Re: Program FLIH backdoor - This is a criminal breach of security!

[Edward Jaffe]

On 3/5/2012 6:06 PM, Shmuel Metz (Seymour J.) wrote:

In<4f540cf5.3080...@phoenixsoftware.com>, on 03/04/2012
at 04:46 PM, Edward Jaffe  said:


Look more closely.

In the PLM that IBM doesn't publish?


Peter? Could you comment on what IGX00011 does?


To understand what it does study the two trace entries below (GTF is your 
friend):

SVC   CODE 109  ASCB 00F95200 CPU. 
PSW. 0785 806D  0C53B222
TCB. 00AC8300 R15. 000B R0.. 
R1.. 0001
   GMT-03/06/2012 06:59:08.693767  LOC-03/05/2012 22:59:08.693767

SVCR  CODE 109  ASCB 00F95200 CPU. 
PSW. 0714 806D  0C53B222
TCB. 00AC8300 R15.  R0.. 
R1.. 0001
   GMT-03/06/2012 06:59:08.693799  LOC-03/05/2012 22:59:08.693799


You need to look more closely at IGX00011. Hint: the "secure"
implementation is not just in the SVC(ESR) routine itself but also
in the caller
What caller? It might not be the intended caller.


Of course, I meant the intended caller. Unintended callers can't successfully 
use the service.


--
Edward E Jaffe
Phoenix Software International, Inc
831 Parkview Drive North
El Segundo, CA 90245
310-338-0400 x318
edja...@phoenixsoftware.com
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Customer Service, the good and the bad...

[Linda Mooney]

Hi Scott, 

  

Yeah, and guess who usually buys Western Digital almost exclusively.  :))) 

  

One more that was equally good, but not IT related.  Long ago, I used to manage 
an apartment complex.  Tough job, you can never really go home from work.  
Anyway, two brothers owned the complex and I got a monthly paycheck signed by 
one of them.  Unknown to me, they transferred ownership of the apartment 
complex to a corporation they owned jointly. End of the month, I get my monthly 
paycheck, deposit it, mail the monthly bills, buy groceries .  A couple of 
days later, I get a call from my bank.  My paycheck didn't go through - both 
brother's signatures now required, check just had the one.  Could have been a 
disaster of bank charges.  First Interstate let me come pick up the check, get 
the signature, and take it back to the bank the next day.  No fees, no bounced 
checks, they just held the checks  "in processing".  I sure wish First 
Interstate hadn't folded. 

  

Anyway, the way I look at, stuff happens.  People make mistakes. Do something 
wrong or fail to do something right.  It's what they do about it that counts.  
It also counts a LOT when they care and when they make it right without a bunch 
of wrangling about it.  

  

It's also important, IMHO to tell folks what a good job they've done - whe n 
they do a good job.  And tell their boss.  I am sure that most bosses only hear 
the bad stuff.  That's the wrong thing for customers to only say something 
about the bad stuff.  My Mom used to ask to see the manager.  Folks always 
asked what the problem was, looked worried or fearful.  I was in Fry's a couple 
of weeks ago, buying my new 3TB Western Digital drive.  I received exemplary 
service from one of the guys on the floor, so I said nice things about him to 
his boss.  Could have knocked that boss over with a feather, and that's a real 
shame. 



  

Linda    



- Original Message -




From: "Scott Ford"  
To: IBM-MAIN@bama.ua.edu 
Sent: Sunday, March 4, 2012 10:25:27 PM 
Subject: Re: Customer Service, the good and the bad... 

Linda, 

Wow...think that's great 

Sent from my iPad 
Scott Ford 
Senior Systems Engineer 
www.identityforge.com 



On Mar 5, 2012, at 1:14 AM, Linda Mooney  wrote: 

> Greetings! 
> 
> 
> 
> This happened to me a good while back, but it's worth remembering. 
> 
> 
> 
> I had a Western Digital PC hard drive fail three weeks before its warranty 
> ran out.  They replaced the drive, no problem, and with a larger capacity 
> drive because the drive I had was no longer being made. 
> 
> 
> 
> This is where it gets really special - 
> 
> I get the drive in , it works fine, so I start the restore from my tape 
> backup, and the tape drive EATS the tape.  That tape backup had never given 
> any problems before. 
> 
> 
> 
> Called Western Digital to see if they could do something.  The old drive had 
> a large bid on it that was due to be released a week or so later.  They fixed 
> the drive motor on the drive, overnighted it back to me, no charge.  All they 
> asked was that I send the old drive back to them again after copying my data 
> off. They even included a postage paid label for that.   
> 
> 
> 
> All I did was to call them, explain the problem nicely and ask if there was 
> there anything they could do for me.   
> 
> 
> 
> Linda 
> 
> 
> 
> - Original Message - 
> 
> 
> From: "Gabe Goldberg"  
> To: IBM-MAIN@bama.ua.edu 
> Sent: Sunday, March 4, 2012 1:54:14 PM 
> Subject: Re: Customer Service, the good and the bad... 
> 
> Long ago, a friend had an IBM PS/2. The monitor failed. 
> 
> Being a mainframer, she called hardware support -- the same number she'd call 
> for a broken mainframe. IBM promptly dispatched a CE to her house; he 
> replaced the monitor, cleaned up any mess, and departed in his unmarked white 
> van. 
> 
> More recently, article I wrote about complaining -- mostly good news but some 
> failures: 
> http://archive.slickdeals.net/f/1979348-Creative-Griping-Makes-Friends-and-Brings-Rewards
>  
> 
> And other interesting articles... 
> 
> "The Very Picky Customer" 
> http://boss.blogs.nytimes.com/2011/07/27/the-very-picky-customer/ 
> 
> "What Satisfying Picky Customers Can Mean to a Business" 
> http://boss.blogs.nytimes.com/2011/08/18/the-critical-5-percent-of-customers/ 
> 
> "Five ways your customers say they are unhappy" 
> www.theregister.co.uk/2011/03/30/crm_customer_satisfaction/ 
> 
> PeopleClaim: Taking Complaints Public Via the Web 
> bucks.blogs.nytimes.com/2011/05/25/peopleclaim-taking-complaints-public-via-the-web/?nl=your-money&emc=your-moneyema4
>  
> 
> Bottom line, complaining wins MUCH more often than not, and keeping quiet 
> NEVER wins... 
> 
> Robert Prins said: 
> 
> I hope this doesn't offend anyone, but here's a short story about 
> customer service... 
> 
> -- 
> Gabriel Goldberg, Computers and Publishing, Inc.       g...@gabegold.com 
> 3401 Silver Maple Place, Falls Church, VA 22042           (703) 2

Re: Return code = X'14' from ATTACH JSTCB=YES

[Robert A. Rosenberg]

At 21:10 -0500 on 03/05/2012, Shmuel Metz (Seymour J.) wrote about 
Re: Return code = X'14' from ATTACH JSTCB=YES:



In <00cc01ccfa4e$3293ec90$97bbc5b0$@net>, on 03/04/2012
   at 04:31 PM, Micheal Butz  said:


Does this mean that only the initiator can issue a ATTACH JSTCB=YES


No. It means that only a JS task with no subtasks can issue a ATTACH
JSTCB=YES.


Are you sure? I thought it was just being a JS task that allows use 
of ATTACH JSTCB=YES not the lack of that task having Subtasks. While 
a subtask can not use this parm, that should not preclude the 
original JS task (or one that it attached with the parm) from 
attaching additional JS tasks.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Migrating to Z196

[Skip Robinson]

Just toddled down this path. Run SMP/E FIXCAT report for 

   IBM.Device.Server.z196-*

against every z/OS level that you will run on the new CEC(s). It worked 
for us. 

