zOS Data Masking Techniques, Algorithms or utilities?
Coleagues Somebody knows a utility/technique or algorithm that meets whit the purpose to data masking inside zOS? Thanks. Date: Tue, 18 May 2010 14:39:59 -0400 From: dba...@ups.com Subject: Re: What is the difference between starting a cataloged procedure and submitting a JCL To: IBM-MAIN@bama.ua.edu The term to use is uninitialized. It matters not what DSORG, etc. appears in the catalog and/or VTOC entries. I don't know if it still applies, but an uninitialized dataset opened for input by a COBOL program would be automatically closed and reopened for output. Other run-time environments are not as accomodating, however. db -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Paul Gilmartin Sent: Tuesday, May 18, 2010 11:07 AM To: IBM-MAIN@bama.ua.edu Subject: Re: What is the difference between starting a cataloged procedure and submitting a JCL On Tue, 18 May 2010 09:36:23 -0500, Hal Merritt wrote: IEFBR14 creates only a 'null' file. Most programs trying to open and read a 'null' file will fail. Depending on SMS, whether DSORG can be determined, etc. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Prefiero un día sin coche que sin Messenger www.vivirmessenger.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Passw protection out RACF rules with z/OS resources for userid.
Colleagues, Somebody knows if there is an alternate way to proctect a password of a userid, this means that the userId is for a GroupWise application; but as always happen, this user sometimes is used to try to signin to the platform (this must be not allowed by policies) due to the reason that is the userid of the product. Actually this user has the RACF Pass-Interval N/A but you agree that if anybody knows this user and try to use to signin on the application after 3 attempts must be revoked; this represents a big problem because many services and applications uses this userid to interact with GroupWise application. I´ve thinking in the properly options of z/OS to search for a schema that allows to protect the userid and the password DO NOT be ruled by a attempts policie (Global options, APFs, etc); in few words, if anybody try to use this user, after many attepmts the userid do not get a revoked status, it is this possible? Thanks. Date: Thu, 19 Feb 2009 11:47:00 -0600 From: mark.zel...@zurichna.com Subject: Re: Rexx / edit macro bug? To: IBM-MAIN@bama.ua.edu On Thu, 19 Feb 2009 09:03:02 -0600, Big Iron billlalo...@rocketmail.com wrote: It might be helpful to display the return code value which is set after the LOCATE CURSOR ISREDIT commands are issued. For example: /* rexx */ address isredit macro FIND WS-MODULE-IDENTIFIER locate 401 lrc = RC cursor = 412 21 Say 'locate returned RC='lrc' cursor returned RC='RC to see if either of those commands encountered a problem. Sorry, I have not been following this thread and don't know what the exact issue is, but the OP may want to check out former ISPF developer Doug Nadel's MACROSPY program. I've only used it once or twice, but when you need it, it's a great tool. http://www.sillysot.com/mvs/ Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:mark.zel...@zurichna.com z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Es tu última oportunidad para ganar premios por el simple hecho de buscar en internet. http://www.ganabuscando.com/Default.aspx -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Passw protection out RACF rules with z/OS resources for userid.
Yeah! the application really needs a password (because many people who improperly attempt to use it knows the userid, so would be access with no restrictions and that is a very dangerous situation) , PROTECTED attribute had been discarded for this purpose. Thanks. Date: Thu, 19 Feb 2009 11:31:40 -0800 From: barry.a.schw...@boeing.com Subject: Re: Passw protection out RACF rules with z/OS resources for userid. To: IBM-MAIN@bama.ua.edu Does the application really need a password? Could you make the USERID protected and thereby eliminate any possibility of it being revoked? -Original Message- From: Carlos Cordero Sent: Thursday, February 19, 2009 10:40 AM To: IBM-MAIN@bama.ua.edu Subject: Passw protection out RACF rules with z/OS resources for userid. Somebody knows if there is an alternate way to proctect a password of a userid, this means that the userId is for a GroupWise application; but as always happen, this user sometimes is used to try to signin to the platform (this must be not allowed by policies) due to the reason that is the userid of the product. Actually this user has the RACF Pass-Interval N/A but you agree that if anybody knows this user and try to use to signin on the application after 3 attempts must be revoked; this represents a big problem because many services and applications uses this userid to interact with GroupWise application. I´ve thinking in the properly options of z/OS to search for a schema that allows to protect the userid and the password DO NOT be ruled by a attempts policie (Global options, APFs, etc); in few words, if anybody try to use this user, after many attepmts the userid do not get a revoked status, it is this possible? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Live Search premia tus búsquedas, llévate hasta ¡Un Auto! http://www.ganabuscando.com/Default.aspx -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Error trying execute a shell on z/OS
Colleagues, somebody can help me to find what happen when i try to execute a shell in z/OS? the error is this: Errno=82x The exec call contained a format error; Reason=5B4B000D. Press Enter to continue. The route of the shell has been the same and i´ve been executed always sucessfully but unexpectedly begins to fail this exec request; always i select the option SELECT RUN METHOD: DIRECT to execute the shell Thanks. Date: Thu, 19 Feb 2009 14:13:30 -0600 From: wfarr...@us.ibm.com Subject: Re: Passw protection out RACF rules with z/OS resources for userid. To: IBM-MAIN@bama.ua.edu On Thu, 19 Feb 2009 14:00:00 -0600, Carlos Cordero jccorde...@hotmail.com wrote: Yeah! the application really needs a password (because many people who improperly attempt to use it knows the userid, so would be access with no restrictions and that is a very dangerous situation) , PROTECTED attribute had been discarded for this purpose. You can't logon using a PROTECTED user ID, unless you have some very odd application that does not request a password at all, and then tells RACF not to check a password. Normal applications request a password and supply it on the RACROUTE REQUEST=VERIFY, and such a request will fail immediately (without revoking the user ID) if the user specified a PROTECTED user ID. Thus the ID is very well protected (and thus the term PROTECTED). The lack of a password does not allow use of the ID with no restrictions as you indicated, and it is probably exactly what you want. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ P.D. Checa las nuevas fotos de mi Space http://home.services.spaces.live.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Passw protection out RACF rules with z/OS resources for userid.
