Re: AT-TLS security for SSL sockets

[Gibney, Dave]

   It is a definite requirement that ICSF be up and running before TCPIP 
attempts to initialize SSL. 
   I don't have much (any) automation at that point in the IPL to do any 
waiting for events. I start ICSF with SUB=MASTER and TCPIP waits for JES2 
because it uses SYSOUT. This required me to DUMMY ICSF output (yes I know I 
could use a file), but once you get ICSF configured, it doesn't seem to fail.

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
> Behalf Of Jousma, David
> Sent: Tuesday, February 22, 2011 9:43 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: AT-TLS security for SSL sockets
> 
> "System SSL: ICSF services are not available"
> 
> We had this problem in the past when TCPIP initialized before ICSF did.
> Things may have changed since then, but for us a recycle of TCPIP was
> required.
> 
> _
> Dave Jousma
> Assistant Vice President, Mainframe Services
> david.jou...@53.com
> 1830 East Paris, Grand Rapids, MI  49546 MD RSCB1G
> p 616.653.8429
> f 616.653.8497
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
> Behalf Of Jim McAlpine
> Sent: Tuesday, February 22, 2011 11:56 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: AT-TLS security for SSL sockets
> 
> On Tue, Feb 22, 2011 at 4:43 PM, Rob Schramm 
> wrote:
> 
> > Jim,
> > Looks like the important part is that the SSL environment never fully
> > initialized.  There should be some additional messages in syslog that
> > should be more indicative of the reason for the environmental
> failure.
> >
> > I am including the text from the 5006 AT-TLS return code.
> >
> >  The connection is using a  TTLSEnvironmentAction statement
> >  that failed to initialize a System  SSL environment.
> >
> >  °   Use the syslog to determine why the System SSL environment
> >  failed to initialize.
> >
> >  °   If the TTLSEnvironmentAction statement is in error, make
> >  the necessary corrections. A System SSL environment is
> >  initialized for the corrected TTLSEnvironmentAction
> >  statement and new connections  use that environment.
> >
> >  °   If a SAF configuration change is needed (such as changing a
> >  certificate in the key ring), make that change and then
> >  update the EnvironmentUserInstance
> >  parameter in the TTLSEnvironmentAction
> >  statement to reflect a changed action.  A System SSL
> >  environment is initialized using the modified RACF
> >  configuration and new connections uses that
> >  environment.
> >
> >  If configuring using the z/OS Network Configuration Assistant to
> >  pick up changes made to a key ring, go to the AT-TLS Image Level
> >  Settings panel and click the Reaccess Key Rings button and
> >  update the Instance ID for the changed key ring.
> >
> > Thanks,
> > Rob
> >
> >
> >
> Rob, the only other messages I can see are the following in the TCPIP
> address space -
> 
> System SSL: SHA-1 crypto assist is available
> System SSL: SHA-224 crypto assist is available
> System SSL: SHA-256 crypto assist is available
> System SSL: SHA-384 crypto assist is not available
> System SSL: SHA-512 crypto assist is not available
> System SSL: DES crypto assist is available
> System SSL: DES3 crypto assist is available
> System SSL: AES 128-bit crypto assist is available
> System SSL: AES 256-bit crypto assist is not available
> System SSL: ICSF services are not available
> Do I need to do some further config for ICSF.  I can't see it mentioned
> in
> the redbook.
> 
> Jim McAlpine
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
> 
> This e-mail transmission contains information that is confidential and
> may be privileged.   It is intended only for the addressee(s) named
> above. If you receive this e-mail in error, please do not read, copy or
> disseminate it in any manner. If you are not the intended recipient,
> any disclosure, copying, distribution or use of the contents of this
> information is prohibited. Please reply to the message immediately by
> informing the sender that the message was misdirected. After replying,
> please erase it from your computer system. Your assistance in
> correcting this error is appreciated.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-

Re: AT-TLS security for SSL sockets

[Andrew Armstrong]

Jim,

The EZY1300E message reports that errno 54 (Connection Reset by Peer) was
returned on a RECV socket call by the CICS listener (CSKL). I'd conclude
that the remote client has, for one reason or another, decided to drop the
connection - probably after the SSL handshake as completed since the
listener wouldn't see any action until after that (this would be the
"Application Transparent" part of AT-TLS).

I've found in the past that using Wireshark (www.wireshark.org) really helps
in situations like this. I either use Wireshark to capture the trace on the
client side, or take a CTRACE on z/OS (SYSTCPDA) and use IPCS to format the
trace into SNIFFER format which I download (in binary) to my PC and let
Wireshark decode it.

At least you will see how far the SSL handshake progressed. Unfortunately,
after you have an encrypted connection decoding the payload is
difficult...but not impossible - if you can feed Wireshark your certificate
info then it can decrypt the payload too! Although I have to admit to never
getting that to work.

Another thing you can try is to temporarily turn off encryption by allowing
CipherSpec NULL to be negotiated during the SSL handshake.

BTW what version of z/OS do you have? I remember trying to set up AT-TLS on
a 1.7 system only to find that certificates with keys longer than 1024 bits
were not supported by RACF at that level.

Cheers,
Andrew.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Am I running in an IMS MPR?

[Mike Shorkend]

why not use the INQY DL/I call with the ENVIRON option?
It is a standard, programming language agnostic API.
Look here(watch the wrap)
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DFSAPRH0/1.2.10.3?SHELF=DFSSH0H1&DT=20070907191413&CASE
=

look at table 14

On Wed, Feb 23, 2011 at 4:15 AM, michealbutz wrote:

> I think TCBJPQ is the  EXEC PGM=
>
> CDE
>
>
> So if you are looking to see if running in a CICS Region CDNAME would be
> DFHSIP
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
> Behalf Of Binyamin
> Dissen
> Sent: Tuesday, February 22, 2011 2:51 PM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Am I running in an IMS MPR?
>
>  On Tue, 22 Feb 2011 12:53:45 -0500 Tony Lubrano 
> wrote:
>
> :>Another - and maybe better - way to do it:
>
> :>LRx,PSATOLD-PSA(,R0)
> :>LRx,TCBJSTCB-TCB(,Rx)
> :>LRx,TCBFSA-TCB(,Rx)
> :>LRx,SA_R1(,Rx)
> :>CLC  =CL4'ECP',0(Rx)
> :>JE   >>> IMS BMP
>
> Safe, as worst case R1-> Word
>
> :>CLC  =CL6'DFSRRC',20(Rx)
> :>JE   >>> IMS MPP
>
> Problematic, as R1 area may be too short.
>
> Thank you.
>
> --
> Binyamin Dissen 
> http://www.dissensoftware.com
>
> Director, Dissen Software, Bar & Grill - Israel
>
>
> Should you use the mailblocks package and expect a response from me,
> you should preauthorize the dissensoftware.com domain.
>
> I very rarely bother responding to challenge/response systems,
> especially those from irresponsible companies.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>



-- 
Mike Shorkend
m...@shorkend.com
www.shorkend.com
Tel: +972524208743
Fax: +97239772196

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Ernie Takeuchi]

I think we ought to kill this thread.  Besides we all know he was the Lone 
Ranger’s best friend.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Scott Fagen]

On Tue, 22 Feb 2011 20:27:54 -0500, Joe Testa  wrote:

>The Borough of Manhattan maps to New York County.
> 
I stand corrected.  I was in a hurry to leave New York (State) to head to
Massachusetts (not Mississauga).  Borough of Manhattan = New York County.

Scott Fagen
Chief Architect
CA Mainframe

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Robert A. Rosenberg]

At 17:28 -0500 on 02/22/2011, zMan wrote about Re: "What is Toronto":


Right...how many city airports are actually in that city? Is LAX "in"
LA? is Flushing (JFK) "in" NYC? (It is in a borough)


NYC is all 5 Boroughs (it is not only Manhattan). Both LGA and JFK 
are on Long Island (one in Queens and one in Brooklyn). NY  is the 
USPS designation for Manhattan [Island/County] while NYC covers the 
full 5 Borough area.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Ted MacNEIL]

>Sigh!  Pearson is in Mississauga, which is in Peel Region, which is part of 
>the GTA.  

Not according to the maps I use.
Yes! It's in Peel, but it's near Torbram road, which is the boundary between 
Brampton an Toronto.

It's actually in Malton.
By the time you get to Airport Road, you've left Mississauga.

Used to work just off Indian Line.

But, this is getting way off topic.

-
Ted MacNEIL
eamacn...@yahoo.ca

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Am I running in an IMS MPR?

[michealbutz]

I think TCBJPQ is the  EXEC PGM=

CDE 


So if you are looking to see if running in a CICS Region CDNAME would be DFHSIP 
  

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Binyamin
Dissen
Sent: Tuesday, February 22, 2011 2:51 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Am I running in an IMS MPR?

On Tue, 22 Feb 2011 12:53:45 -0500 Tony Lubrano  wrote:

:>Another - and maybe better - way to do it:

:>LRx,PSATOLD-PSA(,R0)
:>LRx,TCBJSTCB-TCB(,Rx)
:>LRx,TCBFSA-TCB(,Rx)
:>LRx,SA_R1(,Rx)
:>CLC  =CL4'ECP',0(Rx)
:>JE   >>> IMS BMP

Safe, as worst case R1-> Word

:>CLC  =CL6'DFSRRC',20(Rx)
:>JE   >>> IMS MPP

Problematic, as R1 area may be too short.

Thank you.

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[J R]

Sigh!  Pearson is in Mississauga, which is in Peel Region, which is part of the 
GTA.  


 
> Date: Wed, 23 Feb 2011 01:26:59 +
> From: eamacn...@yahoo.ca
> Subject: Re: "What is Toronto"
> To: IBM-MAIN@bama.ua.edu
> 
> >a side note. Person airport is not actually in Toronto but another city 
> >called Mississauga
> 
> It's Pearson.
> And, it's actually not in Mississauga, but in Peel Region, east of 
> Mississauga.
> 
> -
> Ted MacNEIL
> eamacn...@yahoo.ca
  
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Joe Testa]

The Borough of Manhattan maps to New York County.
 