.
.
JO.Skip Robinson
SCE Infrastructure Technology Services
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com



From:   Jake anderson 
To: IBM-MAIN@bama.ua.edu
Date:   03/05/2012 08:38 PM
Subject:Migrating to Z196
Sent by:IBM Mainframe Discussion List 



Hello,

We are planning to migrate from Z10 to Z196. So are there any manuals 
which
speaks more on PSP bucket changes that is required during this migrations 
?


Jake



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

change information

[Bernard Hines]

*Regret for the things we did can be tempered by time; 
it is regret for the things we did not do that is inconsolable. 



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Migrating to Z196

[Jake anderson]

Hello,

We are planning to migrate from Z10 to Z196. So are there any manuals which
speaks more on PSP bucket changes that is required during this migrations ?


Jake

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Good source for relationship of opcodes, models, MACHINE() and ARCH()

[Charles Mills]

Thanks. Good list. IBM Canada does some cool stuff. 

Sheesh! Add G-levels to MACHINE() and ARCH() levels.

All the information is out there. I could do a document that answered these
questions if I didn't already have a day job.

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf
Of Mike Stayton
Sent: Monday, March 05, 2012 4:24 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Good source for relationship of opcodes, models, MACHINE() and
ARCH()

Another list of mainframe machines

http://www.vm.ibm.com/devpages/jelliott/cmosproc.html

Mike Stayton

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Return code = X'14' from ATTACH JSTCB=YES

[Shmuel Metz (Seymour J.)]

In <00cc01ccfa4e$3293ec90$97bbc5b0$@net>, on 03/04/2012
   at 04:31 PM, Micheal Butz  said:

>Does this mean that only the initiator can issue a ATTACH JSTCB=YES

No. It means that only a JS task with no subtasks can issue a ATTACH
JSTCB=YES.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Shmuel Metz (Seymour J.)]

In <4f540cf5.3080...@phoenixsoftware.com>, on 03/04/2012
   at 04:46 PM, Edward Jaffe  said:

>Look more closely. 

In the PLM that IBM doesn't publish?


Peter? Could you comment on what IGX00011 does?

>You need to look more closely at IGX00011. Hint: the "secure"
>implementation is not just in the SVC(ESR) routine itself but also
>in the caller

What caller? It might not be the intended caller.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Shmuel Metz (Seymour J.)]

In
,
on 03/05/2012
   at 02:19 PM, "Pate, Gene"  said:

>How you allow code to get into supervisor state is of no consequence
>once it is in supervisor state so, unless you have a pristine system
>where every load module library on the system is totally locked down
>and only the OS libraries supplied by IBM appear in the APF list, you
>have by definition accepted exposures to system integrity.

It's not just how but who. Letting trusted code get into supervisor
code is one thing; letting everybody that knows how do it is quite
another.

>Back in the late 70's I wrote a PCFLIH backdoor

What do you mean by backdoor? I don't believe that it is what others
were referring to.

-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Shmuel Metz (Seymour J.)]

In <4f540e03.3070...@phoenixsoftware.com>, on 03/04/2012
   at 04:51 PM, Edward Jaffe  said:

>For the record, I once knew of a developer who claimed to have found
>an MVS back  door because he wanted to appear cool like a phone
>phreaking hacker, but he was  full of B.S. I also know someone that
>actually *did* find a back door (through  an EXCP appendage) and IBM
>closed it.

BTDT,GTTS. I got some flack here because I asked IBM not to include
the details in the public portion of the PMR.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Customer Service, the good and the bad...

[Shmuel Metz (Seymour J.)]

In <4f53e486.3060...@gabegold.com>, on 03/04/2012
   at 04:54 PM, Gabe Goldberg  said:

>"Five ways your customers say they are unhappy"
>www.theregister.co.uk/2011/03/30/crm_customer_satisfaction/

6. Leave.

The best way to retain customers is to treat every customer as
importamt; you never know who has the ear of the CEO and you never
know when one customer is part of another.

If you track the number of trouble tickets closed, it's important to
track whether the customer agrees with the closing. Quick closing of
tickets for unresolved problems will lose you customers.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Good source for relationship of opcodes, models, MACHINE() and ARCH()

[Mike Stayton]

Another list of mainframe machines

http://www.vm.ibm.com/devpages/jelliott/cmosproc.html

Mike Stayton

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[Paul Gilmartin]

On Mon, 5 Mar 2012 14:17:07 -0700, Mark Post wrote:
>
>Most Linux operating systems read the hardware clock during the startup 
>process, and use that to set the system clock.  NTP takes over from there, but 
>only affects the system clock, not the hardware clock.  The system only tries 
>to set the hardware clock when shutting down.
> 
But that "system clock" needs some sort of frequency reference.  I wouldn't
imagine that polling NTP provides fine enough granularity.  What does it use?

>There is only one source of time on Linux, and that's from the kernel via the 
>gettimeofday syscall.  So, all processes go to the same place to get their 
>time information.
>
What a concept!  You mean none of them do STCK(E) and variously apply
corrections from the CVT, sometimes correctly; sometimes not?  What if they're
running in SRB or whatever mode, and can't issue SVC?  (Never mind!)

>There were some changes to the kernel a while ago that made it aware of 
>ETR/STP.  I never looked at the code to see if it involved any attempts at 
>modifying the hardware clock.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Changing sysplex hardware

[Skip Robinson]

Biggest thanks goes to the sysplex parallel sysplex development team. 
Reconfiguration is much more robust and easier to manage than when we 
started out in the mid 90s. 

We just finished upgrading both CECs in our production complex, one 
push-pull at a time, about three weeks apart. I built two new CFRM 
policies in advance: first one (interim) with one new CEC defined, second 
one (final) with both new CECs defined. 

1  Move all structures to the old CEC *not* being replaced in round 1.

   SETXCF START,MAINTMODE,CFNM=old-CEC-being-replaced 
   SETXCF START,REALLOC

2  Shut down and disconnect old CEC being replaced. 

3  Swap out and connect first new CEC.

4  Activate  the interim CFRM policy from the (up and running) old CEC.

   SEXCF START,POL,TYPE=CFRM,POLNM=interim-policy
   SETXCF START,REALLOC

Three weeks later, perform a similar drill with the other new CEC and the 
final CFRM policy. Voila. 

15 years ago this would have been much harder and scarier. 

.
.
JO.Skip Robinson
SCE Infrastructure Technology Services
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com



From:   Natasa Savinc 
To: IBM-MAIN@bama.ua.edu
Date:   03/05/2012 02:03 AM
Subject:Re: Changing sysplex hardware
Sent by:IBM Mainframe Discussion List 



Thank you all for taking interest, especially to Skip, who answered what 
was really the question here. We followed this procedure for our sandbox 
sysplex, we will do the same for test and production.
Best regards,
Natasa


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: The Trainer's Friend goes Kindle - and you don't need to own a Kindle!

[Mike Schwab]

On Mon, Mar 5, 2012 at 3:56 PM, Steve Comstock  wrote:
>
> Well, maybe one or two more papers, then I'd like to try
> putting a course up. For courses, we'll probably package
> just one or two chapters per book so people can buy just
> the parts they want / need. Still debating amongst ourselves
> about whether any courses we put out will have labs or not.
>
> Not sure what content to put up first; happy to take suggestions.
>

Anything that can run on Turnkey Hercules MVS 3.8 or z390.org?
Then follow up text only for later changes?

-- 
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[Ed Finnell]

I thought all the game boxes were running the G6 chipset until the last  
version and one or more converted over to Intel. Don't keep up with  it. 
 
