,R12,12(,R13) Restore R14,R15,R0,R1...R12
074E  0B0E  BSM   ,R14 Return to caller

The returncode in R15 is stored in the save area so it is returned again
in R15 to the calling COBOL module. I am trying to understand what
happens with R1: the saved value is cleared if bit 4 in the byte pointed
to by R4 is zero and the TGT level is not less than x'06'.

R1 would point to the parameter list but is not garanteed to contain
anything upon return from a called module (accordfing to the standard
linkage conventions). COBOL modules don't seem to expect anything in R1
anyway. What area might R4 point to...?

Any idea or pointers would be appreciated.

Fred!
-
ATTENTION:
The information in this electronic mail message is private and
confidential, and only intended for the addressee. Should you
receive this message by mistake, you are hereby notified that
any disclosure, reproduction, distribution or use of this
message is strictly prohibited. Please inform the sender by
reply transmission and delete the message without copying or
opening it.

Messages and attachments are scanned for all viruses known.
If this message contains password-protected attachments, the
files have NOT been scanned for viruses by the ING mail domain.
Always scan attachments before opening them.
-


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


SMP/E 3.5 Message Severity Downgrade For Bypass(Holdsys)

2009-01-21 Thread Andrew Metcalfe
I am currently installing SMP/E 3.5 and have noted the downgrade of 
BYPASS(HOLDSYS) messages from Warning (RC=4) to Informational (RC=0). 

SMP/E 3.4 behaviour (i.e. RC=4) can be re-instated by using the 
COMPAT(WARNBYPASS) parameter on the EXEC statement for GIMSMP. 

As an organisation, we would like to retain the SMP/E 3.4 behaviour for these 
messages to ensure that the installer has seen the error. Therefore, I would 
like to implement COMPAT(WARNBYPASS) as a system wide default rather than 
have each piece of JCL amended.

I have reviewed the manual and I cannot find anything in this area. Before I 
raise a PMR to query this with IBM, has anyone else come across this 
requirement, or a way of achieving it?

Thanks

Andrew Metcalfe
Barclays Bank

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Richards, Robert B.
And some of us aren't holding our breath and have written code to ease
the issue until IBM solves the problem. :-)

Bob

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Mark Zelden
Sent: Wednesday, January 21, 2009 8:53 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: GDG Question

On Wed, 21 Jan 2009 07:08:13 -0500, Richards, Robert B.
robert.richa...@opm.gov wrote:

For SMF, the key is actually to switch to logstreams and get rid of the
GDGs! :-)

Bob


Won't touch it until the offload support is enhanced with better date
selection options (which it still wasn't even in z/OS 1.10).

But we've been here before...

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at
http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Scott Barry
On Wed, 21 Jan 2009 07:08:13 -0500, Richards, Robert B.
robert.richa...@opm.gov wrote:

For SMF, the key is actually to switch to logstreams and get rid of the
GDGs! :-)

Bob



SMF logstream relates to the MAN dataset logging rather than the
associated DUMP GDG generations, though you may find it reduces the number
of generations create throughout the day, depending on your z/OS system load
and MAN dataset size.

Scott Barry
SBBWorks, Inc.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMP/E 3.5 Message Severity Downgrade For Bypass(Holdsys)

2009-01-21 Thread Mark Zelden
On Wed, 21 Jan 2009 08:32:44 -0600, Andrew Metcalfe
andrew.metca...@barclays.co.uk wrote:

I am currently installing SMP/E 3.5 and have noted the downgrade of
BYPASS(HOLDSYS) messages from Warning (RC=4) to Informational (RC=0).

SMP/E 3.4 behaviour (i.e. RC=4) can be re-instated by using the
COMPAT(WARNBYPASS) parameter on the EXEC statement for GIMSMP.

As an organisation, we would like to retain the SMP/E 3.4 behaviour for these
messages to ensure that the installer has seen the error. Therefore, I would
like to implement COMPAT(WARNBYPASS) as a system wide default rather than
have each piece of JCL amended.

I have reviewed the manual and I cannot find anything in this area. Before I
raise a PMR to query this with IBM, has anyone else come across this
requirement, or a way of achieving it?


Not that I know of.   But I would recommend re-thinking what you want to
do on a global level for your shop.  If you've already told SMP/E to bypass
those conditions, why do you need to be warned that it happened?  You can
still look at the output and verify what was bypassed.  If you are worried that
people won't look at the output because of RC=0, then I respectfully submit
that those are the same people that routinely ignore RC=4 without looking
at the output closely prior to SMP/E 3.5 anyway because they knew (or at
least they thought they knew) why they were getting RC=4.  Now if
I see an RC=4, I know there is something to be concerned about other
than the same holds were bypassed for just about every SMP/E apply 
that I run (certainly for IBM OS maintenance).

I think it's best to just document the change to all of the technical groups
that
use SMP/E and let them decide. At least that is what I did.  Sometimes
change is good... live in the present, not in the past.  :-)

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Cost of SAS

2009-01-21 Thread Ben Alford
Ted MacNeil said:
SAS is available with sub-capacity licencing options.

Well, maybe for some folks, not for others.
I checked with SAS (in 2006) and was told that their sub-cap license
was only available if you moved your license to a larger machine and
that 50 MSU's was the minimum size.  That was no help for my shop.
Has SAS changed their stance since 2006?

Ben Alford Enterprise Systems Programming
University of Tennessee

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Multiple FTP servers?

2009-01-21 Thread Bri P
Hi folks

Is it possible to run more than one FTP server? I want to use an enforced TLS 
on port 990 for secure transfers, but don't want to block existing clients 
coming in on a non-secured port 21. Can I do that?

Cheers

Brian

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Multiple FTP servers?

2009-01-21 Thread Hal Merritt
How do you plan to control who uses which port?  

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Bri P
Sent: Wednesday, January 21, 2009 9:08 AM
To: IBM-MAIN@bama.ua.edu
Subject: Multiple FTP servers?

Hi folks

Is it possible to run more than one FTP server? I want to use an enforced TLS 
on port 990 for secure transfers, but don't want to block existing clients 
coming in on a non-secured port 21. Can I do that?

Cheers

Brian

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Multiple FTP servers?

2009-01-21 Thread Bri P
Just have the incoming client specify the port they want to connect to.. 
Default to port 21, but if they want TLS then they connect to port 990.

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Hal Merritt
Sent: 21 January 2009 15:18
To: IBM-MAIN@bama.ua.edu
Subject: Re: Multiple FTP servers?

How do you plan to control who uses which port?  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


No SMF 74(4)

2009-01-21 Thread Patrick Falcone
Can't seem to find type 74(4) after adding a new member to the plex. Any not 
obvious, or obvious, reasons? Seems to be in SMF/RMF.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Multiple FTP servers?

2009-01-21 Thread Hal Merritt
If the client wants TLS, then all they have to do is say so in their FTP 
connection parms (-r -x IIRC). I can see value in making sure a connection is 
encrypted, but it seems like that's really up to the client.   

Just my $0.02, being a simple minded sort :-)

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Bri P
Sent: Wednesday, January 21, 2009 9:25 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Multiple FTP servers?

Just have the incoming client specify the port they want to connect to.. 
Default to port 21, but if they want TLS then they connect to port 990.

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Hal Merritt
Sent: 21 January 2009 15:18
To: IBM-MAIN@bama.ua.edu
Subject: Re: Multiple FTP servers?

How do you plan to control who uses which port?  

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Scott Barry
On Wed, 21 Jan 2009 09:43:25 EST, Ben Alford pa7...@utkvm1.utk.edu wrote:

 Ted MacNeil said:
 SAS is available with sub-capacity licencing options.

Well, maybe for some folks, not for others.
I checked with SAS (in 2006) and was told that their sub-cap license
was only available if you moved your license to a larger machine and
that 50 MSU's was the minimum size.  That was no help for my shop.
Has SAS changed their stance since 2006?

Ben Alford Enterprise Systems Programming
University of Tennessee


You may want to consider the alternative product to SAS, which can leverage
your existing SAS-programmed application code.   World Programming's
software called WPS http://teamwpc.co.uk/home  may be a suitable
replacement.  They have a tool on their website to help evaluate your SAS
programs' compatibility with the current WPS software version.  And I have
found their Support Team to be very agreeable to introducing new SAS
language elements into their software product.

It's only a matter of time before SAS Institute comes down to earth with
their software licensing arrangements, particularly the minimum MSUs
requirement you mentioned (if it still exists today).  I'd recommending
going to your SAS marketing/sales contact, armed with information about how
your enterprise/organization uses SAS, how much, where (OS platforms,
client, server), and how much you intend to use it into the future, and then
negotiate a reasonable licensing arrangement, with their understanding that
SAS is now in competition for data mining/analysis (BI) business.

Scott Barry
SBBWorks, Inc.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Encryption software?