I find a simple solution for this ( and checked): inside Beta 88 panels, an option to define a new passowrd for the userid, allows to do not have a Pass-Interval, next there is a option for the password that NO REVOKE, even after many attempts; once this has been applied; tested the attempts to acces with this user for more than 3 attepmts (actually this is a RACF configuration in my installation) and do not revoke the user; at the time to display the user; only appears a PASS-INTERVAL: N/A (and NO Protected attribute appears). My question is; with kind of resource or procedure between RACF and Beta88 allows this functionality? Thanks. Date: Thu, 19 Feb 2009 14:13:30 -0600 From: wfarr...@us.ibm.com Subject: Re: Passw protection out RACF rules with z/OS resources for userid. To: IBM-MAIN@bama.ua.edu On Thu, 19 Feb 2009 14:00:00 -0600, Carlos Cordero jccorde...@hotmail.com wrote: Yeah! the application really needs a password (because many people who improperly attempt to use it knows the userid, so would be access with no restrictions and that is a very dangerous situation) , PROTECTED attribute had been discarded for this purpose. You can't logon using a PROTECTED user ID, unless you have some very odd application that does not request a password at all, and then tells RACF not to check a password. Normal applications request a password and supply it on the RACROUTE REQUEST=VERIFY, and such a request will fail immediately (without revoking the user ID) if the user specified a PROTECTED user ID. Thus the ID is very well protected (and thus the term PROTECTED). The lack of a password does not allow use of the ID with no restrictions as you indicated, and it is probably exactly what you want. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ P.D. Live Search tiene una sorpresa buenísima, chécala aquí. http://www.ganabuscando.com/Default.aspx -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Error trying execute a shell on z/OS
I execute the shell as next: 1) In TSO SDSF session, exec the command TSO ISH 2) Then i select the folder where the shell is located. 3) Once inside, put an X to execute it. 4) It open a screen with the METHOD options, I select #1 (Direct) Then, appears the error. The purpose of the shell is to read a configuration file (XML) of locations definitions, then the script generates a XML output files for a product that needs these locations. Thanks. Date: Thu, 19 Feb 2009 15:52:58 -0600 From: joa...@swbell.net Subject: Re: Error trying execute a shell on z/OS To: IBM-MAIN@bama.ua.edu Carlos, From looking at Mark's post, I have a few questions: 1) is the file you're trying to run marked with the eXecutable bit in the directory. Be sure that when you check, you check the proper one (ie, the owner and the group and the other section of the attributes). 2) If it is executable, can you BROWSE it in ISHELL? If so, does it look like readable text or a bunch of binary junk. 3) if it is text, does the first line start with something like: #!/bin/sh The important part is the #! which is a magic which tell UNIX to run the rest of the line as a UNIX command. Also, make sure that what is after the #! is valid as a UNIX executable program (not another shell script). 4) if it is binary junk, does the first line when you browse it start with: IEWPLMH That is what tells UNIX that this is a binary (compiled) program. -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ P.D. Live Search tiene una sorpresa buenísima, chécala aquí. http://www.ganabuscando.com/Default.aspx -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Error trying execute a shell on z/OS
I execute the shell as next: 1) In TSO SDSF session, exec the command TSO ISH 2) Then i select the folder where the shell is located. 3) Once inside, put an X to execute it. 4) It open a screen with the METHOD options, I select #1 (Direct) Then, appears the error. The purpose of the shell is to read a configuration file (XML) of locations definitions, then the script generates a XML output files for a product that needs these locations. Thanks. Date: Thu, 19 Feb 2009 15:52:58 -0600 From: joa...@swbell.net Subject: Re: Error trying execute a shell on z/OS To: IBM-MAIN@bama.ua.edu Carlos, From looking at Mark's post, I have a few questions: 1) is the file you're trying to run marked with the eXecutable bit in the directory. Be sure that when you check, you check the proper one (ie, the owner and the group and the other section of the attributes). 2) If it is executable, can you BROWSE it in ISHELL? If so, does it look like readable text or a bunch of binary junk. 3) if it is text, does the first line start with something like: #!/bin/sh The important part is the #! which is a magic which tell UNIX to run the rest of the line as a UNIX command. Also, make sure that what is after the #! is valid as a UNIX executable program (not another shell script). 4) if it is binary junk, does the first line when you browse it start with: IEWPLMH That is what tells UNIX that this is a binary (compiled) program. -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Es tu última oportunidad para ganar premios por el simple hecho de buscar en internet. http://www.ganabuscando.com/Default.aspx -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Error trying execute a shell on z/OS