> Date: Tue, 22 Feb 2011 19:15:35 -0600
> From: scottfagen...@yahoo.com
> Subject: Re: "What is Toronto"
> To: IBM-MAIN@bama.ua.edu
> 
> On Tue, 22 Feb 2011 17:28:44 -0500, zMan  wrote:
> 
> [clip]
> 
> Manhattan is merely one of the boroughs, along with Brooklyn, Queens, The
> Bronx, and Staten Island. Each of the boroughs also maps to a county, named
> respectively, Manhattan, Kings, Queens, Bronx, and Richmond.
> 
> None of this really matters to IBM-MAIN, I point it out to show how standard
> taxonomies can fail (state > county > city) and would have to be accounted
> for by exceptions within an algorithm.
> 
> Scott Fagen
> Chief Architect
> CA Mainframe
> 
> 
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Ted MacNEIL]

>Downsview and Buttonville are all in the GTA

Downsview hasn't existed for years.

-
Ted MacNEIL
eamacn...@yahoo.ca

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Ted MacNEIL]

>a side note. Person airport is not actually in Toronto but another city called 
>Mississauga

It's Pearson.
And, it's actually not in Mississauga, but in Peel Region, east of Mississauga.

-
Ted MacNEIL
eamacn...@yahoo.ca

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Scott Fagen]

On Tue, 22 Feb 2011 17:28:44 -0500, zMan  wrote:


>Right...how many city airports are actually in that city? Is LAX "in"
>LA? is Flushing (JFK) "in" NYC? (It is in a borough) 

These kinds of distinctions even trip up people.  First of all, New York
City is comprised of the "Five Boroughs," so, yes JFK is "in" New York City.
 Second, JFK is in Jamaica (Queens), not Flushing.  LGA is in Flushing (also
"in" New York City).

Manhattan is merely one of the boroughs, along with Brooklyn, Queens, The
Bronx, and Staten Island.  Each of the boroughs also maps to a county, named
respectively, Manhattan, Kings, Queens, Bronx, and Richmond.

None of this really matters to IBM-MAIN, I point it out to show how standard
taxonomies can fail (state > county > city) and would have to be accounted
for by exceptions within an algorithm.

Scott Fagen
Chief Architect
CA Mainframe

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Lloyd Fuller]

zMan wrote:

On Tue, Feb 22, 2011 at 4:37 PM, Robert A. Rosenberg  wrote:

At 15:28 -0500 on 02/22/2011, Galambos, Robert wrote about Re: "What is
Toronto":


as a side note. Person airport is not actually in Toronto but another city
called Mississauga

IOW: It is an Toronto area airport like Newark/Liberty (which is in Newark
NJ) is an NYC area airport (which is supplied along with JFK and La Guardia)
when you ask for NYC as opposed to JFK/LGA/EWR when searching online for
flights.


Right...how many city airports are actually in that city? Is LAX "in"
LA? is Flushing (JFK) "in" NYC? (It is in a borough) Is Dulles "in"
DC? Heck, National (Reagan) is only technically in DC (if memory
serves, it's officially in DC even though geographically it's not,
since it's across the river). SFO isn't. Midway is, but ORD really
isn't. And so forth...


Actually Reagan is in DC, just in the wrong century.  I believe it was 
slightly before the Civil War that DC gave Arlington back to Virginia. 
And, unless things have changed since I worked at T7, Reagan is in 
Arlington.  :)  (Lots has changed there.  The rental car places are now 
where T7 used to be.)


Lloyd

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Greg Shirey]

Right - D/FW Airport is neither in Dallas nor Fort Worth. 

Greg  

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
zMan
Sent: Tuesday, February 22, 2011 4:29 PM


Right...how many city airports are actually in that city? Is LAX "in"
LA? is Flushing (JFK) "in" NYC? (It is in a borough) Is Dulles "in"
DC? Heck, National (Reagan) is only technically in DC (if memory
serves, it's officially in DC even though geographically it's not,
since it's across the river). SFO isn't. Midway is, but ORD really
isn't. And so forth...

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[zMan]

On Tue, Feb 22, 2011 at 4:37 PM, Robert A. Rosenberg  wrote:
> At 15:28 -0500 on 02/22/2011, Galambos, Robert wrote about Re: "What is
> Toronto":
>
>> as a side note. Person airport is not actually in Toronto but another city
>> called Mississauga
>
> IOW: It is an Toronto area airport like Newark/Liberty (which is in Newark
> NJ) is an NYC area airport (which is supplied along with JFK and La Guardia)
> when you ask for NYC as opposed to JFK/LGA/EWR when searching online for
> flights.

Right...how many city airports are actually in that city? Is LAX "in"
LA? is Flushing (JFK) "in" NYC? (It is in a borough) Is Dulles "in"
DC? Heck, National (Reagan) is only technically in DC (if memory
serves, it's officially in DC even though geographically it's not,
since it's across the river). SFO isn't. Midway is, but ORD really
isn't. And so forth...
-- 
zMan -- "I've got a mainframe and I'm not afraid to use it"

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Clifford McNeill]

> One less factor for Toronto or one more for Chicago might have flipped the 
> order and won instead of lost the $947 bet
 
I guess being a U.S. City would have made the difference.  That factor was 
overlooked.
 
Cliff McNeill 
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[J R]

Toronto City Centre (Billy Bishop) Airport is in downtown Toronto.  (Kind of.)  

Pearson, Downsview and Buttonville are all in the GTA.  


 
> Date: Tue, 22 Feb 2011 16:37:27 -0500
> From: hal9...@panix.com
> Subject: Re: "What is Toronto"
> To: IBM-MAIN@bama.ua.edu
> 
> At 15:28 -0500 on 02/22/2011, Galambos, Robert wrote about Re: "What 
> is Toronto":
> 
> >as a side note. Person airport is not actually in Toronto but 
> >another city called Mississauga
> 
> IOW: It is an Toronto area airport like Newark/Liberty (which is in 
> Newark NJ) is an NYC area airport (which is supplied along with JFK 
> and La Guardia) when you ask for NYC as opposed to JFK/LGA/EWR when 
> searching online for flights.
  
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Givens, Dennis W.]

I have been involved with this discussion a few times in the past. I have been 
fortunate to resolve it by indicating that the install libraries would contain 
the release/version identifier but the run time libraries would not.


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Eric Bielefeld
Sent: Tuesday, February 22, 2011 3:25 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: cascading catalog dataset aliases.

The obvious advantage to #2 is that it gives you the benefit of allowing you to 
change hundreds or thousands of JCL members for every install.

--
Eric Bielefeld
Systems Programmer


 Ted MacNEIL  wrote:
> >If management requires the dsnames to include the version number
>
> I have two concerns with this:
> 1. Shouldn't management tell you what to do, not how to do it?
> 2. What is the benefit of having versions in the Production dsn?
>
> -
> Ted MacNEIL
> eamacn...@yahoo.ca
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

The information contained in this e-mail may contain confidential and/or 
privileged information and is intended for the sole use of the intended 
recipient. If you are not the intended recipient, you are hereby notified that 
any unauthorized use, disclosure, distribution or copying of this communication 
is strictly prohibited. If you received this e-mail in error, please reply to 
sender and destroy or delete the message and any attachments. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Robert A. Rosenberg]

At 15:28 -0500 on 02/22/2011, Galambos, Robert wrote about Re: "What 
is Toronto":


as a side note. Person airport is not actually in Toronto but 
another city called Mississauga


IOW: It is an Toronto area airport like Newark/Liberty (which is in 
Newark NJ) is an NYC area airport (which is supplied along with JFK 
and La Guardia) when you ask for NYC as opposed to JFK/LGA/EWR when 
searching online for flights.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Robert A. Rosenberg]

At 16:20 -0600 on 02/21/2011, Scott Fagen wrote about Re: "What is Toronto":


You can't use a question that Watson missed (like the Toronto one)


Chicago was #2 on Watson's list (at 11%) and was just slightly lower 
ranked than Toronto (at 14%) so it ALMOST got it right (ie: One less 
factor for Toronto or one more for Chicago might have flipped the 
order and won instead of lost the $947 bet). The fact is that the 
correct answer WAS in the top 3 unlike other misses where NONE of the 
top 3 were correct or were even on track is the important point. It 
had the right answer but due to the ranking did not select it.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Eric Bielefeld]

The obvious advantage to #2 is that it gives you the benefit of allowing you to 
change hundreds or thousands of JCL members for every install.

--
Eric Bielefeld
Systems Programmer


 Ted MacNEIL  wrote: 
> >If management requires the dsnames to include the version number
> 
> I have two concerns with this:
> 1. Shouldn't management tell you what to do, not how to do it?
> 2. What is the benefit of having versions in the Production dsn?
> 
> -
> Ted MacNEIL
> eamacn...@yahoo.ca
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Galambos, Robert]

No sched commercial flights from buttonville

Robert Galambos CIPP/C  CIPP/IT 

Compuware Senior Technical Specialist 
IBM Certified Solutions Expert - 
DB2 UDB for OS/390 Database Administration
Certified Information Privacy Professional/Canada 
Certified Information Privacy Professional/Information Technology
robert.galam...@compuware.com
 
  
Tel: +1 905 886 7000 
Toll Free: +1 800 263 7189
Fax: +1 905 886 7023
Quebec: +1 877-281-1888 
  
Compuware  Canada

Service is our best product 



 
The contents of this e-mail are intended for the named addressee only. It 
contains information that may be confidential. Unless you are the named 
addressee or an authorized designee, you may not copy or use it, or disclose it 
to anyone else. If you received it in error please notify us immediately and 
then destroy it.

From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Ted MacNEIL
Sent: Monday, February 21, 2011 3:37 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: "What is Toronto"

>So Toronto Airport (YTZ) is the smallest of the 3 Toronto Airports?

I think Buttonville is smaller than Toronto Island.

