IBM 3745s Live On

2012-04-03 Thread Jim Marshall
I have not been following much of the IBM 3745 discussions but I know I looked 
into it back in the early 21st Century.  I looked at the Visara offering and it 
was interesting.   At that point I learned there is a firm in Bethesda, MD 
which has been buying up every surplus 3745 they can get for spare parts.   
Hopefully they were monitoring GSA and how it salvages IT equipment.  

jim marshall 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


z/OS Feeding SolarWinds

2012-02-16 Thread Jim Marshall
One of our Cyber Security folks is putting up a NOC (Network Operations 
Center) and they purchased something called SolarWinds.  Now they are on my 
doorstep saying they want to scan my system along with DB2 and Oracle data 
bases.   This is COOL and then I asked how they intended to do this magic;  hey 
we can accept SNMP traffic.  

He said we already knew how to do all of this (guess it was my age and grey 
hair).Besides asking for contacts within SolarWinds, I thought I might 
throw this out to the community and see if anything rings a bell. 

Appreciate any info one might offer as to what I can do to get some pretty 
displays on the wall of the NOC and inspire awe in people.   

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


Dual IBM 3584 ATLs

2012-02-01 Thread Jim Marshall
In 1997 or so we installed a used IBM 3494 ATL and now in 2012 we are replacing 
with two IBM 3584 ATL systems.  The first one is on the floor and 2nd will be 
arriving in March.  Hey this is the US Govt and we got our money out of it. We 
also run IBM's RMM. 

We have one series of carts, 93 for the first ATL and plan on 94 for 
the 2nd series.  We would be ejecting out carts to head off to DR storage and 
coming back.  Also we have carts created onsite and come back to used 1-2 times 
a year.  These carts are in RMM and have VRS records.  My concern is when these 
carts return, operations puts a cart into the wrong ATL (should I be comcerned) 
or does it manner.   In misfile case, will it reject the input or just put the 
cart into limbo status for me to eventually figure out. 

Been thinking about maybe defining both ranges to both ATL's and then who 
cares.  But it seems RMM might care.  Am sure someone has encountered this 
question and knows the answers or some food for thought.

Any help is appreciated.  Jim Marshall, Washington DC  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


SPF in 1978

2011-12-22 Thread Jim Marshall
In 1978 I had the honor to have the first IBM 3032 shipped (#06) into the 
Pentagon when I worked at the Air Force Data Services Center.  I already had in 
place an IBM 360-75J which ran TSO.  With the IBM 3032 came IPO 1.0 and we also 
receive the full-screen product called IBM 3270 Display and Structure 
Prgramming Facility or as people called it SPF.  

Later in the early 1980s it morphed into ISPF and a few years later it split 
into ISPF and PDF.  PDF came with all the facilities to write ISPF 
applications.  It was for those who did not want to buy the precoded ISPF 
dialogs.  Then in the middle 1980s I also worked on VM and their was an ISPF 
and PDF for VM.  The notion was you'd learn ISPF and it would be almost the 
same in both world.  Except the diehard VM'ers loved CMS.   

Later in the early 1990s I recall ISPF and PDF merged back into ISPF; except 
over in VM where it remains today.  If you look at VM's DIRMAINT software it 
will have a pre-requisite of these products but indeed only if you want to use 
their precoded ISPF application.   Save your money.   

Very interesting times.   Jim Marshall, Capt, USAF-Ret 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


Carts Created with RECFM=N

2011-12-14 Thread Jim Marshall
Doing a VTS migration and have run across some DSNs which were created with 
RECFM=N.  We are using Tivoli Tape Optimzer software to do mass copies of 
files.   It chokes on these RECFM=N files.IBM is telling us they do not 
support RECFM=N files and have no clue how these could be created. 

Tracked it back to the developer and he is puzzled at how these could have been 
created with RECFM=N.  Has anyone ran across software products which might have 
outputed RECFM=N files. 

Any clues appreciated. jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Washington DC Position Available - Peformance Capacity Reporting/Planning

2011-11-16 Thread Jim Marshall
Vacancy – z/OS Performance Reporting, Capacity Planning, Performance Tuning 
(optional). Data Center has 2-z9BCs operating in a z/OS Parallel Sysplex. 
Knowledge of SAS required to report using MXG. Knowledge of SAS  SAS/STAT, 
required and SAS/Graph helpful.

This is a contractor position with Compuware Services with a US Government 
agency. Position is located in downtown Washington DC with Metro train access. 
MXG is also being exploited to report on zLinux running under z/VM with 
Websphere Application Server, DB2, and Oracle. There is ample opportunity to 
expand into zLinux Middleware products and other software as needed. Data 
Center runs z/OS, JES2, USS, CICS, ADABAS, Websphere Application Server, HATS, 
Enterprise Service Bus with Websphere MQ, Message Broker, DB2 and a few other 
interesting products. There is no classified data involved although the person 
must be able to get the US Government Executive Branch equivalent of a Top 
Secret Security clearance; due to the sensitivity of the data involved. You can 
either send an inquiry to me and I can give you the particulars of how to 
contact Compuware. Or you can send the resume to me and I can give to the 
Compuware Services manager. 

I am the US Government Technical “Coach” of the group, ensure the work is kept 
interesting, supply what the folks need and foster the exchange of technical 
information. Tele-working is not offered (even for me) due to the daily demands 
for expert advice.  

I understand Washington DC scares people with the horror stories of expensive 
living. But I can attest to living here on much less money in the military and 
doing quite nicely. The US Government is a very stable employer in general. 
Interested parties can 
contact me off-list and I can hook you up with the Contractor besides area 
info. This place is too much fun to retire; a second time.

Jim Marshall,jim.marsh...@opm.gov   202-606-1261

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


TPCR Version 4.2 WAS

2011-10-24 Thread Jim Marshall
We just purchased some new IBM DS8800 DASD and along with it bought TPCR and 
got TPCR 4.2 to be installed on the IBM 2096s.  We run WAS V7.0 and now learn 
TPCR V4.2 needs WAS V6.1 for it to work.  Back when we upgraded from WAS  V6.1 
to WAS 7.0 because of IBM pressure to get off V6.  

IS anyone running TPCR V4.2 using WAS V7.0 today or I am stuck with 
reinstalling V6.1 and asking IBM not to bill me; 'cause it ain't my fault the 
Tivoli folks can not stay current. 

Thanks  Jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Connect Direct on a separate LPAR

2011-10-13 Thread Jim Marshall
Answer is YES, we do it today.   We have a HOT-Standby capability on a 2nd 
Machine in case the primary goes down. 
You say you will only have it one LPAR.   Interesting for it seems to say you 
run Prod and TEST in the same LPAR. 
In general we need to have it in TEST LPAR to do checkouts for initial trading 
partner implementations and to get the quirks out of the new releases.  Then we 
run PROD and it is up all the time. 

In general
a.  Since with multiple LPAR sites and maybe multiple machines you will 
have to route all the transfers over to where C:D is running.  A small shop 
this may not be a problem; a big shop it might be. This is premising you 
running it in one and only one LPAR.  
b.  If you are running one and only one instance, then PROD and TEST are in 
the same C:D and the need to recycle it periodically in testing will be an 
issue if it is used much at all. 
c.   I understand now SECURE+ is packaged as standard equipment and that is 
goodness. 

If indeed you want to save more , then many places I have known will 
offload it onto a LINUX Server and pay around $15-20K up front and then SS.   
Note: I understand IBM's new licensing scheme may change this from what 
Sterling Commerce had it.

Suggest you talk to IBM about how it is going to license the product in their 
mold. I am currently still trying to figure out the licensing methodology from 
the old way to the new way.  It has not been easy to get the conversion 
information of how my 30+ licenses dropped to 6 (I am told).  You can contact 
me offlist if you need any more info. I have run the product for about 18 
years. 

jim  

  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Connect Direct on a separate LPAR

2011-10-13 Thread Jim Marshall
Depending on the number of transfers you do you can get a license for
'n' concurrent transfers so costs won't be based on type or size of box.


What Sterling Commerce (SC) did until bought by IBM was to license mainframe 
licenses on MIPS.  Maybe they did have a session license at some reduced cost.  
The way I understand now IBM will only be marketing unlimited sessions and 
including SECURE+ as standard equipment.  This makes licensing much simpler.  
SC had 3, 5, 7 and MAX-Server licenses along the way. Then it varied by 
Windows, UNIX, LINUX, and all the other platforms they could run the product; 
and it was many, many.  

Just ensure if are able to get a less than unlimited session license, you 
understand how outbound and inbound transfers will work and what happens when 
all the sessions are busy.  My Data Exchange partners do not want to believe I 
can not accept their transfer (appears as I am not available) when they are 
sending to me. Likewise outbound transfers will fail if initiated when all the 
sessions are used (of course I have coded a number of retries over a 2-3 hour 
period for it to be successful when sessions free up).  So in my case unlimited 
sessions was not costing much more than cheaping out and getting all the phone 
calls asking if I am DOWN; actually just very busy. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: ZDNET actually says something nice about IBM LINUX

2011-10-06 Thread Jim Marshall
How many Virtual Linux Servers per IFLHm with the usual answer it 
it depends.  Today I am running one z9BC IFL and have up 55+ Virtual Linux 
Servers.  That is, 3 LPARS (BUILD, TEST,   Prod).  As to what they do is more 
relevant than the quantity.   Have 2 production DB2 LUW servers, 2 production 
Oracles, 2 Production Websphere Application Servers, Tivoli TAMS  WebSeal, and 
a number of Virtual Firewalls to implement Defense in Depth. Now we have 
duplicated those is the TEST/UAT LPAR and then we have to build all of it. 

In general when we brought up zLinux back in 2004-5 or so, we found if you had 
z/OS trained people managing things with not Linux experience, it all got built 
very inefficiently. Everytime performance got bad they would add memory to 
improve things and it just made it worse. Then there was the z/VM aspect where 
historically speaking it was 2 different cultures.  One needed to tune z/VM 
first and then move down to the Linux machines.

So again, to me, it depends on what you are asking these Virtual Linux servers 
to do would be important in understanding how many one can usually run in an 
IFL.  

jim

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Postion Available Washington DC

2011-10-03 Thread Jim Marshall
I currently have a Contractor position open on the staff here, here are the 
particulars 

 1. Fifteen year of demonstrated experience as a VTAM systems programmer, 
at least ten years of which must be within a MVS/ESA operating system or higher 
with subsystems very similar to 
2.  Three years of recent experience as a senior VTAM systems programmer 
providing expertise in z/OS or OS/390 Communications Server.
3.  Three years of recent demonstrated experience implementing zSeries 
technologies similar in scope to the one described in this solicitation. 
4.  Three years of recent demonstrated experience in implementing 
Communications Server in a z/OS Parallel Sysplex environment.
5.  Demonstrated experience in configuring IBM Open Systems Adapter. 
6.  Demonstrated experience in configuring IBM 8265 and CISCO Switches.
7.  Demonstrated experience in presenting technical communications 
information.
8.  Recent demonstrated experience performing z/OS software conversions, as 
well as release level upgrades.
9.  Recent experience in leading large-scale, technically complex systems 
software/integration projects involving systems similar to one cited in this 
solicitation. 
10. Recent demonstrated experience in performing problem determination and 
resolution.
11. Recent demonstrated experience in performing problem determination 
using VTAM and IP Trace facilities.
12. Recent demonstrated experience in implementing and testing a disaster 
recovery plan.

The job is with Compuware Services.  I am the COTR of the contract and will be 
glad to forward your inquiry over to the company for review.   If you are 
hesitant about coming to the Washington DC area, give me a call and I can chat 
about the living expenses, entertainment, and general over all conditions.  I 
came to DC back in 1975 as an Air Force Staff Sergeant (single) and lived well. 
 I came back in the 1980s as an officer and lived quite well.  Am now a gov't 
civilian and making it fine. 

I have enticed a number of folks over the years from out in the hinderland to 
come here and they are still around. The work is challenging and interesting 
with a plan to go to GDPS Active-Active Sysplex at 69km. IBM zEnterprise 
Servers are coming next year and just upgraded DASD  Tape. Just moving into 
DB2 for z/OS Data Sharing and converting SuSe to RedHat Linux on z.  If someone 
wants to broaden their horizons and can do what is considered your job, you can 
cross over into other areas.   

You will need the ability to get a SSBI (Single Scope Background Investigation) 
Full Adjudicated Background Investigation

Let me know if you are interested. jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


HYBRID is now In Vogue

2011-09-15 Thread Jim Marshall
Has anyone been notified of IBM changing their handles from zSeries or z 
something to Hybrid something. 

I ask this because I just purchased some IBM hardware of various types and my 
z hardware sales person is no longer z.   The person now shows as the 
official IBM title Channel Hybrid Sales Specialist for some FICON stuff I 
bought. 

So may z Software people will now be Hybrid Software Sales although maybe 
this is an unannouced marriage of the Passport Advantage sales team with the z 
Sales Team (oh no).  Maybe it will all be put onto Passport Advantage and no 
need for the z/OS software people (interesting cost savings). 

Now that IBM is going Hybrid in a big way, will z be called Legacy in the 
future?Stay tuned and let me know if anyone hears anything. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


IBM's Omegamon for z/OS

2011-09-10 Thread Jim Marshall
Way back when I got IBM's Tivoli Omegamon for Mainframe Networks when IBM 
bought Candle and NPM/IP V2 was a flaming disaster; at no charge just to keep 
me around.  My main concern has been the direction IBM said it was taking of me 
having to have Linux on z or an AIX system to take advantage of the product.  
Over the years IBM has confirmed it over and over. 

Recently I was looking at Tivoli Omegamon for z/OS and I am hearing IBM Product 
Mger saying that is not true and it happily runs self contained on z/OS (my 
goal for DR reasons).  Back when IBM said the 3270 interface was now stablized 
and not to be enhanced.  I am told now it is being updated.  But my questions 
of how the product runs a GUI interface runs have been met with why do I need 
it. 

Is any one running the product and can comment if the zLinux or AIX is still in 
the cards. True if one has the 3270 interface it works but you'd lose 
functionality and be paying for something you can not use.   My thought is it 
should all run completely on z/OS and I would not need any other systems. 

Anyone want to comment about Omegamon CICS/DB2/Websphere/etc 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Block Letter Routines

2011-08-22 Thread Jim Marshall
Been reading a number of posts concerning the External Writer, Block Letters, 
routines to print, etc. Way back in the 20th Century in the MVT days I get a 
tape of the Eastern Airlines source code modification to OS/MVT; it was a great 
day in the neighborhood which happened to be the Pentagon (my Air Force days). 
We were big into producing microfiche and I wanted to microfiche an entire 
source PDS.  I wanted each member preceded by a one page block letter page.  
Indeed EALSD095 came from Eastern Airlines happily extended to handle all the 
characters. I do not recall if it contained the National characters; if it did 
not then Bill Godfrey, my contractor, would have added them. 