I tried to access through TSO OMVS, but i do not get a session, appears the next error, i think something in the system is wrong and not in the shell and the exec call; next are the errors at the moment to access with TSO OMVS: FSUM2055I The OMVS command cannot use the message catalog.+ FSUM2056I Function = catopen(), catalog name = '/usr/lib/nls/msg/C/fsumucat.cat ', return value = -1, errno = 157 (X'009D'), reason code = 5B4B000D, descrip tion = 'EDC5157I An internal error has occurred.' *** FSUM2319 No session was started. The program to start the shell could not be in voked. Function = execl(), program name = '/bin/login', errno = 157 (X'009D'), reas on code = 5B4B000D, message = 'EDC5157I An internal error has occurred.' FSUM2331 The session has ended. Press Enter to end OMVS. FSUM2194I The end of the session was not recorded. The recording program could not be invoked.+ FSUM2195I Function = execl(), terminal name = '/dev/ttyp', program name = ' /bin/fomtlout', errno = 157 (X'009D'), description = 'EDC5157I An internal e rror has occurred.' *** THANKS ! Date: Thu, 19 Feb 2009 15:52:58 -0600 From: joa...@swbell.net Subject: Re: Error trying execute a shell on z/OS To: IBM-MAIN@bama.ua.edu Carlos, From looking at Mark's post, I have a few questions: 1) is the file you're trying to run marked with the eXecutable bit in the directory. Be sure that when you check, you check the proper one (ie, the owner and the group and the other section of the attributes). 2) If it is executable, can you BROWSE it in ISHELL? If so, does it look like readable text or a bunch of binary junk. 3) if it is text, does the first line start with something like: #!/bin/sh The important part is the #! which is a magic which tell UNIX to run the rest of the line as a UNIX command. Also, make sure that what is after the #! is valid as a UNIX executable program (not another shell script). 4) if it is binary junk, does the first line when you browse it start with: IEWPLMH That is what tells UNIX that this is a binary (compiled) program. -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ P.D. Checa las nuevas fotos de mi Space http://home.services.spaces.live.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Error trying execute a shell on z/OS
I tried to access through TSO OMVS, but i do not get a session, appears the next error, i think something in the system is wrong and not in the shell and the exec call; next are the errors at the moment to access with TSO OMVS: FSUM2055I The OMVS command cannot use the message catalog.+ FSUM2056I Function = catopen(), catalog name = '/usr/lib/nls/msg/C/fsumucat.cat ', return value = -1, errno = 157 (X'009D'), reason code = 5B4B000D, descrip tion = 'EDC5157I An internal error has occurred.' *** FSUM2319 No session was started. The program to start the shell could not be in voked. Function = execl(), program name = '/bin/login', errno = 157 (X'009D'), reas on code = 5B4B000D, message = 'EDC5157I An internal error has occurred.' FSUM2331 The session has ended. Press Enter to end OMVS. FSUM2194I The end of the session was not recorded. The recording program could not be invoked.+ FSUM2195I Function = execl(), terminal name = '/dev/ttyp', program name = ' /bin/fomtlout', errno = 157 (X'009D'), description = 'EDC5157I An internal e rror has occurred.' *** THANKS ! Date: Thu, 19 Feb 2009 15:52:58 -0600 From: joa...@swbell.net Subject: Re: Error trying execute a shell on z/OS To: IBM-MAIN@bama.ua.edu Carlos, From looking at Mark's post, I have a few questions: 1) is the file you're trying to run marked with the eXecutable bit in the directory. Be sure that when you check, you check the proper one (ie, the owner and the group and the other section of the attributes). 2) If it is executable, can you BROWSE it in ISHELL? If so, does it look like readable text or a bunch of binary junk. 3) if it is text, does the first line start with something like: #!/bin/sh The important part is the #! which is a magic which tell UNIX to run the rest of the line as a UNIX command. Also, make sure that what is after the #! is valid as a UNIX executable program (not another shell script). 4) if it is binary junk, does the first line when you browse it start with: IEWPLMH That is what tells UNIX that this is a binary (compiled) program. -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ P.D. Checa las nuevas fotos de mi Space http://home.services.spaces.live.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Here's what IBM pays an IOS developer
I agree with that; IBM and Mainframe customers should be really concerned about this situation; if not; let me tell you that is the beginning of the end of a honorary ancient legacy .. In other countries, almost the same situation .. Date: Mon, 9 Feb 2009 15:57:21 -0500 From: pinnc...@rochester.rr.com Subject: Here's what IBM pays an IOS developer To: IBM-MAIN@bama.ua.edu From a job posting today on NetTemps: CTG is in need of a PLX Programmer for one of our top clients in Poughkeepsie, NY. Skills required: PLX Programming skills (Very important as that is what the code is written in) OS/390 skills (MVS) Experience (Equally important as this is the operating system that the code will run under). S390 eServer hardware and millicode knowledge (Important as this is what the code is manipulating). Architecture Verification skills- Must be able to read and interpret architecture documents, technical specs so to speak, and be able to write code (in PLX) to stress and test that architecture Working knowledge or experience with S/390 eServer Channel I/O architecture and I/O devices (All of this work deals with I/O not CPU) Location: Poughkeepsie, NY Shift: 1st shift, Monday-Friday Compensation: $35/hr or $61,000 depending on benefits needed) And IBM continues to wonder why people leave mainframes in droves. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Comparte fotos, juega y charla en Messenger. http://download.live.com/messenger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: DD DEST=(MS Windows machine)