-
Ted MacNEIL
eamacn...@yahoo.ca

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Tom Marchant]

On Tue, 22 Feb 2011 08:10:55 -0600, McKown, John wrote:

>Suppose the DSN is SYS3.SOMEPROD.V1R1M0.LINKLIB. Make an 
>alias called SYS3.SOMEPROD.PROD.LINKLIB which "points" to the 
>SYS3.SOMEPROD.V1R1M0.LINKLIB
>
>Now, the SYMBOLICRELATE alias occurred to me. That's where 
>an ALIAS, such as SYS3.SOMEPROD.PROD.LINKLIB can include 
>the &SYSNAME in the actual dataset name.

You can use any symbol in the name.

>DEF ALIAS(NAME(SYS3.SOMEPROD.PROD.LINKLIB) 
>  SYMBOLICRELATE(SYS3.SOMEPROD.SYS&SYSNAME..LINKLIB))

You want:

DEF ALIAS(NAME(SYS3.SOMEPROD.PROD.LINKLIB) 
  SYMBOLICRELATE(SYS3.SOMEPROD.&SOMEPRD..LINKLIB))

Note that the alias is eight characters, including the ampersand.

> I don't know of a supported way to change the value of 
>&SOMEPROD without an IPL. This is on z/OS 1.10.

Dennis mentioned SYMUPDTE.  Search the archives for it.  It is now
called IEASYMUP.  I have used it and it works well for this purpose.

See:
http://www.redbooks.ibm.com/abstracts/SG247328.html

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Galambos, Robert]

as a side note. Person airport is not actually in Toronto but another city 
called Mississauga

which is a city onto itself, has the longest elected mayor I believe anywhere, 
at least in north America

Robert Galambos CIPP/C  CIPP/IT 

Compuware Senior Technical Specialist 
IBM Certified Solutions Expert - 
DB2 UDB for OS/390 Database Administration
Certified Information Privacy Professional/Canada 
Certified Information Privacy Professional/Information Technology
robert.galam...@compuware.com
 
  
Tel: +1 905 886 7000 
Toll Free: +1 800 263 7189
Fax: +1 905 886 7023
Quebec: +1 877-281-1888 
  
Compuware  Canada

Service is our best product 



 
The contents of this e-mail are intended for the named addressee only. It 
contains information that may be confidential. Unless you are the named 
addressee or an authorized designee, you may not copy or use it, or disclose it 
to anyone else. If you received it in error please notify us immediately and 
then destroy it.

From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
J R
Sent: Monday, February 21, 2011 1:40 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: "What is Toronto"

> Buttonville -- which is now closed, I believe.

Not yet ... but it will be in a year or so.  

 
 
> Date: Mon, 21 Feb 2011 18:37:03 +
> From: eamacn...@yahoo.ca
> Subject: Re: "What is Toronto"
> To: IBM-MAIN@bama.ua.edu
> 
> >does Toronto meet any of the other criteria - at least two airports, the 
> >largest named after a WWII hero and the second largest named 
> after a WWII battle?
> 
> No.
> There are four commercial airports in the Greater Toronto Area (GTA).
> Pearson International Airport -- named after our first Prime Minister to 
> receive a Nobel Peace Prize.
> Buttonville -- which is now closed, I believe.
> Toronto Island Airport and
> John C. Munro Airport in Hamilton -- named after a deceased Federal Health 
> Minister who also represented one of the Hamilton ridings.
> 
> The problem with all the hype, is what I told my family & friends: a computer 
> is only as good as its programming and data.
> Obviously, somebody loaded ther wrong information.
> Now, a lot think that Watson is/was a bit of a joke, regardless of its 
> overall success.
> 
> Here's a bit of trivia:
> 
> Please phrase your response in the form of a question:
> 
> 70.
> 
> 
> -
> Ted MacNEIL
> eamacn...@yahoo.ca
  
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Galambos, Robert]

Just a note buttonville is still open.

Robert Galambos CIPP/C  CIPP/IT 

Compuware Senior Technical Specialist 
IBM Certified Solutions Expert - 
DB2 UDB for OS/390 Database Administration
Certified Information Privacy Professional/Canada 
Certified Information Privacy Professional/Information Technology
robert.galam...@compuware.com
 
  
Tel: +1 905 886 7000 
Toll Free: +1 800 263 7189
Fax: +1 905 886 7023
Quebec: +1 877-281-1888 
  
Compuware  Canada

Service is our best product 



 
The contents of this e-mail are intended for the named addressee only. It 
contains information that may be confidential. Unless you are the named 
addressee or an authorized designee, you may not copy or use it, or disclose it 
to anyone else. If you received it in error please notify us immediately and 
then destroy it.

From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Ted MacNEIL
Sent: Monday, February 21, 2011 1:37 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: "What is Toronto"

>does Toronto meet any of the other criteria - at least two airports, the 
>largest named after a WWII hero and the second largest named 
after a WWII battle?

No.
There are four commercial airports in the Greater Toronto Area (GTA).
Pearson International Airport -- named after our first Prime Minister to 
receive a Nobel Peace Prize.
Buttonville -- which is now closed, I believe.
Toronto Island Airport and
John C. Munro Airport in Hamilton -- named after a deceased Federal Health 
Minister who also represented one of the Hamilton ridings.

The problem with all the hype, is what I told my family & friends: a computer 
is only as good as its programming and data.
Obviously, somebody loaded ther wrong information.
Now, a lot think that Watson is/was a bit of a joke, regardless of its overall 
success.

Here's a bit of trivia:

Please phrase your response in the form of a question:

70.


-
Ted MacNEIL
eamacn...@yahoo.ca

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[McKown, John]

> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Ted MacNEIL
> Sent: Tuesday, February 22, 2011 1:38 PM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: cascading catalog dataset aliases.
> 
> >If management requires the dsnames to include the version number
> 
> I have two concerns with this:
> 1. Shouldn't management tell you what to do, not how to do it?

Our manager is also a techie and still needs to do techie stuff because we are 
short handed. He is still a good techie.

> 2. What is the benefit of having versions in the Production dsn?
> 
> -
> Ted MacNEIL
> eamacn...@yahoo.ca

It is immediately apparent from the DSN which version of the program is 
running. I.e. we get asked: "What version of ... are you running?" Instead of 
needing to look it up in some document (assuming we are not up on the version), 
we can use ISPF option 3.4 to look at SYS3. and the 3rd node is 
the VersionReleaseModification level. Also, the job has this in the JESMSGS 
dataset and JCL so we know what release was run even if we don't have a report. 
Or if the report does not contain the release information. Not all products put 
the release information in the report itself. We sometimes keep multiple 
versions around for backup.

--
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Am I running in an IMS MPR?

[Binyamin Dissen]

On Tue, 22 Feb 2011 12:53:45 -0500 Tony Lubrano  wrote:

:>Another - and maybe better - way to do it:

:>LRx,PSATOLD-PSA(,R0)
:>LRx,TCBJSTCB-TCB(,Rx)
:>LRx,TCBFSA-TCB(,Rx)
:>LRx,SA_R1(,Rx)
:>CLC  =CL4'ECP',0(Rx)
:>JE   >>> IMS BMP

Safe, as worst case R1-> Word

:>CLC  =CL6'DFSRRC',20(Rx)
:>JE   >>> IMS MPP

Problematic, as R1 area may be too short.

Thank you.

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Am I running in an IMS MPR?

[Chris Craddock]

On Tue, Feb 22, 2011 at 11:19 AM, Tony Lubrano wrote:

> Yes...
>
> LRx,PSAAOLD-PSA(,R0)
> LRx,ASCBASXB-ASCB(,Rx)
> LRx,ASXBITCB-ASXB(,Rx)
> LRx,TCBFSA-TCB(,Rx)
> LRx,SA_R1(,Rx)
> CLC  =CL4'ECP',0(Rx)
> JE   >>> IMS BMP
> CLC  =CL6'DFSRRC',20(Rx)
> JE   >>> IMS MPP
>
> If you want, you can do a BLDL on DFSPRPX0.  If it is found in the JPA, you
> are likely to be running in an IMS dependent region. Or, you can follow the
> CDE chain(s) to locate the module.



Just to nitpick slightly;

CSVQUERY would be a better choice than BLDL or chasing CDEs. Also,
 regardless of which path you take to find the job step TCB, it isn't wise
to assume either that there is a first save area, or that the contents of
the R1 slot point to anything at all. If it is a real job step then there
will always be an FSA but below that all bets are off. You need to apply a
sniff test before referencing those data areas, or wrap a little recovery
around the instruction path above.



-- 
This email might be from the
artist formerly known as CC
(or not) You be the judge.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Ted MacNEIL]

>If management requires the dsnames to include the version number

I have two concerns with this:
1. Shouldn't management tell you what to do, not how to do it?
2. What is the benefit of having versions in the Production dsn?

-
Ted MacNEIL
eamacn...@yahoo.ca

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

System symbols in dynamic allocation

[Charles Mills]

Do the same restrictions on static system symbols exist for dynamic
allocation as exist for JCL in the same environment -- in other words, in
DSN allocation in a job you can use &SYSUID but not &SYSNAME?

That seems to be what I am seeing but I don't see that restriction
explicitly in the Authorized Assembler Services Guide. It seems to imply a
lack of restrictions: "You can use system symbols to represent data set
names, member names, and path names in text units." It refers you over to
Initialization and Tuning and the restriction for dynamic allocation may be
stated there but I have not found it.

Would I be correct in inferring then that you could use &SYSNAME in dynamic
allocation from within a started task?

Charles 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Rob Schramm]

John,

I think that the aliases can work.  Not so sure about the dynamic portion.
Seems like it would be easier to create a short procedure for each product
that would fix up the aliases by environment that would be used when you are
doing maintenance to a product.

SYS1.V1R0.LINKLIB might have an alias of SYS1.PROD.LINKLIB
SYS1.V1R1.LINKLIB might have an alias of SYS1.DEV.LINKLIB.  Ultimately, the
migration would have SYS1.V1R1.LINKLIB have 2 aliases .. one for dev .. one
for prod.  And if you wanted to keep things consistent.. then one for your
tech services system(s).