2009-01-21 Thread Doc Farmer
May I suggest you cross-post this over at RACF-L? You'll get some good
information on the security-side of the implementation.

Hope this helps.  Many thanks.

Doc Farmer 
Senior Security Specialist 
InfoSec, Inc. 
dfar...@infosecinc.com 
http://www.InfoSecInc.com 
http://www.linkedin.com/in/docfarmer  

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of O'Brien, David W. (NIH/CIT) [C]
Sent: Wednesday, January 21, 2009 10:34
To: IBM-MAIN@bama.ua.edu
Subject: Encryption software?

I would like to solicit opinions about Mainframe data encryption.

What are you using?
Ease of implementation and maintenance of keys?

We currently use FDR to create our off-site DR volume backups. Is anyone
using FDRCRYPT? FDRCRYPT would seem to be a natural extension for us.

All thoughts and suggestions are welcome.

Regards,
Dave O'Brien



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Tony Harminc
2009/1/20 Edward Jaffe edja...@phoenixsoftware.com:
 Swoyer makes some good observations ...

 http://www.esj.com/news/article.aspx?EditorialsID=3475

An interesting phrase in there: freshly minted IT pros. I was
freshly minted 30-something years ago, but I sure wasn't a pro.

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Multiple FTP servers?

2009-01-21 Thread Bri P
My main requirement is that the userid and password is sent AFTER the TLS 
encryption has been established, I don't want clients signing in with login 
credentials sent in clear, before establishing encryption one in-session by 
issuing an AUTH command, for example. 

From a 'purist' viewpoint, port 990 is apparently reserved for FTPS, rather 
than port 21, and I know that our auditors will scan those and claim port 21 
is a risk due to being in clear.

I assumed that I could only guarantee that encryption was established (or the 
connection rejected) if I used AUTH REQUIRED in the FTP server parms, but 
obviously specifying that will compromise those clients who cannot yet, or 
don't want to, connect this way. So I considered a separate server. If I can 
use AUTH ALLOWED rather than REQUIRED and still do the above, then I'm happy to 
continue on port 21 and let the client negotiate at connect time.. I'll just 
argue with the auditors. But there's nothing new there, anyway.. 

Brian

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Hal Merritt
Sent: 21 January 2009 15:39
To: IBM-MAIN@bama.ua.edu
Subject: Re: Multiple FTP servers?

If the client wants TLS, then all they have to do is say so in their FTP 
connection parms (-r -x IIRC). I can see value in making sure a connection is 
encrypted, but it seems like that's really up to the client.   

Just my $0.02, being a simple minded sort :-)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Hal Merritt
Some shops have found it cost effective to put SAS on a 'penalty box'. That's a 
CPU purchased expressly to run such products.

HTH and good luck.  

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Ben Alford
Sent: Wednesday, January 21, 2009 8:43 AM
To: IBM-MAIN@bama.ua.edu
Subject: Cost of SAS

Ted MacNeil said:
SAS is available with sub-capacity licencing options.

Well, maybe for some folks, not for others.
I checked with SAS (in 2006) and was told that their sub-cap license
was only available if you moved your license to a larger machine and
that 50 MSU's was the minimum size.  That was no help for my shop.
Has SAS changed their stance since 2006?

Ben Alford Enterprise Systems Programming
University of Tennessee

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


FTP SSL with large file transfer

2009-01-21 Thread Hideko Igarashi
The FTP server on z/OS 1.7 and the client is my Windows PC.
Normally FTP with SSL is running fine.  From time to time, it hangs in the 
middle of transfer from MF to PC. (no error message, it times out.)  Today it 
worked with 5.5Mb but not with more than 10Mb.  If I run FTP without SSL, I 
could download them all.  If I think of it, the file size is usually more than 
5Mb 
when the problem happens.
Is there any file size limitation to use SSL or any gatchu?

Hideko Igarashi

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Multiple FTP servers?

2009-01-21 Thread Hal Merritt
Dancing with that same bear myself. That's why I was picking your brain. Sorry 
to interrupt your query. 

Some thoughts: FTP is considered a security risk and perhaps rightfully so. 
Most other platforms lack the tools and quality of security we enjoy. FTP has a 
lot of features and facilities to help with data movement. Among those are the 
ability to issue system commands (CD, MKDIR, DIR, delete, etc).  They aren’t 
kidding when they call them 'open' systems. 

IMHO, TLS does nothing to mitigate -that- risk. Sometimes hard to tell what an 
auditor is really squawking about, but fussing about port 21 would seem to fall 
into that bucket.  

Data (to include passwords) flowing over a network in the open is also a 
security risk, but it's not the same. TLS can help here, but some argue only if 
fully implemented to include specific certificates for both sides. I donno*. 
What is important is that one cannot force a customer to do anything other than 
to take their business elsewhere. 

Again, all my $0.02 (before taxes) 

*To my non English speaking friends: 'donno' is slang for don't know or 
don’t understand or I just work here.   

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Bri P
Sent: Wednesday, January 21, 2009 9:55 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Multiple FTP servers?

My main requirement is that the userid and password is sent AFTER the TLS 
encryption has been established, I don't want clients signing in with login 
credentials sent in clear, before establishing encryption one in-session by 
issuing an AUTH command, for example. 

From a 'purist' viewpoint, port 990 is apparently reserved for FTPS, rather 
than port 21, and I know that our auditors will scan those and claim port 21 
is a risk due to being in clear.

I assumed that I could only guarantee that encryption was established (or the 
connection rejected) if I used AUTH REQUIRED in the FTP server parms, but 
obviously specifying that will compromise those clients who cannot yet, or 
don't want to, connect this way. So I considered a separate server. If I can 
use AUTH ALLOWED rather than REQUIRED and still do the above, then I'm happy to 
continue on port 21 and let the client negotiate at connect time.. I'll just 
argue with the auditors. But there's nothing new there, anyway.. 

Brian

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Hal Merritt
Sent: 21 January 2009 15:39
To: IBM-MAIN@bama.ua.edu
Subject: Re: Multiple FTP servers?

If the client wants TLS, then all they have to do is say so in their FTP 
connection parms (-r -x IIRC). I can see value in making sure a connection is 
encrypted, but it seems like that's really up to the client.   

Just my $0.02, being a simple minded sort :-)



NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Ted MacNEIL
For SMF, the key is actually to switch to logstreams and get rid of the GDGs! 
:-)


Right!
And, introduce the duplicate SMF data problem, while I'm at it?

-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Martin Kline
I prefer to order GDGs with odd generations in LIFO order followed by the even 
generations in FIFO order - except on the second Tuesday of the month, 
when I want to read the data backwards in random file sequence. Why won't 
IBM listen to me?

You can't satisfy everyone. I suspect it was a performance choice made many 
years ago. For whatever reason, it is what it is. Deal with it or get over it.

Nevertheless, this is a perfect situation for a little bit of subsystem code. 
Let 
the subsystem search the catalog and concatenate the files in whatever 
sequence you like.


The thing that's always bugged me about GDG files is they way they are
selected starting with the highest gen # first down to the lowest if you
specify the GDG-base name on a DD.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: No SMF 74(4)

2009-01-21 Thread Mark Zelden
On Wed, 21 Jan 2009 07:32:26 -0800, Patrick Falcone
patrick.falco...@verizon.net wrote:

Can't seem to find type 74(4) after adding a new member to the plex. Any
not obvious, or obvious, reasons? Seems to be in SMF/RMF.


Doesn't that come from RMF III?  Is RMFGAT running?

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Ted MacNEIL
Well, maybe for some folks, not for others.
I checked with SAS (in 2006) and was told that their sub-cap license was only 
available if you moved your license to a larger machine and
that 50 MSU's was the minimum size.
That was no help for my shop.
Has SAS changed their stance since 2006?

January 2006 was when we did it.
It was a new licence, and we did it for 35% of the box.


-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Ted MacNEIL
You may want to consider the alternative product to SAS, which can leverage 
your existing SAS-programmed application code.   World Programming's software 
called WPS http://teamwpc.co.uk/home  may be a suitable
replacement.

The original discussion focused on MXG.
Dr. Barry has/will not certify WPS with MXG, the last I heard.

Check at www.mxg.com for his current stance.
-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Controlling use of MSU's with WLM

2009-01-21 Thread Greg Shirey
I heard at SHARE (and I can't remember the session where I heard it)
that, even when the machine is software capped, WLM will continue to
manage your workloads based on your goals.  

At our shop, we have a single production CICS region and were managing
it with a velocity goal.  When we became capped, the response time in
our region would suffer, but since WLM was reporting that we were
meeting our goal, it continued until we were uncapped.  We changed to
response time goals in the region and our users now notice no difference
when the system runs capped.  

HTH,
Greg Shirey
Ben E. Keith Co.
  