 
In a message dated 3/5/2012 3:48:45 P.M. Central Standard Time,  
john.mck...@healthmarkets.com writes:

supposedly, no z/OS, z/VM, or  VSE

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: The Trainer's Friend goes Kindle - and you don't need to own a Kindle!

[Steve Comstock]

On 3/5/2012 2:19 PM, Sevetson, Phil wrote:

Steve, Speaking strictly for myself, I like the idea of buying your material
in

Kindle format. However, I'm not an AJAX coder. What materials are next/soon in
your push for this?


--Phil Sevetson
DB2 z/OS DBA


Well, maybe one or two more papers, then I'd like to try
putting a course up. For courses, we'll probably package
just one or two chapters per book so people can buy just
the parts they want / need. Still debating amongst ourselves
about whether any courses we put out will have labs or not.

Not sure what content to put up first; happy to take suggestions.



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Steve Comstock
Sent: Monday, March 05, 2012 12:05 PM
To: IBM-MAIN@bama.ua.edu
Subject: The Trainer's Friend goes Kindle - and you don't need to own a Kindle!

Well, we're trying something new: looking at putting
content on Amazon.com for reading in Kindle's. The
details are below.

But first, I want to point out right away: you don't
need to own a Kindle to read our content (or any other
eBook on Amazon, for that matter).

* If you don't have a Kindle, you can download the
Kindle app for PCs from Amazon; for free. There are
also Kindle apps for iPhone, iPad, Android, Mac,
and more.

This is pretty cool in and of itself. I think this
requires you to establish a Kindle account (also
free). If you have an Amazon account you can
piggyback on that.

Go to:

http://www.amazon.com/gp/feature.html/ref=sa_menu_karl3?ie=UTF8&docId=1000493771


Alternatively, you can use the Kindle cloud reader and
read Kindle books in your browser.

See:

https://read.amazon.com/about




So for right now, we're experimenting by putting some of
our free papers into Kindle format: first we write a
significant update to the paper, to add value; next we
convert the new version to Kindle format and publish
to Amazon in their eBook library.

Our first foray into this brave new world is a major
rewrite of the paper "Coding AJAX Applications in z/OS":

We've updated some content to reflect changes in the
RFC, we've added two new examples, including one that
uses POST and a php CGI to process the POSTed data;
I also made some editorial changes.

The Amazon price is about 1/3 the price of just
purchasing the support files in our own Trainer's Friend
store, and the Amazon price _includes_ free access to
the support files, so you can download all the sample
HTML, COBOL source, and php source to experiment on your
own.


Check it out at http://www.amazon.com/dp/B007FY0EWI


Let us know what you think of this experiment.




--

Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-355-2752
http://www.trainersfriend.com

* To get a good Return on your Investment, first make an investment!
  + Training your people is an excellent investment

* Try our tool for calculating your Return On Investment
for training dollars at
  http://www.trainersfriend.com/ROI/roi.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[Mike Schwab]

One guy compiled Hercules to run on Arm processors and he installed it
on about 30-50 Network Attached Storage devices (hard drives with a
ethernet port).

On Mon, Mar 5, 2012 at 3:47 PM, McKown, John
 wrote:
> There are definitely z OS's running on Intel, using Hercules/390. I am sure 
> of MVT, VS1, VM/370, DOS (some version) and z/Linux. I've even heard that 
> there is a 31 bit version MVS 3.8j, called MVS/380. But, supposedly, no z/OS, 
> z/VM, or VSE.
>
> John McKown
> Systems Engineer IV

-- 
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[McKown, John]

There are definitely z OS's running on Intel, using Hercules/390. I am sure of 
MVT, VS1, VM/370, DOS (some version) and z/Linux. I've even heard that there is 
a 31 bit version MVS 3.8j, called MVS/380. But, supposedly, no z/OS, z/VM, or 
VSE.

John McKown 

Systems Engineer IV

IT

 

Administrative Services Group

 

HealthMarkets(r)

 

9151 Boulevard 26 * N. Richland Hills * TX 76010

(817) 255-3225 phone * 

john.mck...@healthmarkets.com * www.HealthMarkets.com

 

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 

> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Ed Finnell
> Sent: Monday, March 05, 2012 2:07 PM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Why _TZ put times 7 minutes off?
> 
> I still think, there's a zImage running on an Xbox 
> somewhere-just for  fun.
>  Look at the Raspberry Pi and the enthusiasm they're trying to  
> encourage-as a programming exercise.
>  
> _http://www.bbc.co.uk/news/technology-17190918_ 
> (http://www.bbc.co.uk/news/technology-17190918) 
>  
>  
> In a message dated 3/5/2012 9:28:09 A.M. Central Standard Time,  
> john.mck...@healthmarkets.com writes:
> 
> And this  is what is helping to destroy IBM's historic base. 
> IMO, the IBM 
> "X series" is  just another Dell machine, or other "first 
> tier"  supplier.
> 
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: The Trainer's Friend goes Kindle - and you don't need to own a Kindle!

[Sevetson, Phil]

Steve,
Speaking strictly for myself, I like the idea of buying your material in Kindle 
format.  However, I'm not an AJAX coder.  What materials are next/soon in your 
push for this?

--Phil Sevetson
DB2 z/OS DBA

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Steve Comstock
Sent: Monday, March 05, 2012 12:05 PM
To: IBM-MAIN@bama.ua.edu
Subject: The Trainer's Friend goes Kindle - and you don't need to own a Kindle!

Well, we're trying something new: looking at putting
content on Amazon.com for reading in Kindle's. The
details are below.

But first, I want to point out right away: you don't
need to own a Kindle to read our content (or any other
eBook on Amazon, for that matter).

* If you don't have a Kindle, you can download the
   Kindle app for PCs from Amazon; for free. There are
   also Kindle apps for iPhone, iPad, Android, Mac,
   and more.

   This is pretty cool in and of itself. I think this
   requires you to establish a Kindle account (also
   free). If you have an Amazon account you can
   piggyback on that.

   Go to:

http://www.amazon.com/gp/feature.html/ref=sa_menu_karl3?ie=UTF8&docId=1000493771


   Alternatively, you can use the Kindle cloud reader and
   read Kindle books in your browser.

   See:

https://read.amazon.com/about




So for right now, we're experimenting by putting some of
our free papers into Kindle format: first we write a
significant update to the paper, to add value; next we
convert the new version to Kindle format and publish
to Amazon in their eBook library.

Our first foray into this brave new world is a major
rewrite of the paper "Coding AJAX Applications in z/OS":

We've updated some content to reflect changes in the
RFC, we've added two new examples, including one that
uses POST and a php CGI to process the POSTed data;
I also made some editorial changes.

The Amazon price is about 1/3 the price of just
purchasing the support files in our own Trainer's Friend
store, and the Amazon price _includes_ free access to
the support files, so you can download all the sample
HTML, COBOL source, and php source to experiment on your
own.


Check it out at http://www.amazon.com/dp/B007FY0EWI


Let us know what you think of this experiment.

-- 

Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-355-2752
http://www.trainersfriend.com

* To get a good Return on your Investment, first make an investment!
   + Training your people is an excellent investment

* Try our tool for calculating your Return On Investment
 for training dollars at
   http://www.trainersfriend.com/ROI/roi.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[Mark Post]

>>> On 3/3/2012 at 01:12 PM, Paul Gilmartin  wrote: 
> What does Linux for z use for clock steering?  I understand it
> was never ETR-savvy (nor was z/VM?)  I imagine it might be
> done by letting the ETOD clock run free and allowing NTP to
> update parameters of a software offset used by all system time
> services (kinda like CVTLSO).