An option is use the FTP utility over the EXEC statement; then, after the DDs definition, (DSN to be transfered, otuput, ReturnCodes, etc) becomes the ftp sentences to signin,, this step declares the IP, user and password for the server (whatever of kind) and multiple FTP options Keep in mind that the TSO user must have the properly rights to the FTP z/OS libraries and it depends of the own configuration of your installation. Once this ready, by the side of the Windows server you need a service account with the properly policies defined to use the FTP and write rights over the folder you trying to put your data. Hope this help you. Regards from Mexico. Date: Thu, 5 Feb 2009 07:50:57 -0800 From: russell@gmail.com Subject: DD DEST=(MS Windows machine) To: IBM-MAIN@bama.ua.edu I'm toying with different ideas of how to send data to an MS Windows server from MVS (1.9) Right now I have step one produce a sequential, plain text file on DASD, and step 2 uses FTP to send it to the PC, translating ebcdic to ascii along the way. I can easily send data from MVS to VM/CMS using DEST=(vmnode,userid) and that got me thinking... what would it take to have something similar to write data to a PC? Where can I read about the process required to to do that? (I'm anticipating the work required to do it is prohibitive given that FTP is readily available, but still, it's an interesting (to me) idea. :-) Note: The PC is not a user workstation, it's a server that watches the directory the FTP process writes to, and then processes the file when the size stops changing. (Seems a little hokey to me... but there it is) Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Personaliza Messenger como tú quieras. http://download.live.com/messenger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Def alias error in z/OS (SOLVED)
I said, what I just need to know is a name of resource of kind which protects on distinct way the execution of DEF and DEL commands; and it was this: - STGADMIN.IGG.DEFDEL.UALIAS - Once defined, then Alter access was assigned to my group and DEF and DEL commands was executed succesfully. Date: Wed, 28 Jan 2009 14:03:31 -0600 From: wfarr...@us.ibm.com Subject: Re: Def alias error in z/OS To: IBM-MAIN@bama.ua.edu On Wed, 28 Jan 2009 13:05:03 -0600, Carlos Cordero jccorde...@hotmail.com wrote: I think I was not explicit in my question, sorry, the point is how else commands DEFINE DEF could be executed successfully if are not defined in IKJTSOxx? or what else validate as other criteria regarding the catalog? Before tracing the trouble, I need to validate the possibilities. DEFINE and DELETE perform many different functions, and many/most of them have different requirements for which resources you need access to, and whether they require APF authorization or not. So, in fact, an ordinary DELETE will work without APF authorization, but a DELETE of an ALIAS will not. It's quite possible that DEFINE works the same way. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Chatea en Messenger desde Hotmail. http://download.live.com/messenger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Def alias error in z/OS (SOLVED)
Maybe because many things are ruled by RACF definitions, but keep in mind that a specific kind of resources are strictly protected by the own security of the z/OS; for example, a Library (Whatever) which contains the IDCAMS utility could appears into APF tables, but not the same for commands, like this case. Date: Thu, 29 Jan 2009 11:51:42 -0600 From: wfarr...@us.ibm.com Subject: Re: Def alias error in z/OS (SOLVED) To: IBM-MAIN@bama.ua.edu On Thu, 29 Jan 2009 11:44:25 -0600, Chase, John jch...@ussco.com wrote: - STGADMIN.IGG.DEFDEL.UALIAS -Once defined, then Alter access was assigned to my group and DEF and DEL commands was executed succesfully. Interesting that TSO checks for that authority, but IDCAMS running in batch apparently does not. Perhaps that's not a TSO vs batch distinction, but an APF-authorized vs non-APF-authorized distinction? -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Personaliza Messenger como tú quieras. http://download.live.com/messenger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Def alias error in z/OS
I think I was not explicit in my question, sorry, the point is how else commands DEFINE DEF could be executed successfully if are not defined in IKJTSOxx? or what else validate as other criteria regarding the catalog? Before tracing the trouble, I need to validate the possibilities. Again, the error message at the moment to execute in command line option the DEFINE command: IDC3018I SECURITY VERIFICATION FAILED+ IDC0014I LASTCC=12 IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36 IBM Explanation: RETURN CODE 56 Explanation: A security verification failed. Reason Code 36 Explanation: The caller is not authorized. When no profile exists for functions that require RACF authorization, the caller must be at least APF authorized. Thanks. Date: Wed, 28 Jan 2009 08:23:49 -0600 From: wfarr...@us.ibm.com Subject: Re: Def alias error in z/OS To: IBM-MAIN@bama.ua.edu On Tue, 27 Jan 2009 18:28:50 -0600, Carlos Cordero jccorde...@hotmail.com wrote: After reviewing again definitions on all systems of our installation for SYS1.PARM(IKJTSOxx) member; there is no definition for DEF and DEFINE commands in AUTHCMD Section, but even, IDCAMS prog definition in AUTHPGM does not exists!, my big question is how IDCAMS commands runs authorized properly through JCL or TSO command in those systems where there is no error to run DEF command on TSO? You don't normally run IDCAMS under TSO. You run commands that are similar, possibly identical to IDCAMS subcommands. And they may in fact be the same code. But you're not running IDCAMS, you're running the commands. If they are not in the AUTHCMD section of IKJTSOxx then they do not run authorized under TSO. You do not need IDCAMS itself in the AUTHCMD section as you do not run IDCAMS in TSO. (You could run it under TSO, but you would have to invoke it differently, and it would not run authorized in that case.) When you run IDCAMS in batch, it runs authorized because the IDCAMS module is linked AC(1) and resides in an APF-authorized library. If you're still having problems, you may need to consider doing some system tracing. And perhaps you need to be seeking formal assistance via the IBM Support Center. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Sabes que son imágenes dinámicas en Messenger? Descúbrelo. http://download.live.com/messenger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Def alias error in z/OS