I adapted some Goddard Space Flight Center utilities for listing PDS's to go 
off to a block letter routine which used EALSD095. All this code is on the CBT 
Tape probably in file 316.  You can thank the Air Force for recognizing the 
value of Open Source and fully supporting permitting my efforts to gather up 
code from many places, figure out how it work, clean it up a little adding my 
style of documentation and sending it for Arnie Casinghino CBT tape and also to 
the SHARE tape. Plus I had 2 - IBM 3330V dedicated in an IBM 3850 MSS, and this 
was 1979, to just source code. 

It was some fun times and it was a pleasure to serve. Oh yes, all that code is 
still available today. Just in case some question why it all has not been 
converted to 31-bit, etc, etc.  It is because it still works today as is and 
also might be useful to those who are running MVT or MVS 3.8 somewhere.  Not to 
plug some of the CBT's offerings but I put out IBM's Fortran G,  H along with 
PLI and RPG which IBM distributed free back when. Sam Golob added ALGOL along 
the way. I understand and works today. 

Jim Marshall 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Assembler with ISPF Presentation

2011-08-18 Thread Jim Marshall
Been off on vacation and came back to see the discussion of Assembler and a 
desire to have presentation made easy. I did just this back in the 20th Century 
when I discovered ISPF and all the neat things I could do on screens. The ugly 
part at first was the need to use the way I code the CALL which imbedded the 
ISPF modules in my ALC. When ISPF was updated it was called 
re-assembly/Link(BIND) time.  

So with a bit of coding I changed them over to make use the ISPF modules 
dynamically and life was good. 
All this work can be found on the www.cbttape.org in my files (try 161).  

Enjoy jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


z/OS System Programmer Needed East Coast

2011-06-01 Thread Jim Marshall
I am aware of a need for a z/OS Systems Programmer to work under contract 
at Ft Meade, MD southwest of Baltimore and northeast of Washington DC.  
The person should already have a minimum Top Secret clearance in place. If 
any further clearances are needed the firm will sponsor and get the higher 
level clearances needed.  

Oh yes, undoubtly you have heard it is expensive to live here and I will say 
housing is not cheap depending on your needs. But in general I can here in the 
1970s in the military and ended up staying. This area has been almost 
recession proof with pay scales which have not really come down much at all. 
The folks I have hired here are quite happy and doing quite well. Most 
everything else you need entertainment wise is free.  If someone wants to 
chat about specific costs, let me know.

If someone is interested, contact me offlist and I can point you in the right 
direction.   

Jim   jim.marsh...@opm.gov

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


zIIPs and TCP/IP usage

2011-03-18 Thread Jim Marshall
Right now I am looking at zIIPs and zAAPs planning for some new z196s.  One 
area of interest is I read zIIPs can offload some of my TCP/IP work.  What are 
people seeing as what is being offloaded within TCP/IP and how much.  

Just from a high level is this any load of significance I could expect or is it 
relatively low.  Say for instance I did not have any DB2 or XML, then has 
anyone just got the zIIP because of TCP/IP.  


I am discounting JAVA workload out of the picture to keep away from the 
discussion of doing zIIPzAAPs and combining the two.  So just for the sake of 
this discussion say I have no JAVA workload either. 

Be interested in others actual experiences. jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Ends an ISPF session.

2011-02-02 Thread Jim Marshall
Many people have responded and maybe this solution has already been given.

In general the LOG dataset is created when certain functions are done all 
along in the ISPF session.  Only twice in my career did I care. So setting the 
OPTION to 2 to delete it when I am done seemed wasteful.  WHY CREATE IT 
IN THE FIRST PLACE 

Go to Option 0, select LOG Defaults (1) and you will see a panel to complete. 
You can put 2 as the option but below you will see Primary Pages 
and Secondary Pages.  These somehow equate to a space allocation for the 
LOG File.  Change these to 0 (zero) and in the future when it goes to allocate 
the log, ISPF sees no space is to be allocated:

a.  It does not allocate the file.  
b.  It will not write to the file along the way 
c.  There is no need to delete the file at the end of the session. 
d.  If for any reason, you need it, change the settings to values and use it. 

My customer at the time (wife who was my paying customer) complained 
about when she got into ISPF it always seemed like it went off for 4-5 
seconds first thing and then was fine as far as response. I surmised it was the 
dynamic allocation for the file. In the 1990s we even had STK and Memorex 
3380s and it was noticeable. She made the changes and no more delays to 
get started.

I never figured out what the constant logging was doing as I was working. But 
the best I/O delay is the one you never make happen. I still spread the word 
today only because of all the SPFLOGn files left out on DASD and then our 
Storage Person has routines to sweep them away after a while.  

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


z/OS Virus Checker zLinux Virus Checker

2011-01-28 Thread Jim Marshall
Auditors came around and wrote up our z/OS V1R10 Sysplex for not running a 
Virus Checker.  Anyone has a constructive solution as to one being available or 
some verbage which defends the position. 

Been hunting around for a Virus Checker for zLinux.  Also interested in what 
kind of over head it might use. 

thanks  jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


SHARE - Anaheim - Hilton Government Rate

2011-01-22 Thread Jim Marshall
I looked at the Hilton Hotel US Government rates and immediately booked a 
room across the street at a little motel at significant savings. But later I 
got 
some advice from a helpful person (source not to be revealed) which 
recommends the following. 

For those who think the SHARE US Government Rate is too high (and it is) call 
directly into the Hilton and book a room at the US Government rate. I 
understand it is $129; much lower than the $158 a night I saw on the SHARE 
lodging pages. I understand if you do this, SHARE still gets the credit for you 
anyway by staying in the hotel. 

Oh yes for all those US Government workers who will be attending, do not 
forget to go get the form off the GSA website to be exempt from the 14% 
hotel tax. At one point California would not accept them but the last time I 
attended in Anaheim, it was taken.  OK, I am staying where I am in the spirit 
of saving a few bucks for the US Taxpayer.   

See those attending in Anaheim next month.   Jim Marshall  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


z196s Daisy Chained Converters

2011-01-21 Thread Jim Marshall
I have an old Xerox 4635 Parallel Channel attached Xerox 4635 and hope to 
have an all FICON Channel z196 by the end of the year.  Am curious if anyone 
has daisy chained Converters as follows:

Parallel channel Device with CU connected to ESCON converter which is then 
connected ESCON to a FICON Converter connected to a FICON Channel on a 
z196 or maybe you have it on a z10/z9.  If so what is your speed of the FICON 
channel needed. 

Just considering this although the X4635 is 14+ years old.  Hope to replace it 
with an IP attached printer though. Just wanted to get a sense if someone 
was actually doing it.  You know the customer will ask WHY do they need a 
new one; it still works, paid for years ago, etc.   

You are free to contacting me offlist if you do not want to admit having such 
a gludge in place.   

Thanks   Jim Marshall, Washington DC 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Connect:Direct Needed Enhancement

2010-12-17 Thread Jim Marshall
Need some assistance from those running Connect:Direct for z/OS from 
Sterling Commerce (who is now IBM).  The way C:D reports the success or 
unsuccessful transfer of files is by putting out a SVTM052I message.   For 
example  
 
Successful -  SVTM052I COMPLETED /SCPA000I 
  
Unsuccessful   - SVTM052I  COMPLETED 0008/SVSA909I
 
Monitoring these in any kind of System Automation software causes excessive 
overhead by having to trap SVTM052I and then parse down to either the 
return code or maybe the .  My suggestion is either to change errors to 
SVTM052E or maybe duplicate the unsuccessful SVTM052I message with a 
SVTM052E to make it transparent for those who maybe are parsing the 
message. 
 
We do many, many, etc, transfers per day and would like to “efficiently” 
automate the monitoring of these using our System Automation product.  If 
you are a Connect:Direct installation, agree with the need, contact Sterling 
Commerce (IBM) and support my problem report of 256333.  
 
Thanks   Jim Marshall   

Jim Marshall, Software Engineer
Washington DC  20415

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Tivoli Storage Manager for z/OS (Functionally Stablized Impending Demise)

2010-11-05 Thread Jim Marshall
I called IBM in yesterday to get an update to learn if TSM for z/OS was still 
destined for the scapeheap come 2013 and indeed it is.  Although one can 
prolong its life by 3-4 years aftyer 2013 paying extra for extended support.  
The pitch is to move your TSM over to zLinux, AIX, Windows, etc.   This is not 
appealing for a number of reasons why we went with TSM for z/OS; 99.999% 
availability, automation, operational advantages, use existing IBM VTS/ATL, 
tape management as a part of either RMM or CA-1, etc. 

Back when I heard the annoucement a few years ago, the IBM party line I 
heard at SHARE each year (2 years running) was TSM was converting over to 
use DB2 as its catalog store. IBM had discovered using DB2 for z/OS would 
mean a spectacular performance hit and running on distributed systems using 
UDB/DB2 it ran like a bandit.  Therefore it was DB2's fault and they had no 
choice. 

Yesterday the story was met with amazement and it has changed to no one 
was using TSM for z/OS and I was only one of five total.  Therefore it was 
an economic decision (which if true makes sense). Also the TSM folks believe 
the world is going over to zLinux besides because of the big upswing in the 
number sold last year (probably very true). 

Question - 1: 

SO I would like to know who are the other four people who had a similar idea 
about using TSM for z/OS, to be the data backup place in order to leverage all 
the good things z/OS has to offer.  Like to include those who in the last 2-3 
years may have junked TSM for z/OS and went over to another methodology 
because of the IBM notion no is using the product. Call me a skeptical, but 
with all the sales emphasis done by IBM Tivoli, am I to believe for the last 
5-6 
years, all the z/OS installations in the world assaulted by teams of IBM'ers 
only 
succeeded in 5 TSM for z/OS sales.  

Question - 2: 

So what are people going to use to back up things like your zFS/HFS files on 
z/OS to get granularity in the restoring at the file level.  And also if you 
are 
using Linux on z, what is the same backup strategy for the Linux file systems 
if 
one did not use TSM for z/OS. I hear for TSM for Linux Server to dump the zFS 
files on z/OS I run a TSM Client on z/OS and will need Open Systems Tape 
hardware like LTO specifically for the Tape drives used by TSM. Today I only 
have FICON IBM 3592 type drives for z/OS and z/VM dumps. So now I would 
need to buy hardware along with the TSM for Linux Server? 


You may respond onlist or offlist.  Like to take a poll here and will publish 
the 
high level survey (no names or industries, etc) besides giving the information 
to the IBM TSM folks as either confirmation, etc. 

Jim 

Jim Marshall, Software Engineer
Washington DC  20415

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: FW: The meaning of SCIDS.

2010-10-15 Thread Jim Marshall
The meaning of SCIDS - Ah yes, going back a bunch of years when the Air 
Force and Marines were heavily represented. I always heard it as 

Society to Ceep Inebriated Drunks of the Streets   (which it most certainly 
did).  

Imagine a Grand Ballroom with 4-5K folks and about 50-60% SYSPROGs and a 
free bar with hard liquor; all you could drink. The information, as well as, 
the 
booze was free flowing.  Now you know why staying in the SCIDS hotel was so 
sought after versus one of the other 10-12 hotels. 

I recall when a city heard heavy drinking guys (very few woman were in 
Systems Prgramming), the local bars would be stock up.  Then during the week 
the word of SCIDS would filter out and the only action would be when SCIDS 
closed and a few sessions were moved to the SCIDS hotel bar. But by that 
time, most of the hanger-on'ers were already three sheets to the wind. 

The next day it was always a topic of conversation amongst the military types 
as to who made the 0800 sessions and who slept in.  It was also challenging if 
you were the Session Chair or worse the speaker. I must commend the 
Marines, for they were up at dawn and ready to go. 

Jim (USAF-Ret)   

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: HOD User Signon Capture

2010-10-05 Thread Jim Marshall
On Mon, 4 Oct 2010 13:24:08 -0500, Rick Sapp rs...@unitrin.com wrote:


Have a problem:
Our external users can access our mainframe via web applications (the actual
userID is passed rarely, most of the time it is an application ID).

UserID in HOD repository does not match the UserID on the mainframe, so any
value of SMF recs is out.

Business wants to capture user occurrences of signing on to HOD to measure
usage (some of our partners require this access to access our mainframe).

How can we capture that user information at the point of signon to the HOD
internal security repository?

-Are there HOD server logs where this information is present?
-Are there audit logs that have unsuccessful and successful access?
-Is there a parameter that can be set to capture this User Signon info?

Operating here without much to go on in no-manual land

Like to get a clarification on a few things before responding. 

1. I think HOD is referring to IBM's Host-on-Demand 
2. You say Our external users can access our mainframe via web applications 
(the actual userID is passed rarely, most of the time it is an application ID) 
Then why are you not using the same RACF ID when they sign onto the 
system as one would use with HOD authorizing them using RACF?  
3. Above you seem to say the users are accessing Web Applications using 
HOD. HOD is 3270 based with a small JAVA applet downloading to the user's 
PC. Is that what you actually use? 
4. You say you are accessing HOD's Internal Security Repository? What are 
you using this repository to do (in general without revealing any sensitive 
info).  Maybe you are talking about the internal Profile Pools HOD can have?  
It 
seems to read you are not using RACF/ACF2/TS for HOD sign to the 
mainframe? 
5. Why don't you have any manuals?  Maybe you let the yearly Passport 
Advantage Support lapse. Believe the manuals are freely available but asking 
questions might not. 

jim 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: How get RECEIVE to prompt for member overwrite?

2010-09-28 Thread Jim Marshall
On Sun, 26 Sep 2010 14:14:08 -0700, Charles Mills charl...@mcn.org 
wrote:

The doc for TSO RECEIVE DATASET() says If the data set is partitioned, you
are prompted to replace duplicate members. (There are several preceding if
clauses in sentences in the paragraph; it's not clear to me whether they are
meant to apply to this sentence.)

Seem to recall it always working for me although I have not had the need to 
use it.  My suggestion is to go to TSO and enter Profile List and see if you 
are set to NOPROMPT or PROMPT and look at WTPMSG versus NOWTPMSG. 
One of those if turned off may be preventing the prompt. Let us know if this 
might be the cause. 