-Original Message-
From: IBM Mainframe Discussion List On Behalf Of Dick de Groot
Sent: Wednesday, January 21, 2009 5:01 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Controlling use of MSU's with WLM

Thanks for the information, Thats right i would like to be sure that
Cics
gets the necessary MSU's if the machine is software capped.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread John McKown
On Wed, 21 Jan 2009 10:38:57 -0600, Martin Kline martin.kl...@yrcw.com wrote:

I prefer to order GDGs with odd generations in LIFO order followed by the even
generations in FIFO order - except on the second Tuesday of the month,
when I want to read the data backwards in random file sequence. Why won't
IBM listen to me?

Because you're a loon? GRIN (I'm a loon too! And proud of it.)


You can't satisfy everyone. I suspect it was a performance choice made many
years ago. For whatever reason, it is what it is. Deal with it or get over it.

Correct. I remember CVOLs. The original OS/360 catalog structure. Many of
the current ills we have in this area are due to compatibility with the
original CVOL structure. 


Nevertheless, this is a perfect situation for a little bit of subsystem
code. Let
the subsystem search the catalog and concatenate the files in whatever
sequence you like.


What we had was a program. You passed the base name as a PARM and it would
dynalloc each generation and write it in ascending Goovoo sequence to
another file. The actual application would then read this file in the next
step. Not as good as a subsystem, but much easier to program.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: FTP SSL with large file transfer

2009-01-21 Thread Hal Merritt
It's the same server under z/os, but typically one of any number of client 
software. I'd focus on the client software and the network appliances. A 
transfer that just stops for no reason is often a firewall configuration issue. 

Firewalls typically say nothing (the 'black hole' behavior) or spoof normal 
completion signals making each end think the other has asked for a graceful 
close.

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Hideko Igarashi
Sent: Wednesday, January 21, 2009 10:20 AM
To: IBM-MAIN@bama.ua.edu
Subject: FTP SSL with large file transfer

The FTP server on z/OS 1.7 and the client is my Windows PC.
Normally FTP with SSL is running fine.  From time to time, it hangs in the 
middle of transfer from MF to PC. (no error message, it times out.)  Today it 
worked with 5.5Mb but not with more than 10Mb.  If I run FTP without SSL, I 
could download them all.  If I think of it, the file size is usually more than 
5Mb 
when the problem happens.
Is there any file size limitation to use SSL or any gatchu?

Hideko Igarashi

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Controlling use of MSU's with WLM

2009-01-21 Thread Hal Merritt
The soft cap is on the LPAR and applies to everything running. You can't exempt 
a workload AFAIK.

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Dick de Groot
Sent: Wednesday, January 21, 2009 5:01 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Controlling use of MSU's with WLM

Thanks for the information, Thats right i would like to be sure that Cics
gets the necessary MSU's if the machine is software capped.

2009/1/20 Kelman, Tom thomas.kel...@commercebank.com

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: No SMF 74(4)

2009-01-21 Thread Skip Robinson
Yes, RMF III. 74(4) is required for the sysplex verification package that
qualifies a customer for sysplex discount. We had to run RMFGAT on all
LPARs long enough to gather the data.

.
.
JO.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com


   
 Mark Zelden   
 mark.zel...@zuri 
 CHNA.COM  To 
 Sent by: IBM  IBM-MAIN@bama.ua.edu
 Mainframe  cc 
 Discussion List   
 ibm-m...@bama.ua Subject 
 .edu Re: No SMF 74(4)
   
   
 01/21/2009 08:39  
 AM
   
   
 Please respond to 
   IBM Mainframe   
  Discussion List  
 ibm-m...@bama.ua 
   .edu   
   
   




On Wed, 21 Jan 2009 07:32:26 -0800, Patrick Falcone
patrick.falco...@verizon.net wrote:

Can't seem to find type 74(4) after adding a new member to the plex. Any
not obvious, or obvious, reasons? Seems to be in SMF/RMF.


Doesn't that come from RMF III?  Is RMFGAT running?

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at
http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: No SMF 74(4)

2009-01-21 Thread Patrick Falcone
(@#*(*#E)! 
 
Thanks Mark and yes, right on Skip.


From: Mark Zelden mark.zel...@zurichna.com
Subject: Re: No SMF 74(4)
To: IBM-MAIN@bama.ua.edu
Date: Wednesday, January 21, 2009, 4:39 PM


On Wed, 21 Jan 2009 07:32:26 -0800, Patrick Falcone
patrick.falco...@verizon.net wrote:

Can't seem to find type 74(4) after adding a new member to the plex.
Any
not obvious, or obvious, reasons? Seems to be in SMF/RMF.


Doesn't that come from RMF III?  Is RMFGAT running?

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMS and System Temporary Datasets

2009-01-21 Thread Rick Fochtman

-snip-


Hi Folks,

  I've got a product (CA-Allocate) that allows dynamic increasing of
the allocation of System Temporary datasets.  This current state. 


  As I move to SMS, I see that only a STORCLAS is assigned for these.
If I understand correctly, this means that the space coded in the JCL is
what you get.

  My options seem to be: 1) plow thru all System Temporary allocations
being increased by CA-Allocate and update the JCL, or 2) Leave System
Temporary datasets non-SMS.

  Am I on the right track?  Do most of y'all make System Temporary dsns
SMS-managed?
 


---unsnip---
We left them unmanaged and let them go to our few PUBLIC volumes

--
Rick
--
Remember that if you’re not the lead dog, the view never changes.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Tom Marchant
On Wed, 21 Jan 2009 11:06:41 -0600, John McKown wrote:

On Wed, 21 Jan 2009 10:38:57 -0600, Martin Kline wrote:

You can't satisfy everyone. I suspect it was a performance choice made many
years ago. For whatever reason, it is what it is. Deal with it or get over it.

Correct. I remember CVOLs. The original OS/360 catalog structure. Many of
the current ills we have in this area are due to compatibility with the
original CVOL structure.

I spent a *lot* of time in the microfiche, reading the CVOL code.  Whatever
the reason was for concatenating the generation data sets in reverse order,
I don't think it was for performance.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Scott Barry
On Wed, 21 Jan 2009 10:01:16 -0600, Hal Merritt hmerr...@jackhenry.com wrote:

Some shops have found it cost effective to put SAS on a 'penalty box'.
That's a CPU purchased expressly to run such products.

HTH and good luck.


No longer required to be a standalone CPU.  SAS will negotiate for a capped
LPAR.  I understand that it took some time to educate the SAS Institute
marketing staff on what an LPAR represents, in early 2006, when the program
started.

Here's their attempt to explain the techical points:

Setting Up a Sub-Capacity SAS® License
http://support.sas.com/techsup/technote/ts773.pdf


Scott Barry
SBBWorks, Inc.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Arthur Gutowski
On Wed, 21 Jan 2009 07:53:00 -0600, Mark Zelden 
mark.zel...@zurichna.com wrote:

On Wed, 21 Jan 2009 07:08:13 -0500, Richards, Robert B.
robert.richa...@opm.gov wrote:

For SMF, the key is actually to switch to logstreams and get rid of the
GDGs! :-)

Won't touch it until the offload support is enhanced with better date
selection options (which it still wasn't even in z/OS 1.10).

But we've been here before...

IEAMDBLG seems to work sufficiently for pulling yesterday's OPERLOG to a PS 
file (GDG) and deleteing on that boundary. 

Couldn't this code be generalized to work for SMF (or other) logstreams, too?

If anyone's looney enough to want the cutoff at 12:17:32, I'm sure they can 
torture themselves to no end bastardizing the IBM-supplied sample.

Regards,
Art Gutowski
Ford Motor Company

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Rick Fochtman

---snip-
The thing that's always bugged me about GDG files is they way they are 
selected starting with the highest gen # first down to the lowest if you 
specify the GDG-base name on a DD.

-unsnip
That's because the actual generation number is stored in two's 
complement form, reversing the sort order.


--
Rick
--
Remember that if you’re not the lead dog, the view never changes.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: No SMF 74(4)

2009-01-21 Thread Skip Robinson
Having stated that 74(4) is required for *all* LPARs, I need to back peddle
a bit. As I understand the process, 74(4) is needed to establish the
'qualifying sysplex function' in terms of usage of the relevant structure.
For example, if you claim GRS star as the qualifying function, then you
need 74(4) to show that all purported sysplex members do indeed use
ISGLOCK.

If you have other nonmember LPARs running on any of the CECs in the
mix--either monoplex members or members of a different sysplex--then it's
not clear to me why you would need 74(4) records from the noncandidate
LPARs. If an LPAR is not offered up for verification, then who cares what
structures if any it uses?

On the other hand, gathering 74(4) from *all* LPARs may in the end be
easier than getting someone to sign off with data gathered selectively.  I
took the easy way out and submitted data from all LPARs. Such a wuss.