Colleagues, After reviewing again definitions on all systems of our installation for SYS1.PARM(IKJTSOxx) member; there is no definition for DEF and DEFINE commands in AUTHCMD Section, but even, IDCAMS prog definition in AUTHPGM does not exists!, my big question is how IDCAMS commands runs authorized properly through JCL or TSO command in those systems where there is no error to run DEF command on TSO? The reference for the IDCAMS AÚTHPGM definitions was taken from ABC s of z/OS System programming Volume 3 manual. This is on z/OS 1.7 version Thanks. ´ Date: Tue, 27 Jan 2009 07:39:05 -0600 From: wfarr...@us.ibm.com Subject: Re: Def alias error in z/OS To: IBM-MAIN@bama.ua.edu On Mon, 26 Jan 2009 17:04:32 -0600, Carlos Cordero jccorde...@hotmail.com wrote: Taking back this trouble: after reviewing definitions of DEF and DEFINE commands on there is no definition into IKJTSOnn member, AUTHCMD section; so, I take a look inside others mainframes where the DEF and DEFINE command runs successfully via command-line and even in these there is no definition of DEF and DEFINE commands at SYS1.PARM(IKJTSOnn) definition level. So, I think that the last option is that a resource of kind that “authorizes” the DEF and DEFINE commands could be via APF authorization, the question is, this is true??, If yes, which kind of resource must be define inside? Just keep in mind, that over the mainframes where the DEF and DEFINE commands does not run; via IDCAMS the ALIAS is defined successfully but via command line, this fails. IDCAMS runs authorized. If you do not have DEFINE or DEF in the AUTHCMD section of IKJTSOxx then they do not run authorized when invoked under TSO. I suggest you do an experiment, and put them in that section of IKJTSOxx and then refresh your TSO settings, and see if that makes the command line invocation work. If it does, then I can not explain why command line works on some of your systems and fails on others, but you will at least know a solution to make it work. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Personaliza Messenger como tú quieras. http://download.live.com/messenger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Def alias error in z/OS
Taking back this trouble: after reviewing definitions of DEF and DEFINE commands on there is no definition into IKJTSOnn member, AUTHCMD section; so, I take a look inside others mainframes where the DEF and DEFINE command runs successfully via command-line and even in these there is no definition of DEF and DEFINE commands at SYS1.PARM(IKJTSOnn) definition level. So, I think that the last option is that a resource of kind that “authorizes” the DEF and DEFINE commands could be via APF authorization, the question is, this is true??, If yes, which kind of resource must be define inside? Just keep in mind, that over the mainframes where the DEF and DEFINE commands does not run; via IDCAMS the ALIAS is defined successfully but via command line, this fails. Thank you for your help. Date: Fri, 23 Jan 2009 07:37:52 -0600 From: wfarr...@us.ibm.com Subject: Re: Def alias error in RACF To: IBM-MAIN@bama.ua.edu On Thu, 22 Jan 2009 18:08:40 -0600, Rick Fochtman rfocht...@ync.net wrote: If I remember correctly, you also need ALTER access to the DSNAMES involved. That's a good thought, Rick, but not relevant in this case, I believe. The OP has stated that the same user can perform the DEFINE ALIAS via IDCAMS but can not do it via the DEFINE command under TSO. So, whatever security he needs, he apparently has it or it would not work under IDCAMS. That leaves lack of APF authority as the prime suspect, I think, and the OP still needs to verify (as previously suggested) that he has DEFINE in IKJTSOxx under AUTHCMD. Unfortunately, he seems to have looked for RDEFINE, not DEFINE. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Sabes que son imágenes dinámicas en Messenger? Descúbrelo. http://download.live.com/messenger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Def alias error in RACF
Colleagues, follow up this problem
Yes, the user for both purpose is the same (so as to execute the DEF through
IDCAMS and run in the command line the DEF command)
Separate, review the IKJTSOnn members on every Host and LPAR where the trouble
exists (actually on the installation where we work, there are 10 mainframes
between production and development environments; 4 of tall the mainframes are
who have this problem; and the AUTHCMD section already contains the DEF and
DEFINE (Rdef and Rdefine) commands.
According a documentation of IBM, the last code after execute in the command
line the RDEF means this next:
RETURN CODE 56 Explanation: A security verification failed.
Reason Code 36
Explanation: The caller is not authorized. When no profile exists for functions
that require RACF authorization, the caller must be at least APF authorized.
The question is, what kind of resource must be missing that protects this
resources into APF definitions or which must be the root of this trouble?
Thanks for your help.
Date: Thu, 15 Jan 2009 07:40:06 -0600 From: jch...@ussco.com Subject: Re:
Def alias error in RACF To: IBM-MAIN@bama.ua.edu -Original
Message- From: IBM Mainframe Discussion List On Behalf Of Carlos
CorderoColleagues, Somebody can help me to know what
causes the next error at the moment to define an Alias in a RACF
environment with z/OS V1.7 release?At the moment to send the request
in command line (through the RACF command 'define alias'); not with the
idcams utility; appears the next error: Menu List Mode
Functions Utilities Help
sss
sss ISPF Command Shell Enter TSO or Workstation commands below:
=== def alias (name ('xm0007') relate ('UCATCOBD.USER')) [ snip ]
IDC3018I SECURITY VERIFICATION FAILED+ IDC0014I LASTCC=12 IDC3009I **
VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36 ***
And of course, when we run the Define Alias through the idcams utility,
its ok. Actually, that's a TSO command, not a RACF command. Is the same
user ID issuing the TSO command as is running the batch IDCAMS job? My first
guess is that the TSO user issuing the DEFINE ALIAS command does not have
UPDATE authority to the master catalog, while the batch user ID does. AFAIK,
IDCAMS makes the same RACF checks in either environment (TSO or batch).
If the same user ID is used in both cases, you might inspect PARMLIB member
IKJTSOnn to ensure that DEFINE (and DEF) are listed in the AUTHCMD section.