Most Linux operating systems read the hardware clock during the startup 
process, and use that to set the system clock.  NTP takes over from there, but 
only affects the system clock, not the hardware clock.  The system only tries 
to set the hardware clock when shutting down.

There is only one source of time on Linux, and that's from the kernel via the 
gettimeofday syscall.  So, all processes go to the same place to get their time 
information.

There were some changes to the kernel a while ago that made it aware of 
ETR/STP.  I never looked at the code to see if it involved any attempts at 
modifying the hardware clock.


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Wayne Driscoll]

Gene,
All that an AC=1 module that is in an APF authorized module can do is to 
start running with the JSCBAUTH bit on if, and only if, it is invoked as a 
Job Step Task from the initiator, or other initiator-like process (z/OS 
UNIX Services, for instance).  However, a PCFLIH backdoor can allow a 
problem state, non-system key program that is not running APF authorized 
to receive control in an authorized state simply by causing a program 
interrupt to occur.  Now I don't know if this particular backdoor does 
this or not, but if it does (or worse, can be spoofed by a caller to do 
this) than it would constitute a violation of z/OS system integrity.

===
Wayne Driscoll
OMEGAMON DB2 L3 Support/Development
wdrisco(AT)us.ibm.com
=== 



From:
"Pate, Gene" 
To:
IBM-MAIN@bama.ua.edu
Date:
03/05/2012 08:30 AM
Subject:
Re: Program FLIH backdoor - This is a criminal breach of security!
Sent by:
IBM Mainframe Discussion List 



I am amazed at the uproar over this. Is there anything that a PCFLIH 
backdoor can accomplish that any AC=1 module in any APF authorized library 
cannot? 



Gene Pate 
CSX Technology
Enterprise Architecture






--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IPCS VSMDATA

[Joe D'Alessandro]

I usually run "   VERBX VSMDATA 'CONTROLBLOCKS SUMMARY'" and on the far 
right of the report the TCB and subpool and key are listed:  
DQE:  Addr 009CF000 Size 2000   
 TCB: 009FF890 SP/K: 236/ 1 aajmpaaa
  FQE: Addr 009CF000 Size  9B0  
  TCB: 009FF890 SP/K: 236/ 1 aajmpaaa

You can sort this report using cols 116 thru 126 (the lower case keys after the 
subpool/key column) to get the addresses in ascending or descending order. 

regards, Joe D'Alessandro 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Binyamin Dissen]

On Mon, 5 Mar 2012 14:19:33 + "Pate, Gene"  wrote:

:>I am amazed at the uproar over this. Is there anything that a PCFLIH backdoor 
can accomplish that any AC=1 module in any APF authorized library cannot? 

No. The question is how is the PC-FLIH among the best choices to do this
function.

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[Ed Finnell]

I still think, there's a zImage running on an Xbox somewhere-just for  fun.
 Look at the Raspberry Pi and the enthusiasm they're trying to  
encourage-as a programming exercise.
 
_http://www.bbc.co.uk/news/technology-17190918_ 
(http://www.bbc.co.uk/news/technology-17190918) 
 
 
In a message dated 3/5/2012 9:28:09 A.M. Central Standard Time,  
john.mck...@healthmarkets.com writes:

And this  is what is helping to destroy IBM's historic base. IMO, the IBM 
"X series" is  just another Dell machine, or other "first tier"  supplier.



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: TINC?

[Lloyd Fuller]

I remember reconfiguring on the fly with MFT.  The partitions had to be 
adjacent 
in memory and had to be empty:  no running programs in those partitions. 


Lloyd



- Original Message 
From: Gerhard Postpischil 
To: IBM-MAIN@bama.ua.edu
Sent: Mon, March 5, 2012 1:27:26 PM
Subject: Re: TINC?

On 3/5/2012 10:06 AM, Gross, Randall [GCG-PFS] wrote:
> I worked one summer for a company that had a 256k 360/40 running MFT
> with (typically) 4  partitions.  Iirc, it took an IPL to reconfigure
> MFT. (M = multimple, F = fixed)

If your installation required an IPL, then I surmise it either had an alternate 
nucleus that was smaller, or that the staff weren't trained properly (note 
earlier post on redefining partitions). We ran MFT at ADR for a couple of 
years, 
and I remember redefining partitions, but never had to IPL to do so.


Gerhard Postpischil
Bradford, VT

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

UK GSE LSG Meeting

[Mark Wilson]

All,

I have posted an updated agenda for Thursday's GSE Large System Meeting.

It can be found at: http://lsx.gse.org.uk/future.html

Please let me know ASAP if you plan to attend.

Regards,

_
Mark Wilson
Technical Director

RSM Partners Ltd
z Specialists, Software & Support

Mobile +44 (0)7768 617006

Offices: The Courtyard, Buntsford Drive,
Stoke Pound, Bromsgrove B60 3DJ
Tel: 0870 0501004 Fax: 0870 0501006

Email: 
ma...@rsmpartners.com
Web:  www.rsmpartners.com

GSE Information
Large Systems Working Group Chairman
www.lsx.gse.org.uk

GSE UK Conference Manager
www.gse.org.uk/tyc

Email: 
mark.wil...@gse.org.uk

__

This message was delivered by EPA Hosted Exchange and has been certified 
virus-free.
For more information please visit http://www.epacloud.com/exchange 
__

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: TINC?

[Gerhard Postpischil]

On 3/5/2012 10:06 AM, Gross, Randall [GCG-PFS] wrote:

I worked one summer for a company that had a 256k 360/40 running MFT
with (typically) 4  partitions.  Iirc, it took an IPL to reconfigure
MFT. (M = multimple, F = fixed)


If your installation required an IPL, then I surmise it either 
had an alternate nucleus that was smaller, or that the staff 
weren't trained properly (note earlier post on redefining 
partitions). We ran MFT at ADR for a couple of years, and I 
remember redefining partitions, but never had to IPL to do so.



Gerhard Postpischil
Bradford, VT

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: The Trainer's Friend goes Kindle - and you don't need to own a Kindle!

[Steve Comstock]

On 3/5/2012 10:31 AM, Martin Packer wrote:

I'm not likely to be your customer but this sounds great. A question: What
authoring mechanism are you using to create Kindle materials and in what
format are they delivered? MOBI-derivative?

Cheers, Martin

Martin Packer,
Mainframe Performance Consultant, zChampion
Worldwide Banking Center of Excellence, IBM


All our materials are produced using Ventura Publisher.

For creating Kindle works (remember, I've only done one
so far), I use a Ventura option to extract just the text
into a file. Then I use SPF/PC (any editor will work, of
course) to convert that into HTML by copying in some small
copy books I've built that re-create the bullet / sub-bullet
structure we use (more or less; I'm still learning the
ins and outs of formatting for Kindle).

Then I add some packaging files (table of contents, manifest,
ncx file) and any image files. Put all this into a single
directory and zip it; upload the zip to KDP (Kindle Direct
Publishing)

Before I actually send a file to KDP, I test it by using
a command line book compiler available for free from KDP,
and view the output in another free tool the Kindle
Previewer. So far, the previewer seems to do a better job
of rendering my doc than Kindle PC, so you could download
that tool and use it to view any Kindle pubs you buy from
Amazon.

Kindle seems fine for novels and literature; it has a way
to go for technical presentations, just due to the nature
of bulleted notes. Still, it's an interesting process and
improving all the time.




+44-7802-245-584

email: martin_pac...@uk.ibm.com

Twitter / Facebook IDs: MartinPacker
Blog:
https://www.ibm.com/developerworks/mydeveloperworks/blogs/MartinPacker



From:
Steve Comstock
To:
IBM-MAIN@bama.ua.edu,
Date:
05/03/2012 17:05
Subject:
The Trainer's Friend goes Kindle - and you don't need to own a Kindle!
Sent by:
IBM Mainframe Discussion List



Well, we're trying something new: looking at putting
content on Amazon.com for reading in Kindle's. The
details are below.