.
.
JO.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com


   
 Patrick Falcone   
 patrick.falcone7 
 @VERIZON.NET  To 
 Sent by: IBM  IBM-MAIN@bama.ua.edu
 Mainframe  cc 
 Discussion List   
 ibm-m...@bama.ua Subject 
 .edu Re: No SMF 74(4)
   
   
 01/21/2009 09:44  
 AM
   
   
 Please respond to 
   IBM Mainframe   
  Discussion List  
 ibm-m...@bama.ua 
   .edu   
   
   




(@#*(*#E)!
Thanks Mark and yes, right on Skip.


From: Mark Zelden mark.zel...@zurichna.com
Subject: Re: No SMF 74(4)
To: IBM-MAIN@bama.ua.edu
Date: Wednesday, January 21, 2009, 4:39 PM


On Wed, 21 Jan 2009 07:32:26 -0800, Patrick Falcone
patrick.falco...@verizon.net wrote:

Can't seem to find type 74(4) after adding a new member to the plex.
Any
not obvious, or obvious, reasons? Seems to be in SMF/RMF.


Doesn't that come from RMF III?  Is RMFGAT running?

Mark
--
Mark Zelden

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Rick Fochtman

--snip--


Swoyer makes some good observations ...

http://www.esj.com/news/article.aspx?EditorialsID=3475
   



An interesting phrase in there: freshly minted IT pros. I was
freshly minted 30-something years ago, but I sure wasn't a pro.
 


-unsnip---
And on what flavor of boxen? In my mind, Windoze doesn't produce IT 
pros.  :-)


--
Rick
--
Remember that if you're not the lead dog, the view never changes.



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Ted MacNEIL
No longer required to be a standalone CPU.  SAS will negotiate for a capped 
LPAR.

It's not truly a negotiation.
SAS Institute told us what their policy was.
We told them the LPAR weight, where SAS was running, was 35% of the physical 
capacity.
They charged us a C licence (110-150 MIPS), instead of an F (400-450).

I understand that it took some time to educate the SAS Institute marketing 
staff on what an LPAR represents, in early 2006, when the program started.

SAS Institute wasn't the problem/issue.
Our service provider's licensing staff couldn't understand that sub-capacity 
was in effect for the licence, and wanted us to pay the class F rate.
That took more effort than SAS Institute invested.
It was a phone call and a FAX from them.
Our service provider was 3-4 months of 'facilitating' our mainframe IT needs.

-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Ted MacNEIL
And on what flavor of boxen? In my mind, Windoze doesn't produce IT pros.


Hear! Hear!
My 15-year old son can debug most windows problems he encounters.
Of course, he's had a lot of practice!
(8-{[}

-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Edward Jaffe

And, IBM shares look good in the face of a upbeat forecast for 2009.

http://www.schaeffersresearch.com/commentary/content/ibm+corp+soars+on+positive+2009+earnings+outlook/observations.aspx?click=homeID=90641

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
edja...@phoenixsoftware.com
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Gerhard Postpischil

Tom Marchant wrote:

I spent a *lot* of time in the microfiche, reading the CVOL code.  Whatever
the reason was for concatenating the generation data sets in reverse order,
I don't think it was for performance.


The names were stored in the catalog in inverse order (the 
 portion was complemented; i.e. C'0123' became 
X'0F0E0D0C'). This placed the entries with latest generation 
first, and explains why it was easiest to retrieve them in that 
sequence.



Gerhard Postpischil
Bradford, VT

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: FTP SSL with large file transfer

2009-01-21 Thread Ed Philbrook
This sounds like a problem we had while trying to send a PGPed 
file to a bank. The banks server didn't understand what I think was a 
window or windowing instruction (nothing to do with GUI). We tried a 
different client and all was good. No SSL involved. Won't a trace help?

EdP




Hal Merritt hmerr...@jackhenry.com 
Sent by: IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu
01/21/2009 12:11 PM
Please respond to
IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu


To
IBM-MAIN@bama.ua.edu
cc

Subject
Re: FTP SSL with large file transfer






It's the same server under z/os, but typically one of any number of client 
software. I'd focus on the client software and the network appliances. A 
transfer that just stops for no reason is often a firewall configuration 
issue. 
Firewalls typically say nothing (the 'black hole' behavior) or spoof 
normal completion signals making each end think the other has asked for a 
graceful close. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On 
Behalf Of Hideko Igarashi
Sent: Wednesday, January 21, 2009 10:20 AM
To: IBM-MAIN@bama.ua.edu
Subject: FTP SSL with large file transfer

The FTP server on z/OS 1.7 and the client is my Windows PC.
Normally FTP with SSL is running fine.  From time to time, it hangs in the 

middle of transfer from MF to PC. (no error message, it times out.)  Today 
it 
worked with 5.5Mb but not with more than 10Mb.  If I run FTP without SSL, 
I 
could download them all.  If I think of it, the file size is usually more 
than 5Mb 
when the problem happens.
Is there any file size limitation to use SSL or any gatchu?

Hideko Igarashi

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The 
message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 

immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html





Notice: This communication, including any attachments, is intended solely 
for the use of the individual or entity to which it is addressed. This 
communication may contain information that is protected from disclosure 
under State and/or Federal law. Please notify the sender immediately if 
you have received this communication in error and delete this email from 
your system. If you are not the intended recipient, you are requested not 
to disclose, copy, distribute or take any action in reliance on the 
contents of this information.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread J R
 I spent a *lot* of time in the microfiche, reading the CVOL code. Whatever
 the reason was for concatenating the generation data sets in reverse order,
 I don't think it was for performance.  
 
 
Been there, done that!  I always assumed that the complementing of generation 
numbers was *specifically* to achieve the reverse sequence returned in GDGALL.  
 
 
 Date: Wed, 21 Jan 2009 11:53:01 -0600
 From: m42tom-ibmm...@yahoo.com
 Subject: Re: GDG Question
 To: IBM-MAIN@bama.ua.edu
 
 On Wed, 21 Jan 2009 11:06:41 -0600, John McKown wrote:
 
 On Wed, 21 Jan 2009 10:38:57 -0600, Martin Kline wrote:
 
 You can't satisfy everyone. I suspect it was a performance choice made many
 years ago. For whatever reason, it is what it is. Deal with it or get over 
 it.
 
 Correct. I remember CVOLs. The original OS/360 catalog structure. Many of
 the current ills we have in this area are due to compatibility with the
 original CVOL structure.
 
 I spent a *lot* of time in the microfiche, reading the CVOL code. Whatever
 the reason was for concatenating the generation data sets in reverse order,
 I don't think it was for performance.
 
 -- 
 Tom Marchant
 
 
 
_
Windows Live™ Hotmail®:…more than just e-mail. 
http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_hm_justgotbetter_explore_012009
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread John McKown
On Wed, 21 Jan 2009 11:53:01 -0600, Tom Marchant m42tom-ibmm...@yahoo.com
wrote:

On Wed, 21 Jan 2009 11:06:41 -0600, John McKown wrote:

On Wed, 21 Jan 2009 10:38:57 -0600, Martin Kline wrote:

You can't satisfy everyone. I suspect it was a performance choice made many
years ago. For whatever reason, it is what it is. Deal with it or get
over it.

Correct. I remember CVOLs. The original OS/360 catalog structure. Many of
the current ills we have in this area are due to compatibility with the
original CVOL structure.

I spent a *lot* of time in the microfiche, reading the CVOL code.  Whatever
the reason was for concatenating the generation data sets in reverse order,
I don't think it was for performance.

--
Tom Marchant

Well, I'll defer to you. I did not spend a lot of time in the fiche. What I
remember, and perhaps you can correct me, is that a CVOL was much like a PDS
directory. The data portion of a record was 256 bytes in length. And it had
an 8 byte hardware key. The key on the record was the highest value of the
node within the record. The keys on a track were always in order so that a
search key GE CCW would read the correct record from the track. I also
remember that the key for the GVnn portion of the node was reversed by
doing an XC with 8X'FF' so that the largest goovoo number would be at the
beginning of the record, thus easier to find. I.e. to find the current
goovoo, the search ke GE would simply be 8X'00'.

That's what I remember. But I've been getting ECC errors on my memory for a
while now. grin.

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread J R
But maybe I was always wrong.  
 
Maybe it was to give a faster path to generation (0) which would probably 
be the most oft retrieved generation.  
 
 
 Date: Wed, 21 Jan 2009 13:30:49 -0500
 From: jayare...@hotmail.com
 Subject: Re: GDG Question
 To: IBM-MAIN@bama.ua.edu
 
  I spent a *lot* of time in the microfiche, reading the CVOL code. Whatever
  the reason was for concatenating the generation data sets in reverse order,
  I don't think it was for performance. 
 
 
 Been there, done that! I always assumed that the complementing of generation 
 numbers was *specifically* to achieve the reverse sequence returned in 
 GDGALL. 
 