I would have the JCL point to some DEV or PROD version as well.  1 JCL
change.. lots of alias changes.  Although.. is it a "pick your poison" that
works best for you and your environment.  If you have strong control of your
JCL... maybe JCL change is a better choice.  If you need to "slide" things
in... and avoid JCL .. then aliases may be the trick.

I like catalog tricks in general .. they are tons of fun.  Of course there
are those that are driven crazy by them.  I used to be a "stupid catalog
tricks" (Dave Letterman anyone?) were "always the way" kind of person.  But
I think now that it is  better to step back and think about your environment
and what will work best for the environment.  

Cheers,
Rob



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf
Of Don Imbriale
Sent: Tuesday, February 22, 2011 1:11 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: cascading catalog dataset aliases.

If management requires the dsnames to include the version number, then
doesn't the JCL have to be changed anyway to avoid confusion?  For example,
if you're running V1R1 and want to upgrade to V1R2, if you use aliases then
the JCL would say V1R1 but would resolve to V1R2.  And you know who gets the
blame when there's a problem.

- Don Imbriale

On Tue, Feb 22, 2011 at 9:52 AM, McKown, John  wrote:

> But then the job must run on that system. I would like the option to 
> run on any system using the identical JCL, but using the proper 
> system-specific version of the DSN.
>
> OK, I'm being extreme for my needs. But imagine a parallel sysplex 
> running
> 6 systems. I guess those shops properly design things so that system 
> specific datasets are not needed. Or they exist with the same DSN, but 
> in different catalogs.
>
> I'll likely go with the system-specific ALIAS. If someone runs the job 
> on the wrong system, then that's their worry.
>
> --
> John McKown
> Systems Engineer IV
> IT
>
> Administrative Services Group
>
> HealthMarkets(r)
>
> 9151 Boulevard 26 * N. Richland Hills * TX 76010
> (817) 255-3225 phone *
> john.mck...@healthmarkets.com * www.HealthMarkets.com
>
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: RACF Resource Classes

[Givens, Dennis W.]

Thanks to all for your experiences and insight.


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Robert S. Hansel (RSH)
Sent: Monday, February 21, 2011 5:16 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: RACF Resource Classes

Tom,

CA-1's FORRES and NORNORES and the equivalent STGADMIN.EDG profiles for RMM
govern the use of DD statement parameter EXPDT=98000. Use of BLP is
controlled by FACILITY class resource ICHBLP with RMM and CA@APE class
resources BLPRES and BLPNORES with CA-1.

Dennis,

Very few installations fully implement the TAPEVOL class. By fully
implement, I mean define a TAPEVOL profile for every tape with a TVTOC (Tape
Volume Table of Contents) that lists every dataset on the tape by its full
44-character dsname so that RACF verifies the user is properly specifying
the dsname when accessing a dataset on the tape. Most installations rely on
their tape management system to verify the proper dsname is used. While the
RACF TVTOC dsname validation check is somewhat more secure than the one done
by the tape management system, few installations are willing to incur the
overhead of maintaining and processing TAPEVOL profiles for this added level
of protection.

On the other hand, many installations do activate the TAPEVOL class just to
enable use of FACILITY class profile ICHBLP. They don't bother to create
TAPEVOL profiles. Others activate TAPEVOL in conjunction with using HSM's
SETSYS TAPESECURITY(RACF or RACFINCLUDE) to have HSM automatically create
and maintain TAPEVOL profiles to guard its own tapes.

All this assumes PARMLIB DEVSUPxx TAPEAUTHDSN=NO is in effect; otherwise,
the TAPEVOL profiles are essentially ignored.

Regards, Bob

Robert S. Hansel
Lead RACF Specialist
RSH Consulting, Inc.
617-969-8211
www.linkedin.com/in/roberthansel
www.rshconsulting.com

-
2011 RACF Training
> Audit for Results   - Boston - APR 12-14
> Intro & Basic Admin - Boston - MAY 10-12
Visit our website for registration & details
-

-Original Message-
Date:Sun, 20 Feb 2011 19:58:48 -0500
From:Pinnacle 
Subject: Re: RACF Resource Classes

- Original Message -
From: "Givens, Dennis W." 
Newsgroups: bit.listserv.ibm-main
Sent: Friday, February 18, 2011 3:25 PM
Subject: RACF Resource Classes


>I am working on the resolution of exceptions produced by the recently
>activated Health Checker feature on a Z/OS 1.10 system.
> Specifically the following 2 checks:
>
>  CHECK(IBMRACF,RACF_TAPEVOL_ACTIVE)
>  Check Severity: Medium
> IRRH229E The class TAPEVOL is not active.
>Explanation:  The class is not active. IBM recommends that the
> security administrator at your
> installation activate this class and define in it the profiles to properly
> protect your system.
>

Dennis,

I've implemented both RMM and CA-1 in many different shops and I've never
implemented TAPEVOL.  It's extremely difficult to administer, and better
controls are available.  Not sure why Bob Hansel and Russ Witt say you need
it for ICHBLP with RMM.  RMM added STGADMIN.EDG profiles to handle BLP tapes
that mirror the FORRES and FORNORES controls of CA-1, and that's all I've
ever needed to implement for BLP under RMM.  I don't know about the new
TAPAUTHDSN control that they reference, I have no experience with it.

Regards,
Tom Conley

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

The information contained in this e-mail may contain confidential and/or 
privileged information and is intended for the sole use of the intended 
recipient. If you are not the intended recipient, you are hereby notified that 
any unauthorized use, disclosure, distribution or copying of this communication 
is strictly prohibited. If you received this e-mail in error, please reply to 
sender and destroy or delete the message and any attachments. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: AT-TLS security for SSL sockets

[Rob Schramm]

Jim,

Have you checked syslogd?

Rob

On Tue, Feb 22, 2011 at 12:42 PM, Jousma, David  wrote:
> "System SSL: ICSF services are not available"
>
> We had this problem in the past when TCPIP initialized before ICSF did.  
> Things may have changed since then, but for us a recycle of TCPIP was 
> required.
>
> _
> Dave Jousma
> Assistant Vice President, Mainframe Services
> david.jou...@53.com
> 1830 East Paris, Grand Rapids, MI  49546 MD RSCB1G
> p 616.653.8429
> f 616.653.8497
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf 
> Of Jim McAlpine
> Sent: Tuesday, February 22, 2011 11:56 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: AT-TLS security for SSL sockets
>
> On Tue, Feb 22, 2011 at 4:43 PM, Rob Schramm  wrote:
>
>> Jim,
>> Looks like the important part is that the SSL environment never fully
>> initialized.  There should be some additional messages in syslog that
>> should be more indicative of the reason for the environmental failure.
>>
>> I am including the text from the 5006 AT-TLS return code.
>>
>>  The connection is using a  TTLSEnvironmentAction statement
>>  that failed to initialize a System  SSL environment.
>>
>>  °   Use the syslog to determine why the System SSL environment
>>      failed to initialize.
>>
>>  °   If the TTLSEnvironmentAction statement is in error, make
>>      the necessary corrections. A System SSL environment is
>>      initialized for the corrected TTLSEnvironmentAction
>>      statement and new connections  use that environment.
>>
>>  °   If a SAF configuration change is needed (such as changing a
>>      certificate in the key ring), make that change and then
>>      update the EnvironmentUserInstance
>>      parameter in the TTLSEnvironmentAction
>>      statement to reflect a changed action.  A System SSL
>>      environment is initialized using the modified RACF
>>      configuration and new connections uses that
>>      environment.
>>
>>  If configuring using the z/OS Network Configuration Assistant to
>>  pick up changes made to a key ring, go to the AT-TLS Image Level
>>  Settings panel and click the Reaccess Key Rings button and
>>  update the Instance ID for the changed key ring.
>>
>> Thanks,
>> Rob
>>
>>
>>
> Rob, the only other messages I can see are the following in the TCPIP
> address space -
>
> System SSL: SHA-1 crypto assist is available
> System SSL: SHA-224 crypto assist is available
> System SSL: SHA-256 crypto assist is available
> System SSL: SHA-384 crypto assist is not available
> System SSL: SHA-512 crypto assist is not available
> System SSL: DES crypto assist is available
> System SSL: DES3 crypto assist is available
> System SSL: AES 128-bit crypto assist is available
> System SSL: AES 256-bit crypto assist is not available
> System SSL: ICSF services are not available
> Do I need to do some further config for ICSF.  I can't see it mentioned in
> the redbook.
>
> Jim McAlpine
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>
> This e-mail transmission contains information that is confidential and may be 
> privileged.   It is intended only for the addressee(s) named above. If you 
> receive this e-mail in error, please do not read, copy or disseminate it in 
> any manner. If you are not the intended recipient, any disclosure, copying, 
> distribution or use of the contents of this information is prohibited. Please 
> reply to the message immediately by informing the sender that the message was 
> misdirected. After replying, please erase it from your computer system. Your 
> assistance in correcting this error is appreciated.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>



-- 
Rob Schramm
Senior Systems Engineer
w: 513.305.6224

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Don Imbriale]

If management requires the dsnames to include the version number, then
doesn't the JCL have to be changed anyway to avoid confusion?  For example,
if you're running V1R1 and want to upgrade to V1R2, if you use aliases then
the JCL would say V1R1 but would resolve to V1R2.  And you know who gets the
blame when there's a problem.

- Don Imbriale

On Tue, Feb 22, 2011 at 9:52 AM, McKown, John  wrote:

> But then the job must run on that system. I would like the option to run on
> any system using the identical JCL, but using the proper system-specific
> version of the DSN.
>
> OK, I'm being extreme for my needs. But imagine a parallel sysplex running
> 6 systems. I guess those shops properly design things so that system
> specific datasets are not needed. Or they exist with the same DSN, but in
> different catalogs.
>
> I'll likely go with the system-specific ALIAS. If someone runs the job on
> the wrong system, then that's their worry.
>
> --
> John McKown
> Systems Engineer IV
> IT
>
> Administrative Services Group
>
> HealthMarkets(r)
>
> 9151 Boulevard 26 * N. Richland Hills * TX 76010
> (817) 255-3225 phone *
> john.mck...@healthmarkets.com * www.HealthMarkets.com
>
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Am I running in an IMS MPR?