-jc- Thanks for your Help Date: Wed, 14 Jan
2009 15:35:02 -0600 From: k...@dovetail.com Subject: Re: Eclipse
articles To: IBM-MAIN@bama.ua.edu Also of interest may be the IBM JZOS
Cookbook, which is a book and an Eclipse project containing lots of
sample code. It only requires that you have z/OS and the (free) z/OS
Java SDK along with free open source software such as Eclipse, Spring,
Ant, Apache java tools, etc. It is focused on using the JZOS batch
launcher and toolkit (part of the z/OS Java SDK). The examples in the
cookbook can also be used in conjunction with the RDz IDE. The JZOS
Cookbook is one of the downloads available from the JZOS alphaworks
site: http://www.alphaworks.ibm.com/tech/zosjavabatchtk Questions on
the cookbook or sample project can be posted to the JZOS alphaworks
forum Kirk Wolf Dovetailed Technologies On Wed, Jan 14, 2009 at
8:21 AM, John McKown joa...@swbell.net wrote: I know this is not
directly applicable. However, there may be mainframe shops which are
using the RDz (or whatever IBM is calling it this week) IDE in addition
to ISPF. RDz is based on Eclipse. I've never gotten the hang of
Eclipse. These articles may help.
http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?sear
ch_by=mastering+eclipse+v3.4 Tiny URL:
http://preview.tinyurl.com/9u5phz -- John --
For IBM- MAIN
subscribe / signoff / archive access instructions, send email to
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html ---
--- For
IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
_ Chatea
en Messenger desde Hotmail. http://download.live.com
-- For
IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the
archives at http
Re: Eclipse articles
Colleagues,
Somebody can help me to know what causes the next error at the moment to define
an Alias in a RACF environment with z/OS V1.7 release?
At the moment to send the request in command line (through the RACF command
'define alias'); not with the idcams utility; appears the next error:
Menu List Mode Functions Utilities Help
ss
ISPF Command Shell
Enter TSO or Workstation commands below:
=== def alias (name ('xm0007') relate ('UCATCOBD.USER'))
Place cursor on choice and press enter to Retrieve command
= re xm02028 group(admprore
= lu xm02028
=
=
=
=
=
=
=
IDC3018I SECURITY VERIFICATION FAILED+
IDC0014I LASTCC=12
IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36
***
And of course, when we run the Define Alias through the idcams utility, its ok.
Thanks for your Help
Date: Wed, 14 Jan 2009 15:35:02 -0600 From: k...@dovetail.com Subject: Re:
Eclipse articles To: IBM-MAIN@bama.ua.edu Also of interest may be the IBM
JZOS Cookbook, which is a book and an Eclipse project containing lots of
sample code. It only requires that you have z/OS and the (free) z/OS Java
SDK along with free open source software such as Eclipse, Spring, Ant,
Apache java tools, etc. It is focused on using the JZOS batch launcher and
toolkit (part of the z/OS Java SDK). The examples in the cookbook can also
be used in conjunction with the RDz IDE. The JZOS Cookbook is one of the
downloads available from the JZOS alphaworks site:
http://www.alphaworks.ibm.com/tech/zosjavabatchtk Questions on the
cookbook or sample project can be posted to the JZOS alphaworks forum
Kirk Wolf Dovetailed Technologies On Wed, Jan 14, 2009 at 8:21 AM, John
McKown joa...@swbell.net wrote: I know this is not directly
applicable. However, there may be mainframe shops which are using the RDz
(or whatever IBM is calling it this week) IDE in addition to ISPF. RDz is
based on Eclipse. I've never gotten the hang of Eclipse. These articles
may help.
http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4
Tiny URL: http://preview.tinyurl.com/9u5phz -- John
-- For
IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
-- For
IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives
at http://bama.ua.edu/archives/ibm-main.html
_
Chatea en Messenger desde Hotmail.
http://download.live.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Def alias error in RACF
Sorry, the subject has been changed, must be like that...
Date: Wed, 14 Jan 2009 17:19:41 -0600 From: jccorde...@hotmail.com Subject:
Re: Eclipse articles To: IBM-MAIN@bama.ua.edu Colleagues,
Somebody can help me to know what causes the next error at the moment to
define an Alias in a RACF environment with z/OS V1.7 release? At the
moment to send the request in command line (through the RACF command 'define
alias'); not with the idcams utility; appears the next error: Menu List
Mode Functions Utilities Help
ss
ISPF Command Shell Enter TSO or Workstation commands below: === def alias
(name ('xm0007') relate ('UCATCOBD.USER')) Place cursor on choice and press
enter to Retrieve command = re xm02028 group(admprore = lu xm02028 = = =
= = = = IDC3018I SECURITY VERIFICATION FAILED+ IDC0014I LASTCC=12
IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS IGG0CLFT-36 ***
And of course, when we run the Define Alias through the idcams utility, its
ok.Thanks for your HelpDate: Wed, 14 Jan 2009 15:35:02 -0600
From: k...@dovetail.com Subject: Re: Eclipse articles To:
IBM-MAIN@bama.ua.edu Also of interest may be the IBM JZOS Cookbook, which
is a book and an Eclipse project containing lots of sample code. It only
requires that you have z/OS and the (free) z/OS Java SDK along with free
open source software such as Eclipse, Spring, Ant, Apache java tools, etc.
It is focused on using the JZOS batch launcher and toolkit (part of the z/OS
Java SDK). The examples in the cookbook can also be used in conjunction with
the RDz IDE. The JZOS Cookbook is one of the downloads available from the
JZOS alphaworks site: http://www.alphaworks.ibm.com/tech/zosjavabatchtk
Questions on the cookbook or sample project can be posted to the JZOS
alphaworks forum Kirk Wolf Dovetailed Technologies On Wed, Jan 14,
2009 at 8:21 AM, John McKown joa...@swbell.net wrote: I know this is
not directly applicable. However, there may be mainframe shops which are
using the RDz (or whatever IBM is calling it this week) IDE in addition to
ISPF. RDz is based on Eclipse. I've never gotten the hang of Eclipse.