 
 
 
 
_
Hotmail® goes where you go. On a PC, on the Web, on your phone. 
http://www.windowslive-hotmail.com/learnmore/versatility.aspx#mobile?ocid=TXT_TAGHM_WL_HM_versatility_121208
 
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Tom Marchant
On Wed, 21 Jan 2009 13:22:42 -0500, Gerhard Postpischil wrote:

Tom Marchant wrote:
 I spent a *lot* of time in the microfiche, reading the CVOL code.  Whatever
 the reason was for concatenating the generation data sets in reverse order,
 I don't think it was for performance.

The names were stored in the catalog in inverse order (the
 portion was complemented; i.e. C'0123' became
X'0F0E0D0C'). This placed the entries with latest generation
first, and explains why it was easiest to retrieve them in that
sequence.

Yes, I'd forgotten that detail.  Still, it begs the question, *why* was it
stored that way?  I suspect that it was a design decision to simplify the
retrieval of the data sets in reverse order.  I don't think that either
forward or reverse order would offer a significant performance advantage.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Thompson, Steve
-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Tom Marchant
Sent: Wednesday, January 21, 2009 12:46 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: GDG Question

On Wed, 21 Jan 2009 13:22:42 -0500, Gerhard Postpischil wrote:

Tom Marchant wrote:
 I spent a *lot* of time in the microfiche, reading the CVOL code.
Whatever
 the reason was for concatenating the generation data sets in reverse
order,
 I don't think it was for performance.

The names were stored in the catalog in inverse order (the
 portion was complemented; i.e. C'0123' became
X'0F0E0D0C'). This placed the entries with latest generation
first, and explains why it was easiest to retrieve them in that
sequence.

Yes, I'd forgotten that detail.  Still, it begs the question, *why* was
it
stored that way?  I suspect that it was a design decision to simplify
the
retrieval of the data sets in reverse order.  I don't think that either
forward or reverse order would offer a significant performance
advantage.
SNIP

I have an idea:

DSN=A.B.C(0) and DSN=A.B.C(-1)

Probably the two most used forms of access for GDS entries.

Regards,
Steve Thompson
-- Opinions expressed by poster may not represent poster's employer's
views. --

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread esst...@juno.com
According to a good source at IBM, IBM announced a job action this morning, 
where they are letting veterans with 30 - 35 years of experience with big blue 
go.  


Click to book your dream cruise.
http://thirdpartyoffers.juno.com/TGL2141/fc/PnY6rw2if5kMVjYEO3sISOIjiiu06kQci7zRvNSLa2E2jkfLUO67q/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: GDG Question

2009-01-21 Thread Tom Marchant
On Wed, 21 Jan 2009 12:39:39 -0600, John McKown wrote:

On Wed, 21 Jan 2009 11:53:01 -0600, Tom Marchant wrote:

I spent a *lot* of time in the microfiche, reading the CVOL code.  Whatever
the reason was for concatenating the generation data sets in reverse order,
I don't think it was for performance.


Well, I'll defer to you. I did not spend a lot of time in the fiche. What I
remember, and perhaps you can correct me, is that a CVOL was much like a
PDS directory.

Yes.  

The data portion of a record was 256 bytes in length. And it had
an 8 byte hardware key. The key on the record was the highest value of the
node within the record.

Correct

The keys on a track were always in order so that a
search key GE CCW would read the correct record from the track.

Yes.

I also
remember that the key for the GVnn portion of the node was reversed by
doing an XC with 8X'FF' so that the largest goovoo number would be at the
beginning of the record, thus easier to find. I.e. to find the current
goovoo, the search ke GE would simply be 8X'00'.

Yes, or just read the first record.  Perhaps J R is correct and it was done
this way to be able to more efficiently retrieve the current entry.  I was
thinking of a performance benefit in updating the catalog or in reading the
entire group.  Now that I think of it, it would be a lot easier to find an
older generation too.


That's what I remember. But I've been getting ECC errors on my memory for a
while now.

Lucky you.  You have ECC memory.  Mine doesn't even have parity.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMS and System Temporary Datasets

2009-01-21 Thread Greg Shirey
From: IBM Mainframe Discussion List On Behalf Of Rick Fochtman
Sent: Wednesday, January 21, 2009 11:51 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: SMS and System Temporary Datasets

 
   Am I on the right track?  Do most of y'all make System Temporary
dsns
SMS-managed?
  

---unsnip
---
We left them unmanaged and let them go to our few PUBLIC volumes

ick


We did this as well for a long time until we realized that temporary
data sets could also take advantage of the SMS space constraint
settings.  Then we couldn't think of a reason not to do it.

Greg Shirey
Ben E. Keith Co.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMS and System Temporary Datasets

2009-01-21 Thread Gibney, Dave
   We managed them first just like to manual recommends. Routed most
small ones to vio.

Dave Gibney
Information Technology Services
Washington State Univsersity


-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Greg Shirey
Sent: Wednesday, January 21, 2009 11:15 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: SMS and System Temporary Datasets

From: IBM Mainframe Discussion List On Behalf Of Rick Fochtman
Sent: Wednesday, January 21, 2009 11:51 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: SMS and System Temporary Datasets

 
   Am I on the right track?  Do most of y'all make System Temporary
dsns
SMS-managed?
  

---unsnip
---
We left them unmanaged and let them go to our few PUBLIC volumes

ick


We did this as well for a long time until we realized that temporary
data sets could also take advantage of the SMS space constraint
settings.  Then we couldn't think of a reason not to do it.

Greg Shirey
Ben E. Keith Co.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Ted MacNEIL
According to a good source at IBM, IBM announced a job action this morning, 
where they are letting veterans with 30 - 35 years of experience with big blue 
go.  

Always a good idea.
Let the people with the knowledge go.
No wonder nobody understands System z anymore!
(8-{[}

-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Kelman, Tom
Last year we looked at SAS sub-capacity pricing.  What we found out then
is that to get sub-capacity pricing for SAS you need to cut out an LPAR
that runs SAS and hard-cap it.  Then they'll charge you for the MSUs
(MIPS) that is assigned to that LPAR.  You can't run SAS on any other
LPAR. 

Tom Kelman
Enterprise Capacity Planner
Commerce Bank of Kansas City
(816) 760-7632

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
 Behalf Of Ben Alford
 Sent: Wednesday, January 21, 2009 8:43 AM
 To: IBM-MAIN@bama.ua.edu
 Subject: Cost of SAS
 
 Ted MacNeil said:
 SAS is available with sub-capacity licencing options.
 
 Well, maybe for some folks, not for others.
 I checked with SAS (in 2006) and was told that their sub-cap license
 was only available if you moved your license to a larger machine and
 that 50 MSU's was the minimum size.  That was no help for my shop.
 Has SAS changed their stance since 2006?
 
 Ben Alford Enterprise Systems Programming
 University of Tennessee
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html


*
If you wish to communicate securely with Commerce Bank and its
affiliates, you must log into your account under Online Services at 
http://www.commercebank.com or use the Commerce Bank Secure
Email Message Center at https://securemail.commercebank.com

NOTICE: This electronic mail message and any attached files are
confidential. The information is exclusively for the use of the
individual or entity intended as the recipient. If you are not
the intended recipient, any use, copying, printing, reviewing,
retention, disclosure, distribution or forwarding of the message
or any attached file is not authorized and is strictly prohibited.
If you have received this electronic mail message in error, please
advise the sender by reply electronic mail immediately and
permanently delete the original transmission, any attachments
and any copies of this message from your computer system.
*

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


IBM Tivoli Tape Optimizer on z/OS

2009-01-21 Thread Jim Marshall
I am running an IBM VTS-B18 and installed an IBM VTS-B20 with the intent of 
moving all the files over from the B18 to the newer B20. HSM files are easy to 
do as I have cut off allocation to the old and only into the new. Then along 
with recycles, it will all go over. Once the B18 is empty it can be offered to 
the Smithsonian along with its 3590 drives. 

Looked around at products like OpenTech's and CA's tapecopy offering and 
even though they seem to be first class products, the cost is also first-class 
(in the old days it would more than Air-Mail).  I ran across this Tivoli 
utility for 
what I am told is $5K per z9BC. Does any one have any experience with the 
product where it copies files with not much up front work coding JCL, and 
then does all the adjustments with the Catalog and in my case, RMM.  Be 
interested (this can be offlist) in your impressions. 

thanks  jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Mark L. Wheeler
Hal Merritt wrote on 01/21/2009 10:01:16 AM:

 Some shops have found it cost effective to put SAS on a 'penalty
 box'. That's a CPU purchased expressly to run such products.


By implementing Co:Z, we were able to drop our SAS-Graph license on z/OS
and redirect those executions to run on a cheaper platform. Sweet!

Mark Wheeler, 3M Company

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Ted MacNEIL
Last year we looked at SAS sub-capacity pricing.  What we found out then is 
that to get sub-capacity pricing for SAS you need to cut out an LPAR that runs 
SAS and hard-cap it.