[Tony Lubrano]

Another - and maybe better - way to do it:

LRx,PSATOLD-PSA(,R0)
LRx,TCBJSTCB-TCB(,Rx)
LRx,TCBFSA-TCB(,Rx)
LRx,SA_R1(,Rx)
CLC  =CL4'ECP',0(Rx)
JE   >>> IMS BMP
CLC  =CL6'DFSRRC',20(Rx)
JE   >>> IMS MPP

There are products that attach separate tasks - some of them jobstep tasks - 
that might cause you problems coming through the ASXBITCB.

Tony Lubrano
Product Author
NEON Enterprise Software, LLC.
p: 281 207 4922 f: 281 207 4973
tony.lubr...@neon.com
 
What is zPrime?  Find out at www.zprime.com or just ask us!
 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Tony Lubrano
Sent: Tuesday, February 22, 2011 11:19 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Am I running in an IMS MPR?

Yes... 

LRx,PSAAOLD-PSA(,R0)
LRx,ASCBASXB-ASCB(,Rx)
LRx,ASXBITCB-ASXB(,Rx)
LRx,TCBFSA-TCB(,Rx)
LRx,SA_R1(,Rx)
CLC  =CL4'ECP',0(Rx)
JE   >>> IMS BMP
CLC  =CL6'DFSRRC',20(Rx)
JE   >>> IMS MPP

If you want, you can do a BLDL on DFSPRPX0.  If it is found in the JPA, you are 
likely to be running in an IMS dependent region. Or, you can follow the CDE 
chain(s) to locate the module.

Tony Lubrano
Product Author
NEON Enterprise Software, LLC.
p: 281 207 4922 f: 281 207 4973
tony.lubr...@neon.com
 
What is zPrime?  Find out at www.zprime.com or just ask us!
 
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Binyamin Dissen
Sent: Tuesday, February 22, 2011 10:58 AM
To: IBM-MAIN@bama.ua.edu
Subject: Am I running in an IMS MPR?

Is there a better way than checking the job step program?

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: AT-TLS security for SSL sockets

[Jousma, David]

"System SSL: ICSF services are not available"

We had this problem in the past when TCPIP initialized before ICSF did.  Things 
may have changed since then, but for us a recycle of TCPIP was required.

_
Dave Jousma
Assistant Vice President, Mainframe Services
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB1G
p 616.653.8429
f 616.653.8497

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Jim McAlpine
Sent: Tuesday, February 22, 2011 11:56 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: AT-TLS security for SSL sockets

On Tue, Feb 22, 2011 at 4:43 PM, Rob Schramm  wrote:

> Jim,
> Looks like the important part is that the SSL environment never fully
> initialized.  There should be some additional messages in syslog that
> should be more indicative of the reason for the environmental failure.
>
> I am including the text from the 5006 AT-TLS return code.
>
>  The connection is using a  TTLSEnvironmentAction statement
>  that failed to initialize a System  SSL environment.
>
>  °   Use the syslog to determine why the System SSL environment
>  failed to initialize.
>
>  °   If the TTLSEnvironmentAction statement is in error, make
>  the necessary corrections. A System SSL environment is
>  initialized for the corrected TTLSEnvironmentAction
>  statement and new connections  use that environment.
>
>  °   If a SAF configuration change is needed (such as changing a
>  certificate in the key ring), make that change and then
>  update the EnvironmentUserInstance
>  parameter in the TTLSEnvironmentAction
>  statement to reflect a changed action.  A System SSL
>  environment is initialized using the modified RACF
>  configuration and new connections uses that
>  environment.
>
>  If configuring using the z/OS Network Configuration Assistant to
>  pick up changes made to a key ring, go to the AT-TLS Image Level
>  Settings panel and click the Reaccess Key Rings button and
>  update the Instance ID for the changed key ring.
>
> Thanks,
> Rob
>
>
>
Rob, the only other messages I can see are the following in the TCPIP
address space -

System SSL: SHA-1 crypto assist is available
System SSL: SHA-224 crypto assist is available
System SSL: SHA-256 crypto assist is available
System SSL: SHA-384 crypto assist is not available
System SSL: SHA-512 crypto assist is not available
System SSL: DES crypto assist is available
System SSL: DES3 crypto assist is available
System SSL: AES 128-bit crypto assist is available
System SSL: AES 256-bit crypto assist is not available
System SSL: ICSF services are not available
Do I need to do some further config for ICSF.  I can't see it mentioned in
the redbook.

Jim McAlpine

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Writing a Systems Programmer Resume

[Richards, Robert B.]

I met Joe about 31 years ago. I can highly recommend *him* in addition to the 
services he provides.

Bob

> snippage

I'd known Joe for nearly 20 years, but we'd never met, so I attended his 
session in Boston.  HIGHLY recommended.  Joe's suggestions will give you a 
leg up in this increasingly brutal job market.

Regards,
Tom Conley 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Am I running in an IMS MPR?

[Tony Lubrano]

Yes... 

LRx,PSAAOLD-PSA(,R0)
LRx,ASCBASXB-ASCB(,Rx)
LRx,ASXBITCB-ASXB(,Rx)
LRx,TCBFSA-TCB(,Rx)
LRx,SA_R1(,Rx)
CLC  =CL4'ECP',0(Rx)
JE   >>> IMS BMP
CLC  =CL6'DFSRRC',20(Rx)
JE   >>> IMS MPP

If you want, you can do a BLDL on DFSPRPX0.  If it is found in the JPA, you are 
likely to be running in an IMS dependent region. Or, you can follow the CDE 
chain(s) to locate the module.

Tony Lubrano
Product Author
NEON Enterprise Software, LLC.
p: 281 207 4922 f: 281 207 4973
tony.lubr...@neon.com
 
What is zPrime?  Find out at www.zprime.com or just ask us!
 
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Binyamin Dissen
Sent: Tuesday, February 22, 2011 10:58 AM
To: IBM-MAIN@bama.ua.edu
Subject: Am I running in an IMS MPR?

Is there a better way than checking the job step program?

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: IEFSSREQ returning 8 in SSOBRETN under JES3

[Charles Mills]

Thanks. Was looking at the wrong return code 8.

It's like pulling teeth getting information from the customer, but it
appears that perhaps the "what changed" is a move from z/OS 1.9 to 1.11.
That would certainly be consistent with a storage area that used to be big
enough but no longer is.

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf
Of Binyamin Dissen
Sent: Tuesday, February 22, 2011 8:42 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: IEFSSREQ returning 8 in SSOBRETN under JES3

SSVINSTR EQU   8  Not enough storage to finish request
* Use SSVIRLEN to determine correct
*

 amount required

On Tue, 22 Feb 2011 08:21:59 -0800 Charles Mills  wrote:

:>I've got code that has been running with no problem for years on various
:>JES2 systems. (It may also be working on some JES3 systems -- as a vendor
:>you hear mostly about the problems, not always the details of the
:>successes.)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Am I running in an IMS MPR?

[Binyamin Dissen]

Is there a better way than checking the job step program?

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: AT-TLS security for SSL sockets

[Jim McAlpine]

On Tue, Feb 22, 2011 at 4:43 PM, Rob Schramm  wrote:

> Jim,
> Looks like the important part is that the SSL environment never fully
> initialized.  There should be some additional messages in syslog that
> should be more indicative of the reason for the environmental failure.
>
> I am including the text from the 5006 AT-TLS return code.
>
>  The connection is using a  TTLSEnvironmentAction statement
>  that failed to initialize a System  SSL environment.
>
>  °   Use the syslog to determine why the System SSL environment
>  failed to initialize.
>
>  °   If the TTLSEnvironmentAction statement is in error, make
>  the necessary corrections. A System SSL environment is
>  initialized for the corrected TTLSEnvironmentAction
>  statement and new connections  use that environment.
>
>  °   If a SAF configuration change is needed (such as changing a
>  certificate in the key ring), make that change and then
>  update the EnvironmentUserInstance
>  parameter in the TTLSEnvironmentAction
>  statement to reflect a changed action.  A System SSL
>  environment is initialized using the modified RACF
>  configuration and new connections uses that
>  environment.
>
>  If configuring using the z/OS Network Configuration Assistant to
>  pick up changes made to a key ring, go to the AT-TLS Image Level
>  Settings panel and click the Reaccess Key Rings button and
>  update the Instance ID for the changed key ring.
>
> Thanks,
> Rob
>
>
>
Rob, the only other messages I can see are the following in the TCPIP
address space -

System SSL: SHA-1 crypto assist is available
System SSL: SHA-224 crypto assist is available
System SSL: SHA-256 crypto assist is available
System SSL: SHA-384 crypto assist is not available
System SSL: SHA-512 crypto assist is not available
System SSL: DES crypto assist is available
System SSL: DES3 crypto assist is available
System SSL: AES 128-bit crypto assist is available
System SSL: AES 256-bit crypto assist is not available
System SSL: ICSF services are not available
Do I need to do some further config for ICSF.  I can't see it mentioned in
the redbook.

Jim McAlpine

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

AUTO: Paul Baxendale is out of the office (returning 01/03/2011)

[Paul Baxendale]

I am out of the office until 01/03/2011.

I will respond to your message on my return.

For urgent queries, contact Kim Hutchinson who will do her best to help.


Note: This is an automated response to your message  "Re: Does ROUND
dataset allocation mean cylinder boundary?" sent on 22/2/11 16:47:39.

This is the only notification you will receive while this person is away.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Does ROUND dataset allocation mean cylinder boundary?

[David Andrews]

On Tue, 2011-02-22 at 11:06 -0500, Bill Fairchild wrote:
> One purpose of ROUND was to reduce DASD revolutions that did not
> transfer any data.

According to my fading memory, Back In The Day a limited set file mask
had to be imposed on CCW strings against non-cylinder-aligned extents.
Hence those unappetizing standalone seeks.

Define Extent was a goodness.

-- 
David Andrews
A. Duda & Sons, Inc.
david.andr...@duda.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: AT-TLS security for SSL sockets

[Rob Schramm]

Jim,
Looks like the important part is that the SSL environment never fully
initialized.  There should be some additional messages in syslog that
should be more indicative of the reason for the environmental failure.