But first, I want to point out right away: you don't
need to own a Kindle to read our content (or any other
eBook on Amazon, for that matter).

* If you don't have a Kindle, you can download the
Kindle app for PCs from Amazon; for free. There are
also Kindle apps for iPhone, iPad, Android, Mac,
and more.

This is pretty cool in and of itself. I think this
requires you to establish a Kindle account (also
free). If you have an Amazon account you can
piggyback on that.

Go to:

http://www.amazon.com/gp/feature.html/ref=sa_menu_karl3?ie=UTF8&docId=1000493771



Alternatively, you can use the Kindle cloud reader and
read Kindle books in your browser.

See:

https://read.amazon.com/about




So for right now, we're experimenting by putting some of
our free papers into Kindle format: first we write a
significant update to the paper, to add value; next we
convert the new version to Kindle format and publish
to Amazon in their eBook library.

Our first foray into this brave new world is a major
rewrite of the paper "Coding AJAX Applications in z/OS":

We've updated some content to reflect changes in the
RFC, we've added two new examples, including one that
uses POST and a php CGI to process the POSTed data;
I also made some editorial changes.

The Amazon price is about 1/3 the price of just
purchasing the support files in our own Trainer's Friend
store, and the Amazon price _includes_ free access to
the support files, so you can download all the sample
HTML, COBOL source, and php source to experiment on your
own.


Check it out at http://www.amazon.com/dp/B007FY0EWI


Let us know what you think of this experiment.




--

Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-355-2752
http://www.trainersfriend.com

* To get a good Return on your Investment, first make an investment!
  + Training your people is an excellent investment

* Try our tool for calculating your Return On Investment
for training dollars at
  http://www.trainersfriend.com/ROI/roi.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Joel C. Ewing]

On 03/05/2012 08:19 AM, Pate, Gene wrote:

I am amazed at the uproar over this. Is there anything that a PCFLIH backdoor 
can accomplish that any AC=1 module in any APF authorized library cannot?
Is there anyone else out there that is running any vendor code for which they 
have not done code reviews that is running AC=1 in any APF authorized library? 
Is there anyone else out there that is running any home grown code with an AC=1 
in an APF authorized library for which they have not done code reviews? Is 
there anyone else out there that has libraries in the APF list that can be 
updated by anything other than there change control system that only allows 
modules that have been through code reviews to be installed in their APF 
authorized libraries?

How you allow code to get into supervisor state is of no consequence once it is 
in supervisor state so, unless you have a pristine system where every load 
module library on the system is totally locked down and only the OS libraries 
supplied by IBM appear in the APF list, you have by definition accepted 
exposures to system integrity. Does your management understand just how exposed 
you have left all the company secrets?

Using a PCFLIH backdoor is only one of many techniques that can be used to 
accomplish getting yourself into supervisor state and sometimes it is the right 
technique and sometimes it is not.

Back in the late 70's I wrote a PCFLIH backdoor because it was not only the 
correct technique it was the only technique that would work. My company and its 
sister companies had many 168APs that did not have the MVS/SE hardware assist 
installed. At that time IBM wanted about $150K per system for the hardware 
upgrade and we already had plans to replace all of them over the next 3 years 
with 3033s so there was no money to upgrade them. I wrote an SE hardware 
emulator that would run on Ups, APs, and MPs and while you got a 15% 
performance increase with the hardware upgrade and MVS/SE we still got around 
12% with my PCFLIH hardware emulator and we were able to move to MVS/SE 3 years 
sooner that we could have had we all had to wait until all the 168s were 
replaced.

If there was any criminal activity involved in this entire affair I believe it 
was on IBM's part for trying to charge us $150K per system for a microcode 
upgrade to a bunch of outdated systems and not on the part any PCFLIH code that 
I wrote so I outright reject your assertion that a PCFLIH backdoor is any more 
criminal than running any AC=1 module in any APF authorized library that you as 
the systems programmer have not personally code reviewed before you allowed it 
to run on any system that you are responsible for!

Gene Pate
CSX Technology
Enterprise Architecture


...
While it is a given that a module running "authorized" can, if malicious 
or badly written, potentially do anything bad that could be done by a 
PCFLIH back door, it also would seem that as a general principle one 
would want to be able to limit the potential exposure from sensitive 
code as much as possible -- in other words, use the least-global 
interfaces that will suffice.  Code reviews may be able to catch obvious 
malicious code, but the existence of corrective product  SYSMODS attests 
to the continuing inability of reviews and testing to catch 100% of 
subtle errors and bugs.


An authorized vendor module that is normally only invoked from vendor 
address spaces, if found to do bad things unintentionally, might at 
least be more likely to damage virtual storage and data associated with 
the vendor application; and not starting vendor address spaces or 
invoking the product could reasonably be expected to suppress use of the 
code. While someone familiar with the interface might attempt to invoke 
this code in a context for which it was not intended, this would have to 
be a deliberate act and not an accident.


I think people tend to have a gut feeling that the exposure from a 
PCFLIH back door is much greater because this code has much greater 
potential to be invoked by any arbitrary address space and not just for 
those address spaces or events related to the vendor product.  Users of 
the interface are in general unaware they are invoking the vendor code, 
and in the worst case scenario a code bug might render the system 
unusable even when the offending vendor product is not started or 
directly invoked.  If sysprogs are unaware that such an interface is 
being used by a product, they would also be unlikely to know how to 
disable its use if it should become a problem.


The generic "suspicion" toward a PCFLIH back door is probably not unlike 
the uproar several years back when another interface was used 
inappropriately that could have had serious negative impact far beyond 
the vendor product for which it was intended.  It was revealed that CA 
was distributing in their products an SMP/E exit to automatically bypass 
ID errors to compensate for bad packaging of CA SYSMODs at the time. 
While 

Re: The Trainer's Friend goes Kindle - and you don't need to own a Kindle!

[Martin Packer]

I'm not likely to be your customer but this sounds great. A question: What 
authoring mechanism are you using to create Kindle materials and in what 
format are they delivered? MOBI-derivative?

Cheers, Martin

Martin Packer,
Mainframe Performance Consultant, zChampion
Worldwide Banking Center of Excellence, IBM

+44-7802-245-584

email: martin_pac...@uk.ibm.com

Twitter / Facebook IDs: MartinPacker
Blog: 
https://www.ibm.com/developerworks/mydeveloperworks/blogs/MartinPacker



From:
Steve Comstock 
To:
IBM-MAIN@bama.ua.edu, 
Date:
05/03/2012 17:05
Subject:
The Trainer's Friend goes Kindle - and you don't need to own a Kindle!
Sent by:
IBM Mainframe Discussion List 



Well, we're trying something new: looking at putting
content on Amazon.com for reading in Kindle's. The
details are below.

But first, I want to point out right away: you don't
need to own a Kindle to read our content (or any other
eBook on Amazon, for that matter).

* If you don't have a Kindle, you can download the
   Kindle app for PCs from Amazon; for free. There are
   also Kindle apps for iPhone, iPad, Android, Mac,
   and more.

   This is pretty cool in and of itself. I think this
   requires you to establish a Kindle account (also
   free). If you have an Amazon account you can
   piggyback on that.

   Go to:

http://www.amazon.com/gp/feature.html/ref=sa_menu_karl3?ie=UTF8&docId=1000493771



   Alternatively, you can use the Kindle cloud reader and
   read Kindle books in your browser.