We didn't hard-cap it.
We told them what our weights were, and they trusted us (mid-2006).
Of course, I haven't worked there for over 18 months, so I don't know what the 
status is now.
Also, the physical processor never got above 50% busy.
The only reason it was as big as it was, was because our service provider could 
realise savings from the 'technology dividend' upgrading from an 800 to an 890. 


Then they'll charge you for the MSUs (MIPS) that is assigned to that LPAR.  
You can't run SAS on any other LPAR. 

That's a given.

-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Anton Britz
Hi,

I still do not understand how these companies, listed on Wall Street can use 
their Labor force as a Make our Financial Results look good resource ?

Exxon Mobil did it.. Before announcing record profits.. then outsourced to 
Brazil 
etc.
Lehman Bros. did it and then announced record profits but then tried to 
outsource IT to India etc

The CFO is working for all the Investment Consultants by using Loyal 
Employees as “sheep” and for that, the Executives get 20 Million dollar 
bonuses.

If you read the Marketing statement of IBM’s, they made most of their money 
in 'Global services which, I think is re-hiring some consultants, to do 
the 
work.

So, you are telling me, these same executives that receive these huge 
bonuses, can not use these Loyal sheep in the parts of the companies that 
are still financially viably.

What's the point of being loyal to a company then at all ?

If the Japanese can do these things in companies like Toyota, why can IBM 
not do it.

Note: Now I know why the ex-CEO of Lehman brothers got punched in the 
face , in the company GYM by his own employees.

Anton

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Changeman on Z

2009-01-21 Thread Andy Murawski
IBM-Main users,  
 
I am interested in how other shops running Serenas Changeman are managing 
the Changeman files or exceptions if any and why. 


1. Excluding any or all files from GRS, MIM? 

2. Single thread Changeman jobs?

3. Cross system contention issues?   

2. Segregating Changeman files into their own, isolated storage pool? or 
integrate in the shared SMS storage pools? 

3. Any special space management considerations for some or all Changeman 
files?  Exclude from HSM migratrion, space release?  

4. Any  performance issues with large PDSE's vs large PDS's? 
  
Your responses are appreciated, Thanks.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Opinions on next version of TXT2PDF

2009-01-21 Thread Brian Peterson
Leland very kindly gave me an early copy of a version of TXT2PDF which
includes TrueType font support.  For my use, I found that output looks much
better with TrueType than with the default Courier font.  A specific example
I use is to create a report from HCD for my entire z/OS gen.  One complaint
I've always had was that the letter O and the zero were difficult to
distinguish.  Now, with TrueType support, I can pick a font I like better.

Here's what I did - with all credit to Leland for showing me how to do this.
 After Leland showed me how, I tried each of these steps again myself just
to make sure I understood what to do.

1) Find a good font.  Many are out there under generous open source terms. 
An example I'm using now to replace Courier is Bitstream Vera Sans Mono,
which has generous open source terms:
http://www.bitstream.com/font_rendering/products/dev_fonts/vera.html

2) Upload the font to a z/OS data set 'hlq.VERAMONO.TTF' - use binary,
LRECL=27994, BLKSIZE=27998, RECFM=VB.

3) Use the new version of TXT2PDF and add the following keywords (XFONT is
the new keyword where TrueType support is added):
  IN 'hlq.REPORT.LIST' +
  OUT 'hlq.REPORT.PDF' +
  XFONT TT/VERAMONO//'hlq.VERAMONO.TTF' + 
  FONT 6/VERAMONO/100 +  
  COMPRESS 9 +   
  CONFIRM YES +  
  LPI 12 +   
  TM 0.2  BM  0 LM 0.75  RM 0  + 
  ORIENT PORTRAIT  + 
  IFEMPTY BLANK  

In my application, I am trying to format my HCD report as 132 colums, 125
lines per page, with portrait orientation.  Using Courier, the small six
point font is unreadable when printed.  Using this TrueType font, it's very
readable.

I would encourage anyone who's interested in this major (my opinion)
enhancement to TXT2PDF to send Leland an email request for a copy of the new
version.  I'm very impressed with this update!

Brian

On Wed, 19 Nov 2008 15:14:43 -0600, Leland lluc...@homerow.net wrote:

Hi Folks,

I haven't done much with TXT2PDF for like 3 years(!), but I finally got the
itch
to play with it again and have added 2 new features that ppl have asked for in
the past:

TrueType font embedding
Unicode mapping

(snip)
I guess another couple of questions would be to ask if anyone even uses
TXT2PDF
anymore and if they have ever mucked about with the translation tables?

Thanks,

Leland

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Hal Merritt
Consult the US tax code. There you'll find part of the business case to fire 
your sheep then rehire as 'contractors'. 

Much of the rest of the business case lies in the US health care system. Which, 
of course, takes us back to the same remedy.  

But then, we consumers have a part to play when we demand rock bottom prices 
and maximum short term gains on our investments. 

Just my $0.02 


-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Anton Britz
Sent: Wednesday, January 21, 2009 1:55 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

Hi,

I still do not understand how these companies, listed on Wall Street can use 
their Labor force as a Make our Financial Results look good resource ?

Exxon Mobil did it.. Before announcing record profits.. then outsourced to 
Brazil 
etc.
Lehman Bros. did it and then announced record profits but then tried to 
outsource IT to India etc

The CFO is working for all the Investment Consultants by using Loyal 
Employees as sheep and for that, the Executives get 20 Million dollar 
bonuses.

If you read the Marketing statement of IBM's, they made most of their money 
in 'Global services which, I think is re-hiring some consultants, to do 
the 
work.

So, you are telling me, these same executives that receive these huge 
bonuses, can not use these Loyal sheep in the parts of the companies that 
are still financially viably.

What's the point of being loyal to a company then at all ?

If the Japanese can do these things in companies like Toyota, why can IBM 
not do it.

Note: Now I know why the ex-CEO of Lehman brothers got punched in the 
face , in the company GYM by his own employees.

Anton

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Kelman, Tom
From what I understand, that is no longer the case.  Barry supports
running MXG under WPS.  His support is that if you get an error while
running under WPS, then send the data to him, and he'll run it under
SAS.  If it fails under SAS he'll accept the error and fix it.  If it
runs under SAS then you'll need to contact WPS for a fix.  He has also
made some changes to MXG so it will run under WPS such as a special
AUTOEXEC for WPS.  However, there are some things outside of MXG itself
to watch out for with WPS.  For example, I create PDF format reports
using ODS and use PROC REPORT extensively.  Neither of those SAS
functions are supported by WPS yet. 

Tom Kelman
Enterprise Capacity Planner
Commerce Bank of Kansas City
(816) 760-7632

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
 Behalf Of Ted MacNEIL
 Sent: Wednesday, January 21, 2009 10:50 AM
 To: IBM-MAIN@bama.ua.edu
 Subject: Re: Cost of SAS
 
 You may want to consider the alternative product to SAS, which can
 leverage your existing SAS-programmed application code.   World
 Programming's software called WPS http://teamwpc.co.uk/home  may be a
 suitable
 replacement.
 
 The original discussion focused on MXG.
 Dr. Barry has/will not certify WPS with MXG, the last I heard.
 
 Check at www.mxg.com for his current stance.
 -
 Too busy driving to stop for gas!
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
 Search the archives at http://bama.ua.edu/archives/ibm-main.html


*
If you wish to communicate securely with Commerce Bank and its
affiliates, you must log into your account under Online Services at 
http://www.commercebank.com or use the Commerce Bank Secure
Email Message Center at https://securemail.commercebank.com

NOTICE: This electronic mail message and any attached files are
confidential. The information is exclusively for the use of the
individual or entity intended as the recipient. If you are not
the intended recipient, any use, copying, printing, reviewing,
retention, disclosure, distribution or forwarding of the message
or any attached file is not authorized and is strictly prohibited.
If you have received this electronic mail message in error, please
advise the sender by reply electronic mail immediately and
permanently delete the original transmission, any attachments
and any copies of this message from your computer system.
*

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Cost of SAS

2009-01-21 Thread Ted MacNEIL
From what I understand, that is no longer the case.  Barry supports running 
MXG under WPS.

Okay.
I'm quoting from 3 years ago, and, then, he didn't support it at all.
That's why I said check out his site.
I didn't want to put words in his mouth.

-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Jon Brock
In that case, I'd be safe!


snip

Always a good idea.
Let the people with the knowledge go.

/snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Changeman on Z

2009-01-21 Thread Laine, Rogers
 Andy,

My answers are below your questions.

We are using 5.6.1 on z/OS 1.7, soon to be 1.9

Rogers

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Andy Murawski
Sent: Wednesday, January 21, 2009 1:57 PM
To: IBM-MAIN@bama.ua.edu
Subject: Changeman on Z

IBM-Main users,  
 
I am interested in how other shops running Serenas Changeman are
managing the Changeman files or exceptions if any and why. 