These articles may help.
http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?search_by=mastering+eclipse+v3.4
Tiny URL: http://preview.tinyurl.com/9u5phz -- John
-- For
IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
-- For
IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives
at http://bama.ua.edu/archives/ibm-main.html
_ Chatea en
Messenger desde Hotmail. http://download.live.com
-- For
IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives
at http://bama.ua.edu/archives/ibm-main.html
_
Comunícate rápido y fácil al compartir tu lista de contactos en Windows Live
http://download.live.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RRS/DB2 JDBC definition and implementation
Hi everybody! I need your help for this: to get a detailed documentation on how to know: 1) All z/OS Resources required to implement the RRS 2) RRS detailed implementation considerations 3) RRS configuration 4) DB2 JDBC/SQLJ Driver for z/OS, with the version that belongs DB2 8, detailed implementation and configuration. (JCC) 5) How to validate WLM application environment. Date: Wed, 16 Jul 2008 10:04:01 -0700 From: [EMAIL PROTECTED] Subject: Re: Moving 3390-3 to 3390-9 To: IBM-MAIN@BAMA.UA.EDU Mark Zelden wrote: On Wed, 16 Jul 2008 09:05:45 -0700, Edward Jaffe [EMAIL PROTECTED] wrote:If you're moving from say 99 mod-3s to 99 mod 9s, then this software does what you want. But, what if you're moving from 99 mod-3s to 33 mod-9s? Ahhh... then you need FDRMOVE (FDRPAS the first volume, FDRMOVE the other data sets). Or TDMF + LDMF (or LDMF volume migrate + LDMF). So is all of this movement transparent to running applications? Or is only the FDRPAS/TDMF part transparent? -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Tenemos lo que búscas…JUEGOS. http://club.prodigymsn.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ P.D. Checa las nuevas fotos de mi Space http://home.services.spaces.live.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
RRS/DB2 JDBC definition and implementation
Hi everybody! I need your help for this: to get a detailed documentation on how to know: 1) All z/OS Resources required to implement the RRS 2) RRS detailed implementation considerations 3) RRS configuration 4) DB2 JDBC/SQLJ Driver for z/OS, with the version that belongs DB2 8, detailed implementation and configuration. (JCC) 5) How to validate WLM application environment. Date: Wed, 16 Jul 2008 10:04:01 -0700 From: [EMAIL PROTECTED] Subject: Re: Moving 3390-3 to 3390-9 To: IBM-MAIN@BAMA.UA.EDU Mark Zelden wrote: On Wed, 16 Jul 2008 09:05:45 -0700, Edward Jaffe [EMAIL PROTECTED] wrote: If you're moving from say 99 mod-3s to 99 mod 9s, then this software does what you want. But, what if you're moving from 99 mod-3s to 33 mod-9s? Ahhh... then you need FDRMOVE (FDRPAS the first volume, FDRMOVE the other data sets). Or TDMF + LDMF (or LDMF volume migrate + LDMF).So is all of this movement transparent to running applications? Or is only the FDRPAS/TDMF part transparent? -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Tenemos lo que búscas…JUEGOS. http://club.prodigymsn.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
RRS trouble usage
Hi everybody, I have this next error (attached file) when i tried to use RRS module to incorporate a product trough JDBC DB2 services on mainframe to a DB2 subsystem located on distinct LPAR (only 2 LPARs on this mainframe) the DB2 subsys is on LPAR #1 and the RSS and the product is on the LPAR # 2, there is an Data Sharing Schema on this Mainframe. Can somebody help me with this? Thanks. _ P.D. Checa las nuevas fotos de mi Space http://home.services.spaces.live.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html 1 J E S 2 J O B L O G -- S Y S T E M M E X F -- N O D E G F P T 0 15.57.08 JOB71343 MONDAY,23 JUN 2008 15.57.08 JOB71343 IRR010I USERID XM02028 IS ASSIGNED TO THIS JOB. 15.57.12 JOB71343 ICH70001I XM02028 LAST ACCESS AT 15:40:58 ON MONDAY, JUNE 23, 2008 15.57.12 JOB71343 $HASP373 XM02028M STARTED - INIT 16 - CLASS F - SYS MEXF 15.57.12 JOB71343 IEF403I XM02028M - STARTED - TIME=15.57.12 15.57.46 JOB71343 - --TIMINGS (MINS.)