   See:

https://read.amazon.com/about




So for right now, we're experimenting by putting some of
our free papers into Kindle format: first we write a
significant update to the paper, to add value; next we
convert the new version to Kindle format and publish
to Amazon in their eBook library.

Our first foray into this brave new world is a major
rewrite of the paper "Coding AJAX Applications in z/OS":

We've updated some content to reflect changes in the
RFC, we've added two new examples, including one that
uses POST and a php CGI to process the POSTed data;
I also made some editorial changes.

The Amazon price is about 1/3 the price of just
purchasing the support files in our own Trainer's Friend
store, and the Amazon price _includes_ free access to
the support files, so you can download all the sample
HTML, COBOL source, and php source to experiment on your
own.


Check it out at http://www.amazon.com/dp/B007FY0EWI


Let us know what you think of this experiment.

-- 

Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-355-2752
http://www.trainersfriend.com

* To get a good Return on your Investment, first make an investment!
   + Training your people is an excellent investment

* Try our tool for calculating your Return On Investment
 for training dollars at
   http://www.trainersfriend.com/ROI/roi.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN








Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU






--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IKT100I USERID CANCELED immediately after TN3270 connection fail

[Skip Robinson]

I can't explain why you lose sessions, but it's a perennial problem on the 
mainframe. Often there' a S622 abend--terminal I/O error--recorded. I see 
it as the nature of the beast. 

Forgive me if I'm echoing others; I haven't read every post in this 
thread. There are two actions you might take to alleviate users' misery. 

1. Allow TSO RECONNECT. After letting this feature wither and molder for 
many years, IBM recently revived it. RECONNECT now works quite well, but 
you have to take a few actions to enable it. The user may still get 
disconnected for whatever reason, but the session (address space) remains 
intact for a period of time. This solution is pretty good and is 
essentially FREE. 

 2. (Buy and) install an SNA session manager. This is an address space on 
z/OS that every user traverses for every interaction. It works for all 
VTAM applications such as TSO, SMCS, CICS, OMEGAMON, etc. We use CA-TPX. 
Candle has/had CL Supersession. IBM has a Netview product. I've heard of 
others that may be cheaper. The key is that the session manager maintains 
connectivity to the application no matter what happens to the user's 
terminal thingy. If you get disconnected, you log back on the to the 
session manager, which typically puts you back into the same screen with 
the same data you last entered. 

If this problem is sufficiently serious and costly to your organization, 
certainly some action is warranted. And maybe even some $$. 
.
.
JO.Skip Robinson
SCE Infrastructure Technology Services
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com



From:   chen lucky 
To: IBM-MAIN@bama.ua.edu
Date:   03/04/2012 05:04 PM
Subject:Re: IKT100I USERID CANCELED immediately after TN3270 
connection fail
Sent by:IBM Mainframe Discussion List 



This thread has nothing to do with ISPF. I just want to know why my TSU
address space was canceled duo to connection failure.

But thank you all the same. I had checked following point that may be
related to this problem.
1, JWT in SMFPRMxx
2, RECONLIM in TSOKEYxx
3, INACTIVE, KEEPINACTIVE and DISCONNECTABLE in TN3270 profile
4, LU definition of TSO USERS
5, MODETAB  and DLOGMOD

About this subject, look forward that I can get more help and can get it
over at end.


2012/3/5 Shmuel Metz (Seymour J.) 

> In <4f529f6f.8090...@acm.org>, on 03/03/2012
>at 04:47 PM, "Joel C. Ewing"  said:
>
> >This sounds like a user training problem.  Users should be taught
> >in the scenario you describe to use EDIT on the new member name,
> >within EDIT use COPY to pull in the old member contents,
>
> What does CREATE put in the ISPF statistics?
>
> --
> Shmuel (Seymour J.) Metz, SysProg and JOAT
> ISO position; see 
> We don't care. We don't have to care, we're Congress.
> (S877: The Shut up and Eat Your spam act of 2003)
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
>


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

The Trainer's Friend goes Kindle - and you don't need to own a Kindle!

[Steve Comstock]

Well, we're trying something new: looking at putting
content on Amazon.com for reading in Kindle's. The
details are below.

But first, I want to point out right away: you don't
need to own a Kindle to read our content (or any other
eBook on Amazon, for that matter).

* If you don't have a Kindle, you can download the
  Kindle app for PCs from Amazon; for free. There are
  also Kindle apps for iPhone, iPad, Android, Mac,
  and more.

  This is pretty cool in and of itself. I think this
  requires you to establish a Kindle account (also
  free). If you have an Amazon account you can
  piggyback on that.

  Go to:

http://www.amazon.com/gp/feature.html/ref=sa_menu_karl3?ie=UTF8&docId=1000493771


  Alternatively, you can use the Kindle cloud reader and
  read Kindle books in your browser.

  See:

https://read.amazon.com/about




So for right now, we're experimenting by putting some of
our free papers into Kindle format: first we write a
significant update to the paper, to add value; next we
convert the new version to Kindle format and publish
to Amazon in their eBook library.

Our first foray into this brave new world is a major
rewrite of the paper "Coding AJAX Applications in z/OS":

We've updated some content to reflect changes in the
RFC, we've added two new examples, including one that
uses POST and a php CGI to process the POSTed data;
I also made some editorial changes.

The Amazon price is about 1/3 the price of just
purchasing the support files in our own Trainer's Friend
store, and the Amazon price _includes_ free access to
the support files, so you can download all the sample
HTML, COBOL source, and php source to experiment on your
own.


Check it out at http://www.amazon.com/dp/B007FY0EWI


Let us know what you think of this experiment.

--

Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-355-2752
http://www.trainersfriend.com

* To get a good Return on your Investment, first make an investment!
  + Training your people is an excellent investment

* Try our tool for calculating your Return On Investment
for training dollars at
  http://www.trainersfriend.com/ROI/roi.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IKT100I USERID CANCELED immediately after TN3270 connection fail

[Lizette Koehler]

Since the posting included the use of PCOMM (if I recall) then perhaps there 
are some settings in PCOMM that might reduce the Likelihood of cancelling the 
tso id.

Connection Timeout
This value specifies the number of seconds that Personal Communications should 
wait for a connection to the host. The default value is 6 seconds. The allowed 
range of values is 1 through 600 seconds.

Or perhaps

Auto-reconnect
If the session is disconnected from the host, and if this box is checked, you 
will be reconnected automatically.

The default is "not checked".

Note: When the SLP option is enabled, using auto-reconnect causes a search for 
available SLP servers. If such a server is found, auto-reconnect will attempt 
to connect to that server. If the connection attempt is not successful, 
auto-reconnect will attempt to connect to another SLP server, if additional 
servers are found.

I am not sure if these will help the IKT100I issues and cancelling of the TSO 
session or not.


Lizette



>
>Networks have failures.  On some networks they occur more frequently than 
>others.  It's just a fact of life.  Some network support organizations are 
>more helpful than others in resolving the cause of these failures.  That too 
>is a fact of life.
>
>You were the one who mentioned that a major impact of these failures was the 
>data lost by users.  We can't solve the failure problem for you but many have 
>suggested ways to minimize the impact the failures have.  You are free to 
>follow any of the suggestions you choose but you seem to be expecting somethng 
>else from this group.
>
>By the way, none of the five items you mention below seem to my untrained eye 
>to be related to connection failures.
>
>
>This thread has nothing to do with ISPF. I just want to know why my TSU
>address space was canceled duo to connection failure.
>
>But thank you all the same. I had checked following point that may be
>related to this problem.
>1, JWT in SMFPRMxx
>2, RECONLIM in TSOKEYxx
>3, INACTIVE, KEEPINACTIVE and DISCONNECTABLE in TN3270 profile
>4, LU definition of TSO USERS
>5, MODETAB  and DLOGMOD
>
>About this subject, look forward that I can get more help and can get it
>over at end.
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IKT100I USERID CANCELED immediately after TN3270 connection fail

[retired-mainfra...@q.com]

Networks have failures.  On some networks they occur more frequently than 
others.  It's just a fact of life.  Some network support organizations are more 
helpful than others in resolving the cause of these failures.  That too is a 
fact of life.