1. Excluding any or all files from GRS, MIM? 
We use GRS but do not have any Changeman files defined for GRS.

2. Single thread Changeman jobs?

None that I'm aware of.

3. Cross system contention issues?

We only run it on one lpar.   

2. Segregating Changeman files into their own, isolated storage pool? or

integrate in the shared SMS storage pools?

All Changeman datasets are going to one SMS storage pool. 

3. Any special space management considerations for some or all Changeman

files?  Exclude from HSM migratrion, space release?  

We have none of the above, but we should explore this.

4. Any  performance issues with large PDSE's vs large PDS's?

We are just moving to PDSE's, but not for this application. 
  
Your responses are appreciated, Thanks.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
8
This E-Mail transmission (and/or the documents accompanying it) may contain 
information belonging to the sender which is confidential, privileged and/or 
exempt from disclosure under applicable law. The information is intended only 
for the use of the individual(s) or entity named above. If you are not the 
intended recipient, you are hereby notified that any disclosure, copying, 
distribution or the taking of any action in reliance on the contents of this 
information is strictly prohibited. If you have received this E-Mail 
transmission in error, please immediately notify us by return E-Mail or 
telephone to arrange for return of its contents including any documents.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-21 Thread Jim Marshall
On Mon, 19 Jan 2009 07:41:17 -0600, Chris Mason 
chrisma...@belgacom.net wrote:

Jim

FUD!

There's quite a lot needs straightening out here!

 - etc, etc, etc. 

I appreciate the response from my learned colleague and he is correct about 
SNA Security being available. For one it is hardly every used and its 
encryption has not kept up with all the improvements. But I do contend, the 
thinking that VTAM even being secured by SNA is insufficient. With all the 
capabilities these days of anyone having a legal MVS running system along 
with LU6.2 coming from almost every running UNIX system and not to mention 
Windows systems as SNA Servers, VTAM needs to be protected much more 
than people think. 

Indeed how did we survive all these years without some Firewall product. My 
thought is hardly anyone had a spare IBM 4341 in their basement to even 
attempt it.  I attended a SHARE back in the 1990s and bumped into the IBMer 
who maintained he Bisynchronous protocol when I discussed FAX'ing. It seems 
for 25 years it was stable but someone found a BUG in it which was truly their 
all these years. He had to plug the hole. So just because it has not happened 
in years, does not mean it can not. 

Right now I understand there are 20+ ways which VTAM/SNA systems have 
been compromised. Many because of poor implementations but some just 
because of what it is and how it operates. In the end, I continue to run with 
my SNA Firewall and know things are safe here. So I can only say 

F - Fear and indeed there is
U - Uncertainty no more 
D - Doubt is doubt no more 

Your mileage may vary.jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-21 Thread Hal Merritt
Please give us some details on the compromised VTAM/SNA systems.  

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Jim Marshall
Sent: Wednesday, January 21, 2009 2:25 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: VTAM security issue

On Mon, 19 Jan 2009 07:41:17 -0600, Chris Mason 
chrisma...@belgacom.net wrote:

 ...snip

Right now I understand there are 20+ ways which VTAM/SNA systems have 
been compromised. Many because of poor implementations but some just 
because of what it is and how it operates. In the end, I continue to run with 
my SNA Firewall and know things are safe here. So I can only say 

F - Fear and indeed there is
U - Uncertainty no more 
D - Doubt is doubt no more 

Your mileage may vary.jim 

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread John McKown
On Wed, 21 Jan 2009 13:55:22 -0600, Anton Britz antonbr...@gmail.com wrote:

Hi,

I still do not understand how these companies, listed on Wall Street can use
their Labor force as a Make our Financial Results look good resource ?

snip

Single word: greed. On the part of management and the investors. To the
nether world with the future, give me an immediate payoff. That explains
most of the current US economic meltdown as well. IMO, of course.

Anton

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


zSecure Audit Concern with EJES SVC

2009-01-21 Thread Ulrich Boche
Recently, I ran a zSecure Audit MVS Tables status scan and one of its 
findings was the following:


Instruction scan hit, Updated using SVCUPDTE, Installation-defined 
SVCno, Caller may be unauthorized
 Pri SVC ES# APF Function Appl U Sf Last 
update From Where
  24 255 No1 A1 
 0009D1B0 PVT
 Index Address  Where   Key SP ScanIns  Length AM  Entry at 
 Same addr as  Eye catchers
 CN04FE1DB8 EPLPAM 584 31 EJESSVC 
  .EJESSVC ..092720071430LICENSED MATERIAL, 
PROPERTY OF PHOENIX SOFTWARE INTERNATIONAL -- COPYRIGHT (C) 1990-2007..kx4..
   O   0192EBA4 ENUC RO   2389 31 IGCERROR in 
IEANUC01  SVC 38   .. 0o..
I  00E240E8 PLPA 8 24 IGC0025E 
  ..0414

 Index   Typ APF ESR Att Locks
 Current 3/4 No  No
 Old   2 No  No
 Expect  ??? ???
 Instruction/Str/SVC scan results
 ModeSupRB   No

The output format is probably getting messed up a little by all the 
reformatting done before this posting hits the discussion list but I 
hope you'll still get the point.


My question now is, and maybe Ed Jaffe can take a look at that, what is 
this SVC doing that it gets such bad press from zSecure? I neither have 
the source code of this SVC nor am I among the chosen few who can judge 
the security and integrity of SVCs and other authorized code. However, 
we need to know if there is an issue here.

--
Ulrich

--
Ulrich Boche
SVA GmbH, Germany
IBM PremierBusiness Partner

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zSecure Audit Concern with EJES SVC

2009-01-21 Thread John McKown
Ed will likely need to reply. However, it could be simply that the zSecure
Audit function is simply not aware of what the EJES SVC does and so flags
it. There is an SVC in CICS which could be considered problematic if one did
not know how it worked internally to ensure that it is not called improperly.

--
John 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Anne Lynn Wheeler
The following message is a courtesy copy of an article
that has been posted to bit.listserv.ibm-main as well.


joa...@swbell.net (John McKown) writes:
 Single word: greed. On the part of management and the investors. To the
 nether world with the future, give me an immediate payoff. That explains
 most of the current US economic meltdown as well. IMO, of course.

recent article ...

Corporate Fraud and Misconduct Risks Driven by Pressure to do
'Whatever It Takes'; Fewer episodes reported by companies with ethics
and compliance programs
http://www.financetech.com/news/showArticle.jhtml?articleID=212501185

from above:

Of more than 5,000 U.S. workers polled this summer, 74 percent said
they had personally observed misconduct within their organizations
during the prior 12 months, unchanged from the level reported by KPMG
survey respondents in 2005. Roughly half (46 percent) of respondents
reported that what they observed could cause a significant loss of
public trust if discovered, a figure that rises to 60 percent among
employees working in the banking and finance industry.

... snip ...

misc. past posts mentioning the above article:
http://www.garlic.com/~lynn/2008s.html#27 Garbage in, garbage out trampled by 
Moore's law
http://www.garlic.com/~lynn/2008s.html#29 Let IT run the company!
http://www.garlic.com/~lynn/2008s.html#30 How reliable are the credit rating 
companies? Who is over seeing them?
http://www.garlic.com/~lynn/2008s.html#35 Is American capitalism and greed to 
blame for our financial troubles in the US?
http://www.garlic.com/~lynn/2008s.html#36 What is the top security threat 
prediction of 2009?
http://www.garlic.com/~lynn/2008s.html#47 Executive pay: time for a trim?


then this article from last spring that estimated 1000 executives are
responsible for 80% of the current crisis and that it would go a long
way towards fixing the situation if the gov. could figure out how they
loose their jobs.
http://knowledge.wharton.upenn.edu/article.cfm?articleid=1933

misc. past posts mentioning the above article:
http://www.garlic.com/~lynn/2008g.html#32 independent appraisers
http://www.garlic.com/~lynn/2008g.html#36 Lehman sees banks, others writing 
down $400 bln
http://www.garlic.com/~lynn/2008g.html#44 Fixing finance
http://www.garlic.com/~lynn/2008g.html#52 IBM CEO's remuneration last year ?
http://www.garlic.com/~lynn/2008g.html#66 independent appraisers
http://www.garlic.com/~lynn/2008h.html#89 Credit Crisis Timeline
http://www.garlic.com/~lynn/2008i.html#4 A Merit based system of reward -Does 
anybody (or any executive) really want to be judged on merit?
http://www.garlic.com/~lynn/2008i.html#67 Do you have other examples of how 
people evade taking resp. for risk
http://www.garlic.com/~lynn/2009.html#73 CROOKS and NANNIES: what would Boyd do?
http://www.garlic.com/~lynn/2009.html#77 CROOKS and NANNIES: what would Boyd do?
http://www.garlic.com/~lynn/2009.html#79 The Credit Crunch: Why it happened?
http://www.garlic.com/~lynn/2009.html#85 Banks' Demise: Why have the 
Governments hired the foxes to mend the chicken runs?
http://www.garlic.com/~lynn/2009b.html#1 Are Both The U.S.  UK on the brink of 
debt disaster?