I am including the text from the 5006 AT-TLS return code.

 The connection is using a  TTLSEnvironmentAction statement
 that failed to initialize a System  SSL environment.

 °   Use the syslog to determine why the System SSL environment
 failed to initialize.

 °   If the TTLSEnvironmentAction statement is in error, make
 the necessary corrections. A System SSL environment is
 initialized for the corrected TTLSEnvironmentAction
 statement and new connections  use that environment.

 °   If a SAF configuration change is needed (such as changing a
 certificate in the key ring), make that change and then
 update the EnvironmentUserInstance
 parameter in the TTLSEnvironmentAction
 statement to reflect a changed action.  A System SSL
 environment is initialized using the modified RACF
 configuration and new connections uses that
 environment.

 If configuring using the z/OS Network Configuration Assistant to
 pick up changes made to a key ring, go to the AT-TLS Image Level
 Settings panel and click the Reaccess Key Rings button and
 update the Instance ID for the changed key ring.

Thanks,
Rob

On Tue, Feb 22, 2011 at 11:08 AM, Jim McAlpine  wrote:
>
> On Thu, Feb 17, 2011 at 1:38 PM, Rob Schramm  wrote:
>
> > Jim,
> >
> > Did you find the "TCPIP Implementation Vol 4 Policy Based Network Security"
> > Redbook?  There are quite a few versions.  Here is a link to the 1.11 one
> > http://www.redbooks.ibm.com/abstracts/sg247801.html?Open
> >
> > It will help you
> > get some of the predecessor parts going with the policy agent and there is
> > a
> > whole chapter on AT-TLS.  If you print it.. it can be used to weight the
> > bed
> > of a truck to help in snowy conditions.   ;-)
> >
> > Rob Schramm
> >
> > OK, I've used the above redbook to configure what I think is required for
> the certificates and the policy agent and have added TTLS to the TCPCONFIG
> statement.  I'm trying to use a site certificate and have used the jobs in
> chapter 3 of the above to create the necessary certificates.  However when
> I try and connect, I get the following message in the TCPIP address space -
>
> BPXF024I (TCPIP) Feb 22 15:24:49 TTLSÝ65578¨: 16:24:49 TCPIP  543
> EZD1286I TTLS Error GRPID: 0001 ENVID: 0005 CONNID: 247E
> LOCAL: 192.168.126.161..3026 REMOTE: 10.2.1.6..2904 JOBNAME: Z30DCICS
> USERID: Z30DUSR RULE: CSKLrule  RC: 5006 Initial Handshake 
> 
> and the following in the CICS TCPIP output -
>
> EZY1300E 02/22/11 16:22:02 RECV FAILURE TRANSID= CSKL TASKID= 036L
> ERRNO=     54 INET ADDR= 10.2.1.6 PORT=   2879
>
> Any ideas how where the problem might be ???
>
> Jim McAlpine
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html



--
Rob Schramm
Senior Systems Engineer
w: 513.305.6224

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: IEFSSREQ returning 8 in SSOBRETN under JES3

[Binyamin Dissen]

SSVINSTR EQU   8  Not enough storage to finish request
* Use SSVIRLEN to determine correct
*

 amount required

On Tue, 22 Feb 2011 08:21:59 -0800 Charles Mills  wrote:

:>I've got code that has been running with no problem for years on various
:>JES2 systems. (It may also be working on some JES3 systems -- as a vendor
:>you hear mostly about the problems, not always the details of the
:>successes.)
:>
:>It uses the IEFSSREQ macro with function code SSOBSSVI (54) to retrieve JES
:>"version" information. (The exact information I am after is the JES node
:>name, which I find by parsing the returned "version" information looking for
:>'JES_NODE='.
:>
:>SSOBSSIB is set to zero = "use life of job SSIB."
:>
:>At one particular site the code is failing. I get a zero back in R15 from
:>IEFSSREQ but SSOBRETN contains an 8, which says the subsystem is known but
:>not up at the moment. FWIW it is a JES3 site.
:>
:>It's "the middle of the day." It is not during system initialization or
:>termination. It's a normal batch job running under JES3.
:>
:>What should I be looking for? (Please recall that the code has been working
:>for years without error on various systems.)
:>
:>I have it on my to-do list to test the code myself under JES3 but moving a
:>system -- even a test system -- from JES2 to JES3 is not always something
:>one can do on short notice.
:>
:>Charles 
:>
:>--
:>For IBM-MAIN subscribe / signoff / archive access instructions,
:>send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
:>Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

IEFSSREQ returning 8 in SSOBRETN under JES3

[Charles Mills]

I've got code that has been running with no problem for years on various
JES2 systems. (It may also be working on some JES3 systems -- as a vendor
you hear mostly about the problems, not always the details of the
successes.)

It uses the IEFSSREQ macro with function code SSOBSSVI (54) to retrieve JES
"version" information. (The exact information I am after is the JES node
name, which I find by parsing the returned "version" information looking for
'JES_NODE='.

SSOBSSIB is set to zero = "use life of job SSIB."

At one particular site the code is failing. I get a zero back in R15 from
IEFSSREQ but SSOBRETN contains an 8, which says the subsystem is known but
not up at the moment. FWIW it is a JES3 site.

It's "the middle of the day." It is not during system initialization or
termination. It's a normal batch job running under JES3.

What should I be looking for? (Please recall that the code has been working
for years without error on various systems.)

I have it on my to-do list to test the code myself under JES3 but moving a
system -- even a test system -- from JES2 to JES3 is not always something
one can do on short notice.

Charles 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Writing a Systems Programmer Resume

[Pinnacle]

- Original Message - 
From: "Joe Gallaher" 

Newsgroups: bit.listserv.ibm-main
Sent: Tuesday, February 22, 2011 9:55 AM
Subject: Writing a Systems Programmer Resume



I would like to invite anyone attending next week's SHARE conference in
Anaheim to come to my session on "How to Write a Resume for a Mainframe
Systems Programmer" (session 8903).  It is the third time I have given 
this

presentation at SHARE and it contains a lot of useful information and
samples for the aspiring resume writer.  Here is a link to my session:

http://share.confex.com/share/116/webprogram/Session8903.html

If you cannot attend, feel free to send me an email and I will send you a
link to my PowerPoint slides (which will be available after Feb. 28).  I
look forward to seeing you Monday!



I'd known Joe for nearly 20 years, but we'd never met, so I attended his 
session in Boston.  HIGHLY recommended.  Joe's suggestions will give you a 
leg up in this increasingly brutal job market.


Regards,
Tom Conley 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: AT-TLS security for SSL sockets

[Jim McAlpine]

On Thu, Feb 17, 2011 at 1:38 PM, Rob Schramm  wrote:

> Jim,
>
> Did you find the "TCPIP Implementation Vol 4 Policy Based Network Security"
> Redbook?  There are quite a few versions.  Here is a link to the 1.11 one
> http://www.redbooks.ibm.com/abstracts/sg247801.html?Open
>
> It will help you
> get some of the predecessor parts going with the policy agent and there is
> a
> whole chapter on AT-TLS.  If you print it.. it can be used to weight the
> bed
> of a truck to help in snowy conditions.   ;-)
>
> Rob Schramm
>
> OK, I've used the above redbook to configure what I think is required for
the certificates and the policy agent and have added TTLS to the TCPCONFIG
statement.  I'm trying to use a site certificate and have used the jobs in
chapter 3 of the above to create the necessary certificates.  However when
I try and connect, I get the following message in the TCPIP address space -

BPXF024I (TCPIP) Feb 22 15:24:49 TTLSÝ65578¨: 16:24:49 TCPIP  543
EZD1286I TTLS Error GRPID: 0001 ENVID: 0005 CONNID: 247E
LOCAL: 192.168.126.161..3026 REMOTE: 10.2.1.6..2904 JOBNAME: Z30DCICS
USERID: Z30DUSR RULE: CSKLrule  RC: 5006 Initial Handshake 

and the following in the CICS TCPIP output -

EZY1300E 02/22/11 16:22:02 RECV FAILURE TRANSID= CSKL TASKID= 036L
ERRNO= 54 INET ADDR= 10.2.1.6 PORT=   2879

Any ideas how where the problem might be ???

Jim McAlpine

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Does ROUND dataset allocation mean cylinder boundary?

[Bill Fairchild]

CONTIG and ROUND are/were independent, but they both addressed I/O performance 
improvement.  One purpose of ROUND was to reduce DASD revolutions that did not 
transfer any data.  CONTIG would provide the same result, but less often than 
ROUND, by reducing the number of times that the EOV service would have to be 
called to switch from one allocated extent to the next.  The EOV macro results 
in an SVC, which, in the ancient days of OS/360 and SLEDs, might have involved 
loading the SVC code into the transient SVC area again (not sure which SVC type 
it was), which could result in an extra revolution on the user's data device.

Bill Fairchild
Rocket Software

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
john gilmore
Sent: Wednesday, February 02, 2011 12:21 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Does ROUND dataset allocation mean cylinder boundary?

The two requirements--those of contiguity and rounding to a cylinder 
boundary--are/were independent ones.
 
John Gilmore Ashland, MA 01721-1817 USA

  
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at 
http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Writing a Systems Programmer Resume

[Joe Gallaher]

I would like to invite anyone attending next week's SHARE conference in
Anaheim to come to my session on "How to Write a Resume for a Mainframe
Systems Programmer" (session 8903).  It is the third time I have given this
presentation at SHARE and it contains a lot of useful information and
samples for the aspiring resume writer.  Here is a link to my session:

http://share.confex.com/share/116/webprogram/Session8903.html

If you cannot attend, feel free to send me an email and I will send you a
link to my PowerPoint slides (which will be available after Feb. 28).  I
look forward to seeing you Monday!

Joe Gallaher
j...@spci.net
www.SPCI.net
323-822-1569

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[McKown, John]

But then the job must run on that system. I would like the option to run on any 
system using the identical JCL, but using the proper system-specific version of 
the DSN.