---PAGING COUNTS 15.57.46 JOB71343 -STEPNAME PROCSTEPRC EXCP CONNTCBSRB CLOCK SERV WORKLOAD PAGE SWAP VIO SWAPS 15.57.46 JOB71343 -RIVBASI 12 21741246.08.00 .5 439K BATCH3 0 0 0 15.57.46 JOB71343 -RIVLDAP FLUSH 0 0.00.00 .0 0 BATCH0 0 0 0 15.57.46 JOB71343 -RIVNETW FLUSH 0 0.00.00 .0 0 BATCH0 0 0 0 15.57.46 JOB71343 -RIVRACF FLUSH 0 0.00.00 .0 0 BATCH0 0 0 0 15.57.46 JOB71343 -RIVWN02 FLUSH 0 0.00.00 .0 0 BATCH0 0 0 0 15.57.46 JOB71343 IEF404I XM02028M - ENDED - TIME=15.57.46 15.57.46 JOB71343 -XM02028M ENDED. NAME-SAMJ.INSTALL TOTAL TCB CPU TIME=.08 TOTAL ELAPSED TIME=.5 15.57.46 JOB71343 $HASP395 XM02028M ENDED 0-- JES2 JOB STATISTICS -- - 23 JUN 2008 JOB EXECUTION DATE - 145 CARDS READ - 236 SYSOUT PRINT RECORDS -0 SYSOUT PUNCH RECORDS - 12 SYSOUT SPOOL KBYTES - 0.56 MINUTES EXECUTION TIME 1 //XM02028M JOB (0001), JOB71343 // 'SAMJ.INSTALL', // CLASS=L, // MSGCLASS=X, // REGION=0M, // NOTIFY=XM02028, //TIME=1440 //* /*JOBPARM SYSAFF=MEXF //* //* //* INITIAL VALUE OF SAM/BASIC //* 2 //RIVBASI EXEC PGM=JVMLDM56,REGION=256M,COND=(0,LT) 3 //STEPLIB DD DISP=SHR, // DSN=SYS1.SIEALNKE 4 // DD DISP=SHR, // DSN=LDB2MXD1.DMD1.SDSNEXIT 5 // DD DISP=SHR, // DSN=LDB2MXD1.DMD1.SDSNLOAD 6 // DD DISP=SHR, // DSN=LDB2MXD1.DB2V810.DMD1.SDSNLOD2 7 //SYSOUT DD SYSOUT=* 8 //SYSPRINT DD SYSOUT=* 9 //STDOUT DD SYSOUT=* 10 //STDERR DD SYSOUT=* 11 //CEEDUMP DD SYSOUT=* 12 //ABNLDUMP DD SYSOUT=* 13 //SYSABEND DD SYSOUT=* 14 //ABNLIGNR DD DUMMY 15 //CEEOPTS DD DISP=SHR, // DSN=SYS3.SAMJ.V35.DAT.USER.CNTLLIB(CEEOPTS) 16 //STDENV DD PATHDISP=(KEEP,KEEP), // PATH='/opt/sam/v35/bin/readInitValues.sh' 17 //MAINARGS DD * //* //* INITIAL VALUE OF SECURITY SYSTEM LDAP //* 18 //RIVLDAP EXEC PGM=JVMLDM56,REGION=256M,COND=(0,LT) 19 //STEPLIB DD DISP=SHR, // DSN=SYS1.SIEALNKE 20 // DD DISP=SHR, // DSN=LDB2MXD1.DMD1.SDSNEXIT 21 // DD DISP=SHR, // DSN=LDB2MXD1.DMD1.SDSNLOAD 22 // DD DISP=SHR, // DSN=LDB2MXD1.DB2V810.DMD1.SDSNLOD2 23 //SYSOUT DD SYSOUT=* 24 //SYSPRINT DD SYSOUT=* 25 //STDOUT DD SYSOUT=* 26 //STDERR DD SYSOUT=* 27 //CEEDUMP DD SYSOUT=* 28 //ABNLDUMP DD SYSOUT=* 29 //SYSABEND DD SYSOUT=*
Re: Abend S013 using ICHDSM00 procedure
I would like to say thanks everybody for your help, now succesfully run my JCL, we detect next: output file had lenght of 80, then changed by a file with 133; even still using the brodcast library. Thanks, Best regards from Mexico. Date: Tue, 4 Mar 2008 06:05:52 -0500 From: [EMAIL PROTECTED] Subject: Re: Abend S013 using ICHDSM00 procedure To: IBM-MAIN@BAMA.UA.EDU Carlos, Something like the following is all you should need in the way JCL. //jobname JOB (account),'username',CLASS=x,MSGCLASS=x //STEP0001 EXEC PGM=ICHDSM00 //SYSPRINT DD SYSOUT=* //SYSUT2 DD SYSOUT=* //SYSIN DD * FUNCTION option /* // If the program ICHDSM00 is protected by a RACF profile in the PROGRAM class, you will need EXECUTE or greater access permission to the profile to execute it. Otherwise, you will need the RACF AUDITOR attribute. Lastly, if the FACILITY class resource ICHDSM00.SYSCAT is protected by a profile, you will need at least READ access to it to get user catalog information associated with FUNCTION SYSCAT (or ALL). You do not need any access permissions whatsoever to the RACF database. Regards, Bob Robert S. Hansel | 2008 RACF Training (January - July) Sr. RACF Specialist | Intro Basic Admin - Boston - APR 29 - MAY 1 RSH Consulting, Inc. | Audit for Results - Boston - MAY 20-22 www.rshconsulting.com | 617-969-8211 | Visit our website for registration details -Original Message- Date: Mon, 3 Mar 2008 12:39:42 -0600 From: Carlos Cordero [EMAIL PROTECTED] Subject: Abend S013 using ICHDSM00 procedure Hi everybody!! Please, somebody can help me with this: i tried to use the ICHDSM00 program using SYS1.BRODCAST library, then using a DSMON sentences to get RACF report. so, i get an abend S013 when jcl fails; what are the main reason for this abend? Tanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Dos categorías, increíbles premios, un ganador. ¿Quieres ser tú? http://cine.prodigymsn.com/nanometraje -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Abend S013 using ICHDSM00 procedure
Hi everybody!! Please, somebody can help me with this: i tried to use the ICHDSM00 program using SYS1.BRODCAST library, then using a DSMON sentences to get RACF report. so, i get an abend S013 when jcl fails; what are the main reason for this abend? Tanks. Date: Mon, 3 Mar 2008 13:24:08 -0500 From: [EMAIL PROTECTED] Subject: Re: CA-FAVER to DFDSS conversion To: IBM-MAIN@BAMA.UA.EDU snip Kevin, When you ran your DFDSS benchmark, did you use OPT(4) and the ADMIN parameters? These should reduce your I/O considerably. snip Mr. Obrien, I used OPT(4), but not the ADMIN. Is there an advantage to use the ADMIN parm? Thanks, Fletch (317) 817-3545 Sr. Systems Analyst Conseco, LLC The first step towards failure is trying - Homer Simpson -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Participa en nanometrajes y gana grandes premios http://cine.prodigymsn.com/nanometraje -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