-- 
40+yrs virtualization experience (since Jan68), online at home since Mar70

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: MVS 4 minute 'outage' (final update)

2009-01-21 Thread JE Thinnes
IBM DB2 support determined the 'hang' problem was caused by a DB2 
application program.  Without getting into details, DB2 does a 'suspend for 
commit' that can take 7+ CPU minutes to complete.

DB2 support suggests we fix our application (which I agree we should).  
However, it seems like the DB2 code should not be able to cause a 7+ minute 
MVS 'outage'. 

Am I wrong to think the DB2 code should be fixed too?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Changeman on Z

2009-01-21 Thread Tom Marchant
On Wed, 21 Jan 2009 13:56:30 -0600, Andy Murawski wrote:

I am interested in how other shops running Serenas Changeman are managing
the Changeman files or exceptions if any and why.

I don't have any experience with Changeman except as a user at a previous
job.  However,

2. Segregating Changeman files into their own, isolated storage pool? or
integrate in the shared SMS storage pools?

I strongly disagree with creating isolated storage pools (puddles) for
particular applications.  IMO, SMS works best when we let it manage DASD,
rather than trying to micromanage it.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zSecure Audit Concern with EJES SVC

2009-01-21 Thread Edward Jaffe

Ulrich Boche wrote:
Recently, I ran a zSecure Audit MVS Tables status scan and one of its 
findings was the following:


I have never heard of zSecure.



My question now is, and maybe Ed Jaffe can take a look at that, what 
is this SVC doing that it gets such bad press from zSecure? I neither 
have the source code of this SVC nor am I among the chosen few who can 
judge the security and integrity of SVCs and other authorized code. 
However, we need to know if there is an issue here.


Here is an excerpt from our system integrity statement:

(E)JES maintains MVS system integrity using key controlled storage 
protection, TCB dispatchability management, locking, and other 
facilities provided by the operating system to ensure users and programs:
o cannot bypass the hardware isolation functions that protect other 
users or programs

o cannot obtain control in an authorized execution state
o cannot bypass the system-level security functions provided by IBMs 
Security Server (RACF) or OEM equivalent product


Phoenix Software International began using these programming techniques 
for (E)JES in 1993. Our commitment to MVS system integrity has remained 
unchanged since that time.


Any MVS system integrity exposure found by our customers will be 
resolved as a high-severity problem by Phoenix Software International.


If you would like me to send a letter containing this system integrity 
statement, please send me the contact details off-list.


--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
edja...@phoenixsoftware.com
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Problem using CSI profile to order maint

2009-01-21 Thread John Norgauer
I created a new CSI profile to order a PSP bucket from upgrade  ZOSV1R9 
subset BCP.

However I only received  1 PTF when I downloaded. When I view the order 
number on PSP I see lots of PTF's that I do not have in receive status,
yet they were not on my download list to be received. 

Can anyone shed some light on what I am doing wrong?


John Norgauer
University of California Davis Medical Center
2315 Stockton Blvd
ASB 1300
Sacramento, Ca 95817
916-734-0536

 SYSTEMS PROGRAMMING..  Guilty, until proven innocent !! JN  2004

Hardware eventually breaks - Software eventually works  anon


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Anton Britz
Hi,

Your first article was created by KPMG , an audit, tax and advisory firm in the 
USA.. that we all can trust, such as ACCENTURE... registered in BERMUDA so 
that they pay no taxes in the USA legally.

Sounds like what we heard for 8 years :  Cut Taxes for Corporates and spend 
more because who cares about deficits..

Hopefully Obama will address this issue soon and black-list all these companies 
that pay no taxes but then they might register as a Bank, and claim Bail out 
money and a huge annual performance bonus for their efforts.

Anton

On Wed, 21 Jan 2009 16:16:58 -0500, Anne  Lynn Wheeler 
l...@garlic.com wrote:

recent article ...

Corporate Fraud and Misconduct Risks Driven by Pressure to do
'Whatever It Takes'; Fewer episodes reported by companies with ethics
and compliance programs
http://www.financetech.com/news/showArticle.jhtml?articleID=212501185

from above:

Of more than 5,000 U.S. workers polled this summer, 74 percent said
they had personally observed misconduct within their organizations
during the prior 12 months, unchanged from the level reported by KPMG
survey respondents in 2005. Roughly half (46 percent) of respondents
reported that what they observed could cause a significant loss of
public trust if discovered, a figure that rises to 60 percent among
employees working in the banking and finance industry.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zSecure Audit Concern with EJES SVC

2009-01-21 Thread John McKown
On Wed, 21 Jan 2009 13:43:36 -0800, Edward Jaffe
edja...@phoenixsoftware.com wrote:

Ulrich Boche wrote:
 Recently, I ran a zSecure Audit MVS Tables status scan and one of its
 findings was the following:

I have never heard of zSecure.


IBM's rebranding of the old Consul/RACF products.

--
John

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: MVS 4 minute 'outage' (final update)

2009-01-21 Thread Hal Merritt
Not clear what is broken. The app was exploiting DB2 services in a manner that 
did not suit you, but maybe there was a compelling business need to do just 
that.  

I can recall an app that would bring the whole world to a screeching halt every 
time it ran. Management was pleased that the app got every cycle it could and 
took the complaints as evidence of goodness.  

YMMV. 



-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
JE Thinnes
Sent: Wednesday, January 21, 2009 3:34 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: MVS 4 minute 'outage' (final update)

IBM DB2 support determined the 'hang' problem was caused by a DB2 
application program.  Without getting into details, DB2 does a 'suspend for 
commit' that can take 7+ CPU minutes to complete.

DB2 support suggests we fix our application (which I agree we should).  
However, it seems like the DB2 code should not be able to cause a 7+ minute 
MVS 'outage'. 

Am I wrong to think the DB2 code should be fixed too?

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amid Economic Turbulence, Mainframes Counter IT Cost-Cutting Trend

2009-01-21 Thread Anne Lynn Wheeler
antonbr...@gmail.com (Anton Britz) writes:
 Your first article was created by KPMG , an audit, tax and advisory firm in 
 the 
 USA.. that we all can trust, such as ACCENTURE... registered in BERMUDA so 
 that they pay no taxes in the USA legally.

re:
http://www.garlic.com/~lynn/2009b.html#11 Amid Economic Turbulence, Mainframes 
Counter IT Cost-Cutting Trend

you mean:

GAO Reports Bailout and Tech Firms Love Tax Havens 
http://news.slashdot.org/article.pl?sid=09/01/17/1815221
Bailed-Out Firms Have Tax Havens, GAO Finds
http://www.washingtonpost.com/wp-dyn/content/story/2009/01/16/ST2009011603928.html
International Taxation: Large U.S. Corporations and Federal Contractors
with Subsidiaries in Jurisdictions Listed as Tax Havens or Financial
Privacy Jurisdictions
http://www.gao.gov/products/GAO-09-157

-- 
40+yrs virtualization experience (since Jan68), online at home since Mar70

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: MVS 4 minute 'outage' (final update)

2009-01-21 Thread Art Celestini
Sounds like a form of System Integrity Exposure (in DB2) to me.


At 04:33 PM 1/21/2009, JE Thinnes wrote:
  
IBM DB2 support determined the 'hang' problem was caused by a DB2 
application program.  Without getting into details, DB2 does a 'suspend for 
commit' that can take 7+ CPU minutes to complete.

DB2 support suggests we fix our application (which I agree we should).  
However, it seems like the DB2 code should not be able to cause a 7+ minute 
MVS 'outage'. 

Am I wrong to think the DB2 code should be fixed too?




==
Art Celestini   Celestini Development Services
Phone: 201-670-1674Wyckoff, NJ
=  http://celestini.com  =
Mail sent to the From address  used in this post
will be rejected by our server.   Please send off-
list email to:  ibmmainat-signcelestinidotcom.
==

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: MVS 4 minute 'outage' (final update)

2009-01-21 Thread Mark Zelden
On Wed, 21 Jan 2009 15:33:40 -0600, JE Thinnes jethin...@aol.com wrote:

IBM DB2 support determined the 'hang' problem was caused by a DB2
application program.  Without getting into details, DB2 does a 'suspend for
commit' that can take 7+ CPU minutes to complete.

DB2 support suggests we fix our application (which I agree we should).
However, it seems like the DB2 code should not be able to cause a 7+ minute
MVS 'outage'.

Am I wrong to think the DB2 code should be fixed too?


There is nothing wrong with the DB2 code.   

How often (or not in this case!) was the application doing a commit?  Not
at all (implicit at the end of the process)?

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


  1   2   >