OK, I'm being extreme for my needs. But imagine a parallel sysplex running 6 
systems. I guess those shops properly design things so that system specific 
datasets are not needed. Or they exist with the same DSN, but in different 
catalogs.

I'll likely go with the system-specific ALIAS. If someone runs the job on the 
wrong system, then that's their worry.

--
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 

> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Donald Johnson
> Sent: Tuesday, February 22, 2011 8:40 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: cascading catalog dataset aliases.
> 
> Another option is to use another alias - 
> SYS3.SOMEPROD.DEVL.LINKLIB for use
> in development, separate from SYS3.SOMEPROD.PROD.LINKLIB in 
> production. Most
> of the time, these both will point to the same base file 
> name, but in this
> case, .DEVL will have the new version, and .PROD will have the current
> version.
> 
> *don*
> 
> On Tue, Feb 22, 2011 at 9:21 AM, Staller, Allan 
> wrote:
> 
> > I suggest the JCL include statement. Much easier to use and less to
> > change (After the initial pain).
> > Change the JCLLIB statement to point to the appropriate 
> STEPLIBS member.
> > Modify the STEPLIBS member as required.
> >
> > e.g.
> >
> > // JCLLIB ORDER=(PROCLIB1, PROCLIB2)
> >
> > //STEP1 EXEC PGM=SOMETHING
> >  INCLUDE MEMBER=STEPLIBS
> > // rest of jcl
> >
> > MEMBER STEPLIBS in PROCLIB1
> > //STEPLIB DD DSN= SYS3.SOMEPROD.V1R1M0.LINKLIB
> > //   DD 
> >
> > MEMBER STEPLIBS in PROCLIB2
> > //STEPLIB DD DSN= SYS3.SOMEPROD.V2R1M0.LINKLIB
> > //   DD 
> >
> >
> > HTH.
> >
> > 
> > Now, if the product goes into the LNKLST, implementing on 
> Development is
> > easy. Just update the LNKLST on Development and run. This 
> is because we
> > don't use STEPLIB in this case. But not all products go on 
> the LNKLST.
> > Our shop standard, which is set in stone (at least until we change
> > management again), is that the release level of the product must be
> > included in the DSN so that it is obvious. This means when 
> we upgrade,
> > we do JCL changes to point to the new DSN. Well, my first 
> thought was to
> > have an alias. Suppose the DSN is 
> SYS3.SOMEPROD.V1R1M0.LINKLIB. Make an
> > alias called SYS3.SOMEPROD.PROD.LINKLIB which "points" to the
> > SYS3.SOMEPROD.V1R1M0.LINKLIB. The same for any other DSNs other than
> > LINKLIB. The refer to SYS3.SOMEPROD.PROD.LINKLIB in the 
> JCL. Hum. The
> > problem occurs in that the SYS3 catalog is shared. So if I want to
> > upgrade to V1R2M0 in the Development system only, I have a 
> problem. I
> > need to change the JCL for testing.
> > 
> >
> > 
> --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@bama.ua.edu with the message: GET 
> IBM-MAIN INFO
> > Search the archives at http://bama.ua.edu/archives/ibm-main.html
> >
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
> 
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Dennis Trojak]

John,
 We use the symbolic relate with systems symbols and then just use
SYMUPDTE to change the symbols as needed w/o IPL on each system.
DEFINE ALIAS  (NAME(SYS5.DB2.DBP0.SDSNEXIT) - 
   SYMBOLICRELATE(SYS5.DB2.&DBPRL..&DBPSS..&DBPLV..SDSNEXIT) ) 
Dennis  

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of McKown, John
Sent: Tuesday, February 22, 2011 8:11 AM
To: IBM-MAIN@bama.ua.edu
Subject: cascading catalog dataset aliases.

This is likely another weird idea of mine. We have a two system basic
sysplex. One system is designated as Production. The other as
Development. We also have a "sandbox" z/OS which is not in the sysplex
for sysprogs only. Our method to install a new product or release of an
existing product is: (1) install and test on sandbox; (2) install and
test on Development; (3) install and test on Production.

Now, if the product goes into the LNKLST, implementing on Development is
easy. Just update the LNKLST on Development and run. This is because we
don't use STEPLIB in this case. But not all products go on the LNKLST.
Our shop standard, which is set in stone (at least until we change
management again), is that the release level of the product must be
included in the DSN so that it is obvious. This means when we upgrade,
we do JCL changes to point to the new DSN. Well, my first thought was to
have an alias. Suppose the DSN is SYS3.SOMEPROD.V1R1M0.LINKLIB. Make an
alias called SYS3.SOMEPROD.PROD.LINKLIB which "points" to the
SYS3.SOMEPROD.V1R1M0.LINKLIB. The same for any other DSNs other than
LINKLIB. The refer to SYS3.SOMEPROD.PROD.LINKLIB in the JCL. Hum. The
problem occurs in that the SYS3 catalog is shared. So if I want to
upgrade to V1R2M0 in the Development system only, I have a problem. I
need to change the JCL for testing.

Now, the SYMBOLICRELATE alias occurred to me. That's where an ALIAS,
such as SYS3.SOMEPROD.PROD.LINKLIB can include the &SYSNAME in the
actual dataset name.

DEF ALIAS(NAME(SYS3.SOMEPROD.PROD.LINKLIB)
SYMBOLICRELATE(SYS3.SOMEPROD.SYS&SYSNAME..LINKLIB))

The problem is that I now have two versions of the same DSN. And they
don't contain the version number. So it would be nice if I could have
the above, and then do:

DEF ALIAS(NAME(SYS3.SOMEPROD.SYSDEV1.LINKLIB)
RELATE(SYS3.SOMEPROD.V1R2M0.LINKLIB))

and

DEF ALIAS(NAME(SYS3.SOMEPROD.SYSPRD1.LINKLIB)
RELATE(SYS3.SOMEPROD.V1R1M0.LINKLIB))

Then SYS3.SOMEPROD.PROD.LINKLIB would resolve to the proper DSN
dependant on the executing system. I do undertand that I could have a
different static symbolic such as &SOMEPROD on each system containing
and use the SYMBOLICRELATE using &SOMEPROD instead of SYS&SYSNAME . But
I don't know of a supported way to change the value of &SOMEPROD without
an IPL. This is on z/OS 1.10.

John McKown
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone *
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or
proprietary information. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the
original message. HealthMarkets(r) is the brand name for products
underwritten and issued by the insurance subsidiaries of HealthMarkets,
Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life
Insurance Company of TennesseeSM and The MEGA Life and Health Insurance
Company.SM


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[McKown, John]

> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Staller, Allan
> Sent: Tuesday, February 22, 2011 8:22 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: cascading catalog dataset aliases.
> 
> I suggest the JCL include statement. Much easier to use and less to
> change (After the initial pain).
> Change the JCLLIB statement to point to the appropriate 
> STEPLIBS member.
> Modify the STEPLIBS member as required.
> 
> e.g.
> 
> // JCLLIB ORDER=(PROCLIB1, PROCLIB2) 
> 
> //STEP1 EXEC PGM=SOMETHING
>  INCLUDE MEMBER=STEPLIBS
> // rest of jcl
> 
> MEMBER STEPLIBS in PROCLIB1
> //STEPLIB DD DSN= SYS3.SOMEPROD.V1R1M0.LINKLIB
> //   DD 
> 
> MEMBER STEPLIBS in PROCLIB2
> //STEPLIB DD DSN= SYS3.SOMEPROD.V2R1M0.LINKLIB
> //   DD 
> 
> 
> HTH.

I considered that. But the PROCLIB is resolved at JCL read time, not at 
execution time. So if I submit the JCL on Prod (where CA-7 runs), it uses the 
Prod version of the PROC. Even if the job is SYSAFF'd to run on Development. 
This method would work if Prod and Development ran the identical versions at 
all times. And would save JCL changes for a simple case. But the simple use of 
an ALIAS would do the same. The desire is to use the correct DSN dependant on 
the running system at the time of execution. Without any JCL change needed. If 
fact, to have it run with the system-dependant DSN even if the job's SYSAFF is 
changed dynamically. In program terms: "Late Binding" or "Dynamic Binding" 
where the DSN name is not resolved until the last possible instant.

--
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Donald Johnson]

Another option is to use another alias - SYS3.SOMEPROD.DEVL.LINKLIB for use
in development, separate from SYS3.SOMEPROD.PROD.LINKLIB in production. Most
of the time, these both will point to the same base file name, but in this
case, .DEVL will have the new version, and .PROD will have the current
version.

*don*

On Tue, Feb 22, 2011 at 9:21 AM, Staller, Allan wrote:

> I suggest the JCL include statement. Much easier to use and less to
> change (After the initial pain).
> Change the JCLLIB statement to point to the appropriate STEPLIBS member.
> Modify the STEPLIBS member as required.
>
> e.g.
>
> // JCLLIB ORDER=(PROCLIB1, PROCLIB2)
>
> //STEP1 EXEC PGM=SOMETHING
>  INCLUDE MEMBER=STEPLIBS
> // rest of jcl
>
> MEMBER STEPLIBS in PROCLIB1
> //STEPLIB DD DSN= SYS3.SOMEPROD.V1R1M0.LINKLIB
> //   DD 
>
> MEMBER STEPLIBS in PROCLIB2
> //STEPLIB DD DSN= SYS3.SOMEPROD.V2R1M0.LINKLIB
> //   DD 
>
>
> HTH.
>
> 
> Now, if the product goes into the LNKLST, implementing on Development is
> easy. Just update the LNKLST on Development and run. This is because we
> don't use STEPLIB in this case. But not all products go on the LNKLST.
> Our shop standard, which is set in stone (at least until we change
> management again), is that the release level of the product must be
> included in the DSN so that it is obvious. This means when we upgrade,
> we do JCL changes to point to the new DSN. Well, my first thought was to
> have an alias. Suppose the DSN is SYS3.SOMEPROD.V1R1M0.LINKLIB. Make an
> alias called SYS3.SOMEPROD.PROD.LINKLIB which "points" to the
> SYS3.SOMEPROD.V1R1M0.LINKLIB. The same for any other DSNs other than
> LINKLIB. The refer to SYS3.SOMEPROD.PROD.LINKLIB in the JCL. Hum. The
> problem occurs in that the SYS3 catalog is shared. So if I want to
> upgrade to V1R2M0 in the Development system only, I have a problem. I
> need to change the JCL for testing.
> 
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: cascading catalog dataset aliases.

[Staller, Allan]

I suggest the JCL include statement. Much easier to use and less to
change (After the initial pain).
Change the JCLLIB statement to point to the appropriate STEPLIBS member.
Modify the STEPLIBS member as required.

e.g.

// JCLLIB ORDER=(PROCLIB1, PROCLIB2) 

//STEP1 EXEC PGM=SOMETHING
 INCLUDE MEMBER=STEPLIBS
// rest of jcl

MEMBER STEPLIBS in PROCLIB1
//STEPLIB DD DSN= SYS3.SOMEPROD.V1R1M0.LINKLIB
//   DD 

MEMBER STEPLIBS in PROCLIB2
//STEPLIB DD DSN= SYS3.SOMEPROD.V2R1M0.LINKLIB
//   DD 


HTH.


Now, if the product goes into the LNKLST, implementing on Development is
easy. Just update the LNKLST on Development and run. This is because we
don't use STEPLIB in this case. But not all products go on the LNKLST.
Our shop standard, which is set in stone (at least until we change
management again), is that the release level of the product must be
included in the DSN so that it is obvious. This means when we upgrade,
we do JCL changes to point to the new DSN. Well, my first thought was to
have an alias. Suppose the DSN is SYS3.SOMEPROD.V1R1M0.LINKLIB. Make an
alias called SYS3.SOMEPROD.PROD.LINKLIB which "points" to the
SYS3.SOMEPROD.V1R1M0.LINKLIB. The same for any other DSNs other than
LINKLIB. The refer to SYS3.SOMEPROD.PROD.LINKLIB in the JCL. Hum. The
problem occurs in that the SYS3 catalog is shared. So if I want to
upgrade to V1R2M0 in the Development system only, I have a problem. I
need to change the JCL for testing.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

SSL with Unix System Services

[Roger Davis]

Has anyone used Unix System Services Assembler to use SSL over TCP/IP?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

cascading catalog dataset aliases.

[McKown, John]

This is likely another weird idea of mine. We have a two system basic sysplex. 
One system is designated as Production. The other as Development. We also have 
a "sandbox" z/OS which is not in the sysplex for sysprogs only. Our method to 
install a new product or release of an existing product is: (1) install and 
test on sandbox; (2) install and test on Development; (3) install and test on 
Production.

Now, if the product goes into the LNKLST, implementing on Development is easy. 
Just update the LNKLST on Development and run. This is because we don't use 
STEPLIB in this case. But not all products go on the LNKLST. Our shop standard, 
which is set in stone (at least until we change management again), is that the 
release level of the product must be included in the DSN so that it is obvious. 
This means when we upgrade, we do JCL changes to point to the new DSN. Well, my 
first thought was to have an alias. Suppose the DSN is 
SYS3.SOMEPROD.V1R1M0.LINKLIB. Make an alias called SYS3.SOMEPROD.PROD.LINKLIB 
which "points" to the SYS3.SOMEPROD.V1R1M0.LINKLIB. The same for any other DSNs 
other than LINKLIB. The refer to SYS3.SOMEPROD.PROD.LINKLIB in the JCL. Hum. 
The problem occurs in that the SYS3 catalog is shared. So if I want to upgrade 
to V1R2M0 in the Development system only, I have a problem. I need to change 
the JCL for testing.

Now, the SYMBOLICRELATE alias occurred to me. That's where an ALIAS, such as 
SYS3.SOMEPROD.PROD.LINKLIB can include the &SYSNAME in the actual dataset name.

DEF ALIAS(NAME(SYS3.SOMEPROD.PROD.LINKLIB) 
SYMBOLICRELATE(SYS3.SOMEPROD.SYS&SYSNAME..LINKLIB))

The problem is that I now have two versions of the same DSN. And they don't 
contain the version number. So it would be nice if I could have the above, and 
then do:

DEF ALIAS(NAME(SYS3.SOMEPROD.SYSDEV1.LINKLIB) 
RELATE(SYS3.SOMEPROD.V1R2M0.LINKLIB))

and

DEF ALIAS(NAME(SYS3.SOMEPROD.SYSPRD1.LINKLIB) 
RELATE(SYS3.SOMEPROD.V1R1M0.LINKLIB))

Then SYS3.SOMEPROD.PROD.LINKLIB would resolve to the proper DSN dependant on 
the executing system. I do undertand that I could have a different static 
symbolic such as &SOMEPROD on each system containing and use the SYMBOLICRELATE 
using &SOMEPROD instead of SYS&SYSNAME . But I don't know of a supported way to 
change the value of &SOMEPROD without an IPL. This is on z/OS 1.10.

John McKown
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone *
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto" - IBM's "response"

[Marna WALLE]

All,
Like Walt, I'm so spokesperson for Watson, but I have seen a video on
YouTube that helped explain the final Jeopardy! response of Toronto.  Go here:
http://www.youtube.com/watch?v=lI-M7O_bRNg
3 minutes into the 10 minute video is where it starts.  Around 4 minutes,
although we never saw it on TV, you can see what the other responses (and
percentages) Watson had for the final answer.

For those that don't want to watch a 10 minute video, here's the executive
summary:
1)  There are many Torontos in the US
2)  Toronto, Canada has a baseball team in an American baseball league.  
3)  The three final answers - all which were not a high confidence level and
were well below the "buzz level" were:
a) Toronto:  14
b) Chicago:  11
c) Omaha:  10

-Marna WALLE
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: IBM Service Request Issue

[Elardus Engelbrecht]

Shmuel Metz (Seymour J.) wrote:
>>Yup. Any 'Human Interface Device' including speech recognition software 
are  just like those mentioned.

>The keyboard forces you to take your hands off the keyboard?

Hmm, that is not what I was thinking or suggesting. I was just agree-ing with 
your statement.

I was thinking in the line of interfaces in the place of keyboards, for 
example, 
for disabled persons and persons without hands. These alternatives to 
keyboards are NOT questionable as suggested earlier.

If you have alternatives to keyboards and the GUIs can accomodate these 
alternatives, then it can be a good thing or not. It all depends on the user 
and 
how productive he/she/it is. 

So, I disagree that alternatives to keyboards are questionable. Please feel 
free 
to differ from me.

Hmmm, I remember vaguely there was a sort of prank keyboard which was 
hardwired so you get a little shock when you type on it. I think that was 
mentioned on a 1 April joke article. ;-D

Now I think of it - I wish to get prank wireless chairs to give my users a 
shock 
when they entered an invalid password or when they IPL with an incorrect 
PARMLIB member...  ;-D

Ok, I'm just dreaming and must get back to work... 

Groete / Greetings
Elardus Engelbrecht

Oh, a little Programmer Joke for you bored lot ;-D


A wife asks her husband, a programmer; "Could you please go shopping for me 
and buy one carton of milk, and if they have eggs, get 6!" 

A short time later the husband comes back with 6 cartons of milk.

The wife asks him, "Why the h*ll did you buy 6 cartons of milk?"

He replied, "They had eggs." 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: IBM Service Request Issue

[Shmuel Metz (Seymour J.)]

In , on 02/21/2011
   at 07:22 AM, Elardus Engelbrecht 
said:

>Yup. Any 'Human Interface Device' including speech recognition
>software are  just like those mentioned.

The keyboard forces you to take your hands off the keyboard?
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Hlasm.com reapired & Apologies

[Shmuel Metz (Seymour J.)]

In <8D030106A3E74375BCE7D7CDF76DDEA7@your10f19f641c>, on 02/20/2011
   at 09:30 PM, "Abe F. Kornelis"  said:

>some have been bounced - that's how I found out.

Ouch! That could cause some to list your provider as a spam source,
when they bounce to forged addresses.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: RACF Resource Classes

[Robert S. Hansel (RSH)]

Tom,

If you do not activate either the TAPEVOL class or DEVSUPxx TAPEAUTHDSN=YES,
and if you do not also define profile ICHBLP to the FACILITY class, then
RACF is not guarding the use of BLP and anyone can use BLP with RMM.
Granted, you can limit the use of BLP to specific job classes using JESPARMS
JOBCLASS parameter BLP=NO (this is still true even when ICHBLP is fully
functional), but RACF isn't involved in enforcing this limitation.

Regards, Bob

Robert S. Hansel
Lead RACF Specialist
RSH Consulting, Inc.
617-969-8211
www.linkedin.com/in/roberthansel
www.rshconsulting.com

-
2011 RACF Training
> Audit for Results   - Boston - APR 12-14
> Intro & Basic Admin - Boston - MAY 10-12
Visit our website for registration & details
-

-Original Message-
Date:Mon, 21 Feb 2011 09:22:30 -0500
From:Pinnacle 
Subject: Re: RACF Resource Classes

- Original Message -
From: "Robert S. Hansel , RSH" 
Newsgroups: bit.listserv.ibm-main
Sent: Monday, February 21, 2011 6:18 AM
Subject: Re: RACF Resource Classes


> Tom,
>
> CA-1's FORRES and NORNORES and the equivalent STGADMIN.EDG profiles for
> RMM
> govern the use of DD statement parameter EXPDT=98000. Use of BLP is
> controlled by FACILITY class resource ICHBLP with RMM and CA@APE class
> resources BLPRES and BLPNORES with CA-1.
>

Bob,

I've never enabled TAPEVOL with RMM, and I've never had a problem using BLP
with RMM.  What am I missing?

Thanks,
Tom

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: "What is Toronto"

[Martin Packer]

"Don't anthropomorphise computers: They don't like it." :-)

Martin Packer,
Mainframe Performance Consultant, zChampion
Worldwide Banking Center of Excellence, IBM

+44-7802-245-584

email: martin_pac...@uk.ibm.com

Twitter / Facebook IDs: MartinPacker





Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU






--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html