You were the one who mentioned that a major impact of these failures was the 
data lost by users.  We can't solve the failure problem for you but many have 
suggested ways to minimize the impact the failures have.  You are free to 
follow any of the suggestions you choose but you seem to be expecting somethng 
else from this group.

By the way, none of the five items you mention below seem to my untrained eye 
to be related to connection failures.

- Original Message -
From: "chen lucky" 
To: IBM-MAIN@bama.ua.edu
Sent: Sunday, March 4, 2012 7:03:42 PM
Subject: Re: IKT100I USERID CANCELED immediately after TN3270 connection fail

This thread has nothing to do with ISPF. I just want to know why my TSU
address space was canceled duo to connection failure.

But thank you all the same. I had checked following point that may be
related to this problem.
1, JWT in SMFPRMxx
2, RECONLIM in TSOKEYxx
3, INACTIVE, KEEPINACTIVE and DISCONNECTABLE in TN3270 profile
4, LU definition of TSO USERS
5, MODETAB  and DLOGMOD

About this subject, look forward that I can get more help and can get it
over at end.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: ISMF/REXX interface.

[Greg Shirey]

Jags,

Have a look at SYS1.SACBCNTL(ACBJBAOU).  The first step is similar to ACBJBAI2, 
but there are extra steps to show how to copy the output from the ISPF table to 
a PS data set and then to SYSOUT.  

It's a strange process - we don't run these sorts of jobs here very often so I 
have forgotten a lot of the details.

Good luck,
Greg 


-Original Message-
From: IBM Mainframe Discussion List On Behalf Of jagadishan perumal
Sent: Saturday, March 03, 2012 7:09 AM

Greg,

I ran the  ACBJBAI2 but it wasn't producing the dataset's dasd utilization in a 
separate PS file.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[Paul Gilmartin]

On Mon, 5 Mar 2012 10:19:03 -0500, Steve Conway wrote:

>Ed Jaffe said:
>IMHO, STP should be included in the price of the machine.
>
>I totally agree.  There should also be an option to use NTP.  Not every
>shop needs the granularity of STP, and they damn sure don't want to pay
>for functionality that comes free on every other piece of hardware in the
>house..
>
>Right now, the choices are either to pay $BIGNUM for time keeping software
>unique to the hardware platform or to have no time keeping software.
>
>When I'm trying to advocate a zBox as cost effective, this does not help.
> 
Would your argument from TCO be any more effective if IBM bundled the
STP and raised the base system price by the now cost of the STP?
(It's possible; the number of line items has negative weight regardless
of the bottom line.)

But what's the business case for IBM?  Would increased revenue per sale
offset loss of sales in the non-STP niche market?

And if an ISV provided clock steering software based on NTP, would
this, Neon-like, violate any IBM legal constraints?

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Paul Gilmartin]

On Mon, 5 Mar 2012 14:19:33 +, Pate, Gene wrote:

>I am amazed at the uproar over this. Is there anything that a PCFLIH backdoor 
>can accomplish that any AC=1 module in any APF authorized library cannot?
>Is there anyone else out there that is running any vendor code for which they 
>have not done code reviews that is running AC=1 in any APF authorized library? 
>Is there anyone else out there that is running any home grown code with an 
>AC=1 in an APF authorized library for which they have not done code reviews? 
>Is there anyone else out there that has libraries in the APF list that can be 
>updated by anything other than there change control system that only allows 
>modules that have been through code reviews to be installed in their APF 
>authorized libraries?
>
>How you allow code to get into supervisor state is of no consequence once it 
>is in supervisor state so, unless you have a pristine system where every load 
>module library on the system is totally locked down ...
>
Not "every".  I believe IBM's SOI applies regardless of what mey be put
in non-authorized load libraries.

>and only the OS libraries supplied by IBM appear in the APF list, you have by 
>definition accepted exposures to system integrity. Does your management 
>understand just how exposed you have left all the company secrets?
>
Or, by your earlier paragraph, suitable review is performed for non-IBM code.
And even then, IBM's SOI doesn't apply.

But why do you trust IBM?  Their code is OCO and difficult to review.  I suppose
it's possible if one signs the required NDAs and pays the charges.

Is there any independent commercial body that so reviews and certifies IBM's
code?  And even indemnifies?  For a price, of course.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[McKown, John]

I agree about the z needing to be cost effective. However, can you say "cash 
cow"? IBM, et al., are killing the goose that laid their golden egg. What is 
"amusing" to me is that the IBM PC is what took Intel, and others, from the 
home hobbist into the enterprise. And this is what is helping to destroy IBM's 
historic base. IMO, the IBM "X series" is just another Dell machine, or other 
"first tier" supplier.

--
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 

> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Steve Conway
> Sent: Monday, March 05, 2012 9:19 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Why _TZ put times 7 minutes off?
> 
> Ed Jaffe said:
> IMHO, STP should be included in the price of the machine.
> 
> I totally agree.  There should also be an option to use NTP.  
> Not every 
> shop needs the granularity of STP, and they damn sure don't 
> want to pay 
> for functionality that comes free on every other piece of 
> hardware in the 
> house..
> 
> Right now, the choices are either to pay $BIGNUM for time 
> keeping software 
> unique to the hardware platform or to have no time keeping software. 
> 
> When I'm trying to advocate a zBox as cost effective, this 
> does not help.
> 
> 
> Steven F. Conway, CISSP
> LA Systems
> z/OS Systems Support
> Phone: 703.295.1926
> steve_con...@ao.uscourts.gov
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Why _TZ put times 7 minutes off?

[Steve Conway]

Ed Jaffe said:
IMHO, STP should be included in the price of the machine.

I totally agree.  There should also be an option to use NTP.  Not every 
shop needs the granularity of STP, and they damn sure don't want to pay 
for functionality that comes free on every other piece of hardware in the 
house..

Right now, the choices are either to pay $BIGNUM for time keeping software 
unique to the hardware platform or to have no time keeping software. 

When I'm trying to advocate a zBox as cost effective, this does not help.


Steven F. Conway, CISSP
LA Systems
z/OS Systems Support
Phone: 703.295.1926
steve_con...@ao.uscourts.gov

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: TINC?

[Gross, Randall [GCG-PFS]]

In college, we had a 360/40 running PCP (Primary Control Program) in
64K; iirc, PCP could not be patrtitioned.

I worked one summer for a company that had a 256k 360/40 running MFT
with (typically) 4  partitions.  Iirc, it took an IPL to reconfigure
MFT. (M = multimple, F = fixed)

I belive MVT (V = variable) was the first OS360 operating system that
suppored dynamic repartitioning, but I could be wrong.  I never
experienced MVT - just went from MFT to SVS to MVS.

Randy



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Lloyd Fuller
Sent: Friday, March 02, 2012 8:32 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: TINC?

It could be that the spooler was really a resident writer.  I was just a
newby programmer, and know that we were told that requiring more than a
certain amount of memory required a major operations change and was
frowned on.

It was definitely not DOS/360.  It was OS/360 and used JCL with DCBs,
etc, not the DOS/360 stuff.