For the discussions of whether IEBCOPY in the command issued has used 
the R option for years working fine as I recall. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: can I dynamically increase tso size

2010-09-20 Thread Jim Marshall
Larry Macioce wrote:

I need to work on a file and I've tried the 8192k I am allowed but the file 
still
comes up in browse mode Can I change it and how large can I change it

Sounds like a good time to install REVIEW from Greg Price.  It will handle any 
size file and I understand one can also EDIT too.   

A very CHEAP solution from  CBTTAPE.ORG

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: HTTP TO HTTPS CONVERSION

2010-08-04 Thread Jim Marshall
We have a WEBSRV running on the Mainframe and we are trying to figure out
how to get our address of http:// to automatically convert to https:// when
the user types it in...


Believe you are asking for users who type in http://; is for it to get 
converted to https://; on the return and for the session. 

If this is what you want, contact me offlist if you are interested and be glad 
to get one of my techies to tell explain. We do it being nice to the user 
versus 
forcing them to always remember to type https versus http. We want the 
RACF prompt to go back to them HTTPS and startout things securely. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: ATL 3494 for z/OS and zLinux

2010-08-04 Thread Jim Marshall
   is there a product that would allow me to use an ATL 3494 in the 
z/OS
lpar and the zLinux lpar (in the same CEC)  simultaneously ?
At the moment I'm using it in the z/OS lpar (with DFSMSrmm) only.

Yes, you can do it but now you are into getting the infrastructure on the z/VM 
 zLinux side to work with the ATL.  I looked at this a few years ago and 
decided to go with Tivoli Storage Manager for z/OS. The idea is to have all the 
ATL activity handled by z/OS and keep my z/VM and zLinux from doing tape 
handling. Then my z/OS can run all the jobs, tapes managed by RMM, etc.  
Besides I might put some of the dumps into the VTS along the way. 

Now IBM has decided to Sunset TSM for z/OS in 2013 or so and one must 
maybe convert to TSM for zLinux with all the ugly tape handling outside of 
z/OS; dumb move although they claim the DB2 performance needed is not 
available on z/OS but is on zLinux.  My next move will be to take another 
serious look at FDR's Upstream to keep it all over on the z/OS side and not 
have all the complications of using tapes managed in the z/VM and zLinux 
worlds. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


IBM Is Hiring

2010-07-28 Thread Jim Marshall
Just passing this along here in my part of the land.   Jim Marshall 


IBM is Hiring! Interview with us on July 27th in McLean,VA. 

Do you think the world can work smarter? Join us. Let's build a smarter 
planet. Interview with IBM at our upcoming open house on Tuesday July 
27th at the Ritz-Carlton Tysons Corner in McLean, VA. For event details, 
job listings and advance registration visit: http://www.IBMexpo.com. As 
the planet becomes smarter, we have a chance to create meaningful 
progress and change the way the world works – for the better. At IBM 
Global Business Services – the world’s largest business consultancy – we 
understand that real business value is delivered when business consulting 
is enriched with advanced research, analytics and technology. At IBM we 
have the unique opportunity to bring these elements together, enhancing 
the value we bring our clients. With operations in 160 countries across 17 
industries, you will make a real impact by solving complex business issues 
for the world’s leading clients – helping them become part of a smarter 
planet. Visit http://www.IBMexpo.com for details! 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Mainframe books

2010-07-24 Thread Jim Marshall
I'm looking for a book that breaks down the interanls of MVS.  I was talking to
one of our SYSPROGS and he said there use to be a book that really broke
everything down into real simple terms that was easy to understand.  He
couln't remember what the name was though.  I'm sure it wasn't on MVS,
probably much earlier.  If anyone knows of such a book or have any
recommendations, I'd appreciate it.

You never mentioned what kind of knowledge you possessed about MVS. If 
you are already a SYSPROG doing MVS, then it would be one path. New to 
MVS wanting to understanding internals is another internals. 

If you are new and maybe already understand UNIX, the I would recommend 
the book UNIX as a Second Language. Back in the 1980s, Bob Johnson 
(computer performance fame and Landmark Systems) wrote this book for we 
MVS'ers to understand UNIX. But the reverse came about when I editted it for 
Bob, I could now understand UNIX. This was back when MVS'ers did not care 
about such things. 

If you ar interested, contact me offlist. I got to come back in the US 
Government applying his 15 prior years service. He is in retirement and I 
understand still makes the book available. 

Jim Marshall 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


TSSO - Hardcoded Offsets - Etc

2010-07-21 Thread Jim Marshall
The comments are warranted although there is more to this than meets the 
eye. Since you cam blame me for unleashing TSSO on the SHAREWARE world 
you need to understand its origins.  Back in the Air Force Data Services Center 
in the Pentagon in the 1970s as a Sgt we were running an IBM 360-75J and 
had just gotten in the first shipped IBM 30XX which was the IBM 3032 serial 
#6.  So we had to convert from MVT to MVS and we contracted to PRC for 
assistance. In the door came Bill Godfrey, Carl Goswick, etc to assist us. 
Along 
with converting the MVT to a timesharing machine (putting up TSO  HASP 3.1 
with PRC Mods), PRC helped us get MVS/JES2/TSO/etc  into production to 
take over the MVT workload. Then the 360 would be available for dial-up 
Timesharing. 

Anyway Bill brought in a bunch of code he had developed at another US 
Government agency. You have to understand how Bill worked. He was/is a 
master at developing code, installed his full screen Browse on MVT called 
REVIEW, and now my IBM 3270 on MVT looked a bunch like it looked on MVS. 
But he was into developing code and not making code for general use. He 
would get it to work and functioning for our use. Then we had so many other 
requirements there was not enough time to go back to clean up all the 
hardcoded offsets.  Being a 3 year SYSPROG at that point I was in awe of his 
ability. 

In our early days of MVS, one of the new SYSPROGs (an officer) hosed up the 
JES2 parms and we ipl’ed. Yep, JES2 would not come up and no SYMBOLIC had 
been used to point to another parms. In fact he had not saved off the vanilla 
one. So we ended up having to do a STANDALONE restore of the pack.  Later 
that week Bill came over to show me his TSSO. Up to that point IBM had 
preached nothing, nada, zilch, could be done unless JES2 came up. Well Bill 
had coded TSSO as an IBM Subsystem and its sole purpose was to start up if 
JES2 was down and to be able to enter TSO commands from the console to do 
things like EDIT, RENAME, DELETE, etc. Bill had figured out the inner workings 
of the Subsystem Interface and exploited it.  So in the future our fallback 
strategy was to save off the parms as JES2POLD and fire up TSSO to simply 
rename.  We could also do it for changes to the JES2 proc itself. 

TSSO was meant as an internal tool only and not for general use.  But now Bill 
was using a US Government computer for development and so I grabbed it off 
and on behalf of the US Air Force and taxpayers to give it to the CBT and 
SHARE tapes.  In the coming years Marc Schare picked up the code and 
turned it into an automation tool. Getting back to Bill though he was off 
exploring new challenges. On the TSO code I picked up from him, I went back 
and changed most of the hardcoded offsets to DSECTs, etc. Gave me a good 
look into control blocks and to be able to learn from the master. It was the 
best educational experience of my career. 

Eventually Bill moved on and is still working on US Government Contracts and I 
moved on in the Air Force taking all that code with me. As I said, a bunch of 
it 
is on the CBT tape today. It was Bill’s intent by design to get the idea 
rolling in 
code and then let other pick up the code to further enhance it. Bill’s REVIEW 
command was picked up by Greg Price in Australia who massively expanded it 
with many more functions.  TSSO went to Marc Schare and he expanded it 
greatly. There is code elsewhere claimed by others and being enhanced. I/We 
owe many thanks to Bill. His genius lives today although sorry to say on AIX 
systems last I heard. 

Jim Marshall, Capt, USAF-Ret  
   

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Disk replacing Tape?

2010-06-24 Thread Jim Marshall
Schwarz, Barry A pisze:
 Doesn't anyone exercise the DR plan anymore?  If so, without reading the 
backups?

Of course we do! Does anyone use PTAM for DR? Really?
We use remoted copy for DR. We don't need to recover anything from tape,
because we have all the data on DASD. Oh, we do have tapes with MIGRATs
and backups in DR site - we duplicate all the data on tape, and one
volume set resides in remote ATL. Without virtual tapes.

BTW: Tape is fine for recovery single datasets. Time to recover all the
data from tape is simply unaccpeptable from business point of view. Not
to mention RPO for tapes (Recovery Point Objective).
--
Radoslaw Skorupka

For people with limited budgets there can be a blend where Tapes are indeed 
used and cost effective. Oh yes, the RTO here is 12 hours for Production with 
our RPO is 30-60 seconds.  

1. Mirror critical Production data to the remote location; thus one can IPL. 
2. Do not mirror the Spool and other very static production data depending on 
the application needs. 
3. Contract to firms like IBM, etc, to use their horsepower in the DR versus 
buying your own CPUs. 
4. Recover the other static, non-critical data from tape. 
5. Recover the development systems from tape but not the development data 
(it can be rebuilt from Production data in most cases)
Note: Development systems are absolutely needed in DR because changes 
happen and also bugs are found which need to be fixed. In our cases US Law 
changes may mean application changes are in order. 

So indeed tape still plays. Mirroring all data is expensive and maybe it is 
warranted. Having nothing on tape would be great (maybe). Mirroring tape has 
its expense much greater than say using PTAM for some or even all.  

Hey, since there is no one right answer, then it takes a community of 
SYSPROGs to implement. With one right answer then would need all of us. 

jim   



  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


z/OS WAS Work in WashDC

2010-06-09 Thread Jim Marshall
In need of a z/OS Systems Programmer to work in downtown Washington DC.  
The work is as a contractor working in a US Government Agency in downtown 
near the Viet Nam Wall. The operation has 2 IBM 2096 computers running in a 
z/OS Parallel Sysplex; CICS, DB2, ADABAS, WAS, MQ, Enterprise Service Bus, 
Web Serving, JAVA, TWS, SA for z/OS, SMB, COBOL, etc. In addition z/VM amp; 
Linux is part of the overall operation.  What is needed is experience in 
Websphere Application Server along with SMS (DASD) responsibilities. 
Generalized z/OS experience is a must. No telecommuting permitted for we 
need to be close to our users and senior management to respond to inquires 
and to have them exploit out technical expertise; projects span the US and 
reach overseas. Contractor has been here for 20+ years and the operation is 
expanding. It is expected that once you have mastered your area of 
responsibility, you will move onto some other area to come up to speed 
training another. In the mix is the maintenance of z/OS, etc, and Linux 
Middleware. I have all the z/OS staff trained in z/VM and Linux so they can do 
work their along with understanding how z/OS, z/VM and Linux all integrate 
into the Lines of Business (no z/OS Bigots wanted). I understand Washington 
DC scares people with the horror stories of expensive living. But I can attest 
to living here on much less money in the military and doing quite nicely. The 
US Government is a very stable employer in general. Interested parties can 
contact me off-list and I can hook you up with the Contractor besides area 
info. 

Hey, just signed up for Medicare last year and having too much fun to retire 
(again). Jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Amazing article - Info on Collecting GDGs

2010-05-09 Thread Jim Marshall

Not any from IBM that I am aware of. IBM's method implys a stack of GDGs, 
where (0) is always the newest one created. So if you're JCL refers to the 
current gen, it gets the youngest. There is not an IBM way to process them 
from oldest to youngest. Now, in a z/OS UNIX paradigm, using DoveTailed 
Technologies (love those people!), you could do it with their catsearch 
program. Similar to:

Found an very elementary ALC program to do it and cleaned it and added some 
ways to understand what was happening along with making it cleaner. Plus I 
generate IDCAMS DELETE records that can be passed to a later step to get rid 
of the GDG files processed.  We use it here when we can have a number of 
inbound data transmissions and the application needs to process the collection 
at night. We collect all the GDGs, put them into a backup GDG, and then 
process the file. If people are interested, let me know. 

thanks  jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zFS, etc, and z/OS V1R11

2010-05-07 Thread Jim Marshall

With OA29619, which became available a couple of weeks ago, you
can control this function on an individual file system basis.

http://www-01.ibm.com/support/docview.wss?uid=isg1OA29619

Hey, Good Show.  It is great to learn the IBM'er giving the zFS presentation 
took great notes about our concerns of the movement of zFS ownership in a 
Sysplex.  SHARE really does work and IBM listened to all the concerns of the 
crowd attending the session.  SHARE works! 

Thanks Mark for the update. 

Cool.jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


zFS, etc, and z/OS V1R11

2010-05-06 Thread Jim Marshall
Been seeing many comments about migrating from HFS to zFS and one 
comment had the statement of the performance boost (heard it at SHARE)
coming in z/OS V1R11. Indeed this is true for where one will see it (too 
lengthy 
to explain here). Yes, there were many zFS sessions I attended at the last 
SHARE but one was memorable. An new feature is being added in z/OS V1R11 
where the one system which owns zFS  amongst all of the systems may start 
out on one system you choose but will migrated around to where it thinks it 
will get the best peformance. 

We in the room asked the questions, 

Can this movement be controlled?  Answer was NO.

Is their a command to move it just in case we have to move it based on non-
performance reasons?  NO

Gee, is there something telling us it is moving or has moved?  NO 

OK, is the something which gives us a hint why it moved?  NO, just that you 
will have to trust us to do what is in your best interest

To move if off an LPAR which has it, how do we do it?  IPL and it will move 

So do we specify where it will move?  No 

Hey, might it move back to where it was after the IPL?   If it is deemed by 
IBM, that is the best place for performance.   Soo why would you not 
want it any other place?  

Learned there is a parameter which is defaulted to keep it working like it does 
today but once you select the NEW zFS Super-dupper Performance Option, 
then you get the GOOD, BAD, and UGLY plus a bunch of unknowns.  

The IBM Speaker was mystified why we were wanting any kind of control just 
in case it moved someplace it might not want to be based upon our (and not 
IBM's) desire(s).  In his defense he was taking a lot of notes and maybe our 
suggestions will show up someplace in the future. 

But in the end he was still mystified why anyone would want any control over 
IBM doing this to get really better performance.

Gee, seems like I heard that kind of thought back in the 20th Century.jim   
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Repro Variable blocked records

2010-04-23 Thread Jim Marshall
I am reproing a VB qsam file to Variable KSDS
When I look the VB qsam in ISPF there are 50 trailing blanks at the
end of the record However after the repro
The 50 trailing blanks get trucated

Had the same problem debugging some VB data and learned ISPF lies to you 
and makes you think there are trailing blanks (even turned HEX ON).  Thanks 
to Greg Price and REVIEW (a tool everyone should have installed - FREE) it 
showed me the real story. 

Interesting.   jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: IEBCOPY losing APF authorisation in middle of JOB - etc

2010-04-17 Thread Jim Marshall
IEBCOPY does not need APF authorization for every
operation. Is step 8 doing something different from all
the other steps? Something that might need APF auth.?

Not convinced this a true statment. Back in the late 1970s and early 1980s 
with MVS, it was wired it into homegrown TSO commands and worked well. 
Then with some new release it became authorized. I had Bill Godfrey (TSSO 
fame and TSO GURU) under Contract working for the Air Force in the Pentagon 
and he heard our moans. Bill headed off into the load module and determined 
IBM was doing a GETMAIN for some very small number of bytes (4 I think) from 
a Subpool which needed you to be authorized. No one ever determined why 
they decided to do it.  So the fix for our TSO commands was to go back into a 
SVS system and get its IEBCOPY which did not need authorization and called it 
XEBCOPY for use with the TSO commands. We ran that for years and may 
even still be around. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: QUIKCELL Doc

2010-04-15 Thread Jim Marshall
That would be it. It was originally called QuickCell in the first
release of MVS and consisted of the macros BLDCPOOL, GETCELL, FREECELL
and DELCPOOL and the underlying quickcell services. Somewhere along the
line, it wound up with a single macro interface, CPOOL. How much the
internals of the service may have changed, I can't say, but it still
provides the same service, which is a fast method of creating and
managing a pool of storage cells of the same size.


And even before then it was a MOD to OS/MVT which I applied in the late 
1970s to an IBM 360-75J which predefined a number of cell pools to be used 
for stuff.  Thus it avoided having to do a GETMAIN for a small chunk of 
storage.  After I applied it, I did my standard Benchmark and it gave me 15-
18% boost in CPU power. Do not remember if it came out from IBM or some 
Prehsitoric HACKER. Anyway, IBM made it standard equipment in MVS along 
with many of the MODS and zaps people dreamed up for MVT. With this mod 
and other modifications I could outrun an IBM 370-158.  OK, so it took a bit 
more space, power, and A/C. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Connect:Direct File Agent PROBLEM!!!

2010-04-15 Thread Jim Marshall
Has anyone encountered or is working with Sterling Commerce on a 
Connect:Direct File Agent problem.  Connect:Direct receives a file and the 
receiving directory is given to File Agent to monitor. When the file arrives, 
File 
Agent is supposed to trigger a process to send the file elsewhere. 

We act as a HUB for data and distribute it all over the Enterprise. It seems 
File 
Agent is either asleep or ignoring his/her duties. Sterling has not come across 
with an explanation.  

If anyone can chat contact me offlist.thanks   jim.marsh...@opm.gov 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: How many mainframes are there?

2010-04-11 Thread Jim Marshall

I just wanted to know how exclusive a club am I in.  Then of course I have 
to decide if I want to belong to a club that would have me a member.  Hoping 
it doesn't get to that.

Never looked at IBM Mainframes as a club. Long ago the kind of people who 
were attracted to Mainframes were ones enjoyed puzzles, worked hard, played 
even harder and over time made order from Chaos.  Our Windows and Network 
Brethren are still in the Chaos stage. But have to admit, Windows is finally 
getting some order (so they say); like being upward compatible.  Most of the 
really good SYSPROGs have this independent trait and make magic happen no 
matter what. 

If you want to consider this a club, then no one admits you. One just tags 
along, learns from others mistakes and contributes if you have something to 
say. Learning from others experiences has been one of the most career 
advancing things to come from the CLUB. Things like this talk-list have made it 
easier and actually more distant. Back in the 20th Century if one had a 
problem you called up someone in the club who may or may not be able to 
help. But then the word spread and actually rather quickly. Many times in 
trying times a phone call came with nuggets of info from someone I never have 
heard was in the club. 

Then there was SHARE where you would show up at SKIDS (Cocktail party, 
free booze for 4K+ SYSPROGs) and if you asked a question, someone would 
find you and you bought them a free drink. So if you want to stay, COOL. My 
suggestion is to join many clubs besides a heads down SYSPROG. Branch out 
into other areas like maybe the financials of computing where we play quite 
well, Join the Linux Penguins and ever the VM'ers. Yep the VM'ers got more 
organized with z/VM and are quite nice people.  Join the Windows Club. Does 
not hurt to know them for they will probably never know you. But that is OK 
for it will show them you are coming around in their eyes. 

Maybe you will stick around or not.  It is definitely your choice and either 
way, 
have fun. 

jim   

  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Teach z/OS JCL Using Herclues

2010-03-28 Thread Jim Marshall
Bill Smith (ex-IBM'er) asked me a question and I told him I would post it on 
IBM-Main. Bill worked for IBM for many, many years and took off in a lateral 
direction getting a Masters in Education and was recently teaching JCL to 20+ 
French speaking (a bit of English too) trainees. Bill is curious if anyone has 
developed a course around using Hercules as the platform which I would 
imagine would be running MVS 3.8 versus some bandit version of z/OS.  

Let me know either on or off list and will relay it to Bill.  Oh yes, he may be 
back on IBM-Main in the near future starting a full time job for some insurance 
company out in California dreaming land.   

thanks  jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Encryption software?

2010-03-20 Thread Jim Marshall
This topic is getting bounced around here and on the RACF-L as well, yet
responses are scarce and sporadic. We in the hinterlands are looking for
experiences with any of the major encrypting products to help in selecting
one, without being hounded by vendors. Our site has mentioned TKLM and it
looks like a nightmare, plus it doesn't cover all our media. We have FDR, so
FDRCRYPT is a possibility. We have CA products, OpenTech products, and
MegaCryption looks interesting.
Bottom line...many of us are soliciting opinions from those who have run
that gauntlet already.

Would have responded sooner except was out at SHARE in Seattle. A very, 
very, very beneficial trip.  It was great. 

A consideration might be to ask if any product meets US Gov't FIPS 140-2 
requirement. There was a strategic decision made by the FDR folks, not to 
pursue it back when. Back a few years ago I had a discussion with them about 
the need for it. What happened was they partnered with the MegaCryption 
folks to offer their product for encryption in the places where it was 
mandated. 

IBM stresses the use of the TS encrypting cartridge drives for their 
offering. Sure this is good but encryption is needed for more than dumps. My 
contention is every file one sends out for Data Exchanges should be encrypted 
just in case their is PII (Personally Identifiable Information - used to be 
Privacy 
Data). OK, that means who gets your encrypted file needs to have your 
encryption product to decrypted. 

IBM markets the software IBM Encryption Facility (EF) which has its own 
format but also it supports OpenPGP along with GPG as we learned. They also 
have a free JAVA Client to give out in case the exchange partner does not 
have OpenPGP or GPG.  It is my understanding MegaCryption also has the 
same kind of offering.  

Thus even if you have them snazzy encrypting cartridge drives it does not 
lessen the need for some file encryption software. Just as some food for 
thought. Say today you FTP a file from your z10 z/OS to a Windows platform. 
Hey it arrives in ASCII ready to process. OK, encrypt your EBCIDIC file and 
send it to them as BINARY file, they decrypt the file and look at the data as 
hosed. In their world, so what is a Codepage  

Been doing it now for 4+ years and there are other subtle challenges and 
obstacles. It is not as simple as it looks as my technical team found out the 
hard way.  If anyone wants to carry on a dialog offline, contact me. Setting 
up Data Exchanges where all are sent encrypted and received encrypted have 
many implications; like key management, platform types, codepages, data 
exchange hubs, etc. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: FDR/UPSTREAM for Open Systems on zOS

2010-03-11 Thread Jim Marshall
On Wed, 10 Mar 2010 05:18:22 -0800, bob molerio mole...@yahoo.com 
wrote:

Is anyone using this to backup open systems clients?

Looked at all the products a number of years ago and chose IBM TSM for z/OS 
because of various reasons. But my choice may have been abad one now IBM 
has decided to not support the TSM Server on z/OS any more. The 
advantages of z/OS are many for us especially as far as DR goes. My second 
choice was FDR's product though. Back then a number of things bothered me 
about their implementation. 

1. The pricing was on the amount of data to be stored. This causes one in the 
government to have to over buy to make sure you do not suddenly run out. 

2. The storage of files on tapes had to be really thought though because of 
mixed expiration of data. The tape had to be kept around until the last bit of 
data on the tape expired. There was no way to take 2 or more tapes and pull 
all the non-expired data off to make one new one.  This presented a 
challenge. 

3. On had to keep track of what was on what tape in the case of what was 
current. It was not going to as straight forward as the model TSM has which is 
very much akin to HSM for Open Systems. 

I have told IBM people who are running TSM for z/OS are not going to 
suddenly switch it over and host TSM on Windows, etc, because of the 
various operational issues, etc and also losing the notion of leveraging 
existing 
ATLs, VTS's, Automated Operations, skill sets, Automated Scheduling, etc. 
But they contend that they can get DB2 to perform very well on z/OS to 
handle the TSM database therefore it should not be hosted any more on z/OS. 

I will be taking a 2nd look at FDR/Upstream to learn if it is any easier to 
keep 
track of files on all those tapes and also about pricing models. Oh yes, am 
told 
TSM for z/OS will be around stabilized at V5 and supported until around 2013. 
So folks should be making other plans long before they pull the plug. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


SHAREWARE at Its Finest

2010-02-27 Thread Jim Marshall
 in Washington are not responsive 
to your needs, well, back when we felt your pain and did something about it 
having great fun along the way. 

Jim Marshall 
  
P.S.  Getting the first of a new generation of IBM computer, the IBM 3032, 
made us a showplace besides being in the Pentagon. But 6 months later IBM 
shipped the first IBM 3033 to Singer up in New Jersey, we were obsolete and 
never got the IBM 3032-AP/MP we hoped would come. 
   

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


TS7700 Backups

2010-02-17 Thread Jim Marshall
Just started a good look at something like the IBM TS7700 and sure enough 
the Chief comes by with a broad question. Are any people using the TS7700 to 
backup data from our Brethren over on the Windows or RedHat Linux side of 
things and then taking those dumps offsite. 

Let me know if indeed this is meant to be in the cards.  In the meantime I 
need to go start reading on the TS7700 and such things. 

thanks   jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: CICS IP printer

2010-02-15 Thread Jim Marshall
hi ,
is there anyone knows a good and non-expensive way to define cics an IP
printer.
You say an IP Printer. This would imply you have some product which can 
print from the JES2 Spool to the IP printer (maybe). If you do, then the trick 
is 
to get the CICS print onto the JES2 Spool. You can look at a number of 
products LRS's DRS, MacKinney has one too, etc, which is a started task 
which went the CICS application issues a VTAM ACQUIRE, it responds just like 
a printer, CICS App writes to the printer and the product talks like a printer 
putting the output onto the spool with some DEST= value. 

Another alternative would be to define the IP printer to your PC as one of the 
printers available to it. Then you would define your IP address in the TN3270 
Telnet Server with a printer session.  So now when you sign onto CICS with 
some 3270 emulator, you will have a terminal and printer session. Now in CICS 
you need to update it with an appropriately defined terminal and printer. If it 
all matches, you are running something like Attachmate, HOD, PCOM, 
BlueZone, etc on the PC the print comes back to your PC and off it goes to 
Windows Print Services and then off to the IP printer in your network. 

There are many ways to couch this capability and just depends on what you 
already have. If you have nothing then, I would like at the MacKinney 
products and it may become clear how it could be engineered. If you want to 
chat offlist, let me know. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Preview: z/OS V1.12 - September 2010

2010-02-11 Thread Jim Marshall
Off-topic but still...

Its been years but I do not recall SDSF ever being remotely like Q.
I tried it out long long ago and did not like it at all.(Q that is)
When I first tried SDSF out it worked exactly like I thought a product should 
work and the PFK keys were standard ISPF type .
We were pushed into looking at Q by a user and we couldn't get it out of the 
house fast enough. I suppose it was OK in some sort of wierd way but there 
was no way I was going to give it out to the general users.

For all of its faults QUEUE was on the JES2 Mods tape back in the MVS days 
and even if you did not like it, Q had a very interesting capability. Maybe 
even 
today in small shops JES2 testing meant bringing up a Secondary JES2 and 
submitting work to it.  The challenge was to print the output to see what 
happened.  The Checkpoint file was hardcoded in Q and so from TSO one could 
view the output on the Secondary JES2's Spool.  Hey, what'a deal and FREE. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Replacing IBM 3745

2010-01-30 Thread Jim Marshall
In z/OS environment, is there anyone has the experience of connecting
Remote 3174 to Cisco router to support CICS printing?

There has been a number of suggestions but going back to basics if indeed 
you are using an IBM 3174, you have 3270 type dumb tubes and maybe old 
IBM 3287 printers. Up until last year I was supporting a whole bunch of these 
used remotely for heads down data entry. Mine was supported through some 
old CNT Channel Extension and the CNT was obsolete, out of service and no 
parts. One alternative was to get a VISARA 3174 TCP/IP connected controller 
for a small amount of money (seem to remember a few thousand) and I could 
connect my coax things to it and it was just another network connection. 
We had a Store Room full of old tubes and if one broke it was just thrown 
away.  

Luckily the customer converted the data entry application to a Web App so 
the applicant could enter all the info versus completing paper forms; the need 
for all that STUFF went away.  

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


WEB Print Server Shopping

2010-01-21 Thread Jim Marshall
We are big into TN3270 Telnet Associated Printing here and are getting to 
the point where thousands of users will be added who need to get output off 
the IBM JES2 Spool.  Naturally the applications are not willing to modify 
anything as to where they might put this output except the Warm and Fuzzy 
JES2 Spool.  

Has anyone implemented any kind of Web Print Server where 

  1. accessible using just a Web Browser 
  2. sucks the print off the Jes2 Spool
  3. runs entirely on z/OS or maybe z/OS  Linux; makes it easier to stay 
with our Disaster Recovery. 
  4. gives the user the output printed on them PC printers exactly like it 
would have printed, text wise, on a JES2 Printer. Maybe converts it into a PDF 
for viewing and later printing 
  5. Uses RACF Security for sign-on 
  6. Has the ability to requeue back to the JES2 Spool to print someplace 
else on remote printers. 

I think this is enough for someone to recognize if they are running something 
close.   Let me know either on list or offlist if needed. 

thanks  jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: hfs VS zfs

2010-01-05 Thread Jim Marshall
Hello all, we are planning to migrate from z/os 1.7 to 1.11. In our
planning we are trying to decide if we want to go to zfs instead of the
hfs. Is there anyone out there that can think of any good reasons not to
go to zfs when we do our upgrade?

The suggestion about waiting until you get to 1.11 is stellar and decrease the 
complexity by some factor. 

In general I attended SHARE a few years ago when going to zFS was the Hot 
Topic. We had converted totally over to zFS. Seems to me IBM said the future 
was zFS and HFS was being phased out. Kinda stopped looking for the drop-
dead date after that. Maybe the direction has changed to keep both around. 

In general at the time, the hot topic was having many, many, many, many, 
etc,  objects in one zFS directory and the lookup to find the member ATE your 
CPU alive in a Parallel Sysplex. IBM promised they were looking into improving 
that performance. Until it was redesigned it was Don'ta do it or if it hurts 
to 
touch it, do not touch it.  Hopefully that problem has been addressed.  

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


IBM 9393 RVAs Obsolete for Sure

2009-12-30 Thread Jim Marshall
Been running a pair of IBM 9393 RVA Storage Subsystems since the late 1990s 
and they have been great; RAID-6, paid for, depreciated to $0 (not really, we 
are the US Gov't), and they work.  We use them for testing, systems builds, 
etc, and nothing critical.  It was getting a bit pricey to have them on a 
maintenance contract though. Called up for maintenance last week to get 
something minor fixed and IBM in the call, oh yes by the way, they will no 
longer fix the RVAs after Jan 1, 2010. 

Has anyone come across alternatives for maintenance. 

thanks  jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Monitor lpr printer on Windows from Mainframe

2009-11-25 Thread Jim Marshall
We use VPS to route print from the mainframe to the windows server
and when the server goes down for maintenance etc, the vps printer
goes into an error status cause it can't communicate with the printer.
I can't rely on the network folks to communicate what they are doing to
me so I really need this to be automated.

VPS indeed has an EXIT08 which can redrive the request for connection at 
some interval. In the VPS LPR/LPD you just code say TCPMRD=15 (min) and 
the printer will indeed timeout. Without coding it then the printer will never 
timeout. This is because VPS makes the initial request and waits for a 
response. Eventually the printer may become available but, unlike SNA where 
the 3X74 controller would notify VPS, nothing is sent to VPS saying it is now 
available. I always code some timeout. True if the whole thing is not available 
again, then you go into a loop and eventually (we hope), the printer becomes 
available. 

In VPS 1.8 EXIT08 was implemented in exit code. Oh yes, the exit code needs 
to be told the TCP/IP error code so it knows to retry this type of error. But 
in 
VPS 2.0, the strategy is available in parameters although I have not examined 
them yet to see how easy it is. Hey this is what one doing printing suffers 
from in the IP world of printing. As a side bar, if indeed the printer is set 
for 15 
minutes timeout and there is very long print actually printing, since the 
response does not come to the very end, then even though it is printing, the 
printer will TIMEOUT and when it restarts, it starts over (thank you LPD 
protocol). I try to stay away from large printouts and LPR/LPD protocol unless 
there is no other way. This is why we always TRY to use SOCKET printing, 
with timeout coded too, but doing checkpointing just like JES2 does (JES3 
too). 

Send me an e-mail offlist and be glad to send you the one I have run for 
almost 20 years as a guide.  I threw in all kinds of extra IP error codes as I 
tripped over them. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


z/OS ServerPac Product Prerequisite

2009-11-24 Thread Jim Marshall
Tripped over another no charge product needed to order a z/OS ServerPac.

Bob Richards, on staff, stumbled over this one which everyone should check if 
you have the no charge license. 

[5655-S28] z/OS Management Facility  1.11.00 English (US)

The above needs to be licensed. It is a $0 charge, but needs to be licensed. 
Verify with IBM the $0 though.

Good luck  jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


z/OS ServerPac and Tivoli Products - Surprise

2009-11-20 Thread Jim Marshall
We tried to order a z/OS V1R11 z/OS ServerPac and have some Tivoli 
products. Seems it was rejected because we do not have license for Tivoli 
Management Services on zOS, 5698-A79.  

Seems Tivoli has been causing us all grief because installation of products 
would cause FMIDs of other Tivoli products to be deleted and upgraded 
(before the other product could support it).  A few weeks ago Tivoli came out 
with 5698-A79, as it was explained by the ShopZ folks to take all the common 
code out of all the Tivoli products and create, yes, Tivoli Mgmt Services, 5698-
A79.  

Along with this change I am ShopZ can get you a Tivoli only ServerPac; COOL. 
So if you have ANY Tivoli products, go prod your IBM person to get you 
licensed for 5698-A79 (nocharge). In the meantime our issue brought to light a 
problem with IBM Tivoli Tape Optimzer.  It has a PRE-REQ of DFSMS or z/OS 
in a Tivoli only ServerPac, they would have to give us z/OS TOO.  Kinda 
defeats the idea of a Tivoli only ServerPac.  

Maybe there are other products which Tivoli will stumble over. In the meantime 
go get your NoCharge License added before you are told you do not have it. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


ADABAS On Other Platforms

2009-11-20 Thread Jim Marshall
I am hearing from my ADABAS DBA that ADABAS can run on other platforms 
such as UNIX and Windows (anyone know if it is true for zLinux). Anyway 
would like to get an idea of people who are actually doing it today and our 
agency would like to chat, if possible, about your experience. it is running on 
a 
z9BC-O02 (253MIPS). 

A major Line-of-Business wants to be off of it in 2012 and the other customer 
may need to hang on for a number of years or maybe stay with it. They seem 
to believe it serves them well.  

So this is not to convert the code to run on something else but just finding a 
cheaper way of still using ADABAS and Natural.  

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


SoftwareAG Natural DB2

2009-11-20 Thread Jim Marshall
Today we run ADABAS with Natural and a number of their other products.  I 
understand SoftwareAG has a way to keep your Natural programs the same, 
put the data into DB2 and IPSO-FACTO, no recoding is required of the Natural 
code. 

Has anyone tried this approach. Like to chat with someone to learn the costs 
you incurred, challenges addressed, and in general your approach.  Have a 
major Line-of-Business getting off of ADABAS in 2012 (they say) and the other 
Line-of-Business is looking to fund the entire cost.   

Jim Marshall, Software Engineer
Washington DC  20415

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: IEFSD095 Alias

2009-10-22 Thread Jim Marshall
On Wed, 21 Oct 2009 15:04:00 +0100, Andrew Metcalfe 
andrew.metca...@barclays.com wrote:

I guess that goes some way to explain it. I don't have the alias on z/OS
1.8. We have just migrated to z/OS 1.10 and I have a user getting errors
calling IEFSD095. IEFSD095 is (and always has been) an alias of an in-house
written block character routine (that pre-dates me). Obviously they are now
finding the new alias shipped with z/OS 1.0 rather than our in-house routine
which is further down the linklist.

Just for the sake of history, IEFSD095 was around back in MVT days and is the 
IBM Block Letter CSECT of data which was used for banner pages. Eastern 
Airlines did a whole bunch of mods to MVT (hey, in source form) and created 
EALSD095 which contained the data for special characters. 

In general this module would not get called, but one would issue a LOAD 
instruction to get the module available to use its data. This CSECT sometimes 
replaced the IBM IEFSD095 as a user mod. The program you mention being 
used may have its roots in some code I put onto the SHARE tape and later is 
now in the CBT tape to put block letter pages on output which was handy 
when using microfiche. You can review these in CBT file 316 if my memory 
serves me. Many of the programs started in the NASA Goddard Space Flight 
Center and came my way in the Pentagon via the Goddard MODS tape and 
then we used them as a basis for doing other things with EALSD095. 

And our younger brethren believe Open Source code is only a recent 
discovery. 

Jim Marshall 



 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Looking for a job

2009-10-22 Thread Jim Marshall
I am currently looking for a full time Mainframe System Programmer job in New
York/New jersey, San Jose, Dallas area. I am open to other locations.
I have about 10+ years of experience in Mainframes. My current shop has
started to migrate off the mainframe platform and its getting depressing
working in that environment.

Here is some food-for-thought. Why be depressed and probably it shows. I 
would view this as a tremendous opportunity to see a conversion in action. I 
would even support it fully and help them with all the challenges. Indeed if 
all 
the challenges can be overcome, then it can be contended, the move was 
indeed a good one. No one likes a non-team player. One does not have to 
agree with the strategy to play and give it your best. Face reality, this is 
going to happen and if one learns of all their challenges, then you will be 
much 
wiser in the long run. 

Here a few year ago, the move was to outsource a major application to 
private industry. My reaction was COOL, let me help really. Then I would 
ensure everyone knew all the services we were providing and they were 
expected to provide these too. A z9BC upgrade was denied (machine power 
will decrease 75% in 14 months) until I showed them I could detune the 
machine and drop our costs in 14 months. I asked the customer to go with me 
to the CFO and break the news that in 14 months the CFO could have all 
these savings and could program the savings elsewhere. The customer balked 
and my question was, so in 14 months you will not be off the mainframe?. 
They were not THAT certain and would not head up so they let me upgrade if 
I just laid low for 14 months. In the end it all fell apart and it is time for 
another UPgrade.

Yes, you can look around for a new job but take all the advantages of what 
you can learn now about what is the plan, cost of the plan, time frame 
projected and sit in on the progress. Then sit back and watch the trials and 
tribulations. I'd get close to the major customer and be supportive as heck as 
to the rationale for this, maybe reduce cost, and then you too might be 
incredulous at the notion it is more expensive. In the military I always 
supported my senior officers crazy ideas or not and in the end, learned a 
bunch about how things can be done and how one does not want to do 
things; but I was a supporter of the Colonel even if it lead to him/her being 
fired. Then in the end, I knew where all the bodies were buried and could pick 
up all the pieces. 

In the present world to think z/OS is the only systems places will run is not 
going to happen. Here I have the data on z/OS and applications running on 
Windows Servers (COOL). Maybe they want to run the application on z/OS and 
data on Windows (COOL) although I ask to tell me how they are going to do 
Disaster Recovery for the data??? If they want to have a 4-Core Intel Blade to 
do something, GO-FOR-IT although maybe I could supply a Virtual Linux Server 
for $0 because I already have the one license I need. 

Getting side tracked away from z/OS for a few years is not something where 
you will be left way behind. z/OS is still MVS souped up and in many case 
easier (just more of it). So opportunity is KNOCKING and make the most of it 
until you find the right job and leave with everyone being sad you are 
departing. The next place may give you the chance to integrate Windows or 
Linux into your z/OS operation and you are already 2 miles ahead of the z/OS 
staff who want to stay in their own little world. 

Make the best and get the most out of what you are dealt; it pays off in the 
long haul.

Jim  (WashDC's Cranky Old Guy)  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: cpu upgrade

2009-10-20 Thread Jim Marshall
On Mon, 19 Oct 2009 13:23:05 +, Ted MacNEIL eamacn...@yahoo.ca 
wrote:

CBU is for events which are one step below a Declared Disaster but
has only taken out one of the IBM 2096's.

That's a pretty restrictive definition for CBU.
It can/has been used for declared disasters, as well.
That's what we used it for in a two-site GDPS.
The back-up site had up to 5 additional engines, under CBU, in case of a 
disaster at the second site.
And, this config was set up on z/900's over 6 years ago.
-
In my case it is indeed very restrictive and VERY CHEAP. CBU is not used at 
the DR site because at the DR site (3rd party provider), I get an equivalent of 
the MIPS (MSUs) which I am running at my local site.  So indeed I am 
restricted to what is considered a non-DR event at the local site. A DR event 
locally is one where both of the z9BC's or something like all my DASD blowup, 
hey a flood in the basement, etc. In general if one z9BC smokes bigtime and 
it can not be replaced within a reasonable amount of time, then I can invoke 
CBU on the other z9BC to bring one from an IBM 2096-O02 to z02 or IBM 2096-
T03 to a z03 and all for less than $6K per year if my memory serves me. 

If one can afford GDPS and your own second site, then am sure one can afford 
to pay a few dollars more to invoke CBU at a DR site. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: cpu upgrade

2009-10-19 Thread Jim Marshall
Nowadays, if you upgrade the cpu capacity, by having ibm just apply the
feature code to the box, does this take effect immediately on all the lpars, or
must each lpar be ipl'd to pick up the new capacity?

When I bought a IBM 2096-Q03 (z9BC) my customer changed their mind and 
decided it should be an IBM 2096-T03. So we implemented it with 3 CPs and 
ran as an IBM 2096-Q03 for a few days until the procurement action 
completed for the T03 upgrade. What arrived was some secret code which 
we entered into the processor console and magically it energized itself to an 
IBM 2096-T03. Thus the engine power was divided equally amongst the 3 CPs 
(going from a Q03 to T03). 

Nothing changed as far as the CPU ID, etc. Non of the 3rd party products 
needed to be told because we still had 3 CPs running because the CPUID did 
not change and the number of CPs did not change (for those products which 
are CP number sensitive). Any changes which needed to be accomplished were 
strictly contractual licensing changes to account for more power. Indeed if 
you want to turn the power on by adding an physcial engine to LPAR, then 
some changes would be required to LPARs, etc. 

By simply turning on engine power, it does mean one has to purchase another 
hardware CP to do it (unless I was already sitting at a Z03 and needed more 
juice).  The increasing in processing power is the same thing which happens 
for Capacity BackUp (CBU) where I can jump the IBM 2096-T03 all the way up 
to an IBM 2096-Z03 for a few weeks in case my other IBM 2096 smokes and 
burns and I need to run all the work on one IBM 2096 for some period of time 
while the other one being replaced. Keep in mind CBU is not Capacity On 
Demand (COD) and also does not kick in when there are are just maintenance 
outages. CBU is for events which are one step below a Declared Disaster but 
has only taken out one of the IBM 2096's.   Oh yes, also have it so the IBM 
2096-O02 can jump to an IBM 2096-Z02 in the event I have to go the other 
way. As a note, this is a very inexpensive Insurance Policy just in case. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Alternatives to TSM for Linux under Z/os DR?

2009-10-14 Thread Jim Marshall

  Since TSM has been stabilized by IBM, we are looking for alternatives to 
Backup and DR solutions for our Linux environment. We currently run FDR full 
volume backups during low use periods but that results in 'fuzzy' backups 
unless the Linux server is down at the time of backup.

Last week I was invited as a guest speaker to the IBM TopGun School and 
arrived early. I sat in on a presentation talking about all the great things 
which 
is going to be available for TSM for z/OS Version 6.  Presently I run TSM V5 
and have seen things about the death of TSM for z/OS with the excuse they 
could not get z/OS-DB2 to perform very well and gave up trying.

I challenged the speaker with the above info and there seems to be some 
question within IBM as to what is the status of TSM for z/OS V6. I too had 
read the comment about IBM admiting the decision would really upset many 
users of the product. I sent the speaker off into TSM land to find out if 
indeed 
I too will have to look elsewhere outside of IBM for a TSM like product. 

Stay tuned TSM fans and hopefully IBM is rethinking a questionable choice. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: mainframe e-mail with attachments

2009-10-07 Thread Jim Marshall

What I'm looking for is an e-mail package running on z/OS that will
allow me to attach files to e-mails for sending out.  I found many hits
on XMITIP but really nothing else.  What all is out there that will
allow me to do this?  At this point it is a research project to present
to mgmt.

Give JES2Mail, JES2FTP, Mail2ZOS, CICS2PDF solutions CASI Software   
http://www.casisoft.com/ a look.  You might find interesting solutions to 
problems you already have. Reasonably priced and good support. Also are very 
open to new uses and ideas.  

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Ron Ferguson's VSAM Book

2009-10-06 Thread Jim Marshall
Looked in my archives and came up with 

Virtual Sequential Access Method
The Complete Source Book for VSAM File Structures 
By Ronald Ferguson
Seventh Printing 1992 
no code assigned as is done today

Ron used to give these to anyone who took his VSAM training when he ran SIS 
(Software Information Services). Many times at SHARE when he was presently 
the Mainstar (SIS Follow on firm) booth would have some. You may want to 
check with Mainstar if they are available. Much of the content is in the VSAM 
Manager software product manual.  

Jim Marshall  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VSAM Performance Options - Food for Thought

2009-10-02 Thread Jim Marshall
On Thu, 1 Oct 2009 11:23:41 -0500, Ward, Mike S mw...@ssfcu.org 
wrote:

Is this product you speak of still available?

Yes, after some searching around the Mainstar (Rocket Software) site for 
VSAM MANAGER, it appears to be a separate product. 

It is also packaged in their CR+ (Catalog Recovery) product because back in 
the 1990s I saw that I could improve ICF Catalog (a VSAM file) if I analyzed 
with VSAM Manager. I strongly suggested to Ron that if indeed CR+ was 
supposed to be an analysis and fixit product for catalogs, then performance of 
a working catalog was just as important as non-performance of a broken 
catalog. He probably heard this from other people besides the Old guy in 
WashDC. Eventually the functions of VSAM Manager were folded into the CR+ 
product. 

I seem to remember Ron published a book on VSAM which was quite good and 
written for the novice. Again the collective wisdom of the book is in the 
product although one could take the book, follow the steps and do the 
analysis manually. 

Jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


VSAM Performance Options - Food for Thought

2009-10-01 Thread Jim Marshall
I do not object at all to the buffering products which are used to compensate 
for VSAM applications where the programmers know nothing about VSAM and 
allocate them with no consideration to performance. As an aside, I have also 
found Systems Programmers have little clue about VSAM files and blindly follow 
IBM recommendations when they install system level software which needs 
VSAM files. A running product which dynamically adjusts the buffers will 
forgive many sins. 

I’d like to offer some other alternatives. One is to train staff in the use of 
VSAM and what are good VSAM files and what are not so good ones. Besides 
performance considerations, there are space allocations which can be 
outrageous because of inefficient CI and CA sizes BUT they still work for the 
application. I can hear the moans and groans already from all over the world 
saying something like, “Ya, Jim, you are an old guy who lived through all this 
but we have more important things to do getting all this Web stuff working on 
the mainframes, etc”.   This was the same argument I used back in the 20th 
Century getting all the things updated from MVT to MVS to XA to ESA to 
OS390.  Usually I do not tell stories but this one will make a point. 

In 1975 I was in the Air Force in Colorado and got grabbed to come to the 
Pentagon to be trained as a MVT Sysprog. The person I replaced was Sgt Ron 
Ferguson who decided to exit after 4 years to make big bucks as a Contractor 
eventually working for Boeing Computer Services. Ron got in on the ground 
floor of VSAM and stayed in it for his whole career. A number of you folks may 
have heard of Ron who became the almost world’s expert in VSAM. He was 
consulting, teaching all over and eventually founded his own firm SIS which 
later became Mainstar and then he sold out to Rocket Software.  Along the 
way Ron was asked to clone himself because the demand for VSAM consulting 
and classes taught was greater than Ron could handle. In the late 1980s, 
Artificial Intelligence was the rage.  

In 1991-2000 after retiring from the Air Force I was working at Treasury with 
a big “paying” customer using VSAM and it was my wife. She’d come home and 
complain about her VSAM performance or maybe just how could she get her 
batch jobs to run faster. I am not plugging this product but I would have 
loved to have thought of it. Mainstar offered a software product called VSAM 
Manager. It was the collective Artificial Intelligence of Ron built into a 
product 
which would read the VSAM file structure and give you recommendations 
about CISIZE, CASIZE, buffers, splits, etc. It also would show you were the 
splits occurring to give you a better idea of what was happening inside the 
file. My wife could invoke this simple utility, take the recommendations, REORG 
the files, and instantly she saved bunches of space and her jobs screamed 
(I/O’s were reduced and elapsed times were really reduced).  I had one happy 
customer and peace at home. I also found out veteran Sysprogs had system 
stuff using VSAM files which were eating our lunch. Ron’s product convinced 
even the most skeptical Sysprog how things could be improved and there was 
no need to guess and hope it helped. So it depends on what someone wants 
to improve. I needed to get performance gains and also reduce DASD space. 
Even folks who thought they knew VSAM were amazed at the critique and 
recommendations from Ron’s Wisdom.  People can try a number of ways to 
solve the VSAM issue in any shop. I know the way I would go if I had to do it 
all over again. 

Oh yes, as I said Ron sold Mainstar and I understand retired in the Seattle 
area and bought his very own Tug Boat to do things like chugging to Alaska. 

Jim

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SRDF/A, DB2

2009-09-14 Thread Jim Marshall
We will soon be installing an EMC V-Max and SRDF/A in an DB2 environment
running on an Z/OS LPAR(s). Can anyone share what their best practices are
or Point me to where I can find any Documentation on this subject? Thanks in
advance!

You did not say if you were doing SRDF/A prior to the DB2 so just a few 
general words which you may already know. In general doing SRDF/A and with 
any database system, defining Consistency Groups is critical to keep all parts 
of the database in one logical piece. EMC has the documentation which may 
not exactly spell things out in those terms but is a good place to start. 

If you can be more specific, then it would help.  

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Q:Writing data via CNT-USD to tape device

2009-09-08 Thread Jim Marshall
Hi,
Anyone has ever writting data from CPU to remote tape device(virtual or
physical) via CNT-USD by single FICON channel? I want to know your
throughput compared to local writing.
Appreciate your feedback.

The answer is very, very dependent on the speed of the communication line
(s) out to the remote location along with the distance involved. We used to 
do two ESCON channels over 2 T-1 circuits and less than 500 miles. In this 
case CNT is no longer CNT or McData or Inrange.  CNT is now Brocade and 
they can give you good estimates in a model they run. Again it all depends 
more on your circuit speeds (suggest two for redundancy) than it does being 
FICON. FICON is great to have on the inboard side of the transmission and on 
the backend once the data gets off of the COM circuit. 

As I said, Brocade will be able to explain all the details of what you can 
configure and how it is expected to perform. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Who has z/Linux, z/VM and Oracle

2009-08-26 Thread Jim Marshall
My management has asked me to see if anyone is using this configuration,
Oracle running under z/Linux with z/VM.  If so, would you be willing to talk
to me offlist about it?


z/VM 5.3  5.3   SuSe Linux1-IFL 

Oracle Database on Linux, Application Server on Windows someplace (hey the 
data gets mirrored as part of the z/OS  z/VM system and we leave it to the 
Windows folks to recover the application. Rationale is the data is ever 
changing and the it makes it easier to recover the app on windows.) 

Oracle Database on Linux and Application Server on Linux.  This app may 
have  been shut down recently although it worked all very well.

We also run IBM Websphere Application Server which they can choose to use 
with Oracle.  FYI we do WAS  DB2 besides Oracle.  

Will send you my collection of comments, questions, etc, collected over the 
last 4+ years running things. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


SoftwareAG Cluster Services

2009-08-26 Thread Jim Marshall
Been planning to implement SoftwareAG's Cluster Services for ADABAS on an 
IBM 2096-O02 and IBM 2096-T03 in a z/OS Parallel Sysplex. It has been 
moving along until the person responsible for ADABAS (works in another area) 
says implementing it will kill performance and besides, what is worse, is to 
run 
it in a Parallel Sysplex using the ICF for communication between the two 
z9BCs is bad news; claims SoftwareAG told him this yarn. 

Is there anyone running it in a z/OS Parallel Sysplex and what kind of impacts 
did you see when it was implemented. 

thanks  jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-08-10 Thread Jim Marshall

I believe Jim Marshall is just trying to dismiss a fact inconvenient for the
product he is promoting? FUD! See previous comments from the Chris Mason


I will spare all who have been reading all the history of this on IBMMAIN about 
my strong recommendation for those running SNA networks to strongly 
consider the need for a SNA Firewall. Native SNA with VTAM no matter how 
it is configured in the eyes of even those who do it well, does not meet US 
Government security mandates. There are all too few people who even 
understand VTAM any more to make a good attempt at it. 

Hopefully those who are skeptical will do independent research, consult with 
really smart people in the know and make a decision as to whether it is wise 
move to bullet proof your SNA network.  I made my replies back in January 
2009 in IBM items 97253 and 97522. No one has contacted me further for 
specific information (which I remember - am a very old guy and maybe it 
slipped by me). My intention was to alert people to the 1+ years of 
investigation, skepticism, and proof others were accessing my SNA network 
and not having a clue how it could be happening. The interconnection of SNA 
networks to a trading partner also means you very, very likely connected to 
their interconnections, etc. I do not have the time and expertise to take up a 
skeptical world to prove this is true. That is why I have sought out very smart 
people who specialize in areas. Google can be a great starter using SNA 
FIREWALL APPN and one should never take the word of someone on IBMMAIN 
without doing their homework. 

I do very much agree with agree I am indeed spreading FUD, as stated in 
January.  Oh yes, most people on IBMMAIN take great pains not to promote 
products and to inspire our younger brethren to do their own research.   

F - Fear and indeed there is, AND STILL SHOULD BE IN THE FUTURE
U - Uncertainty no more 
D - Doubt is doubt no more ALTHOUGH WILL LINGER WITH MANY forever

Your mileage may vary.jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Mainframe hacking

2009-07-27 Thread Jim Marshall
Does anyone here recall any published news articles or incidents
involving mainframe hacking (any flavor of VM, VSE or MVS)?  Do you
personally know of any incidents?

Or have any such been kept on the QT?

Have been away for 3 weeks with only BB access. You should look on the web 
site of Net-Q software  www.net-q.com  who makes a SNA Firewall. They 
document a number of ways mainframes which are running VTAM with SNA 
have been hacked because of how VTAM works. 

I know we install a nocharge VTAM SME exit a number of years ago which 
revealed all the Cross Domain traffic entering our system and looking around. 
It was enlightening for we thought we had all the bases covered by defining 
each CDRSC, CDRM, etc. 

Once we installed the SNA Firewall, we got down to the BIND level and could 
secure our systems. Besides even for those coming in legally, we could see 
their VTAM tuning (NOT) parameters and make recommendations to them to 
improve performance immensely. 

A very interesting and profitable exercise. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: TSO session manager buffer size

2009-07-10 Thread Jim Marshall
Back in the 1970s/80s/90s I enjoyed the heck out of TSO, etc. Never had any 
time to explore Session Manager and I did not have guilt because IBM's Bill 
Smith was the Master. It was not his job but something about how it was put 
together and worked, excited the heck out of Bill.  You need to track down Bill 
and believe he still works for IBM, on the west coast, and am sure he would 
tell you more about Session Manager than you ever wanted to know. 

Am sure others on the list may have some ways to direct you on how to 
contact Bill. Saw him at one of the last two SHARE conferences and he was 
still having fun working for IBM.  

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Anyone have a sample MVS security policies and proceedures you can share?

2009-07-02 Thread Jim Marshall
Sorry, being lazy again.  Anyone have a sample MVS security policies and
proceedures you can share?   We have never had one, and suddenly
management things it is important.  Links to general examplates would be
fine too.  Thanks.

If you follow this lead you will be a very busy person indeed. The US 
Gov't, csrc.nist.gov has published their document SP 800-53 (amonst other 
things too) which has all kind of questions to answer about how management 
views their computer systems. Then based on the ratings of Low, Medium, or 
High it outlines what security measures you need to have in place. They also 
describe what is Low, Medium, High although most managers will profess they 
are really, really important so it has to be HIGH. You take all these 
requirements and implement them according to the way RACF/ACF2/TopSecret 
permits you too. There are other MVS stuff which play well in an audit; like 
Health Checker.  So this is not just restricted to z/OS, z/VM, Windows, etc. 
There are things like physical, entry, etc, security.

US's Uncle Sam is real big into FISMA, Federal Information Security 
Management Act. With all the things it requires, you will off and running to be 
kept busy for the next few years. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: ERASEDATA - DASD disposal

2009-07-02 Thread Jim Marshall
I am  in the process of retiring 3 RAMAC 2 racks, each with a 3990 mod 6 
controller, and 1 RAMAC 3 rack, with a 9293 controller.  All data has been 
moved to new DASD.  The RAMAC DASD will be surplused so I have to be 
sure that the data has been wiped clean and nothing is recoverable - w ithout 
physically damaging the devices.  All of the DASD is 3390-3.   

It really depends on your definition of Wiped Clean. No amount of passes will 
get rid of the data where it could not be recovered. Have to measure the 
worth of the data if someone really, really wanted to recover it. In general 
the only way to assure it is unrecoverable is a method the military has used. 
Cut the each platter up in four pieces, take a scenic flight way out over the 
ocean and scatter the pieces over many square miles of deep water. Do not 
know if the technique is still in use today or not. 

Back when we were transferring the equipment between military organizations, 
3 passes was acceptable with the agreement that the last one in line who 
would junk the equipment had to disassemble the drives and phsyically destroy 
the media. 

Enjoy  jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: IODF / IOCP graphical presentation?

2009-07-02 Thread Jim Marshall
On Wed, 1 Jul 2009 05:27:53 -0500, Bjarni Hauksson b...@rb.is wrote:

I am using IBM Hardware Configuration Manager to day. Mainly to have
graphical presentation of the physical IO configuration and labeling
management.

I believe NewEra Software has a tool they have been trying to get me to look 
at their IODF Explorer.  Have not had time to check it out or learn how much 
it costs. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Experience with Tape/Assist

2009-06-18 Thread Jim Marshall
Does anyone have any experience with a tape copy utility called Tape/Assist 
from 21stCenturySoftware. I know of Tivoli Tape Optimizer for z/OS, 
Innovations FATSCOPY and Opentech's TAPECOPY. These all have varying 
degrees of expense from reasonable to expensive. 

The objective is to use the utility to migrate data from a very old IBM VTS to 
a not too old VTS and then recatalog the files along with updating the RMM 
entries. Like to understand if anyone has done this with Tape/Assist for the 
cost is a bit unbelieveable (in the hundreds of dollars versus thousands for 
the 
others). 

Let know either onlist of offlist.   jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Free software to stack tape datasets?

2009-06-17 Thread Jim Marshall
We are looking to copy data off of 9840A tapes to 9840D tapes. There are a 
limited number of free slots in our SL8500, so just letting them wither and die 
is not an option. Neither is boxing them and mounting on demand. Since there 
are a limited number of datasets to be stacked we need a cost effective 
solution.

Does anyone know of a cheap or better yet free stacking mechanism besides 
Iebgener?

Am in the throws of doing a buy for the same capability utility. My research 
indicates there are three players. Opentech has a tapecopy, Innovation DP 
has FATSCOPY, and IBM has Tivoli Tape Optimzer for z/OS. If anyone knows 
of others, let me know. Each has varying costs involved from quite 
inexpensive to quite expensive.  Contact me offlist for further info. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SMF LOGGER - Not Ready for Prime Time

2009-05-10 Thread Jim Marshall
We are still at 1.8, but I had intended to use this functionality as soon as we
have migrated to 1.10. We are loosing SMF data regularly during shutdown of
*one* system at a time, because of all the SMF30 termination records that
get written at DB2 and IMS shutdown. We cannot increase the SMF buffers
any further and we are at the end of any tuning for the SMF data sets. We
are at the point where we stagger the DB2/IMS shutdown in hopes that the
dumping of SMF records is through when the next comes.

I had wondered how LOGGER would handle offload of a huge amount of SMF
data right during shutdown. Do you also see this problem if you only shut 
down
one system? Or only when there is no system left that can do the actual
offload from the CF?

And may I enquire why you regularly do sysplex-wide IPLs?

Back when our auditors press us to turn on UAUDIT for RACF, we found during 
some times when so many RACF records were being sent to SMF it could not 
keep up; even though the MANx data sets were empty. Thus SMF said data 
was lost but did not tell us whose (was RACF). Auditors were not pleased 
about this and therefore IBM's solution was the LOGGER. So for our journey 
into the SWAMP. I know my guys have created a bunch of REXX routines to 
cover some of the sortcomings of how the process should work. 

Our present challenge in the swamp was at shutdown when Z EOD is entered 
there is no communication to the LOGGER to wait for him/her/it to complete 
what has to be done so when OPS re'ipls, then nothing is lost. IBM gave us a 
bunch of commands to have the operator enter although so far these have 
not worked. Plus even though the LOGGER says it is done, it is actually still 
off 
doing its thing with no indication when it honestly is completed. Level 2 
agrees 
with us whole heartily but needed us to open a marketing request which I 
understand forces different parts of IBM to take notice and communicate with 
each other. I think this kinda assigns a referee who can get the attention of 
all parties on behalf of the customer. So in general, shutting down any LPAR 
can get you in trouble with the hosing up LOG files for that system. The way 
I am told is each system in a SYSLPLEX does its own thing with its LOG files 
(am by no means the expert for the techies are more into this than I). 

We have been having some building power upgrades and without a generator, 
then indeed we have to put everything to bed when it happens. Then some 
EMC DASD upgrades with multiple BIN file changes over a number of weekends 
caused some more total down time. 

When the swamp has been turned into something manageable, then I will give 
an update of how things can work. I understand the rationale to change the 
way SMF was offloaded which goes back my days in OS/MVT. But I think IBM 
was remiss in not understanding the full ramifications of how they have sites 
implement the LOGGER. If they would have talked to some savy users, then 
could have made the journey much smoother. So now, we do it the taumatic 
way which keeps life interesting here. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


SMF LOGGER - Not Ready for Prime Time

2009-05-06 Thread Jim Marshall
If anyone is in the throws of putting the SMF LOGGER into production, I would 
seriously hold up and wait a while. We have been up on it for about three 
months and have gone through one problem, hurdle, consequence, challenge, 
etc, after another. 

Today the issue is with when you shutdown a system or worse if you need to 
bring down the entire sysplex. Z EOD does not interface to the SMF LOGGER 
and the operators usually blow the systems away when they receive the 
message which says EOD is done. The significance is the logger is still doing 
its thing and now break it; causing all kinds of grief later. 

IBM has a temporary fix where you issue a set of commands per LPAR before 
the Halt EOD but so far they have not worked. Besides so far, the commands 
do not tell you when the logger is completed doing its think.  Although when 
the set of commands do work, hopefully it will tell an operator something of 
its 
completion. Remember, the intent of this is for your operators to visit every 
LPAR shutting down and wait for each. This will bring new meaning to the idea 
of a fast sysplex wide IPL. 

Everyone including IBM agrees Z EOD needs to be tap everyone on the 
shoulder to have its logger to do what it should do and then tell HALT, it is 
now done; thus giving the message which is now real.  So to do this, we are 
submitting as Marketing Request to IBM to get all the players to talk to each 
other to sort through this situation (not to be confused with a problem). 
Things are working as intended except no one thought this all the way 
through and the cardinal word is intended. 

Will keep you posted as things unravel.  

jim 
(WashDC)  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Mainframers Web 2.0

2009-04-28 Thread Jim Marshall
Right now in WashDC the hot topic is Web 2.0 and how it can be implemented 
to help the government get more in tuned with the 21st century. Are there 
any suggestions of how Web 2.0 with all of its blogs, wikis, live discussion 
forums and other forms of social networking has been implemented at your 
site. These do not have to be running on the mainframe. The idea is how 
these came to help out your IT community hopefully with some strategy which 
shows how human the mainframers are.  

Then if you have, what kinds of software were used and product names are 
fine to give me a starting point. Would appreciate any kind of idea no matter 
how it sounds. 

thanksjim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Mainframe Charge Back Software

2009-03-31 Thread Jim Marshall
Pacific Systems Management in Australia provide TheBill. http://psm.cx/


This is very interesting to know Chargeback Systems are alive and well down 
under. But looking at the website, I notice a number of things which make me 
nervous. 

1.  Copyright on the web page is 2002
2.  Supported systems are mainframes (good show) 
3.  Supported systems are UNIX  (OK)
4.  Supported systems are AS/400 (thought these were iSeries now)
5.  Supported systems are Windows NT (so has 2000, XP, and Vista not just 
made it their way yet). 

Maybe these mainframers are just to busy to update a web page with more 
current info. If indeed anyone is using these in a current z/OS V1.9 or later 
with also maybe feeding zLinux info out of Velocity Software's info, would be 
curious. 

Around here the main focus for the last number has been Disaster Recovery 
since 9/11.  I am predicting there will be a movement towards Chargeback 
soon to attempt to define where IT costs are residing. My view of Chargeback 
is it has two sides; COST and REVENUE. The revenue side is easy because in 
the end someone always has to pay (may be contentous but it still the money 
comes). The difficult side is the COST because IT likes to bury costs for 
others in side deals besides masking costs for items and then lumping them 
into either overhead or historically in the mainframes CPU charge. 

In summary, I hope this firm is real and can offer an alternative to SAS, IBM, 
CA, PACE (Komand), and a number which escape me for now. 

jim   

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Is there a Web enabled TN3270 on z/10's running z/OS 1.9

2009-03-18 Thread Jim Marshall
Our Windows Server Team is looking for alternatives to our current Aviva 
solution. Other than using a different tn3270 client application.  Does anyone 
have any suggestions or know of anything on z10's?

Not sure if the direction is to run this through an application which would use 
TN3270 (say CICS) and have it accessible using a Browser. In general HOD is 
just a 3270 emulator which requires the download of a small JAVA applet to 
the user's PC. Keep in mind all the emulators do the 3270 data stream 
conversion to HTML in the PC and HTML to 3270 DataStream. Thus some are 
called FAT-Clients or maybe HOD could be called a Skinny-Client but the 
conversion happens at the PC level. If all the users are internal, then it may 
not be a problem of loading software. If users are external, some do not 
appreciate their PC being updated with software. 

In general there was a requirement for outside entities to access systems and 
the HATS product was chosen. There are samples included and in less than 3 
weeks, there was a WEB-like application in production with the only 
requirement on the end user of having a Browser.

If one uses HATS, you have to be running Websphere Application Server either 
on z/OS, zLinux, or Windows (maybe Linux on Intel). The backend 3270 
screens stay the same and the HATS application runs as a JAVA Plug-in with 
WAS to do the conversion of the 3270 datastream to HTML. Another aspect 
to keep in mind is how these are development and the need to buy tools. 
Buying HATS gives you a number of copies of Rational Application Developer to 
be used exclusively for HATS development. Then one has to buy HIS (Host 
Information Services) licenses (consists of a license for a user to use HATS, 
HOD or PCOM). Buying say 500 licenses gets you 5 RAD for HATS development 
for free. 

In general there are other vendors software to do the same kind of things. I 
would definitely ask about having to buy the tools to develop the applications. 
In the end, the 3270 green screens have not been altered, the HATS screens 
appear to be a true WEBApp and 99% of the users do not know this is coming 
from the IBM Enterprise Server (mainframe app of old). In most cases, only 
the needed information has been taken from the green screen and presented 
on the web page along with logos, pulldowns, lists, etc. I am told if you can 
code WORD Style Sheets, then HATS is a breeze. 

Oh yes, in HATS 7.5 and the new RAD, you can send the green screen to a 
cellphone. RAD has the development area for ensuring the Webpage will fit 
onto a cellphone. Have yet to explore that aspect yet, although it sounds like 
in some cases a CICS application may be needed to interact with one of the 
users locally as they are riding home on the Metro train. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: TMON with OMEGAMON Comparison

2009-03-12 Thread Jim Marshall
I am surmising you have accepted the IBM Direction for Omegamon of requiring 
an installation such as yours being running Linux on z or have a separate AIX 
platform to run the monitoring and reporting component. 

Even though many of the products run standalone on z/OS today, I am told 
and continue to be told ALL the Omegamon products in the future will be 
upgraded to require either the zLinux or AIX for the monitor and reporting 
pieces. 

I still can not get IBM to explain why I would want to place such a 
dependency on my 99.999% z/OS systems on some z/VM + Linux or let alone 
an AIX system (which would need multiple ones).  Then factor in DR planning 
into the equation. At least with the z/VM  Linux solution it all runs on the  
same z-Box and can be recovered as a whole. 

But then operationally if I have to take down the z/VM  Linux LPAR, then I 
will need another like LPAR take over. This sounds OK until you now have the 
monitoring data spread across 2 LPARS and you have lost the one historical 
view until you take steps to get it all back in one place. 

But then on one side I am told there is a 3270 Green screen just in case and 
then I hear whispers in my ear that I would not want to actually have to use 
it. But then maybe this is just the new 21st century way of thinking.

If anyone has heard IBM changing their thinking, would definitely be 
interested. I indeed run the IBM IP Monitor (requiring zLinux) which I got N/C 
when NPM/IP V2 was a flaming disaster. Of course if you want an excuse for 
getting z/VM  zLinux, Omegamon provides the ammo. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: FDR Backups for Linux?

2009-02-24 Thread Jim Marshall
Do not quite have a requirement for 24/7 but what is done is the Linux 
Systems are terminated for a very short time, all the z/VM volume containing 
the minidisk of Linux file systems are SNAPPED over to separate disks and the 
Virtual Linux machines are then brought back up. The outage is very small. 
Then we can take our time about backing up the z/VM-Linux volumes to our 
z/OS system which does all the heavy lifting with its great automation, etc.   

Yes, for a whole bunch more money we could attempt to engineer 24/7, etc, 
but for almost no extra costs, this is very doable. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VPS/TCPIP RICOH Printers Bidirectional

2009-02-11 Thread Jim Marshall
Thanks for looking and finding everything I found about the RICOH Printer SP-
5100N and how it does not printer. Indeed you are correct about in VPS 
having to turn off ECHO/STATUS if you use their SOCKET interface. But then if 
it is disabled, then you loose any benefit of the intent to do checkpointing of 
print along the way. In fact, this method of printing is worse than using the 
old LPD protocol. At least with LPD one gets a count at the end of the 
transmission to check to learn if the printer got it all. 

Contacted some sources in the know to learn that the all RICOH printers 
indeed do support bidirectional printing. But I learned the RICOH SP-5100N is 
not really a RICOH printer but a cheap printer made up to be look like a 
RICOH printer. The questions were met with a response something like, you 
mean to tell me someone is actually using a mainframe to print to one of those 
cheap printers. We never thought it could be done. Not sure what is so 
special about at least doing LPD printing as a last resort. 

Now my task is to try to figure out which are real RICOH printers and which 
are cheap printers made up to look like RICOH. Or maybe if the user needs a 
cheap printer with no need of checkpointing on the mainframe, then cheap 
maybe OK.  So thanks for the confirmation. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


VPS/TCPIP RICOH Printers Bidirectional

2009-02-10 Thread Jim Marshall
I run the VPS/TCPIP printing system on z/OS and am attempting to get 
printing working to RICOH laser printers. LPD printing works just fine but the 
preferred way of printing is using LRS's HP Sockets definition to usually Port 
9100. This enables VPS to do such things as Check-pointing along the way. 
VPS Sockets printing needs the printer to support Bidirectional 
communication.  I have a RICOH SP5100N Laser printer configured with Port 
9100 enabled and can get it to print by disabling the bidirectional reponse the 
printer can give along the way.  

The requirement is for the printer to respond to the ECHO/STATUS and it has 
been confirmed the print is making to the printer on 9100 but the printer is 
not 
responding with the ECHO/STATUS. I have been all over RICOH website and 
besides being difficult to search for problems, it has been little help. I 
GOOGLE’d everyway I can imagine to get some hits on anyone having the 
same problem. 

For now the printer is defined LPD and is working. But if, say, a 500 page 
report gets interrupted, then the report starts over from the beginning. All 
the 
configuration options for the printer itself have been reviewed, explored, etc. 
Has anyone encountered the problem with a RICOH Laser printers not 
responding to ECHO and what did you do to set it. My sense is it is a 
configuration option at the printer but have no idea which one would enable it. 
If you want to ask RICOH a question like this, get out the credit card. An 
interesting strategy because if I can not get bidirectional to work, my 
recommendation to the customer will be buy some other manufacturers 
printers.

Jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: z/Linux, Was SAS, now Oracle

2009-02-07 Thread Jim Marshall
   I may be wrong, but I thought Oracle was still a per processor
license, even under z/Linux. A dozen Oracles on a zprocessor is cheaper
than the same on dedicated Intel box.

Yes, you are correct and for review, 1-IFL (z800-z9EC) equates to one INTEL 
Dual-Core Server or Laptop. Thus a Quad-Core equates to 2-IFLs. Transferred 
a laptop Dual-Core Oracle License to my z900 back when. Upgraded to a z9BC 
later with no increase in charge. Now it is supporting 7 Oracle database 
instances and could handle many more.  

Today the Distributed side is configuring all their Servers as Quad-Core or 8-
Core Servers. Thus, today Oracle runs about $50K for a Dual-Core and thus 
$200K for a 8-Core machine. Even have a 10-Core Oracle machine. These 
usually run VMWARE to be able to run DTP (Development, TEST, Production) 
on the same Server for an application. They were very excited to show me 
their 10-Core machine running three instances. Showed them my z9BC running 
with 1-IFL and 7 Oracle's, 6 DB2s, and in amongst 50+ Virtual Linux Servers in 
the same three Virtual partitions. 

I understand the factor is 1.25 for an Oracle license to cover a z10. A very 
interesting comparison in any way one looks at it. 

 jim 

 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


MQ Interface for ADABAS/Natural

2009-01-24 Thread Jim Marshall
We brought in IBM Websphere MQ as part of the IBM Enterprise Service Bus. 
Now a group is trying to interface some Natural code to MQ. There are 
documented interfaces for things like COBOL but none for SoftwareAG's 
Natural. Anyone know of some company making an interface for this. 

thanks  jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


IBM Tivoli Tape Optimizer on z/OS

2009-01-21 Thread Jim Marshall
I am running an IBM VTS-B18 and installed an IBM VTS-B20 with the intent of 
moving all the files over from the B18 to the newer B20. HSM files are easy to 
do as I have cut off allocation to the old and only into the new. Then along 
with recycles, it will all go over. Once the B18 is empty it can be offered to 
the Smithsonian along with its 3590 drives. 

Looked around at products like OpenTech's and CA's tapecopy offering and 
even though they seem to be first class products, the cost is also first-class 
(in the old days it would more than Air-Mail).  I ran across this Tivoli 
utility for 
what I am told is $5K per z9BC. Does any one have any experience with the 
product where it copies files with not much up front work coding JCL, and 
then does all the adjustments with the Catalog and in my case, RMM.  Be 
interested (this can be offlist) in your impressions. 

thanks  jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-21 Thread Jim Marshall
On Mon, 19 Jan 2009 07:41:17 -0600, Chris Mason 
chrisma...@belgacom.net wrote:

Jim

FUD!

There's quite a lot needs straightening out here!

 - etc, etc, etc. 

I appreciate the response from my learned colleague and he is correct about 
SNA Security being available. For one it is hardly every used and its 
encryption has not kept up with all the improvements. But I do contend, the 
thinking that VTAM even being secured by SNA is insufficient. With all the 
capabilities these days of anyone having a legal MVS running system along 
with LU6.2 coming from almost every running UNIX system and not to mention 
Windows systems as SNA Servers, VTAM needs to be protected much more 
than people think. 

Indeed how did we survive all these years without some Firewall product. My 
thought is hardly anyone had a spare IBM 4341 in their basement to even 
attempt it.  I attended a SHARE back in the 1990s and bumped into the IBMer 
who maintained he Bisynchronous protocol when I discussed FAX'ing. It seems 
for 25 years it was stable but someone found a BUG in it which was truly their 
all these years. He had to plug the hole. So just because it has not happened 
in years, does not mean it can not. 

Right now I understand there are 20+ ways which VTAM/SNA systems have 
been compromised. Many because of poor implementations but some just 
because of what it is and how it operates. In the end, I continue to run with 
my SNA Firewall and know things are safe here. So I can only say 

F - Fear and indeed there is
U - Uncertainty no more 
D - Doubt is doubt no more 

Your mileage may vary.jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Data Encryption Product Limits: 300 Datasets per month

2009-01-19 Thread Jim Marshall
I am looking into RACF certificates to handle Key Management, early stages 
looks doable.
 
Am by far no expert in all the terminology for those on my Team handle all the 
details. In general indeed the KEYS are maintained by z/OS RACF and along 
with ICSF give us a doable, secure option. The intent for encryption is for 
data export or to secure the backup tapes sent offsite. This is why the very, 
very inexpensive Crypto engines were procured to handle the key issues. In 
general we have a co-processor available for each CP engine which can fire. 
Also we have one Accelerator for each CP engine configured for use. 

The Key management is quite easy if one starts out with generating your own 
Public/Private Keys pairs and giving out the Public key to the world for Data 
Exchange Partners to use when sending us their data. We ask for the partners 
Public key to store for when we send them data. This all goes into RACF. Now 
the difficulty comes when a partner wants us to use a Symmetric Key or 
PassPhrase. Communicating this key should not be done in writing such as e-
mails, etc, unless it is encrypted by some other means. Then we have to 
maintain it someplace secure which leads to a number of folks knowing it; 
Public Keys are very much preferred.  

I do agree the overhead of storing encrypted data on the machine and 
accessing it encrypted, decrypting it on the fly, using it and rewriting it 
encrypted is off in the future.  

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Data Encryption Product Limits: 300 Datasets per month

2009-01-17 Thread Jim Marshall
In general there are many software products which could do the job from IBM 
Encryption Facility, FDRCrypt, Megacryption, PGP, GPG, Techtia, etc. Your 
concern needs to be if they meet US Gov't FIPS 140-2 certification. Then 
would imagine, it would be nice to integrate into DFDSS which you are 
probably using to dump the files. Then in general any of your dumps which are 
sent offsite to a DR location need to be encrypted as a matter of course. I 
see your e-mail address implies you have healthcare info is in the cards. 

Then in general if you exchange files with any US Government agency, 
according to OMB 06-16, these files are to be Encrypted at rest prior to 
transmission to be received showing up encrypted at rest to be decrypted. In 
general I have used IBM Encryption Facility on our z9BCs as a relatively low 
cost product (also supports PGP and GPG). Been doing this since August 2006 
when the OMB mandate went final.  

As a footnote it does all present some interesting challenges as far as Key 
Management, exchanging files with our Windows/Unix/Linux Brethren, and 
espically the Translation issues which happen (remember this back in the 20th 
Century).  If you want to chat about any of this, contact me offlist.

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: VTAM security issue

2009-01-17 Thread Jim Marshall
CICS of organization A is connected (LU6.2 Connection) to CICS of
organization B. No problem with that. I looked into the CDRM and found
some other application of organization B defined in VTAMLST of oranization
A. Tried LOGON APPLID(xxx) and gpt the GMtran of org. B (if it is the
default, I can travel in this CICS...). I also riched TSO logon etc.

Now, I want to block (at) org b ability to get to org a applications
other then the CICS connection that was agreed between Org A and B. Is
this possible?
I also want to block the ability to enter logon applid command (may be by
userid, even of the solution will require entering userid  password). How
to achive that?
What other alternatives are offered to connect to vtam applications when 
USS
tab is displaied, other then LOG APPLID and selecting from the uss tab? I
mean, is there any bypass to LOG APPLID if blocked?

In general, VTAM security has never been implemented because long ago 
when it started everyone thought SNA Pt-to-Pt lines provided it all. Today 
almost all the SNA expertise to even attempt it is extinct, education is even 
lacking. But even for those who have done it, it is only a false sense of 
security. 

Back a few years there was a free VTAM SME exit offered to show you what 
was coming into your VTAM network from SNI connections. Installed it on the 
fly and ran it for 2 hours believing little would show; Wrong-O smart one. It 
scared us silly. Especially with Hercules and MVS 3.8 VTAM which works today 
and can be on the other end, or jumps into the middle of a real connection, it 
is truely frightful. 

So there are companies which offer a SNA Firewall (installs dynamically) to 
truely secure the VTAM SNI connections and lets us sleep sound at night. It is 
imperative the one chosen handles not only SNI but LU6/0/1/2, etc. Another 
benefit is when you are connected to Company A and also Company B. If they 
find out about each other, then A can connect to B using your network saving 
each the expense of making a separate connection. With the Firewall one has 
the ability to look at the BIND and even for connections which are approved, 
it can see the parameters coded and let you know if they are inefficient 
(working fine but eating your lunch). Yes, no one would ever run their TCP/IP 
systems without a Firewall, except I am guessing 99%+ of those who have 
SNA, it never even occurs to them they are highly exposed. 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


IBM DFRMM Reporting

2008-12-01 Thread Jim Marshall
I was a long time user of the CA-1 Tape Management System (TMS) and 
remember the reporting capabilities (TMSGRW, etc) which gave me the chance 
to slice and dice the TMC info.  In the present position as Coach of the 
Sysprogs I have to rely on them to get me info I need. We run DFRMM and I 
am told there is no generalized tool for reporting RMM stuff. 

Would appreciate any suggestions about what people use, techniques, or 
even Open Source Tools (aka, SHAREWARE) which could assist me. Yes, I 
could delve into the manuals and relive my techie days but I must leave it to 
the Contractors; besides there are many non-contractor issues to deal with 
besides getting ones hands dirty again. 

Comments appreciated.   jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: z/OS V1R10 COBOL

2008-11-29 Thread Jim Marshall
Seems in this new 21st Century I get to monitor all the Announcement 
letters on my own and look out for Ole #1 (the new way).

I, honestly, don't understand the question.
Aren't we responsible for understanding the requirements for each upgrade, 
regardless of the product?

This is a fair question. I now believe I was pampered by my previous IBM SE 
who wanted to ensure I knew a new version or release of something was 
available so I would order it ASAP; those are always a bit more expensive and 
thus was seeing the revenue increased from my account. 

Back in the summer the person left after getting a great offer ($$$) from 
Microsoft. Microsoft formed a team with many ex-AMDAHL techies and sales 
types to target mainframes and conversions to Windows. Hey, I told the 
person to go for it, learn exactly how it can be done and if so, come back 
and explain it to me. The person is still trying to grasp it all. 

An interesting aspect of working for Microsoft, is all the employees are 
required to run the latest development version of Windows on their laptops 
and PC's (per top management). Have no fear, I am told 6-8 crashes a day 
can do wonders for convincing mainframe accounts this is the system of 
future. 

No one told me looking after the customer was now the solemn job of each 
installation. Guess the old way was so 20th Century; although it was indeed 
a nice touch.

jim  
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


EAL5 Certification for z10 Enterprise Class Server

2008-11-26 Thread Jim Marshall
Interesting for those a fancy for security. 

The IBM System z10 Enterprise Class (z10 EC) now joins previous IBM 
mainframes as the world's only servers with the highest level of hardware 
security certification, Common Criteria Evaluation Assurance Level 5 (EAL5). 

The EAL5 ranking will give companies confidence that they can run many 
different applications running on different operating systems such as: z/OS, 
z/VM, z/VSE, z/TPF and Linux-based applications containing confidential data -
 such as payroll, human resources, e-commerce, ERP and CRM systems - on 
one z10 EC divided into partitions that keep each application's data secure 
and distinct from the others. That is, the z10 EC architecture is designed to 
prevent the flow of information among logical partitions on a single system. 

All customers who currently trust their critical business transactions to the 
IBM mainframe will benefit from the privacy certification afforded to z10 EC, 
as 
well as government agencies who deal with national security issues. 

To view the certification report, visit BSI at http://www.bsi.de. 


For questions about this 5x5 please contact Ivan Bailey at tieline 295-7860, 
External 845-435-7860. Notes ID: Ivan Bailey/Poughkeepsie/IBM, or at 
[EMAIL PROTECTED] 

jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Mainframe Hosted BLOGs and WIKIs

2008-11-24 Thread Jim Marshall
Seems there is an interest in running mainframe hosted BLOGs and WIKIs 
which could either run on z/OS (Websphere Applicaton Server maybe) or 
zLinux. Does anyone know of any software available to to host these.

thanks  jim 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: IFL Extended to OpenSolaris

2008-11-21 Thread Jim Marshall
 If one installs z/VM solely for use as a Linux hypervisor, would
there
 be a need for RSCS?

 Maybe.  There is certainly a need to perform maintenance to the z/VM
system
 as well as administrative functions such as creating virtual machines.

Hmmm  RSCS seems to have come a long way since I last touched a VM
system (VM/ESA 2.1, about a dozen years ago).  Back then, RSCS was used
mostly like the NJE component of JES.

 Similarly, would there be a need to talk about licensing terms for
 RACF/VM to run on an IFL, if z/VM were used solely as a Linux
 hypervisor?

 Sure.  To control who performs the needed maintenance and
 administration, for example.

But the intent of my question was whether one could just purchase the
standard RACF/VM license and then run it on z/VM on an IFL, or does
one have to obtain special dispensation from IBM to run RACF/VM on an
IFL, as was stated for RSCS?

Indeed if z/VM is only run as a Hypervisor running a whole mess of Linux 
Penguins, then RSCS is not going to be needed to establish a NJE connection 
between JES2-RSCS.  

RACF/VM will depend on your auditors and what they want to see as to the 
activity of the SYSPROGs. Here we run RACF/VM for the 3-4 SYSPROGs only 
to track where they go. For the MAINT userid or any share USERID we force 
the SYSPROG to use the LOGONBY feature of signon. 

Although you might consider DIRMAINT as an addon to manage your z/VM 
Directory  Minidisks although it can be done manually in the z/VM Directory.

Just keep in mind you may still see a requirement for ISPF/VM 3.2 which was 
the latest and greatest thing out back in 1988. It has not changed since and 
it is for using ISPF as the interface for RACF/VM and DIRMAINT. They both 
work fine using the command line interface and it saved here the outrageous 
offering of first $50K to license it and then it dropped down to $25K plus SS 
for a product which had not been updated in 16 years when I implemented 
RACF/VM and DIRMAINT.  They are both very reasonable in cost and keep the 
auditors very happy. 

jim  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



  1   2   3   >