Lloyd



- Original Message 
From: John Gilmore 
To: IBM-MAIN@bama.ua.edu
Sent: Thu, March 1, 2012 4:09:02 PM
Subject: Re: TINC?

Shmuel/Seymour wrote:


NFW. There was only a single partition on PCP. Based on the model I'd
guess that you were running DOS/360.


and it is correct, albeit in a Pickwickian sense, that OS/PCP "had only
a single partition"; but it did support both transient and resident
readers and writers; there were even some very primitive to-2311-DASD
RYO spoolers in use; and at this remove Lloyd Fuller's confusion may be
only a terminological one.  Still, I too guess that he may have been
using DOS.

--jg


On 3/1/12, Shmuel Metz (Seymour J.)  wrote:
> In <1330520469.27305.yahoomai...@web180907.mail.ne1.yahoo.com>, on
> 02/29/2012
>at 05:01 AM, Lloyd Fuller  said:
>
>>No.  When we used PCP on the Model 40 with 64K.  We had a single job 
>>partition  and, most of the time, a spool partition.
>
> NFW. There was only a single partition on PCP. Based on the model I'd 
> guess that you were running DOS/360.
>
>>It was a very simple partition (like 10K or so) that ran the 1401
>
> What are you trying to say? The 1401 was a computer, not a program. If

> you meant that you ran the 1401 Emulator program, that confirms that 
> it was DOS.
>
>>If we needed more memory for a specific purpose, we would reipl from a

>>different pack and bring up OS360 with just the program partition.
>
> Another sign that you were not running OS/360; on an OS/360 system 
> with multiple partitions you can amalgamated partitions with the 
> DEFINE command; you don't need to re-IPL.
>
> --
>  Shmuel (Seymour J.) Metz, SysProg and JOAT
>  ISO position; see 
> We don't care. We don't have to care, we're Congress.
> (S877: The Shut up and Eat Your spam act of 2003)
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: [IBMTCP-L] IKT100I USERID CANCELED immediately after TN3270 connection fail

[chen lucky]

Alan,

I actually did not get any other message ahead of IKT100I, after that, user
address space got canceled with abend code S622. So I think IKT100I would
be the root cause of this problem.

BTW, how to check whether message got suppressed or not? thank you.

2012/3/5 A.Watthey 

> Chen,
>
> Are you suppressing messages?  I would have thought that there would have
> been quite a few messages when the user lost his connection. These would
> give the reason for the IKT100I.  Users don't get cancelled for no reason.
> The user address space must have had an abend of some sort as well and been
> terminated.
>
> Regards,
> Alan.
>
> --
> For IBMTCP-L subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO IBMTCP-L
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Bob Shannon]

>I wrote an SE hardware emulator that would run on Ups, APs, and MPs and while 
>you got a 15% >performance increase with the hardware upgrade and MVS/SE we 
>still got around 12% with my >PCFLIH hardware emulator and we were able to 
>move to MVS/SE 3 years sooner that we could have >had we all had to wait until 
>all the 168s were replaced.

That's exactly what Amdahl's SE and SP Assist did. 

Bob Shannon
Rocket Software

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: More REXX SDSF CGI fun (was: Anybody used SDSF / REXX in HTTPD CGI pgm)

[Dana Mitchell]

Miklos,

I don't really need to see your code, I would like to just verify that it is 
indeed possible to read SDSF output using EXECIO in a REXX CGI program.   My 
code basically issues SDSF SA command to allocate output datasets,  then I try 
to use EXECIO to read the SDSF output.   My REXx program works ok under IRXJCL.

thanks
Dana


>Hi
>
>Send you offlist maybe .
>
>--
>For IBM-MAIN subscribe / signoff / archive access instructions,
>send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Program FLIH backdoor - This is a criminal breach of security!

[Pate, Gene]

I am amazed at the uproar over this. Is there anything that a PCFLIH backdoor 
can accomplish that any AC=1 module in any APF authorized library cannot? 
Is there anyone else out there that is running any vendor code for which they 
have not done code reviews that is running AC=1 in any APF authorized library? 
Is there anyone else out there that is running any home grown code with an AC=1 
in an APF authorized library for which they have not done code reviews? Is 
there anyone else out there that has libraries in the APF list that can be 
updated by anything other than there change control system that only allows 
modules that have been through code reviews to be installed in their APF 
authorized libraries? 

How you allow code to get into supervisor state is of no consequence once it is 
in supervisor state so, unless you have a pristine system where every load 
module library on the system is totally locked down and only the OS libraries 
supplied by IBM appear in the APF list, you have by definition accepted 
exposures to system integrity. Does your management understand just how exposed 
you have left all the company secrets?

Using a PCFLIH backdoor is only one of many techniques that can be used to 
accomplish getting yourself into supervisor state and sometimes it is the right 
technique and sometimes it is not.

Back in the late 70's I wrote a PCFLIH backdoor because it was not only the 
correct technique it was the only technique that would work. My company and its 
sister companies had many 168APs that did not have the MVS/SE hardware assist 
installed. At that time IBM wanted about $150K per system for the hardware 
upgrade and we already had plans to replace all of them over the next 3 years 
with 3033s so there was no money to upgrade them. I wrote an SE hardware 
emulator that would run on Ups, APs, and MPs and while you got a 15% 
performance increase with the hardware upgrade and MVS/SE we still got around 
12% with my PCFLIH hardware emulator and we were able to move to MVS/SE 3 years 
sooner that we could have had we all had to wait until all the 168s were 
replaced.

If there was any criminal activity involved in this entire affair I believe it 
was on IBM's part for trying to charge us $150K per system for a microcode 
upgrade to a bunch of outdated systems and not on the part any PCFLIH code that 
I wrote so I outright reject your assertion that a PCFLIH backdoor is any more 
criminal than running any AC=1 module in any APF authorized library that you as 
the systems programmer have not personally code reviewed before you allowed it 
to run on any system that you are responsible for! 

Gene Pate
CSX Technology
Enterprise Architecture



-
This email transmission and any accompanying attachments may
contain CSX privileged and confidential information intended only
for the use of the intended addressee.  Any dissemination,
distribution, copying or action taken in reliance on the contents
of this email by anyone other than the intended recipient is
strictly prohibited.  If you have received this email in error
please immediately delete it and  notify sender at the above CSX
email address.  Sender and CSX accept no liability for any damage
caused directly or indirectly by receipt of this email.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: What is a dataset level NUMBER?

[Walt Farrell]

On Sun, 4 Mar 2012 13:40:48 -0500, Shmuel Metz (Seymour J.) 
 wrote:

>In <072201ccf892$f7184ba0$e548e2e0$@mcn.org>, on 03/02/2012
>   at 08:38 AM, Charles Mills  said:
>
>>What is a dataset level *number*?
>
>Could it be part of the support for mandatory access control?

No; it's much older than that.

And it really is "for whatever your installation might want to do with it". 

Note that the value is made available to exits, for example.

-- 
Walt Farrell
IBM STSM, z/OS Security Design

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Return code = X'14' from ATTACH JSTCB=YES

[Peter Relson]

Sample scenario:
-- Initiator attaches jobstep program task
-- jobstep program task attaches non-jobstep task T
-- non-jobstep task T attaches T2 specifying JSTCB=YES

Return Code = x'14'.

A jobstep task may only be attached by a jobstep task. And the subtasks of 
a given task may not be a mixture of both jobstep and non-jobstep tasks.

Peter Relson
z/OS Core Technology Design

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Changing sysplex hardware

[Natasa Savinc]

Thank you all for taking interest, especially to Skip, who answered what was 
really the question here. We followed this procedure for our sandbox sysplex, 
we will do the same for test and production.
Best regards,
Natasa

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN