Re: Restriction on length of CLASSPATH?
I do not believe this to be true. Please post a test case. It may be helpful to have your java program print the classpath, like: http://dev-answers.blogspot.com/2006/06/how-do-you-print-java-classpath.html Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Jun 13, 2012 at 8:00 AM, Jan MOEYERSONS jan.moeyers...@adelior.bewrote: Esteemed listers, It looks very much so that the length of the CLASSPATH environment variable as used for running a Java program from a shell script (invoked through BPXBATCH) is restricted to about 4K bytes. However, I can't seem to find any documentation that officially states this restriction. Would it be a restriction on the length of a shell variable, or would it be a restriction in the JVM? Any pointers to some doc will be very much appreciated. Thanks, Jantje. P.S. We are running Java 5 on z/OS 1.12 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Anyone a Unicode Services expert? -- roundtrip conversion
I would say that bijection (a one-one correspondence) is not exactly the same as roundtripping. For example: IBM-1047 (single byte EBCDIC) - UTF-8 - you can round-trip this, since you can take any character in the source code page, and get a UTF-8 character. If you take any of *those* 256 UTF-8 characters, they will map uniquely back to where they started. But, you cannot have a round-trip from UTF-8 - IBM-1047 (since the source set is MUCH bigger). But, I still don't understand the results that Charles is seeing; doesn't look like round-tripping :-( Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Jun 12, 2012 at 3:38 PM, Roberts, John J jrobe...@dhs.state.ia.uswrote: Why does IBM have this compulsion to be different from everyone else and invent its own terminology rather than using a conventional, well-understood word such as bijective? Because bijective is not so well understood by anyone born before 1952 or so. The term relates to SET Theory, which was a big part of the New Math. My younger brother, born in 1953 was exposed to this, but I was not. Actually, I only learned of the term (and the noun bijection) on this forum, this past year. But, of course we have digressed far from Charles original question. Sorry. John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Controlling the FTP server - FTCHKPWD
Steven is an expert in this area, but there is also some good information
in the IBM document:
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/FRAMESET/F1A1B391/2.3.4.1?SHELF=F1A1BKB1DT=20100121150057
See Steps
forhttp://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B391/2.3.4.1.3?SHELF=F1A1BKB1DT=20100121150057FS=TRUEScrollTOP=HDRWQ678#HDRWQ678
controlling user access to the FTP server in topic
2.3.4.1.3http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B391/2.3.4.1.3?SHELF=F1A1BKB1DT=20100121150057FS=TRUEScrollTOP=HDRWQ678#HDRWQ678
).
You might also consider using a port of entry (the TERMINAL CLASS), to
restrict access by IP address.
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
On Fri, Jun 8, 2012 at 7:41 AM, Steven St.Jean sstj...@sdsusa.com wrote:
Jake,
I do not use FTCHKPWD, but I use FTCHKCMD to control user access (and lots
of other things). I preferred FTCHKCMD, because I found I could accomplish
everything that FTCHKPWD allowed me to do and more, and it shares a
scratchpad with FTPOSTPR.
The server exits are pretty easy to install and test. You can use a
STEPLIB
in your FTP server proc and put the exits in there. Changes are picked up
right away, since the FTP server spawns a new address space for each
session. Just assemble and link your exit to the STEPLIB library and
connect to the server.
The exits need to be in an APF authorized library, and must be
program-controlled, like this:
RDEF PROGRAM FTCHKCMD ADDMEM ('LOAD.LIBRARY.NAME'/volser /NOPADCHK)
UACC(READ)
SETR WHEN(PROGRAM) REFRESH
Failure to do this will result in messages like this to the console:
ICH420I PROGRAM FTCHKCMD FROM LIBRARY LOAD.LIBRARY.NAME CAUSED THE
ENVIRONMENT TO BECOME UNCONTROLLED
BPXP014I ENVIRONMENT MUST BE CONTROLLED FOR DAEMON (BPX.DAEMON)
PROCESSING.
You can make SAF (RACROUTE) calls from the exits.
The number of parameters passed to the exits can change from release to
release, so be sure to check the second parameter, which tells you how many
parameters are passed.
Hope this helps.
Steven St.Jean
http://sdsusa.com
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Jake anderson
Sent: Friday, June 08, 2012 6:05 AM
To: IBM-MAIN@bama.ua.edu
Subject: Controlling the FTP server - FTCHKPWD
Dear List,
Good Day !!
To control the FTP server we know we can use FTCHKPWD user exit. Has
anyone used this EXIT at your shop to control the FTP access ? Just
wanted to understand the method to install this exit and control only
the specified user gaining access to FTP server running on Z/OS.
Environment : Z/OS 1.8
Resource link :
http://publib.boulder.ibm.com/infocenter/zos/v1r11/index.jsp?topic=/com.
ibm.zos.r11.halz002/f1a1b391185.htm
Any comments or suggestions would help a lot
Jake
--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
IBM Ported Tools OpenSSH - Key Authentication webinars
Join us for a free two-part webinar on IBM Ported Tools OpenSSH key authentication: IBM Ported Tools for z/OS: OpenSSH - Key Authentication Reserve your Webinar seat for part 1 now at: https://www3.gotomeeting.com/register/956665254 IBM Ported Tools for z/OS: OpenSSH is IBM's port of the popular open source SSH product for z/OS, which is used by the Co:Z Toolkit. In part 1 of this webinar, we will discuss OpenSSH authentication - both host and user authentication. You will learn how to manage host keys as well use keys for user authentication. Title:IBM Ported Tools for z/OS: OpenSSH - Key Authentication Date:Tuesday, June 12, 2012 Time:2:00 PM - 3:00 PM EDT = IBM Ported Tools for z/OS: OpenSSH - Using Key Rings Reserve your Webinar seat for part 2 now at: https://www3.gotomeeting.com/register/275261614 IBM Ported Tools for z/OS: OpenSSH is IBM's port of the popular open source SSH product for z/OS, which is used by the Co:Z Toolkit. In part 2 of this webinar, we will discuss the benefits of using RACF (or equivalent) key rings with OpenSSH. You will learn how to use RACF commands to create keys, certficiates, and key rings and how to use them with Ported Tools and Co:Z. Title:IBM Ported Tools for z/OS: OpenSSH - Using Key Rings Date:Tuesday, June 19, 2012 Time:2:00 PM - 3:00 PM EDT == Kirk Wolf Dovetailed Technologies http://dovetail.com +1 636.300.0901 PS Webinar archives are available here: http://dovetail.com/webinars.html On this page, you can also subscribe to announcments for future offerings -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: OpenSSL MAKE test problem.
In z/OS C, you can specify an encoding #pragma around individual constants. so you would have to develop patches to supply these. On Tue, Jun 5, 2012 at 6:12 AM, Peter Sylvester peter.sylves...@edelweb.frwrote: On 06/05/2012 12:30 PM, Magnus Persson wrote: Well, I tried it all, but still no luck. It just won't work for me openssl doesn't work if the source code character set is changed, there are several places where openssl uses character constants that must be in ascii. for example when extracting or setting text from certificates, or hostnames in a TLS servername indication. one small example: http://rt.openssl.org/Ticket/**Display.html?id=1620http://rt.openssl.org/Ticket/Display.html?id=1620 making openssl work with input/output files in ebcdic or parameters in ebcdic is real work. Some people have done this partially to get some functionality to work. But as far as I know there is no complete solution. And it cannot be easily done automatically, some text constants must be ascii, some may be the external character set. And there may be occurences of integers that represent ascii characters etc. have fun Peter Sylvester --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Can DFSORT do pattern matching?
Sorry if I wasn't clear earlier: the IBM C library has POSIX compatible RE functions. For Perl compatible REs, you would probably want to port the pcre.orglibrary (written in C). I'm not sure if it would be practical to run Perl from within an exit. Kirk Wolf Dovetailed Technologies http://dovetail.com On Thu, May 31, 2012 at 8:01 AM, Shmuel Metz (Seymour J.) shmuel+ibm-m...@patriot.net wrote: In cahm_n2nfskfvqo2nb+se74rznbpvkzq+rtzk23tthcbcn2e...@mail.gmail.com, on 05/30/2012 at 03:57 PM, Kirk Wolf k...@dovetail.com said: Also, one could always use the POSIX-compatible POSIX defines RE and BRE, which are very different. Do those routines implement Perl-style regular expressions? -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Can DFSORT do pattern matching?
On Wed, May 30, 2012 at 8:04 AM, Shmuel Metz (Seymour J.) shmuel+ibm-m...@patriot.net wrote: In cak6gkd3evkgu6kxu-m3f5+lpt6qlvyut2uhrokxid9l-fog...@mail.gmail.com, on 05/30/2012 at 07:37 AM, (N agesh S) nageshbl...@gmail.com said: What would be cool is a regex pattern engine that DFSORT can invoke. So, once the tiny detail of invoking the Java class Why use a Java class. Surely something like PCRE would be more efficient. I like this idea - maybe EFS02 (or E15/35?) exits that uses PCRE? Here is an interesting article written by an IBMer on using PCRE to implement UDFs in DB2 (but not on z/OS :-( http://www.ibm.com/developerworks/data/library/techarticle/0301stolze/0301stolze.html I wonder if anyone has ported PCRE to z/OS, and whether it could be done with Metal C, or if a C RTL is required. Would I suppose that a DFSORT exit written in full C would require CEEPIPI, etc, I can't tell if the COBEXIT=COB2 LE support would suffice for a C exit. Has anyone written DFSORT exits in C? Also, one could always use the POSIX-compatible regcomp()/regexec()/regerror()/regfree() functions in the C RTL. These are the basis of z/OS Unix grep/fgrep/egrep; but not as nice as PCRE IMO. Kirk Wolf Dovetailed Technologies http://dovetail.com FWIW: Since PCRE is a BSD license (i.e. not copy-left), perhaps IBM should consider adding built-in conditionals based on it ? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Can DFSORT do pattern matching?
Following up on the suggestion regarding regular expressions; one approach
would be to:
1) use IGGCSI00 for each include pattern
2) use grep -v with -e for each exclude pattern, using concatentated
output from (1).
Our free Co:Z Toolkit includes a z/OS Unix catsearch command that wraps
IGGCSI00, so you could do this:
// EXEC PGM=COZBATCH -- better BPXBATCH
//STDIN DD *
{
catsearch xxx.*.zzz.** ; # include pattern
catsearch yyy.*.bbb.** ; # second include pattern
catsearch zzz.ddd.** ; # third include pattern
} | grep -x -v -i \
-e aaa\..*\.bbb\..*# exclude aaa.**.bbb.** \
-e bbb\..*\.ccc\..*# exclude bbb.**.ccc.**
/*
Note: if you wanted to exclude aaa.*.bbb.** (a single nested level
between aaa and bbb), it would be a little more complicated regular
expression.
Something like:
-e aaa\.[:alnum:@#\$]+\.bbb\..*
It might be useful to have a command that converts dsname patterns to
regular expressions.
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Transferring stuff from Mainframe to a RDz/UT clone of itself
I believe that MFNetDisk could be used to replicate volumes to a PC. I wonder if you could convert the MFNetDisk volume file to the volume-file format used by zPDT? Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: IBM(r) z/OS(r) Management Facility (z/OSMF)
z/OS MF also includes a new web service API, the z/OS jobs REST interface - http://publib.boulder.ibm.com/infocenter/zosmf/vxrx/topic/com.ibm.zosmf.configguide.help.doc/IZUHPINFO_API_RESTJOBS.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Unicode Services translation question
Charles, x'C2AC' is the logical not symbol in UTF-8. Are you sure that you are translating to 1252? When I display the translate table for 1047-1252 using Unicode Services, it appears to be single bye - single byte: Here is a dump using the showtrtab command (part of the free Co:Z Toolkit) - *showtrtab -s 1047 -t 1252* 00: 00 01 02 03 1A 09 1A 7F 1A 8D 8E 0B 0C 0D 0E 0F 10: 10 11 12 13 9D 0A 08 1A 18 19 1A 8F 1C 1D 1E 1F 20: 80 81 1A 1A 1A 1A 17 1B 1A 1A 1A 1A 1A 05 06 07 30: 90 1A 16 1A 1A 1A 1A 04 1A 1A 1A 1A 14 15 9E 1A 40: 20 A0 E2 E4 E0 E1 E3 E5 E7 F1 A2 2E 3C 28 2B 7C 50: 26 E9 EA EB E8 ED EE EF EC DF 21 24 2A 29 3B 5E 60: 2D 2F C2 C4 C0 C1 C3 C5 C7 D1 A6 2C 25 5F 3E 3F 70: F8 C9 CA CB C8 CD CE CF CC 60 3A 23 40 27 3D 22 80: D8 61 62 63 64 65 66 67 68 69 AB BB F0 FD FE B1 90: B0 6A 6B 6C 6D 6E 6F 70 71 72 AA BA E6 B8 C6 A4 A0: B5 7E 73 74 75 76 77 78 79 7A A1 BF D0 5B DE AE B0: AC A3 A5 B7 A9 A7 B6 BC BD BE DD A8 AF 5D B4 D7 C0: 7B 41 42 43 44 45 46 47 48 49 AD F4 F6 F2 F3 F5 D0: 7D 4A 4B 4C 4D 4E 4F 50 51 52 B9 FB FC F9 FA FF E0: 5C F7 53 54 55 56 57 58 59 5A B2 D4 D6 D2 D3 D5 F0: 30 31 32 33 34 35 36 37 38 39 B3 DB DC D9 DA 1A Kirk Wolf Dovetailed Technologies http://dovetail.com FWIW: here is how showtrtab displays a one-many table: *showtrtab -s 1047 -t utf-8* 00: 00 01: 01 02: 02 03: 03 04: C29C 05: 09 06: C286 07: 7F 08: C297 09: C28D 0A: C28E 0B: 0B 0C: 0C ... AA: C2A1 AB: C2BF AC: C390 AD: 5B AE: C39E AF: C2AE B0: C2AC B1: C2A3 B2: C2A5 B3: C2B7 B4: C2A9 B5: C2A7 B6: C2B6 B7: C2BC B8: C2BD B9: C2BE BA: C39D BB: C2A8 BC: C2AF BD: 5D BE: C2B4 BF: C397 ... Notice that B0 in 1047 translates to C2AC in UTF-8 On Wed, May 23, 2012 at 8:43 AM, Charles Mills charl...@mcn.org wrote: I don't understand what I am seeing from Unicode Services translation. I specify translation from 1047 (Encoding scheme 1100 - EBCDIC, SBCS; Name LATIN 1 / OPEN SYSTEM) to 1252 (Encoding scheme 4105 - ASCII, SBCS; Name MS-WIN LATIN-1). As both CCSIDs are SBCS I would expect that any common EBCDIC character would get translated into a single ASCII byte. But for an input byte of X'B0' (logical not in 1047) I am seeing translation to the 2-byte sequence C2AC. AC is by my reading correct: it's 1252 logical not. But what the heck is that C2 about (C2 is A with an acute accent in 1252). FWIW technique E, substitution 1A. Where am I confused? Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Unicode Services translation question
Charles, I'm not sure what the problem is, but 1252 is a single byte charset, so it seems wrong that you are getting multi-byte results. I don't see any difference in how you are calling CUNLCNV I tried our code with your technique string (we default to LMREC) : *showtrtab -s 1047 -t 1252 -q LMER * 00: 00 01 02 03 1A 09 1A 7F 1A 8D 8E 0B 0C 0D 0E 0F 10: 10 11 12 13 9D 0A 08 1A 18 19 1A 8F 1C 1D 1E 1F 20: 80 81 1A 1A 1A 1A 17 1B 1A 1A 1A 1A 1A 05 06 07 30: 90 1A 16 1A 1A 1A 1A 04 1A 1A 1A 1A 14 15 9E 1A 40: 20 A0 E2 E4 E0 E1 E3 E5 E7 F1 A2 2E 3C 28 2B 7C 50: 26 E9 EA EB E8 ED EE EF EC DF 21 24 2A 29 3B 5E 60: 2D 2F C2 C4 C0 C1 C3 C5 C7 D1 A6 2C 25 5F 3E 3F 70: F8 C9 CA CB C8 CD CE CF CC 60 3A 23 40 27 3D 22 80: D8 61 62 63 64 65 66 67 68 69 AB BB F0 FD FE B1 90: B0 6A 6B 6C 6D 6E 6F 70 71 72 AA BA E6 B8 C6 A4 A0: B5 7E 73 74 75 76 77 78 79 7A A1 BF D0 5B DE AE B0: AC A3 A5 B7 A9 A7 B6 BC BD BE DD A8 AF 5D B4 D7 C0: 7B 41 42 43 44 45 46 47 48 49 AD F4 F6 F2 F3 F5 D0: 7D 4A 4B 4C 4D 4E 4F 50 51 52 B9 FB FC F9 FA FF E0: 5C F7 53 54 55 56 57 58 59 5A B2 D4 D6 D2 D3 D5 F0: 30 31 32 33 34 35 36 37 38 39 B3 DB DC D9 DA 1A Could there be something wrong with how your Unicode Services tables are configured? Kirk Wolf Dovetailed Technologies http://dovetail.com +1 636.300.0901 On Wed, May 23, 2012 at 3:11 PM, Charles Mills charl...@mcn.org wrote: Does it work as you expected for other characters in 1047 whose equivalent in 1252 have values above x7F? I just put in a broken vertical bar (EBCDIC 6A) and it translated (allegedly into 1252) as C2A6 rather than the expected A6. Where are you going with this? You obviously have something in mind. FWIW, here is more detail on the coding. Here is more of the setup: UniConvParms.Src_CCSID= Parms::XlateFrom; UniConvParms.Targ_CCSID = Parms::XlateTo; UniConvParms.Flag1.Sub_Action = '\x01';// Subsitute and continue UniConvParms.Flag1.Inv_Handle = '\x01';// if invalid handle get a new one UniConvParms.Flag1.No_Opt_Buf_Fill = '\x01';// ??? UniConvParms.Flag1.Mal_Action = '\x01';// if malformed terminate with error UniConvParms.Flag1.RL_Sub_Action = '\x01';// ??? CUNLCNV(UniConvParms); I am pretty confident of the values of Parms::XlateFrom and To because I have code that displays those same fields displayChildren(XLATE, (%05d %05d '%s'), XlateFrom, XlateTo, XlateTechniques); (it's in the Parms class so the Parms:: is implicit) and the output is XLATE (01047 01252 'LMER') Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Walt Farrell Sent: Wednesday, May 23, 2012 10:19 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Unicode Services translation question Does it work as you expected for other characters in 1047 whose equivalent in 1252 have values above x7F? Or is the not sign the only one that's mis-behaving? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: OpenSSL MAKE problem
Magnus, Terry, and all -
We were wondering why there seems to be a recent swell of interest in
porting OpenSSL to z/OS?
Could you comment (offline if you prefer) as to why you need it?
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
On Tue, May 22, 2012 at 6:36 AM, Magnus Persson magnus.pers...@tieto.comwrote:
Thanks, that did the trick with c99_x.
I'm now running my MAKE again with c99_x hoping for better luck this time.
Hälsningar / Best regards,
Magnus Persson, Mainframe
Tieto
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Ondruška Peter
Sent: den 22 maj 2012 09:17
To: IBM-MAIN@bama.ua.edu
Subject: Re: OpenSSL MAKE problem
Hi, I was just trying to figure out this myself and found out you need to
add /usr/lpp/cbclib/xlc/bin to your PATH environment.
S pozdravem * Mit freundlichen Grüßen * Sincerely,
Peter Ondruška
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Magnus Persson
Sent: Tuesday, May 22, 2012 9:15 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: OpenSSL MAKE problem
Hi Terri!
I have already followed your laundry list, that is what have gotten me
this far in installation, so a big THANK YOU!
The only thing that I can't do in the same way as you do it is the c99_x,
my system can't find c99_x so I ran it with c99 instead.
I guess that this might cause some trouble, but I can't find any solution
on how to make the c99_x available, when I test it from the OMVS prompt
c99_x only returns an FSUM7351 not found.
Anybody who knows how to make c99_x reachable???
Hälsningar / Best regards,
Magnus Persson, Mainframe
Tieto
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Shaffer, Terri E
Sent: den 21 maj 2012 15:43
To: IBM-MAIN@bama.ua.edu
Subject: Re: OpenSSL MAKE problem
But here is sortof the laundry list of what I found and used with Lots of
help.
1) Update the Configure perl script and add this line (after the existing
OS390-Unix line, which isn't used):
OS/390,c99_x:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H
-D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR
RC4_INDEX RC4_CHAR BF_PTR:::,
Notice that all I changed was to change the label to OS/390 and to use
the c99_x command.
- c99 means to use STDC99, which automatically implies LONGLONG. This
avoids the shell quoting issues.
- the c99_x means to compile and link using XPLINK linkage.
2) ensure that perl and gmake are in your PATH
3) chmod +x tools/*
4) export MAKE=gmake
export _C89_CCMODE=1 (not sure that this is needed any more with the
c99 command)
5) gmake install failed because of Undeclared identifiers
ERROR CCN3045 ./b_sock.c:888 Undeclared identifier NI_MAXHOST.
ERROR CCN4324 ./b_sock.c:888 Array size must have integer type.
ERROR CCN3045 ./b_sock.c:888 Undeclared identifier NI_MAXSERV.
ERROR CCN4324 ./b_sock.c:888 Array size must have integer type.
So, I added these lines to crypto/bio/b_sock.c file starting at line 102
Which was right after these identifiers
#ifndef WSAAPI
#define WSAAPI
#endif
Added these
#ifndef NI_MAXSERV
#define NI_MAXSERV 32
#endif
#ifndef NI_MAXHOST
#define NI_MAXHOST 1025
#endif
Then I had a few other issues, not sure if it was caused by my
installation or the openssl code. I'm guessing the first.
In the PROBLEMS doc there is a reference for this issue.
gmakeÝ2¨: Entering directory `/u/w012108/temp/openssl-1.0.1/apps'
( :; LIBDEPS=${LIBDEPS:--L.. -lssl -L.. -lcrypto };
LDCMD=${LDCMD:-c99_x}; LDFLAGS=${LDFLAGS:--O -DB_ENDIAN -DCHARSET_EBCDIC
-DNO_SYS_PARAM_H -D_ALL_SOURC E}; LIBPATH=`for x in $LIBDEPS; do echo $x;
done | sed -e 's/¬ *-L//;t' -e d | uniq`; LIBPATH=`echo $LIBPATH | sed -e
's/ /:/g'`; LD_LIBRARY_PATH=$LIBPATH:$LD_ LIBRARY_PATH ${LDCMD} ${LDFLAGS}
-o ${APPNAME:=openssl} openssl.o verify.o asn1p ars.o req.o dgst.o dh.o
dhparam.o enc.o passwd.o gendh.o errstr.o ca.o pkcs7.o c rl2p7.o crl.o
rsa.o rsautl.o dsa.o dsaparam.o ec.o ecparam.o x509.o genrsa.o gen dsa.o
genpkey.o s_server.o s_client.o speed.o s_time.o apps.o s_cb.o s_socket.o
app_rand.o version.o sess_id.o ciphers.o nseq.o pkcs12.o pkcs8.o pkey.o
pkeypara m.o pkeyutl.o spkac.o smime.o cms.o rand.o engine.o ocsp.o prime.o
ts.o srp.o ${
LIBDEPS} )
FSUM3008 Specify a file with the correct suffix (.c, .i, .s, .o, .x, .p,
.I, or
.a), or a corresponding data set name, instead of -L...
gmakeÝ2¨: *** Ýlink_app.¨ Error 1
gmakeÝ2¨: Leaving directory `/u/w012108/temp/openssl-1.0.1/apps'
gmakeÝ1¨: *** Ýopenssl¨ Error 2
gmakeÝ1¨: Leaving directory `/u/w012108/temp/openssl-1.0.1/apps'
gmake: *** Ýbuild_apps¨ Error 1
Went in and edited the Makefile in apps and test directory
#LIBCRYPTO=-L.. -lcrypto
#LIBSSL=-L.. -lssl
#Commented out previous lines
#Added the following 2 lines for -L issue per PROBLEMS doc
Re: XPLINK Modules in SCEERUN2
Putting XPLINK (SCEERUN2) modules into Dynamic LPA is documented in z/OS Language Environment Customization - Ch4: Placing Language Environment modules in Link Pack and LIBPACK. Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: XPLINK Modules in SCEERUN2
Should have mentioned: the key information is actuall in CEE.SCEESAMP(EDCWLPA) On Tue, May 22, 2012 at 10:57 AM, Kirk Wolf k...@dovetail.com wrote: Putting XPLINK (SCEERUN2) modules into Dynamic LPA is documented in z/OS Language Environment Customization - Ch4: Placing Language Environment modules in Link Pack and LIBPACK. Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: JZOS unexpected type
Just a suggestion, but why compile your Java programs on z/OS? Much better, IMO, to use a IDE like Eclipse on your desktop and then just publish the class files or jars to z/OS for execution. Also, JZOS actually refers to the batch launcher and toolkit for the IBM Java SDK, and not Java on z/OS - http://www-03.ibm.com/systems/z/os/zos/tools/java/products/jzos/overview.html Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: JZOS unexpected type
the -encoding option on javac: http://docs.oracle.com/javase/6/docs/technotes/tools/windows/javac.html On Mon, May 21, 2012 at 9:49 AM, Paul Gilmartin paulgboul...@aim.comwrote: On Mon, 21 May 2012 09:07:49 -0500, Kirk Wolf wrote: Just a suggestion, but why compile your Java programs on z/OS? Much better, IMO, to use a IDE like Eclipse on your desktop and then just publish the class files or jars to z/OS for execution. I understand that internally Java uses a 16-bit Unicode character set, translating external files to/from that as needed. Is it possible to configure the external code page to map that used by the OP? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: SFTP
There are detailed instructions in the IBM Ported Tools User's Guide for starting SSHD under a BPXBATCH started task. BTW: The example that you have given doesn't jive - it doesn't execute the shell script sshd.sh. Kirk Wolf Dovetailed Technologies http://dovetail.com PS If you want to use z/OS Datasets, Catalogs, etc with IBM Ported Tools OpenSSH, try CO:Z SFTP. It is free to use; enterprise license and support agreements are also available. http://dovetail.com/products/sftp.html On Fri, May 11, 2012 at 7:04 AM, Patrick Loftus patrick.lof...@tnt.comwrote: Sounds like your linux machine is the client, and connecting to your z/OS system running the IBM FTP server. To use SFTP client on Linux, and connect to your z/OS machine running the SSH daemon, yes, you'll need the SSHD task running. //SSHD PROC //SSHD EXEC PGM=BPXBATCH,REGION=0M,TIME=NOLIMIT, // PARM='SH sshd' //STDOUT DD SYSOUT=* //STDERR DD SYSOUT=* And we have these files in /etc/ssh/ sshd.sh #!/bin/sh nohup /usr/sbin/sshd -f /etc/ssh/sshd_config sleep 1 sshd_config (lots of comments removed) Protocol 2 HostKey /etc/ssh/ssh_host_rsa_key SyslogFacility DAEMON LogLevel DEBUG3 Subsystem sftp /usr/lib/ssh/sftp-server and then we've generated the private and public keys in /etc/ssh too, using the ssh-keygen command. The IBM Ported Tools manuals should clarify everything for you though. Regards Patrick Loftus -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: SFTP
Actually, there are several options for using SSH for transfer of datasets between z/OS and Linux: -- the first two are just SFTP file transfer, and don't require Co:Z on Linux: 1) OpenSSH sftp client on Linux - Co:Z SFTP server on z/OS 2) Co:Z SFTP client on z/OS - OpenSSH sftp server on Linux -- the next is the one that John refers to: 3) Co:Z Target Toolkit on Linux - Co:Z DatasetPipes on z/OS use the fromdsn and todsn shell commands on Linux to interactively pipe data to/from z/OS datasets over a ssh connection. If you know about OpenSSH Master/Slave sessions, you might be able to imagine some cool stuff here. -- finally, some fancier z/OS Hybrid Batch stuff: 4) Co:Z Launcher on z/OS - Co:Z Target Toolkit on Linux Use a z/OS batch job step to run a shell script on Linux. From within the shell script, use fromdsn/todsn shell commands on Linux to reach back and access datasets or DDs in the original batch job step. In all (4) cases, OpenSSH is used on Linux and IBM Ported Tools OpenSSH is used on z/OS along with components from the Co:Z Toolkit. Also, you can easily substitute other *NIX platforms or even Windoze for Linux. Kirk Wolf Dovetailed Technologies http://dovetail.com On Fri, May 11, 2012 at 10:32 AM, McKown, John john.mck...@healthmarkets.com wrote: Not too difficult. Nothing to be done on the clients, unless you want to implement the fromdsn and todsn commands. In that case, for UNIX you just put the proper versions in the proper subdirectory. For MS-Windows, put the commands in the Windows32 subdirectory, sorry folder (or some other place) and install Cygwin, if it is not already installed. On the z/OS system, update the /etc/ssh/sshd_config similar to: #Subsystem.sftp./usr/lib/ssh/sftp-server Subsystem sftp /HealthMarkets/coz/bin/sftp-server.sh Subsystem dspipes /HealthMarkets/coz/bin/dspipes /HealthMarkets/coz/bin is where I keep the UNIX Co:Z software. The dspipes Subsystem is only if you want to use fromdsn and todsn from a client to z/OS. You do need to restart the SSH server after you make the changes. What works today will continue to work without change. You just have some new facilities. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Mark Steely Sent: Friday, May 11, 2012 10:21 AM To: IBM-MAIN@bama.ua.edu Subject: Re: SFTP Thanks for all the information - I already use Co:z. for SFTP's going from the MF to the Linux servers. I needed the information for the Linux accessing the MF and getting z/os datasets. Thank You -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Rob Schramm Sent: Friday, May 11, 2012 10:13 AM To: IBM-MAIN@bama.ua.edu Subject: Re: SFTP I have to agree with John. After going thru an exercise doing SFTP without Co:Z and realizing how much the BPXBATCH and scripting interface lacks... 100% recommend using Co:Z. Makes for a much less stressed sysprog. Rob Schramm Senior Systems Consultant Imperium Group On Fri, May 11, 2012 at 9:48 AM, David Crayford dcrayf...@gmail.com wrote: On 11/05/2012 9:41 PM, Shane Ginnane wrote: On Fri, 11 May 2012 21:20:34 +0800, David Crayford wrote: ... - but you can't knock *free* software on z/OS, especially when it's of the quality that Dovestail churn. Perish the thought. I don't believe I've ever disparaged Kirk or their software. Our only jousts have probably been the result of my expressing my general distaste with java. And as it happens, I may be changing those views as well as I play with writing some Android apps. g,d,r Go for it m8!!! It's good fun and I've yet to brick my sons $99 LG. Although I've only done the flashlight so far. Shane ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send
Re: XML Parsing
COBOL is too much work for me, but if you post some real sample XML (your above sample is not complete/valid), I will try to give you the XSLT example for transforming it. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, May 1, 2012 at 11:13 AM, Ron Thomas ron5...@gmail.com wrote: Thanks for the replies, can i get some sample cobol XML parsing programs so that i have a look . Thanks, Ron T -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: XML Parsing
XSLT is a general purpose way to transform XML documents. http://en.wikipedia.org/wiki/XSLT The IBM XML Toolkit for z/OS includes the command-line (or batch) XSLT tool Xalan. Like most XSLT processors, Xalan has two inputs: the original XML document and a XSL (XML Style sheet) document and the output is another XML document. There are examples of how to run XSLT on z/OS on p. 61 of the z/OS XML Toolkit User's Guide: http://www-03.ibm.com/systems/resources/ixmza291.pdf XSLT is a little intimidating at first, but it is not nearly as hard as it looks. See for example the Wikipedia sample: http://en.wikipedia.org/wiki/XSLT#Example_1_.28transforming_XML_to_XML.29 Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, Apr 30, 2012 at 12:13 PM, Ron Thomas ron5...@gmail.com wrote: Hi , We have XML file that is send by the customer, we need to alter the XML file and send it back to 3'rd party . Here is the xml file SSN123604299/SSN.. SSNFormatted123-60-4299/SSNFormatted The altered format need to be like the one below TIN123604399/TIN.. The SSNFormatted tag is removed TIN is the one we need to send across to the 3'rd party. I would like get from the listners how we can acheive the same. Thanks, Ron T -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Does C/LE open of DD:ddname(member) use SVC 99 or FIND?
Charles, I'm nearly certain that it doesn't do a SVC99 when you are using fopen with a DDNAME But it does seem to do a OPEN/BLDL/POINTSTOW/CLOSEfor each fopen() / fclose() using //DD:MYDD(MEM) IMO, there are a couple of important missing things: 1) There isn't a way to update (or get) the PDS directory user data when processing the member with fopen()/fclose(). 2) You would really like to be able to do this: fopen(//DD:MYDD(MEM1), ...) freopen(//DD:MYDD(MEM2), ) so that the freopen() caused a STOW (if opened update) and a BLDL/POINT, and avoided the cost of a complete OPEN/CLOSE path.I don't think that it does that. So, for my money, better BPAM support would be nice. Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, Apr 30, 2012 at 11:45 AM, Charles Mills charl...@mcn.org wrote: Does anyone *know* whether a C/C++ Language Environment fopen() of a filename of the form DD:ddname(member) use an OPEN of ddname followed by a BLDL or FIND for member (the way any reasonable programmer would) or does it do a whole new DYNALLOC for dsname(member)? (Seems like a dumb question, but FTP does it that way, so stranger things have happened.) My *interpretation* of the allocation messages - I don't see allocate and de-allocate messages for a SYSn that appears to be for member - leads me to believe that C/C++ LE does it right. But I could be reading it wrong. Does anyone *know*? Thanks, Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Anybody use the cob2 command on a UNIX shell to compile COBOL?
On Tue, Apr 17, 2012 at 10:33 PM, John McKown joa...@swbell.net wrote: Guess I am spoiled by the assembler (as command) and C/C++ compiler's support of both UNIX paths and z/OS PDS[E]s. Spoiled by common sense :-) z/OS Unix commands should not be walled out from z/OS datasets. I have a, to me, clumsy way to get around it. I started up the NFS server and exported the high level qualifier that had the PDS[E]s that I needed, then did a MOUNT onto a z/OS UNIX subdirectory. Clumsy, but it does work. Its especially silly considering that BPAM already supports reading concatenations of PDS[E] and Unix directories.Apparently, the cob2 developer, or maybe the underlying COBOL compiler has protected itself from this support. I may write my own version of the cob2 command which does what _I_ want. Should be fairly easy. Just set up the allocations as needed using DYNALLOC, then use BPX1ATM UNIX routine to ATTACH the IGYCRCTL program. Or with a pretty simple REXX shell script. It might be that the COBOL compiler (IGYCRCTL) has open exits that detects SYSLIB mixed PDS/Unix contatenations (but unlikely I would guess). The main problem that I have with my UNIX programs is that I can only use HLASM (no C compiler license). And I have not figured out how to handle UNIX signals. So the cntlc to abort a command doesn't work. see signal() On Tue, 2012-04-17 at 15:04 -0700, Tom Ross wrote: On 4/16/2012 3:26 PM, McKown, John wrote: snip It clearly says only directories and paths, but I suppose a confirmation that datasets are not supported would be nice. I will try to get that into the next version of the Programming Guide. If anyone has a better suggestion for where this confirmation would go, let me know! Cheers, TomR COBOL is the Language of the Future! -- John McKown Maranatha! -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Anybody use the cob2 command on a UNIX shell to compile COBOL?
To the original question, you should be able to use a Unix directory and files in place of a PDS or PDSE in any program (with limitations), since BPAM provides simulation for these. Details can be found in z/OS DFSMS Using Datasets under Processing z/OS Unix files - http://publibfp.dhe.ibm.com/cgi-bin/bookmgr/BOOKS/dgt2d440/3.9?DT=20050602124524 So, allocate the equivalent of SYSLIB as a contenation with one DD pointing to a Unix directory and invoke the COBOL compiler. Even in the absence of a shell command front-end, you could write your own REXX shell script to do allocations via BPXWDYN and then invoke the COBOL compiler with LINKMVS. Similarly, it should not be difficult to write a REXX shell script for FORTRAN. Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Inexpensive estimate of uncompressed size of PS-E dataset
Bob, Thanks; I should have thought of looking at the LISTCAT output. Kirk Wolf Dovetailed Technologies http://dovetail.com On Fri, Apr 13, 2012 at 6:59 PM, Bob Rutledge deerh...@ix.netcom.comwrote: Kirk Wolf wrote: I'm trying to understand how to use the catalog fields: COMUDSIZ UDATASIZ COMPIND VVRNFLGS ... in order to get an estimate of the uncompressed size of a compressed, extended-format DSORG=PS dataset. The documentation in Managing Catalogs is a little thin. - is UDATASIZ the uncompressed size? - which flags should I use to determine that the value in UDATASIZ is valid - VVRNFLGS? not bit x'80'? - COMPIND bit x'40'? Pointers to additional documentation or usage information would be appreciated. I'm thinking what's required here is some creative correlation between Managing Catalogs and the Interpreting LISTCAT Output Listings appendix in the Access Method Services for Catalogs book. How about COMP-USER-DATA-SIZE and USER-DATA-SIZE? I'll leave the flags for you. Bob --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Modernizing the BCP code ?
It is also interesting (to me) to point out that Metal C uses the same back-end. Metal-C generates assembler code which is not dependent on the C library or LE, supports user inlined assembler code, etc. Just like with C/C++, you can specify ARCH(),TUNE(), INLINE, etc. With the explosion of new instructions, at what point does writing hand-written assembler code become less and less practical? Kirk Wolf Dovetailed Technologies http://dovetail.com On Thu, Apr 12, 2012 at 11:29 PM, Tom Ross tmr...@stlvm20.vnet.ibm.comwrote: That is close to what I said. I said that C/C++ and PL/I currently share a common back end, and that eventually IBM would like all compilers to share a common backend. In response to another comment, the JIT compiler does create optimized sequences of instructions, and we hope to use some of that technology as well in a new COBOL compiler release. As for assembler code generated for COBOL usage of BINARY data items, we are highly influenced by the COBOL standard. COBOL data items are all base 10, with digits 1-9, so mapping BINARY data items to that requires some trickery. The good news is that you can process dollars and cents in many different data types with no floating points if you want to, unlike some other languages. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: __console2()
Scott,
The second argument is a pointer. If successful, it will point to a
null-terminated string, so strcmp() or strcasecmp() should work fine.
Your code should also check the return code and check that the value
returned in the third argument is _CC_modify before assuming that your
pointer points to a modify appl= string.
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
On Fri, Apr 13, 2012 at 4:12 PM, Scott Ford scott_j_f...@yahoo.com wrote:
All:
I am to use the __console2() function call in C to build an operator
Modify interface.
Reading the manual , I can issue messages, no problem , retrieval of the
modify information
is good, but I cant figure out how to compare..He's my C code:
/*
CCONS
* Company:
Identityforge,LLC
* Date:
04-12-2012
* Author: Scott
Ford
*
*/
#include
stdio.h
#include
string.h
#include
time.h
#include
errno.h
#include
sys/__messag.h
int main(int argc, char** argv)
{
struct __cons_msg2
cmsg;
char buf[256] = Test C console
interface;
char
reply[128];
int
rc;
int
x;
int
res;
int
cmsg_cmd;
unsigned int cmsg_rout[2] =
{1,0};
unsigned int cmsg_desc[2] =
{12,0};
cmsg.__cm2_format =
__CONSOLE_FORMAT_2;
cmsg.__cm2_msg =
buf;
cmsg.__cm2_msglength =
strlen(buf);
cmsg.__cm2_routcde =
cmsg_desc;
cmsg.__cm2_token =
0;
cmsg.__cm2_msgid =
NULL;
cmsg.__cm2_dom_token =
0;
rc =
__console2(cmsg,reply,cmsg_cmd);
x =
0;
printf(Success display of console
message\n);
do
{
printf(%s\n);
if ( strcmp(reply,SHUTDOWN) == 0
);
x =
1;
} while (x =
0)
}
If i issue : F TESTCONS,APPL=HI
I see the variable REPLY is HI ...so is my assumption when I compare i
have to somehow use a length ??
I am a newbie at this, so any help is super appreciated..
Scott J Ford
Software Engineer
http://www.identityforge.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Inexpensive estimate of uncompressed size of PS-E dataset
I'm trying to understand how to use the catalog fields: COMUDSIZ UDATASIZ COMPIND VVRNFLGS ... in order to get an estimate of the uncompressed size of a compressed, extended-format DSORG=PS dataset. The documentation in Managing Catalogs is a little thin. - is UDATASIZ the uncompressed size? - which flags should I use to determine that the value in UDATASIZ is valid - VVRNFLGS? not bit x'80'? - COMPIND bit x'40'? Pointers to additional documentation or usage information would be appreciated. Thanks, Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: openssl make - z/OS UNIX question - Help
I'm not sure why you are getting this linker error and I'm not. I did
this on a z/OS 1.11 system, maybe there is a difference there. It would
be nice if I could figure out a way to cause the actual command to be
printed; that would probably have clues.
This is really tough stuff. Find a Unix guru who knows make and the shell
really well and they could probably help you.
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
On Wed, Apr 11, 2012 at 10:10 AM, Shaffer, Terri E
terri.e.shaf...@jpmchase.com wrote:
Hi Kirk,
Wow thank you!! I have deleted the whole openssl-1.0.1 directory,
Re-issued my pax to recreate the directory.
Then performed all the updates you identified and suggested, That was much
simpler with way less issues than before.
Now my Make runs for about 1hr. But sadly I now get.
gmakeÝ2¨: Entering directory `/u/w012108/temp/openssl-1.0.1/apps'
( :; LIBDEPS=${LIBDEPS:--L.. -lssl -L.. -lcrypto };
LDCMD=${LDCMD:-c99_x};
LDFLAGS=${LDFLAGS:--O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H
-D_ALL_SOURC
E}; LIBPATH=`for x in $LIBDEPS; do echo $x; done | sed -e 's/¬ *-L//;t'
-e d |
uniq`; LIBPATH=`echo $LIBPATH | sed -e 's/ /:/g'`;
LD_LIBRARY_PATH=$LIBPATH:$LD_
LIBRARY_PATH ${LDCMD} ${LDFLAGS} -o ${APPNAME:=openssl} openssl.o verify.o
asn1p
ars.o req.o dgst.o dh.o dhparam.o enc.o passwd.o gendh.o errstr.o ca.o
pkcs7.o c
rl2p7.o crl.o rsa.o rsautl.o dsa.o dsaparam.o ec.o ecparam.o x509.o
genrsa.o gen
dsa.o genpkey.o s_server.o s_client.o speed.o s_time.o apps.o s_cb.o
s_socket.o
app_rand.o version.o sess_id.o ciphers.o nseq.o pkcs12.o pkcs8.o pkey.o
pkeypara
m.o pkeyutl.o spkac.o smime.o cms.o rand.o engine.o ocsp.o prime.o ts.o
srp.o ${
LIBDEPS} )
FSUM3008 Specify a file with the correct suffix (.c, .i, .s, .o, .x, .p,
.I, or
.a), or a corresponding data set name, instead of -L...
gmakeÝ2¨: *** Ýlink_app.¨ Error 1
gmakeÝ2¨: Leaving directory `/u/w012108/temp/openssl-1.0.1/apps'
gmakeÝ1¨: *** Ýopenssl¨ Error 2
gmakeÝ1¨: Leaving directory `/u/w012108/temp/openssl-1.0.1/apps'
gmake: *** Ýbuild_apps¨ Error 1
I see in /u/w012108/temp/openssl-1.0.1/PROBLEMS there is a reference but I
think it's for macOS X.
This is really a misfeature in ld, which seems to look for .dylib libraries
along the whole library path before it bothers looking for .a libraries.
This
means that -L switches won't matter unless OpenSSL is built with shared
library support.
The workaround may be to change the following lines in apps/Makefile and
test/Makefile:
LIBCRYPTO=-L.. -lcrypto
LIBSSL=-L.. -lssl
to:
LIBCRYPTO=../libcrypto.a
LIBSSL=../libssl.a
Not sure why I got this error and you didn't? On another note, I did not
see any of the other errors you saw but maybe I just didn't get that
far?
One last question if there a way to capture all the output that scrolls on
my screen? In case I missed any messages?
Thanks
Ms. Terri E. Shaffer
terri.e.shaf...@jpmchase.com
Engineer
J.P.Morgan Chase Co.
GTI DCT ECS Core Services zSoftware Group / Emerging Technologies
Office: # 614-213-3467
Cell: # 412-519-2592
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Kirk Wolf
Sent: Tuesday, April 10, 2012 3:52 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: openssl make - z/OS UNIX question - Help
Terri,
I downloaded 1.0.1 and here's how I built it:
1) Update the Configure perl script and add this line (after the existing
OS390-Unix line, which isn't used):
OS/390,c99_x:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H
-D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR
RC4_INDEX RC4_CHAR BF_PTR:::,
Notice that all I changed was to change the label to OS/390 and to use
the c99_x command.
- c99 means to use STDC99, which automatically implies LONGLONG. This
avoids the shell quoting issues.
- the c99_x means to compile and link using XPLINK linkage. You may or may
not want this, depending on what you are using it for. If you have a
non-XPLINK application and you want to use it with the openssl dll, then
you will want to use just c99
2) ensure that perl and gmake are in your PATH
3) chmod +x tools/*
4)
export MAKE=gmake
export _C89_CCMODE=1 (not sure that this is needed any more with the c99
command)
5) $MAKE
I get these errors:
ERROR CCN3045 ./b_sock.c:888 Undeclared identifier NI_MAXHOST.
ERROR CCN4324 ./b_sock.c:888 Array size must have integer type.
ERROR CCN3045 ./b_sock.c:888 Undeclared identifier NI_MAXSERV.
ERROR CCN4324 ./b_sock.c:888 Array size must have integer type.
So, I added these lines to crypto/bio/b_sock.c starting at line 102
#ifndef NI_MAXSERV
#define NI_MAXSERV 32
#endif
#ifndef NI_MAXHOST
#define NI_MAXHOST 1025
#endif
I get the following warnings, which I think may be OK. The problem are
missing #includes (which are probably different on z/OS) -
WARNING CCN4421 ./a_print.c:90Implicit function
Re: openssl make - z/OS UNIX question - Help
A compiler configuration problem makes perfect sense I should have thought of it. On Wed, Apr 11, 2012 at 11:54 AM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Kirk, First I really want to thank you for all your help. I now finally have a valid openssl module W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1/apps ./openssl version OpenSSL 1.0.1 14 Mar 2012 How I fixed my issues, was I implemented the fix identified in the PROBLEMS member both in apps and test directories. Then my C++ compiler was not setup properly so it was looking for cee.xx datasets not SYS1.xx. This was because /usr/lpp/cbclib/xlc/etc/xlc.cfg was never customized In my shop. Changed the HLQ and everything worked Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: realpath() syntax?
Right. And I would have expected that you should have gotten a compiler
warning about the assumed type of realpath being int, since a
declaration wasn't found without #define _XOPEN_SOURCE_EXTENDED 1
Also, according to the documentation you will get an EINVAL error if the
second argument (the buffer) is NULL.
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
On Wed, Apr 11, 2012 at 12:40 PM, McKown, John
john.mck...@healthmarkets.com wrote:
before the
#include stdlib.h
insert the line:
#define _XOPEN_SOURCE_EXTENDED 1
as shown here:
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/EDCLB1B0/3.791
or include the compile parm: -D_XOPEN_SOURCE_EXTENDED=1
--
John McKown
Systems Engineer IV
IT
Administrative Services Group
HealthMarkets(r)
9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone *
john.mck...@healthmarkets.com * www.HealthMarkets.com
Confidentiality Notice: This e-mail message may contain confidential or
proprietary information. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message. HealthMarkets(r) is the brand name for products underwritten and
issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake
Life Insurance Company(r), Mid-West National Life Insurance Company of
TennesseeSM and The MEGA Life and Health Insurance Company.SM
-Original Message-
From: IBM Mainframe Discussion List
[mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Paul Gilmartin
Sent: Wednesday, April 11, 2012 12:07 PM
To: IBM-MAIN@bama.ua.edu
Subject: realpath() syntax?
z/OS 1.12. The source:
/* Doc: Print the resolved pathname of each argument
*/
#include stdlib.h
/* appears to contain:
char*realpath(const char * __restrict__,
char * __restrict__);
*/
int main( int argc, char ** argv ) {
char *resolved_name;
/* This is OK. */
realpath( xyzzy, NULL );
/* This is OK. */
resolved_name = wombat;
/* this gets:
ERROR CCN3068 realpath3.c:22
Operation between types char* and int is not allowed. */
resolved_name = realpath( xyzzy, NULL );
}
My compile command is:
user@MVS:167$ gmake realpath3
LC_CTYPE= c89 -I.. -D_XOPEN_SOURCE -D_OE_SOCKETS
-Wa,ASA,RENT -DPLATFORM=OS390 -o realpath3
../source/realpath3.c /usr/lib/Xaw.x /usr/lib/SM.x
/usr/lib/ICE.x /usr/lib/X11.x -lcurses -lm
in $ENV: /bin/sh -h $
ERROR CCN3068 ./../source/realpath3.c:22Operation between
types char* and int is not allowed.
CCN0793(I) Compilation failed for file
./../source/realpath3.c. Object file not created.
FSUM3065 The COMPILE step ended with return code 12.
FSUM3017 Could not compile ../source/realpath3.c. Correct the
errors and try again.
Help!
Thanks,
gil
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: openssl make - z/OS UNIX question - Help
Terri - Glad you got it all built. Hopefully it will work too :-) If so, I suggest that you submit your porting notes, including OS level, patches (like to Configure) and any other gotchas upstream to the OpenSSL project. I believe that an email to the openssl-users mailing list will suffice. I would CC the mvs-oe list for posterity. Regards, Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: HSM to open systems
On Wed, Apr 11, 2012 at 12:48 PM, McKown, John john.mck...@healthmarkets.com wrote: If you have Dovetailed Technology's Co:Z product (free to license) and an SSH server on the Open side, then you could use the Co:Z Launcher to run a script on the Open system and use the fromdsn command to transfer the disk dataset contents to the Open side, piping the output to a command (such as cat on UNIX) which can write it to a file on the Open disk. The Dovetailed Technology product is free to download. You don't even need to register. You do need to install the programs on z/OS and on the Open System system(s). http://dovetail.com/ Thanks John for the mention. I will also add that with the Co:Z Launcher you can also disable ssh tunneling for actual data transfer, which is useful if you are running on a secure network (like a z/Enterprise IEDN). This saves encryption processing and give you excellent throughput at a low cost. Kirk Wolf Dovetailed Technologies http://dovetail.com +1 636.300.0901 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: openssl make - z/OS UNIX question - Help
The langlvl(longlong) is a compiler option, so it must be specified following a -Wc, like: -Wc,xplink,langlvl(longlong) Also, you seem to have some asterisks in your Configure line that don't make sense to me. For my port of 0.9.8q, I had (on one line): OS/390,xlc:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H -Wc,xplink -D_ALL_SOURCE-Wl,xplink:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::, If you need langlvl(longlong) for 1.0.1, then perhaps use: OS/390,xlc:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H -Wc,xplink,langlvl(longlong) -D_ALL_SOURCE-Wl,xplink:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::, Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Apr 10, 2012 at 6:53 AM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi Kirk. Thanks, You have helped lots, But I must have added it wrong. Here is the way I specified using your entry in Configure. *OS/390*,*xlc*:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H * -WC,XPLINK* LANGLVL(LONGLONG) -D_ALL_SOURCE::*::-WL,XPLINK*:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::, Then when I do the config. IsMK1MF=0 CC=*xlc* CFLAG =-DOPENSSL_THREADS * -O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM _H * -WC,XPLINK* LANGLVL(LONGLONG) -D_ALL_SOURCE EX_LIBS =-WL,XPLINK* make: Makefile: line 64: Error -- Expecting macro or rule defn, found neither Not sure how/what I did incorrectly? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Monday, April 09, 2012 4:26 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help langlvl(longlong) would go on the OS/390 Configure line as a compiler (-Wc ) option. If you change Configure, you need to rerun ./config On Mon, Apr 9, 2012 at 2:27 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi Kirk, I think I made it further now, but get an error about when I to the actual gmake ERROR CCN3115 ../../include/openssl/sha.h:184 Duplicate type specifier long ignored. ERROR CCN3115 ../../include/openssl/sha.h:185 Duplicate type specifier long ignored. ERROR CCN3115 ../../include/openssl/sha.h:187 Duplicate type specifier long ignored. CCN0793(I) Compilation failed for file ./sha_dgst.c. Object file not created. FSUM3065 The COMPILE step ended with return code 12. EZZ0158I SELECTEX FAILED: errno=1038176216 errno2=3d623b50 And think I need to pass the langlvl but can't figure out where it goes after many attempts. Could you please tell me where I set that parm? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Friday, April 06, 2012 4:04 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Sounds to me like config/Configure worked (and generated make files). Refer to my original response: -- configure and make ./config --prefix=/usr/local --openssldir=/usr/local/openssl export _C89_CCMODE=1 export MAKE=gmake $MAKE so, do the exports and then execute gmake ($MAKE) Kirk Wolf Dovetailed Technologies http://dovetail.com On Fri, Apr 6, 2012 at 1:05 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Thanks Kirk, Originally I opened this thread to the MVS-OE but got no response which is why I enter to IBM-MAIN. Here are my results. It looks much better after your suggested changes, I think... I see RC4_CHUNK is undefined Not sure if this is an issue or not and what it actually means to me. So after 10 or so screens worth of: for all the directories. gmakeÝ1¨: Entering directory `/u/w012108/temp/openssl-1.0.1/ssl' ssl.h = ../include/openssl/ssl.h ssl2.h = ../include/openssl/ssl2.h ssl3.h = ../include/openssl/ssl3.h ssl23.h = ../include/openssl/ssl23.h tls1.h = ../include/openssl/tls1.h dtls1.h = ../include/openssl/dtls1.h kssl.h = ../include/openssl/kssl.h srtp.h = ../include/openssl/srtp.h ssltest.c = ../test/ssltest.c gmakeÝ1¨: Leaving directory `/u/w012108/temp/openssl-1.0.1/ssl' I finally get Configured for os/compiler. Now heres where my knowledge drops off even more.. If that possible when it comes to this. What do I do now, How to I get a new openssl module built? Thanks Ms. Terri E. Shaffer terri.e.shaf
Re: openssl make - z/OS UNIX question - Help
David is right about your encoding. Make sure that you have: export LANG=C which is the default. But the problem might be that you are running the z/OS Unix shell under TSO OMVS. If so, set the encoding of your TN3270 emulator to be IBM-1047. Even better would be to use ssh to login to a tty shell directly. But I don't think that this is your only problem... Since Configure builds a make file, then these command arguments are passed through the shell. It looks to me like the parenthesis in langlvl(longlong) need to be somehow quoted or escaped. This is tricky, since the string is supplied as part of a Perl variable (in Configure). So try adding a backslash like this: ...langlvl\(longlong\) if that doesn't work, try double backslashes. if that doesn't work, let me know and I'll try playing around with this release myself. I probably won't get to it today though. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Apr 10, 2012 at 9:55 AM, David Crayford dcrayf...@gmail.com wrote: Make sure you are using the right codepage. Are you sure you are running the shell in 1047? looks like it may be 037 judging by the mangled square brackets On 10/04/2012 10:46 PM, Shaffer, Terri E wrote: Hi Kirk, Not sure about the extra asterisks, I copied your example at the beginning of this email and pasted into my Configure file. I did make it into 1 long line then. I don't know too much, or pretty much nothing about how these parms should look, so I am sortof at a loss and try a few things before I respond. I took your new example and pasted into my Configure and again made it into 1 long line. The Configure works and received Configured for *OS/390*. When I tried to the gmake install I get W012108:SDEV(DEV):/u/w012108/**temp/openssl-1.0.1 gmake install making all in crypto... gmakeÝ1¨: Entering directory `/u/w012108/temp/openssl-1.0.**1/crypto' xlc -I. -I.. -I../include -DOPENSSL_THREADS -O -DB_ENDIAN -DCHARSET_EBCDIC -DN O_SYS_PARAM_H -Wc,xplink,langlvl(longlong) -D_ALL_SOURCE -c -o cryptlib.o cryptlib.c syntax error: got (, expecting Newline gmakeÝ1¨: *** Ýcryptlib.o¨ Error 1 gmakeÝ1¨: Leaving directory `/u/w012108/temp/openssl-1.0.**1/crypto' gmake: *** Ýbuild_crypto¨ Error 1 So it looks like there is something wrong with the specification but not sure what? I tried looking at the OSXL C/C++User's Guide but there are really no examples on how this would be specified in the perl script. I appreciate your help and sorry to be lost. Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: openssl make - z/OS UNIX question - Help
Terri, I downloaded 1.0.1 and here's how I built it: 1) Update the Configure perl script and add this line (after the existing OS390-Unix line, which isn't used): OS/390,c99_x:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::, Notice that all I changed was to change the label to OS/390 and to use the c99_x command. - c99 means to use STDC99, which automatically implies LONGLONG. This avoids the shell quoting issues. - the c99_x means to compile and link using XPLINK linkage. You may or may not want this, depending on what you are using it for. If you have a non-XPLINK application and you want to use it with the openssl dll, then you will want to use just c99 2) ensure that perl and gmake are in your PATH 3) chmod +x tools/* 4) export MAKE=gmake export _C89_CCMODE=1 (not sure that this is needed any more with the c99 command) 5) $MAKE I get these errors: ERROR CCN3045 ./b_sock.c:888 Undeclared identifier NI_MAXHOST. ERROR CCN4324 ./b_sock.c:888 Array size must have integer type. ERROR CCN3045 ./b_sock.c:888 Undeclared identifier NI_MAXSERV. ERROR CCN4324 ./b_sock.c:888 Array size must have integer type. So, I added these lines to crypto/bio/b_sock.c starting at line 102 #ifndef NI_MAXSERV #define NI_MAXSERV 32 #endif #ifndef NI_MAXHOST #define NI_MAXHOST 1025 #endif I get the following warnings, which I think may be OK. The problem are missing #includes (which are probably different on z/OS) - WARNING CCN4421 ./a_print.c:90Implicit function declaration for function isalnum WARNING CCN4421 ./t_x509.c:498 Implicit function declaration for function isupper. WARNING CCN4421 ./ameth_lib.c:234 Implicit function declaration for function strncasecmp. WARNING CCN4421 ./f_int.c:136 Implicit function declaration for function isxdigit. WARNING CCN4421 ./f_string.c:136 Implicit function declaration for function isxdigit. WARNING CCN4421 ./v3_ncons.c:408 Implicit function declaration for function strcasecmp. WARNING CCN4421 ./v3_ncons.c:430 Implicit function declaration for function strcasecmp. WARNING CCN4421 ./v3_ncons.c:453 Implicit function declaration for function strcasecmp. WARNING CCN4421 ./v3_ncons.c:494 Implicit function declaration for function strncasecmp. WARNING CCN4421 ./v3_ncons.c:500 Implicit function declaration for function strncasecmp. but everything links OK, so these are probably OK. (but the correct include file may have an improved macro / inlined implementation, so this should probably be fixed). Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Apr 10, 2012 at 2:06 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: I just looked at the cversion.c member and I guess this code doesn't like the backslashes escapes. As these are lines 83 and 85 of the source. #ifdef CFLAGS static char bufÝsizeof(CFLAGS)+11¨; BIO_snprintf(buf,sizeof buf,compiler: %s,CFLAGS); return(buf); Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Shaffer, Terri E Sent: Tuesday, April 10, 2012 2:52 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Hi Kirk, I figured out the backslashes in the Configure file on my own with the help of google searches, so I was able to get past passing the compiler parm issue. After it completed: I had to edit the makefile and change the cflag for langlvl and put back the backslashes. CC= xlc CFLAG= -DOPENSSL_THREADS -O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H -D_ALL_SOURCE -W c,xplink,langlvl\(longlong\) DEPFLAG= -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -D OPENSSL_NO_MD2 -DOPENSSL_NO_RC4 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SCTP -DOPENSSL_NO_STORE I tried double backslashes also and that caused other issues when I got to the gmake install but the Configure liked them. But the makefile was missing the backslashes, so I still had to edit. Everything else I think looked okay. I was then able to issue the gmake install command and my next round of problems started occurring. The first thing I will say this runs about 20 minutes until it stops even with the first 4 issues for ignored. xlc -I. -I.. -I../include -DOPENSSL_THREADS -O -DB_ENDIAN -DCHARSET_EBCDIC -DN O_SYS_PARAM_H -D_ALL_SOURCE -W c,xplink,langlvl\(longlong\) -c -o cversion.o cversion.c WARNING CCN3235 ./cversion.c:83Incorrect escape sequence \(. \ ignored. WARNING CCN3235 ./cversion.c:83Incorrect escape sequence \). \ ignored. WARNING CCN3235 ./cversion.c:85Incorrect escape sequence \(. \ ignored. WARNING CCN3235 ./cversion.c:85Incorrect escape
Re: openssl make - z/OS UNIX question - Help
langlvl(longlong) would go on the OS/390 Configure line as a compiler (-Wc ) option. If you change Configure, you need to rerun ./config On Mon, Apr 9, 2012 at 2:27 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi Kirk, I think I made it further now, but get an error about when I to the actual gmake ERROR CCN3115 ../../include/openssl/sha.h:184 Duplicate type specifier long ignored. ERROR CCN3115 ../../include/openssl/sha.h:185 Duplicate type specifier long ignored. ERROR CCN3115 ../../include/openssl/sha.h:187 Duplicate type specifier long ignored. CCN0793(I) Compilation failed for file ./sha_dgst.c. Object file not created. FSUM3065 The COMPILE step ended with return code 12. EZZ0158I SELECTEX FAILED: errno=1038176216 errno2=3d623b50 And think I need to pass the langlvl but can't figure out where it goes after many attempts. Could you please tell me where I set that parm? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Friday, April 06, 2012 4:04 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Sounds to me like config/Configure worked (and generated make files). Refer to my original response: -- configure and make ./config --prefix=/usr/local --openssldir=/usr/local/openssl export _C89_CCMODE=1 export MAKE=gmake $MAKE so, do the exports and then execute gmake ($MAKE) Kirk Wolf Dovetailed Technologies http://dovetail.com On Fri, Apr 6, 2012 at 1:05 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Thanks Kirk, Originally I opened this thread to the MVS-OE but got no response which is why I enter to IBM-MAIN. Here are my results. It looks much better after your suggested changes, I think... I see RC4_CHUNK is undefined Not sure if this is an issue or not and what it actually means to me. So after 10 or so screens worth of: for all the directories. gmakeÝ1¨: Entering directory `/u/w012108/temp/openssl-1.0.1/ssl' ssl.h = ../include/openssl/ssl.h ssl2.h = ../include/openssl/ssl2.h ssl3.h = ../include/openssl/ssl3.h ssl23.h = ../include/openssl/ssl23.h tls1.h = ../include/openssl/tls1.h dtls1.h = ../include/openssl/dtls1.h kssl.h = ../include/openssl/kssl.h srtp.h = ../include/openssl/srtp.h ssltest.c = ../test/ssltest.c gmakeÝ1¨: Leaving directory `/u/w012108/temp/openssl-1.0.1/ssl' I finally get Configured for os/compiler. Now heres where my knowledge drops off even more.. If that possible when it comes to this. What do I do now, How to I get a new openssl module built? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Thursday, April 05, 2012 2:33 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Terri - try this running config in test mode. This is what I get for OpenSSL 0.9.8q: ./config -t Operating system: 2094-whatever-OS/390 Configuring for OS/390 /usr/lpp/perl/bin/perl ./Configure OS/390 So far so good. I assume you will get something similar, except your machine is a 2817. Why does it say OS/390? Because that's still how z/OS refers to itself in output from the uname command. Now, see if the Configure perl script supports OS/390 perl ./Configure LIST | grep OS/390 I assume that this will be missing on 1.0.1, which would explain the error that you are getting. If this is the case, what does it mean? It means that no one has done the porting and testing for configuring the build for z/OS with OpenSSL 1.0.1. In 0.9.8q Configure, you will find this: # OS/390 Unix an EBCDIC-based Unix system on IBM mainframe # You need to compile using the c89.sh wrapper in the tools directory, because the # IBM compiler does not like the -L switch after any object modules. # OS390-Unix,c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::, When I last ported 0.9.8q, I modified this to read: *OS/390*,*xlc*:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H * -Wc,xplink* -D_ALL_SOURCE::*::-Wl,xplink*:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::, Note that I chose to use XPLINK. I found that the c89.sh wrapper wasn't required if I used the xlc command and exported C89_CCMODE=1 as described earlier. You
Re: Accessing USS on Mainframe thru Telnet
No amount of discussion has or will ever quell this battle. Declare your own victory and do as I have: a) Don't use USS to refer to z/OS Unix System Services b) Don't correct someone who does c) Filter emails from Chris Mason. A pity that 5% of his voluminous posts are valuable, but not worth the rest. Unfortunately, there isn't an official acronym for z/OS Unix System Services. Until such time as there is, maybe we should use zUSS or maybe Xeus :-) Kirk Wolf Dovetailed Technologies http://dovetail.com On Fri, Apr 6, 2012 at 12:50 PM, Veilleux, Jon L veilleu...@aetna.comwrote: I prefer to keep my comments succinct rather than ramble on about inane complaints about acronym usage. You must have too much time on your hands to waste so much of it on useless bickering, ergo, you need to get a life. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: openssl make - z/OS UNIX question - Help
Sounds to me like config/Configure worked (and generated make files). Refer to my original response: -- configure and make ./config --prefix=/usr/local --openssldir=/usr/local/openssl export _C89_CCMODE=1 export MAKE=gmake $MAKE so, do the exports and then execute gmake ($MAKE) Kirk Wolf Dovetailed Technologies http://dovetail.com On Fri, Apr 6, 2012 at 1:05 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Thanks Kirk, Originally I opened this thread to the MVS-OE but got no response which is why I enter to IBM-MAIN. Here are my results. It looks much better after your suggested changes, I think... I see RC4_CHUNK is undefined Not sure if this is an issue or not and what it actually means to me. So after 10 or so screens worth of: for all the directories. gmakeÝ1¨: Entering directory `/u/w012108/temp/openssl-1.0.1/ssl' ssl.h = ../include/openssl/ssl.h ssl2.h = ../include/openssl/ssl2.h ssl3.h = ../include/openssl/ssl3.h ssl23.h = ../include/openssl/ssl23.h tls1.h = ../include/openssl/tls1.h dtls1.h = ../include/openssl/dtls1.h kssl.h = ../include/openssl/kssl.h srtp.h = ../include/openssl/srtp.h ssltest.c = ../test/ssltest.c gmakeÝ1¨: Leaving directory `/u/w012108/temp/openssl-1.0.1/ssl' I finally get Configured for os/compiler. Now heres where my knowledge drops off even more.. If that possible when it comes to this. What do I do now, How to I get a new openssl module built? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Thursday, April 05, 2012 2:33 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Terri - try this running config in test mode. This is what I get for OpenSSL 0.9.8q: ./config -t Operating system: 2094-whatever-OS/390 Configuring for OS/390 /usr/lpp/perl/bin/perl ./Configure OS/390 So far so good. I assume you will get something similar, except your machine is a 2817. Why does it say OS/390? Because that's still how z/OS refers to itself in output from the uname command. Now, see if the Configure perl script supports OS/390 perl ./Configure LIST | grep OS/390 I assume that this will be missing on 1.0.1, which would explain the error that you are getting. If this is the case, what does it mean? It means that no one has done the porting and testing for configuring the build for z/OS with OpenSSL 1.0.1. In 0.9.8q Configure, you will find this: # OS/390 Unix an EBCDIC-based Unix system on IBM mainframe # You need to compile using the c89.sh wrapper in the tools directory, because the # IBM compiler does not like the -L switch after any object modules. # OS390-Unix,c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::, When I last ported 0.9.8q, I modified this to read: *OS/390*,*xlc*:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H * -Wc,xplink* -D_ALL_SOURCE::*::-Wl,xplink*:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::, Note that I chose to use XPLINK. I found that the c89.sh wrapper wasn't required if I used the xlc command and exported C89_CCMODE=1 as described earlier. You might also consider adding LANGLVL, ARCH, and TUNE compiler options, depending on what you are doing. Its been a while, but I seem to remember submitting this patch upstream. So, you are going to have to probably make the same patch to the 1.0.1 Configure perl script. But there could be differences in the format of this (very complicated) line. Finally, I would suggest that you probably want to move this thread to the mvs...@vm.marist.edu list. Regards, Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Apr 4, 2012 at 8:56 AM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi Kirk, Okay that changed the world for the better, I now have the file in the right format. Onto the next issue now.. W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 ./config --prefix=/u/w012108/o penssl --openssldir=/u/w012108/openssl $MAKE Operating system: 2817-whatever-OS/390 This system (OS/390) is not supported. See file INSTALL for details. W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 What I did I do this time? Is this correct for z/OS Unix? Is there a solution? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Wednesday
Re: Accessing USS on Mainframe thru Telnet
I agree with Mark. IBM Ported Tools for z/OS - OpenSSH is free, and works well to encrypt your connections. With most recent PTFs, it is not possible to use ICSF and CPACF to enable hardware acceleration of the ciphers and macs, which allows for much less CPU usage. Kirk Wolf Dovetailed Technologies http://dovetail.com On Thu, Apr 5, 2012 at 9:00 AM, Mark Jacobs mark.jac...@custserv.comwrote: Unless you're dead set on using telnet (which is a bad idea) you should setup the ssh daemon and use it to connect to the OMVS environment. Mark Jacobs On 04/05/12 09:51, Chokalingam Thangavelu wrote: Hi, I am unable to access the Unix system services thru Telnet and could not find below configurations in USS files. 1. Could not find 'otelnet in file /etc/services' which points to the port of the USS telnet. 2. There is no otelnetd daemon or the configured inetd is running on the system 3. Could not fine INET in /etc/inet.conf Please let me know how to define above TELNET configurations and access USS thru TELNET. Regards, Chokalingam Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com --**--** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- Mark Jacobs Time Customer Service Tampa, FL Learn from yesterday, live for today, hope for tomorrow. The important thing is to not stop questioning. - Albert Einstein --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Accessing USS on Mainframe thru Telnet
We use a Dallas RDP system, and IBM installed IBM Ported Tools OpenSSH for us.I think that all I had to do was to customize the SSHD started task a bit. There isn't much payback for using ssh over tty telnet, until your password is snatched from an unencrypted telnet session :-) But if you are using unencrypted TN3270, its the same issue. BTW, we use telnet because that's the way our system from Dallas is set up. We are not sysprogs so we try to minimize the systems programming work we need to do. (Oh, we do some, of course, to install new versions of products, etc., but these are driven by course needs, e.g.: setting up DB2 8 and 9 and 10 as needed; even then, the Dallas staff does most the work, we merely need to tailor things to our config). There doesn't seem to be much payback to go to ssh in return for the work. Our system is actually only in non-sleep mode a few days a month (well, it's erratic, depending on our current development work). -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Chokalingam Thangavelu Sent: Thursday, April 05, 2012 8:52 AM To: IBM-MAIN@bama.ua.edu Subject: Accessing USS on Mainframe thru Telnet Hi, I am unable to access the Unix system services thru Telnet and could not find below configurations in USS files. 1. Could not find 'otelnet in file /etc/services' which points to the port of the USS telnet. 2. There is no otelnetd daemon or the configured inetd is running on the system 3. Could not fine INET in /etc/inet.conf Please let me know how to define above TELNET configurations and access USS thru TELNET. Regards, Chokalingam -- Kind regards, -Steve Comstock The Trainer's Friend, Inc. 303-355-2752 http://www.trainersfriend.com * To get a good Return on your Investment, first make an investment! + Training your people is an excellent investment * Try our tool for calculating your Return On Investment for training dollars at http://www.trainersfriend.com/**ROI/roi.htmlhttp://www.trainersfriend.com/ROI/roi.html --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: openssl make - z/OS UNIX question - Help
Sherri -
try this running config in test mode. This is what I get for OpenSSL
0.9.8q:
./config -t
Operating system: 2094-whatever-OS/390
Configuring for OS/390
/usr/lpp/perl/bin/perl ./Configure OS/390
So far so good. I assume you will get something similar, except your
machine is a 2817.
Why does it say OS/390? Because that's still how z/OS refers to itself
in output from the uname command.
Now, see if the Configure perl script supports OS/390
perl ./Configure LIST | grep OS/390
I assume that this will be missing on 1.0.1, which would explain the error
that you are getting.
If this is the case, what does it mean? It means that no one has done the
porting and testing for configuring the build for z/OS with OpenSSL 1.0.1.
In 0.9.8q Configure, you will find this:
# OS/390 Unix an EBCDIC-based Unix system on IBM mainframe
# You need to compile using the c89.sh wrapper in the tools directory,
because the
# IBM compiler does not like the -L switch after any object modules.
#
OS390-Unix,c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H
-D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR
RC4_INDEX RC4_CHAR BF_PTR:::,
When I last ported 0.9.8q, I modified this to read:
*OS/390*,*xlc*:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H *
-Wc,xplink* -D_ALL_SOURCE::*::-Wl,xplink*:THIRTY_TWO_BIT DES_PTR DES_UNROLL
MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::,
Note that I chose to use XPLINK. I found that the c89.sh wrapper wasn't
required if I used the xlc command and exported C89_CCMODE=1 as described
earlier. You might also consider adding LANGLVL, ARCH, and TUNE compiler
options, depending on what you are doing.
Its been a while, but I seem to remember submitting this patch upstream.
So, you are going to have to probably make the same patch to the 1.0.1
Configure perl script. But there could be differences in the format of
this (very complicated) line.
Finally, I would suggest that you probably want to move this thread to the
mvs...@vm.marist.edu list.
Regards,
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
On Wed, Apr 4, 2012 at 8:56 AM, Shaffer, Terri E
terri.e.shaf...@jpmchase.com wrote:
Hi Kirk,
Okay that changed the world for the better, I now have the file in the
right format. Onto the next issue now..
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 ./config
--prefix=/u/w012108/o
penssl --openssldir=/u/w012108/openssl $MAKE
Operating system: 2817-whatever-OS/390
This system (OS/390) is not supported. See file INSTALL for details.
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1
What I did I do this time? Is this correct for z/OS Unix? Is there a
solution?
Thanks
Ms. Terri E. Shaffer
terri.e.shaf...@jpmchase.com
Engineer
J.P.Morgan Chase Co.
GTI DCT ECS Core Services zSoftware Group / Emerging Technologies
Office: # 614-213-3467
Cell: # 412-519-2592
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Kirk Wolf
Sent: Wednesday, April 04, 2012 8:59 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: openssl make - z/OS UNIX question - Help
So, your files are still in ASCII on z/OS? You may need Gil to help with
that :-)
Try unwinding the tarball into EBCDIC files:
pax -o from=iso8859-1 -rzvf openssl-1.0.1.tar.gz
On Wed, Apr 4, 2012 at 6:39 AM, Shaffer, Terri E
terri.e.shaf...@jpmchase.com wrote:
Sorry about that, here is the beginning. I also pasted some of the hex
code and what I think would be hex20 (ascii spaces) are hex09 as the
first char. Not sure what an HT is.
PREFIX=
SUFFIX=
TEST=false
EXE=
# pick up any command line args to config for i do case $i in
-d*) PREFIX=debug-;;
-t*) TEST=true;;
-h*) TEST=true; cat EOF
Usage: config [options]
-d Add a debug- prefix to machine choice.
-t Test mode, do not run the Configure perl script.
-h This help.
Any other text will be passed to the Configure perl script.
See INSTALL for instructions.
EOF
;;
*) options=$options $i ;;
esac
done
# First get uname entries that we use below
[ $MACHINE ] || MACHINE=`(uname -m) 2/dev/null` || MACHINE=unknown
[ $RELEASE ] || RELEASE=`(uname -r) 2/dev/null` || RELEASE=unknown
[ $SYSTEM ] || SYSTEM=`(uname -s) 2/dev/null` || SYSTEM=unknown
[ $BUILD ] || VERSION=`(uname -v) 2/dev/null` || VERSION=unknown
64 case $XREL in
066762225544226622
22
93135024825C209E00
00
--
65 4.0|4.1)
0323732322
22
94E0C4E190
00
--
66 echo ${MACHINE}-whatever-isc4; exit 0
Re: openssl make - z/OS UNIX question - Help
So, your files are still in ASCII on z/OS? You may need Gil to help with
that :-)
Try unwinding the tarball into EBCDIC files:
pax -o from=iso8859-1 -rzvf openssl-1.0.1.tar.gz
On Wed, Apr 4, 2012 at 6:39 AM, Shaffer, Terri E
terri.e.shaf...@jpmchase.com wrote:
Sorry about that, here is the beginning. I also pasted some of the hex
code and what I think would be hex20 (ascii spaces) are hex09 as the first
char. Not sure what an HT is.
PREFIX=
SUFFIX=
TEST=false
EXE=
# pick up any command line args to config
for i
do
case $i in
-d*) PREFIX=debug-;;
-t*) TEST=true;;
-h*) TEST=true; cat EOF
Usage: config [options]
-d Add a debug- prefix to machine choice.
-t Test mode, do not run the Configure perl script.
-h This help.
Any other text will be passed to the Configure perl script.
See INSTALL for instructions.
EOF
;;
*) options=$options $i ;;
esac
done
# First get uname entries that we use below
[ $MACHINE ] || MACHINE=`(uname -m) 2/dev/null` || MACHINE=unknown
[ $RELEASE ] || RELEASE=`(uname -r) 2/dev/null` || RELEASE=unknown
[ $SYSTEM ] || SYSTEM=`(uname -s) 2/dev/null` || SYSTEM=unknown
[ $BUILD ] || VERSION=`(uname -v) 2/dev/null` || VERSION=unknown
64 case $XREL in
0667622255442266
93135024825C209E
--
65 4.0|4.1)
03237323
94E0C4E19000
--
66 echo ${MACHINE}-whatever-isc4; exit 0
002227444727667676726763232676723222
99538F024BD1389E5DD78145652D93342B058940
--
67 ;;
0033
99BB
--
68 esac
06766222
95313000
To answer Kirk's question. I did have trouble unwinding the tarball
I finally usedtar -xf openssl-1.0.1.tar
I am not sure I did the set correctly. I need the unix for dummies book
about now.
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 set -x
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 ./config
--prefix=/usr/local -
-openssldir=/usr/local/openssl
+ ./config --prefix=/usr/local --openssldir=/usr/local/openssl
./config 1: syntax error: got ), expecting Newline
Thanks
Ms. Terri E. Shaffer
terri.e.shaf...@jpmchase.com
Engineer
J.P.Morgan Chase Co.
GTI DCT ECS Core Services zSoftware Group / Emerging Technologies
Office: # 614-213-3467
Cell: # 412-519-2592
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Kirk Wolf
Sent: Tuesday, April 03, 2012 3:11 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: openssl make - z/OS UNIX question - Help
Do this first:
./config --prefix=/usr/local --openssldir=/usr/local/openssl
and after the configure script runs, then do the make:
$MAKE
But I'm now retreating to my original position :-)
On Tue, Apr 3, 2012 at 1:23 PM, Shaffer, Terri E
terri.e.shaf...@jpmchase.com wrote:
Hi Kirk,
Okay you are right I do see the config file..
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 chmod +x tools/*
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 export MAKE=gmake
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 export
_C89_CCMODE=1
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 ./config
--prefix=/usr/local --openssldir=/usr/local/openssl $MAKE ./config 1:
syntax error: got ), expecting Newline
W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1
I am executing the 1.0.1 version as on March 14.
I'm sorry my Perl experience is non-existent, so yet another limitation.
Any idea of why I would get the syntax error? Or did I do something
wrong.
Thank for you help!
Ms. Terri E. Shaffer
terri.e.shaf...@jpmchase.com
Engineer
J.P.Morgan Chase Co.
GTI DCT ECS Core Services zSoftware Group / Emerging Technologies
Office: # 614-213-3467
Cell: # 412-519-2592
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Kirk Wolf
Sent: Tuesday, April 03, 2012 1:59 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: openssl make - z/OS UNIX question - Help
Terri,
I see both config and Configure in openssl 0.9.8q
config is a shell script, that starts:
#!/bin/sh
#
# OpenSSL config
Re: openssl make - z/OS UNIX question - Help
Terri, We recently did a port of OpenSSL (0.9.8k I believe), and there are a few things that you will need to do. (Note: in our port, the crypto/evp library worked fine, but there were some ASCII issues in the tools/commands that we didn't attempt to resolve.) Here are some notes, but be forewarned that this is tricky stuff. If you haven't worked with the GNU toolchain and z/OS Unix extensively, you make want to get help. Some prereqs: - perl from IBM Ported Tools for z/OS or your own port - gmake -- setup: - assuming that perl and gmake are in /usr/local/bin, add /usr/local/bin to your your PATH after /bin - export MAKE=gmake - chmod +x tools/* -- configure and make ./config --prefix=/usr/local --openssldir=/usr/local/openssl export _C89_CCMODE=1 export MAKE=gmake $MAKE On Tue, Apr 3, 2012 at 10:25 AM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi, I have cross-posted this on the MVS-OE page but hope someone can help me here... I am having an issue with doing a make on building a newer version on openssl. I download the new tar from openssl.orq and have it exploded to my directory. I then changed to the ssl directory and can see the descriptor file called Makefile. What I am trying to do now is build the new version of openssl and having issues. When I issue the make -f Makefile openssl it uses lots of cpu but never seems to finish and/or build anything and I am at a loss. Can anyone Please shed some light on where I took a wrong turn or how to do this? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to European legal entities. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: openssl make - z/OS UNIX question - Help
Terri, I see both config and Configure in openssl 0.9.8q config is a shell script, that starts: #!/bin/sh # # OpenSSL config: determine the operating system and run ./Configure # # config -h for usage information. ... So, config is a front end to the Configure perl script. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Apr 3, 2012 at 12:28 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Thanks Kirk, LOL, Yes I am in slightly over my head, but that another political story as far as that help goes. If I look at where I exploded the tarball I see a Configure file that I see is expecting the over-rides you mention. Configure Viewed File rwxrwxr-x I also have gmake so I can utilize that, I must be doing something else wrong so here are my steps. export MAKE=gmake export _C89_CCMODE=1 ./Configure --prefix=/usr/local --openssldir=/usr/local/openssl I'm guessing this part was a repeat of the setup MAKE=gmake $MAKE Then the $MAKE has the gmake assigned to it. Here's where I get more lost. What actually starts the process or starts the Configure or Makefile? Can you hopefully fill in my blanks? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Tuesday, April 03, 2012 11:51 AM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Terri, We recently did a port of OpenSSL (0.9.8k I believe), and there are a few things that you will need to do. (Note: in our port, the crypto/evp library worked fine, but there were some ASCII issues in the tools/commands that we didn't attempt to resolve.) Here are some notes, but be forewarned that this is tricky stuff. If you haven't worked with the GNU toolchain and z/OS Unix extensively, you make want to get help. Some prereqs: - perl from IBM Ported Tools for z/OS or your own port - gmake -- setup: - assuming that perl and gmake are in /usr/local/bin, add /usr/local/bin to your your PATH after /bin - export MAKE=gmake - chmod +x tools/* -- configure and make ./config --prefix=/usr/local --openssldir=/usr/local/openssl export _C89_CCMODE=1 export MAKE=gmake $MAKE --openssldir --prefix --install_prefix On Tue, Apr 3, 2012 at 10:25 AM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi, I have cross-posted this on the MVS-OE page but hope someone can help me here... I am having an issue with doing a make on building a newer version on openssl. I download the new tar from openssl.orq and have it exploded to my directory. I then changed to the ssl directory and can see the descriptor file called Makefile. What I am trying to do now is build the new version of openssl and having issues. When I issue the make -f Makefile openssl it uses lots of cpu but never seems to finish and/or build anything and I am at a loss. Can anyone Please shed some light on where I took a wrong turn or how to do this? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating
Re: openssl make - z/OS UNIX question - Help
Do this first: ./config --prefix=/usr/local --openssldir=/usr/local/openssl and after the configure script runs, then do the make: $MAKE But I'm now retreating to my original position :-) On Tue, Apr 3, 2012 at 1:23 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi Kirk, Okay you are right I do see the config file.. W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 chmod +x tools/* W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 export MAKE=gmake W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 export _C89_CCMODE=1 W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 ./config --prefix=/usr/local --openssldir=/usr/local/openssl $MAKE ./config 1: syntax error: got ), expecting Newline W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 I am executing the 1.0.1 version as on March 14. I'm sorry my Perl experience is non-existent, so yet another limitation. Any idea of why I would get the syntax error? Or did I do something wrong. Thank for you help! Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Tuesday, April 03, 2012 1:59 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Terri, I see both config and Configure in openssl 0.9.8q config is a shell script, that starts: #!/bin/sh # # OpenSSL config: determine the operating system and run ./Configure # # config -h for usage information. ... So, config is a front end to the Configure perl script. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Apr 3, 2012 at 12:28 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Thanks Kirk, LOL, Yes I am in slightly over my head, but that another political story as far as that help goes. If I look at where I exploded the tarball I see a Configure file that I see is expecting the over-rides you mention. Configure Viewed File rwxrwxr-x I also have gmake so I can utilize that, I must be doing something else wrong so here are my steps. export MAKE=gmake export _C89_CCMODE=1 ./Configure --prefix=/usr/local --openssldir=/usr/local/openssl I'm guessing this part was a repeat of the setup MAKE=gmake $MAKE Then the $MAKE has the gmake assigned to it. Here's where I get more lost. What actually starts the process or starts the Configure or Makefile? Can you hopefully fill in my blanks? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Tuesday, April 03, 2012 11:51 AM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Terri, We recently did a port of OpenSSL (0.9.8k I believe), and there are a few things that you will need to do. (Note: in our port, the crypto/evp library worked fine, but there were some ASCII issues in the tools/commands that we didn't attempt to resolve.) Here are some notes, but be forewarned that this is tricky stuff. If you haven't worked with the GNU toolchain and z/OS Unix extensively, you make want to get help. Some prereqs: - perl from IBM Ported Tools for z/OS or your own port - gmake -- setup: - assuming that perl and gmake are in /usr/local/bin, add /usr/local/bin to your your PATH after /bin - export MAKE=gmake - chmod +x tools/* -- configure and make ./config --prefix=/usr/local --openssldir=/usr/local/openssl export _C89_CCMODE=1 export MAKE=gmake $MAKE --openssldir --prefix --install_prefix On Tue, Apr 3, 2012 at 10:25 AM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi, I have cross-posted this on the MVS-OE page but hope someone can help me here... I am having an issue with doing a make on building a newer version on openssl. I download the new tar from openssl.orq and have it exploded to my directory. I then changed to the ssl directory and can see the descriptor file called Makefile. What I am trying to do now is build the new version of openssl and having issues. When I issue the make -f Makefile openssl it uses lots of cpu but never seems to finish and/or build anything and I am at a loss. Can anyone Please shed some light on where I took a wrong turn or how to do this? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592
Re: openssl make - z/OS UNIX question - Help
Try set -x to debug the shell script. I would guess that there are invalid characters (perhaps CR+NL?) in the shell script. Since the tarball is in ASCII, what was the pax command that you used to convert while unwinding? On Tue, Apr 3, 2012 at 2:37 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: I have tried both ways and as soon as I enter the config it returns the syntax error. Here are the first few line of config #!/bin/sh # # OpenSSL config: determine the operating system and run ./Configure # # config -h for usage information. # # this is a merge of minarch and GuessOS from the Apache Group. # Originally written by Tim Hudson t...@cryptsoft.com. Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Tuesday, April 03, 2012 3:11 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Do this first: ./config --prefix=/usr/local --openssldir=/usr/local/openssl and after the configure script runs, then do the make: $MAKE But I'm now retreating to my original position :-) On Tue, Apr 3, 2012 at 1:23 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Hi Kirk, Okay you are right I do see the config file.. W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 chmod +x tools/* W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 export MAKE=gmake W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 export _C89_CCMODE=1 W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 ./config --prefix=/usr/local --openssldir=/usr/local/openssl $MAKE ./config 1: syntax error: got ), expecting Newline W012108:SDEV(DEV):/u/w012108/temp/openssl-1.0.1 I am executing the 1.0.1 version as on March 14. I'm sorry my Perl experience is non-existent, so yet another limitation. Any idea of why I would get the syntax error? Or did I do something wrong. Thank for you help! Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Tuesday, April 03, 2012 1:59 PM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Terri, I see both config and Configure in openssl 0.9.8q config is a shell script, that starts: #!/bin/sh # # OpenSSL config: determine the operating system and run ./Configure # # config -h for usage information. ... So, config is a front end to the Configure perl script. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Apr 3, 2012 at 12:28 PM, Shaffer, Terri E terri.e.shaf...@jpmchase.com wrote: Thanks Kirk, LOL, Yes I am in slightly over my head, but that another political story as far as that help goes. If I look at where I exploded the tarball I see a Configure file that I see is expecting the over-rides you mention. Configure Viewed File rwxrwxr-x I also have gmake so I can utilize that, I must be doing something else wrong so here are my steps. export MAKE=gmake export _C89_CCMODE=1 ./Configure --prefix=/usr/local --openssldir=/usr/local/openssl I'm guessing this part was a repeat of the setup MAKE=gmake $MAKE Then the $MAKE has the gmake assigned to it. Here's where I get more lost. What actually starts the process or starts the Configure or Makefile? Can you hopefully fill in my blanks? Thanks Ms. Terri E. Shaffer terri.e.shaf...@jpmchase.com Engineer J.P.Morgan Chase Co. GTI DCT ECS Core Services zSoftware Group / Emerging Technologies Office: # 614-213-3467 Cell: # 412-519-2592 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Kirk Wolf Sent: Tuesday, April 03, 2012 11:51 AM To: IBM-MAIN@bama.ua.edu Subject: Re: openssl make - z/OS UNIX question - Help Terri, We recently did a port of OpenSSL (0.9.8k I believe), and there are a few things that you will need to do. (Note: in our port, the crypto/evp library worked fine, but there were some ASCII issues in the tools/commands that we didn't attempt to resolve.) Here are some notes, but be forewarned that this is tricky stuff. If you haven't worked with the GNU toolchain and z/OS Unix extensively, you make want to get help. Some prereqs: - perl from IBM Ported Tools for z/OS or your own port - gmake -- setup: - assuming that perl and gmake are in /usr/local
Re: A z/OS Redbook Corrected - just about!
Just about everyone is tired of the USS crap. IMO, there are three root causes for all of this waste of time: 1) IBM has now had three names: Open Edition MVS, Unix System Services, and now z/OS Unix (System Services). The first two had usable (and widely used) acronyms, where as z/OS Unix really doesn't. 2) Some folks are of the strong opinion that acronyms *MUST* be unique, whereas I don't care so long as they are clear in context. Sure, USS is not an IBM sanctioned acronym - so what? 3) IBM-MAIN thrives on pedantic posts (like this one :-) Given this situation, I suggest that the polite etiquette in this matter is to: a) don't use USS since it is not an official IBM acronym for z/OS Unix b) don't correct someone who does. Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: rexx cpu intensive
The OP asks 1) why does REXX use so much CPU?, but a better question is 2) why is my REXX program use so much CPU? An even better question is 3) why does this particular thing that I'm doing in my program take so much time, and how to I fix it? IMO, a programmer shouldn't ask the first question. A good programmer knows how to get from the second question to the third question, and then answer it by choosing better algorithms or in some cases re-coding bits in C or Assembler. A great way to get from question (2) to (3) is to run a profiler to see where you are spending all of your time (wall clock or cpu). Then, fix the hot spots by choosing a better algorithm or in some cases re-coding them in C or Assembly. Is there a profiler for either interpreted or compiled REXX on z/OS? I've coded in REXX, but I'm far from an expert so I don't know. As a crude alternative, add code to the program to capture timing of code blocks, starting top down and refining until you zero in on the problem areas. In most programs, 95% of the time is spent in 5% of the code. Kirk Wolf Dovetailed Technologies http://dovetail.com PS IBM wouldn't say the REXX uses too much CPU - rather, REXX is able to exploit the processing capabilities of the z Architecture :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: A z/OS Redbook Corrected - just about!
Thank goodness IBM is spending time correcting USS atrocities rather than improving z/OS Unix. Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Prevent FTP from root
Assume that you have protected your data sets and z/OS Unix files with your security package, Unix permissions and ACLs, etc so that z/OS userids have proper access. It is still likely that you don't want to allow some of these files to be transferred using FTP.In this case, the FTP FTCHKCMD user exit could be used for additional authorization and control. The FTCHKCMD exit is a little tricky, since it gives you a bunch of parameters that have to be put together in order to resolve to a file, dataset, or directory name. There are several vendors with managed file transfer products that use these exits and map FTP file transfer authorities to SAF/RACF profiles. The ones that I know of are FTP WatchDog/Z, VitalSigns for FTP, and Zen FTP Control. If the above assumption is NOT true (which is unfortunately not that uncommon), then using the FTCHKCMD exit might be even more important. Kirk Wolf Dovetailed Technologies http://dovetail.com PS Our Co:Z SFTP product supports IBM FTP-compatible user exits, and therefore also works with most customer or vendor FTP exits. Co:Z is free to use; enterprise license and support agreements are also available. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Prevent FTP from root
I can agree that OMVS segments should usually have their own directory. It would be possible to have them share a common directory, but in that case you would usually want to make it ready only, which would prevent some z/OS Unix stuff from working but not, AFAIK, FTP. But in order to have complete control over FTP access, you may want to implement a FTCHKCMD exit. See the z/OS Comm Server documentation for details; a sample is provided by IBM. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Mar 20, 2012 at 1:01 PM, Bruce Wheatley bwheat...@cds.ca wrote: We have numerous external clients and on occasion have found that depending on what product they use for FTP, their file transfer may in some fashion refer to our root directory or potentially the file transfer client being used defaults to a root directory. In order to prevent such access we’re planning to change each userid’s OMVS segment to have a HOME directory of: /u/userid. (Currently we just use ‘ / ’.) Anyone know of any gotchas with this plan? TIA (Posted on both RACF IBM-Main lists) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Password Phrase Encryption Algo?
Sorry if I'm being pedantic, but SHA-1 is not an encryption algorithm - it is a cryptographic hash function. http://en.wikipedia.org/wiki/Cryptographic_hash_function On Mon, Mar 19, 2012 at 9:09 AM, Costin Enache e_cos...@yahoo.com wrote: Hi, Does anybody have a clue how the PASSPHRASE is encrypted in RACF? It looks very much like SHA (SHA-1 I hope), it depends on both the username and password, but how is it build? Yes, I have asked in the RACF list already :) Br, Costin -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Interfacing with the MainFrame
You might also consider using Co:Z SFTP along with Ported Tools OpenSSH, since only z/OS Unix files are supported in the the SFTP that comes with Ported Tools OpenSSH. http://dovetail.com/products/sftp.html Co:Z SFTP is free to download and use; commercial license and support contracts are also available. with Co:Z SFTP, your remote SSH/SFTP client could: - upload and download z/OS datasets or Unix files - submit jobs - get job output - everything would be secure and encrypted on a single SSH socket (no firewall hassles like FTP) Any SSH/SFTP client would work, including OpenSSH, a Java SSH/SFTP client, etc Regards, Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Mar 7, 2012 at 4:20 PM, McKown, John john.mck...@healthmarkets.comwrote: OpenSSH is a separately orderable and installable feature from z/OS base. I.e. you can order it from ShopzSeries in the same order as your z/OS order and install it during the z/OS installation. There appear to be five Ported Tools packages altogether. I guess that's why I consider it to be part of the base. Like SDSF, DFSMSdss, and DFSMShsm, all of which I also order in the z/OS order. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Scott Ford Sent: Wednesday, March 07, 2012 4:08 PM To: IBM-MAIN@bama.ua.edu Subject: Re: Interfacing with the MainFrame I like free beer...I though SSH was part of z/os if not racfcert... Sent from my iPad Scott Ford Senior Systems Engineer www.identityforge.com On Mar 7, 2012, at 5:04 PM, McKown, John john.mck...@healthmarkets.com wrote: Ah. Good point. I implement everything that I can get my hands on and is free (as in beer). SSH is likely not as prevalent in z/OS UNIX as I'm used to in the UNIX world, in general. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Ed Mackmahon Sent: Wednesday, March 07, 2012 3:56 PM To: IBM-MAIN@bama.ua.edu Subject: Re: Interfacing with the MainFrame If I recall using SSH on the USS impose on the client to implement IBM ported tools which not all clients do... would it be a fare preq ? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Interfacing with the MainFrame
On Wed, Mar 7, 2012 at 4:28 PM, Edward Jaffe edja...@phoenixsoftware.comwrote: On 3/7/2012 12:47 PM, Ed Mackmahon wrote: How would you prefer a product running on a server outside the mainframe will interface with the mainframe? Web services? You might look at IBM's z/OS Jobs REST Interface This new web services API is shipped as part of z/OS MF, and oddly is documented in the z/OS MF Configuration Guide (SA38-0652-06) == The z/OS jobs REST interface is an application programming interface (API) implemented through industry standard Representational State Transfer (REST) services. This interface allows a client application to perform operations with batch jobs on a z/OS system. With the z/OS jobs REST interface, an application can use REST services to perform the following operations with batch jobs: v Obtain the status of a job v List the jobs for an owner, prefix, or job ID v List the spool files for a job v Retrieve the contents of a job spool file v Submit a job to run on z/OS v Cancel a job v Change the job class of a job v Cancel a job and purge its output. = Kirk Wolf Dovetailed Technologies http://dovetail.com +1 636.300.0901 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: More REXX SDSF CGI fun (was: Anybody used SDSF / REXX in HTTPD CGI pgm)
Have you looked at the new z/OS Jobs REST Interface? If it meets your requirements, I believe that you will find that it far outperforms a REXX/CGI program, which requires a new process (address space) and SDSF startup/initialization for each request. This new web services API is shipped as part of z/OS MF, and oddly is documented in the z/OS MF Configuration Guide (SA38-0652-06) == The z/OS jobs REST interface is an application programming interface (API) implemented through industry standard Representational State Transfer (REST) services. This interface allows a client application to perform operations with batch jobs on a z/OS system. With the z/OS jobs REST interface, an application can use REST services to perform the following operations with batch jobs: v Obtain the status of a job v List the jobs for an owner, prefix, or job ID v List the spool files for a job v Retrieve the contents of a job spool file v Submit a job to run on z/OS v Cancel a job v Change the job class of a job v Cancel a job and purge its output. = Any client or browse-side scripting language that can make web services calls can use this API. The client will need to be able to encode and decode JSON, but many languages and toolkits support that readily. Kirk Wolf Dovetailed Technologies http://dovetail.com +1 636.300.0901 On Wed, Feb 29, 2012 at 8:27 AM, Dana Mitchell mitchd...@gmail.com wrote: I'm working on a simple REXX/SDSF/CGI exec to display output from selected STC's via browser and HTTP server on z/OS 1.11. I can get it to partially work, but there seems to be some inconsistencies in the way userid's are handled. If I run a REXX CGI with the ISFEXEC WHO command it shows as running with the ID that the web server is running under, not my ID that I used to sign on when the browser asked for credentials. Further, the output of ISFEXEC WHO shows the web server's ID, but it shows GRPNAME=ISFUSER which is the catch-all least powerful group in ISFPRMxx, *not* the group that the web server's ID should be placed into. If I log onto TSO using the web server's ID and issue WHO, it shows the proper GRPNAME group assigned. Has anyone done much work in this area and solved these sorts of probems? Dana -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL)
On Tue, Feb 28, 2012 at 10:31 AM, Shmuel Metz (Seymour J.) shmuel+ibm-m...@patriot.net wrote: In CAHm_n2=7u1del2+9s0zlmtkdz9sqp7cbrp11uyib7fgw0ow...@mail.gmail.com, on 02/27/2012 at 05:35 PM, Kirk Wolf k...@dovetail.com said: Here's a slightly patched REXX script that I found by Bill Lalonde that will do it: That looks overly complicated. Why not just pull it from the SSIB? Someone else may know the details, but I have found that SSIBJBID is blank for WLM-initiated jobs. Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL)
On Tue, Feb 28, 2012 at 9:25 AM, Paul Gilmartin paulgboul...@aim.comwrote: On Mon, 27 Feb 2012 17:35:39 -0600, Kirk Wolf k...@dovetail.com wrote: ... Do you feel left out of John G.'s CABAL? Gil, If you are referring to John G's recent post: Still, their UNIX-oriented initiatives are a clear danger to legitimate, MVS-based undertakings; and some of the hybrid schemes they have urged are flagrantly subversive of good order. then, I would like to say absolutely: I'M IN (were the CABAL not so secretive :-). One might assume then that we are still two short of John G's phony 5-member benchmark, but this is not true. Hopefully, it will be more of a bandwagon than a CABAL :-) Kirk Wolf Dovetailed Technologies http://dovetail.com PS A secret weapon for subversive MVS-Unix hybrid batch jobs: http://dovetail.com/products/coz.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL)
How about a simple REXX unix script that uses STORAGE to grab the jobid out of the SSIB? Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, Feb 27, 2012 at 10:20 AM, McKown, John john.mck...@healthmarkets.com wrote: I was trying to write up a way to do something like that: fetching the sysout from the currently running job into a disk dataset in a later step. But ran into a problem in trying to find an IBM-supplied way to get the running job's JES job number. I know how to write code to get it, but I can't find a TSO or UNIX program to do it for me. I could then use Dovetail Technologies' Data Set Pipes to get the sysout into a disk dataset (fromdsn -jes.j.stepname.procstep.ddname | todsn //DD:ddname) in a subsequent step. But I got frustrated in trying to find the current JES job number. I would guess that somebody could use the SDSF/REXX interface to do it. But I still don't see how to get the jobname/jobnumber which I need. Using standard IBM programs, that is. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Paul Gilmartin Sent: Monday, February 27, 2012 10:15 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL) On Mon, 27 Feb 2012 08:02:36 -0600, McKown, John wrote: To the best of my knowledge, z/OS does not come with this functionality. You basically want the equivalent of the UNIX tee command. With a Rube Goldberg Rexx wrapper you could use tee, possibly under a BPXWUNIX task to write to SYSOUT and a data set concurrently. It might be more within your skill set to add an intervening step to use the Rexx SDSF interface to copy the SYSOUT from a previous step to a data set. In fact, at one point the Rexx SDSF interface allocates a DDNAME to the spool file -- you might be able to LINKMVS your postprocessor passing that DDNAME ln the alternate DDNAME list. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL)
This seems to work: /* REXX */ NUMERIC DIGITS 24 ; CVTPTR=STORAGE(10,4) /*CVT*/ TCBW=STORAGE(D2X(C2D(CVTPTR)),4) TCB=STORAGE(D2X(C2D(TCBW)+4),4) TIOT=STORAGE(D2X(C2D(TCB)+12),4) JBID=STORAGE(D2X(C2D(TIOT)),8) JBID=STRIP(JBID) SAY JBID On Mon, Feb 27, 2012 at 2:04 PM, Kirk Wolf k...@dovetail.com wrote: How about a simple REXX unix script that uses STORAGE to grab the jobid out of the SSIB? Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, Feb 27, 2012 at 10:20 AM, McKown, John john.mck...@healthmarkets.com wrote: I was trying to write up a way to do something like that: fetching the sysout from the currently running job into a disk dataset in a later step. But ran into a problem in trying to find an IBM-supplied way to get the running job's JES job number. I know how to write code to get it, but I can't find a TSO or UNIX program to do it for me. I could then use Dovetail Technologies' Data Set Pipes to get the sysout into a disk dataset (fromdsn -jes.j.stepname.procstep.ddname | todsn //DD:ddname) in a subsequent step. But I got frustrated in trying to find the current JES job number. I would guess that somebody could use the SDSF/REXX interface to do it. But I still don't see how to get the jobname/jobnumber which I need. Using standard IBM programs, that is. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Paul Gilmartin Sent: Monday, February 27, 2012 10:15 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL) On Mon, 27 Feb 2012 08:02:36 -0600, McKown, John wrote: To the best of my knowledge, z/OS does not come with this functionality. You basically want the equivalent of the UNIX tee command. With a Rube Goldberg Rexx wrapper you could use tee, possibly under a BPXWUNIX task to write to SYSOUT and a data set concurrently. It might be more within your skill set to add an intervening step to use the Rexx SDSF interface to copy the SYSOUT from a previous step to a data set. In fact, at one point the Rexx SDSF interface allocates a DDNAME to the spool file -- you might be able to LINKMVS your postprocessor passing that DDNAME ln the alternate DDNAME list. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL)
Duh. This prints the jobname, not the jobid. But you get the idea :-) On Mon, Feb 27, 2012 at 2:15 PM, Kirk Wolf k...@dovetail.com wrote: This seems to work: /* REXX */ NUMERIC DIGITS 24 ; CVTPTR=STORAGE(10,4) /*CVT*/ TCBW=STORAGE(D2X(C2D(CVTPTR)),4) TCB=STORAGE(D2X(C2D(TCBW)+4),4) TIOT=STORAGE(D2X(C2D(TCB)+12),4) JBID=STORAGE(D2X(C2D(TIOT)),8) JBID=STRIP(JBID) SAY JBID On Mon, Feb 27, 2012 at 2:04 PM, Kirk Wolf k...@dovetail.com wrote: How about a simple REXX unix script that uses STORAGE to grab the jobid out of the SSIB? Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, Feb 27, 2012 at 10:20 AM, McKown, John john.mck...@healthmarkets.com wrote: I was trying to write up a way to do something like that: fetching the sysout from the currently running job into a disk dataset in a later step. But ran into a problem in trying to find an IBM-supplied way to get the running job's JES job number. I know how to write code to get it, but I can't find a TSO or UNIX program to do it for me. I could then use Dovetail Technologies' Data Set Pipes to get the sysout into a disk dataset (fromdsn -jes.j.stepname.procstep.ddname | todsn //DD:ddname) in a subsequent step. But I got frustrated in trying to find the current JES job number. I would guess that somebody could use the SDSF/REXX interface to do it. But I still don't see how to get the jobname/jobnumber which I need. Using standard IBM programs, that is. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Paul Gilmartin Sent: Monday, February 27, 2012 10:15 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL) On Mon, 27 Feb 2012 08:02:36 -0600, McKown, John wrote: To the best of my knowledge, z/OS does not come with this functionality. You basically want the equivalent of the UNIX tee command. With a Rube Goldberg Rexx wrapper you could use tee, possibly under a BPXWUNIX task to write to SYSOUT and a data set concurrently. It might be more within your skill set to add an intervening step to use the Rexx SDSF interface to copy the SYSOUT from a previous step to a data set. In fact, at one point the Rexx SDSF interface allocates a DDNAME to the spool file -- you might be able to LINKMVS your postprocessor passing that DDNAME ln the alternate DDNAME list. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Duplicating SYSOUT output to another DD/DSN in realtime ? (JCL)
So, I found that it is actually tricky to get the current jobid using REXX in a WLM-initiated environment. Here's a slightly patched REXX script that I found by Bill Lalonde that will do it: /* REXX */ /* curjobid.rexx (adapted from http://billlalonde.tripod.com/rexx/findjsab.txt) */ /* Based on expansion of IAZXJSAB macro */ /* This EXEC returns current jobname, jobid, userid and */ /* name of the component which created the JSAB */ /* for the current task / address space */ NUMERIC DIGITS 10 tcb = C2D(STORAGE(21C,4))/* get current TCB */ jsab = 0 /* null pointer*/ if tcb \= 0 then do stcb = C2D(STORAGE(D2X(tcb+312),4)) jsab = C2D(STORAGE(D2X(stcb+188),4)) end if jsab = 0 then do ascb = C2D(STORAGE(224,4))/* get current TCB */ assb = C2D(STORAGE(D2X(ascb+336),4)) if ascb = 0 then do call lineout stderr,'Unable to locate JSAB from ASCB at 'D2X(ascb) exit 8 end jsab = C2D(STORAGE(D2X(assb+168),4)) if jsab = 0 then do call lineout stderr,'Unable to locate JSAB from ASCB at 'D2X(ascb) exit 8 end end flg1 = C2D(STORAGE(D2X(jsab+13),1)) DO WHILE flg1 127 eye = STORAGE(D2X(jsab),4) If eye \= 'JSAB' then do call lineout stderr,'Invalid JSAB found at 'D2X(jsab) exit 8 end jsab = C2D(STORAGE(D2X(jsab+4),4)) if jsab = 0 then do call lineout stderr,'Unable to locate a valid JSAB' exit 8 end flg1 = C2D(STORAGE(D2X(jsab+13),1)) END /* jbnm = STORAGE(D2X(jsab+28),8) */ jbid = STORAGE(D2X(jsab+20),8) /* comp = STORAGE(D2X(jsab+16),4) */ /* usid = STORAGE(D2X(jsab+44),8) */ say jbid exit 0 So, then you can add this step to your job to copy a previous step's spool file to another DD: // EXEC PGM=COZBATCH //STDIN DD * fromdsn //-jes.$(curjobid.rexx).stepname.procstep.ddname | todsn //DD:OUT //OUT DD ... // -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: IBM Doing Some Restructuring?
The official announcement is not due for 7 weeks, but the rumor is that IBM has new technology involving a massive BlueGene/Q system that will replace most of their software engineers, and that they have hired Jesse Anderson to lead the project http://www-03.ibm.com/systems/deepcomputing/solutions/bluegene/ http://en.wikipedia.org/wiki/Infinite_monkey_theorem http://www.jesse-anderson.com/2011/10/a-few-million-monkeys-randomly-recreate-every-work-of-shakespeare/ On Mon, Feb 13, 2012 at 2:24 PM, Paul Gilmartin paulgboul...@aim.comwrote: On Mon, 13 Feb 2012 09:57:18 -0800, Edward Jaffe wrote: IBM has been using Agile development for the past couple/few z/OS releases. I am not aware that this development model has been blamed for any recent increase in defects or if such an increase even exists. http://en.wikipedia.org/wiki/Agile_software_development Gee, are you suggesting that some new technologies might be as good as or even better than what was used in the previous century? You'll have a hard time convincing some people. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: z/OS Unicode Services custom table?
Tony, Our Co:Z Toolkit (SFTP, Dataset Pipes) can use either Unicode services or iconv(), although it defaults to using iconv(). We allow users to optionally specify the technique search string (we default to LMREC). When we use iconv, we are going to use this to set _ICONV_TECHNIQUE. Regarding the line end fiasco - our code handles line terminator separately, and we fix them up to avoid the dreaded ASCII NEL, which only an IBM architect would want :-) The point of adding this particular table (the old STANDARD.TCPXLBIN) to Unicode Services is that there are rare customers who are dependent on the exact handling of control character conversions in that table, which the Unicode Services tables don't seem to provide a direct replacement for. Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Feb 1, 2012 at 6:53 PM, Tony Harminc t...@harminc.net wrote: snip How are you expecting a user conversion technique to fit into your or a customer's environment? In other words, how will the fact that you want a different conversion for these codepage pairs to be used be communicated to the program? Will it explicitly request a technique 2 conversion, or is it expected that things will fall through to technique 2 because of the system configuration? Are you using iconv() or calling the Unicode services directly? 4) verify with iconv that it works. We have a simple utility in Co:Z that will display single byte translate tables: *showtrtab -s IBM-850 -t IBM-037 -q 2* What does that call internally? Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: z/OS Unicode Services custom table?
Thanks to everyone for your kind suggestions, especially John McKown who responded offline. It is possible to build your own Unicode Services tables to match the TCPIP STANDARD table, but I am surprised that there isn't a Unicode Services table that matches STANDARD. If anyone knows of one, please let me know. (I can build my own, but we have customers that would like this, and modifying z/OS Unicode Services is a little intimidating). Thanks again, Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Jan 31, 2012 at 2:13 PM, Mark Jacobs mark.jac...@custserv.comwrote: It looks like the source code for the conversion tables are in TCPIP.SEZATCPX (our name). You might be able to match that to what's already available in unicode services. Mark Jacobs On 01/31/12 14:49, Kirk Wolf wrote: Mark, AFAIK, there is not a IBM-supplied conversion table for Unicode services that matches TCPIP.STANDARD.TCPXLBIN. It would be great if I were wrong. If not, then it seems that you have to generate your own user-defined conversion table and image. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Jan 31, 2012 at 1:21 PM, Mark Jacobsmark.jacobs@custserv.**commark.jac...@custserv.com wrote: On 01/31/12 14:14, Kirk Wolf wrote: Has anyone tried creating a custom table for z/OS Unicode Services? I would like to create one that matches the FTP TCPIP.STANDARD.TCPXLBIN dataset, for use by iconv, but the manual z/OS Unicode Services User's Guide is a little intimidating... Thanks, Kirk Wolf Dovetailed Technologies http://dovetail.com --**--** -- Why not just depend on Unicode on Demand? I haven't created any images since that functionally became available. -- Mark Jacobs Time Customer Service Tampa, FL Don't be too sweet lest you be eaten up; don't be too bitter lest you be spewed out. Yiddish Proverb --** --**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN --**--** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- Mark Jacobs Time Customer Service Tampa, FL Don't be too sweet lest you be eaten up; don't be too bitter lest you be spewed out. Yiddish Proverb --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: z/OS Unicode Services custom table?
OK, so I found a sneaky way of adding a new conversion table to Unicode Services to match TCPIP.STANDARD.TCPXLBIN.Thanks again to Mark and John for getting me started.. 1) Unless you want to modify SYS1.SCUNTBL, create a new PDS: HLQ.SCUNTBL with RECFM=F,LRECL=256,BLKSIZE=256 2) I wanted to create a new conversion from IBM-850 - IBM-037. Looking these up in the manual, their two-character codes are EB (850) and AA (037). For my new conversion, I'll use the conversion technique code 2. If you look at TCPIP.STANDARD.TCPXLBIN, you will see that it has three records - 1) a comment 2) the 256-byte ASCII-EBCDIC table 3) the 256-byte EBCDIC-ASCII table a) create a new member CUN2EBAA (850-037, TECH=2) copy the first non-comment record from TCPIP.STANDARD.TCPXLBIN into this member b) create another new member CUN2AAEB (037-850, TECH=2) copy the second non-comment record from TCPIP.STANDARD.TCPXLBIN into this member 3) To activate your new conversion tables: setuni add,from(037),to(850),TECH(2),DSN(HLQ.SCUNTBL) setuni add,from(850),to(037),TECH(2),DSN(HLQ.SCUNTBL) (You would also want to update PARMLIB(CUNUNIxx) to include these add statements) 4) verify with iconv that it works. We have a simple utility in Co:Z that will display single byte translate tables: *showtrtab -s IBM-850 -t IBM-037 -q 2* 00: 00 01 02 03 37 2D 2E 2F 16 05 25 0B 0C 0D 0E 0F 10: 10 11 12 13 3C 3D 32 26 18 19 3F 27 22 1D 35 1F 20: 40 5A 7F 7B 5B 6C 50 7D 4D 5D 5C 4E 6B 60 4B 61 30: F0 F1 F2 F3 F4 F5 F6 F7 F8 F9 7A 5E 4C 7E 6E 6F 40: 7C C1 C2 C3 C4 C5 C6 C7 C8 C9 D1 D2 D3 D4 D5 D6 50: D7 D8 D9 E2 E3 E4 E5 E6 E7 E8 E9 AD E0 BD 5F 6D 60: 79 81 82 83 84 85 86 87 88 89 91 92 93 94 95 96 70: 97 98 99 A2 A3 A4 A5 A6 A7 A8 A9 C0 4F D0 A1 07 80: 00 01 02 03 37 2D 2E 2F 16 05 25 0B 0C 0D 0E 0F 90: 10 11 12 13 3C 3D 32 26 18 19 3F 27 22 1D 35 1F A0: 40 5A 7F 7B 5B 6C 50 7D 4D 5D 5C 4E 6B 60 4B 61 B0: F0 F1 F2 F3 F4 F5 F6 F7 F8 F9 7A 5E 4C 7E 6E 6F C0: 7C C1 C2 C3 C4 C5 C6 C7 C8 C9 D1 D2 D3 D4 D5 D6 D0: D7 D8 D9 E2 E3 E4 E5 E6 E7 E8 E9 AD E0 BD 5F 6D E0: 79 81 82 83 84 85 86 87 88 89 91 92 93 94 95 96 F0: 97 98 99 A2 A3 A4 A5 A6 A7 A8 A9 C0 4F D0 A1 07 On Wed, Feb 1, 2012 at 2:02 PM, Kirk Wolf k...@dovetail.com wrote: Thanks to everyone for your kind suggestions, especially John McKown who responded offline. It is possible to build your own Unicode Services tables to match the TCPIP STANDARD table, but I am surprised that there isn't a Unicode Services table that matches STANDARD. If anyone knows of one, please let me know. (I can build my own, but we have customers that would like this, and modifying z/OS Unicode Services is a little intimidating). Thanks again, Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
z/OS Unicode Services custom table?
Has anyone tried creating a custom table for z/OS Unicode Services? I would like to create one that matches the FTP TCPIP.STANDARD.TCPXLBIN dataset, for use by iconv, but the manual z/OS Unicode Services User's Guide is a little intimidating... Thanks, Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: z/OS Unicode Services custom table?
Mark, AFAIK, there is not a IBM-supplied conversion table for Unicode services that matches TCPIP.STANDARD.TCPXLBIN. It would be great if I were wrong. If not, then it seems that you have to generate your own user-defined conversion table and image. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Jan 31, 2012 at 1:21 PM, Mark Jacobs mark.jac...@custserv.comwrote: On 01/31/12 14:14, Kirk Wolf wrote: Has anyone tried creating a custom table for z/OS Unicode Services? I would like to create one that matches the FTP TCPIP.STANDARD.TCPXLBIN dataset, for use by iconv, but the manual z/OS Unicode Services User's Guide is a little intimidating... Thanks, Kirk Wolf Dovetailed Technologies http://dovetail.com --**--** -- Why not just depend on Unicode on Demand? I haven't created any images since that functionally became available. -- Mark Jacobs Time Customer Service Tampa, FL Don't be too sweet lest you be eaten up; don't be too bitter lest you be spewed out. Yiddish Proverb --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Copy programs in file system to MVS Dataset
Did you try cp -X ? Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Jan 10, 2012 at 8:23 AM, Mark Jacobs mark.jac...@custserv.comwrote: I'm trying to copy program objects that reside in a path (the WAS 7.0 IPCS formatting modules) into a PDSE dataset. Everything I've tried (ocopy, ish copy, ftp) doesn't seem to result in a valid program object, i.e. the directory listing in ISPF doesn't look right, nothing's being shown excepting the member name. What's the best way to accomplish my objective? -- Mark Jacobs Time Customer Service Tampa, FL Don't be too sweet lest you be eaten up; don't be too bitter lest you be spewed out. Yiddish Proverb --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: z/OS version of NetCat or native JCL support
Gerard, Correct; the Co:Z Toolkit (Co:Z Launcher, Dataset Pipes, Co:Z SFTP, Co:Z Batch) are free as in beer. See: http://dovetail.com/docs/coz/licenses.html Kirk Wolf Dovetailed Technologies http://dovetail.com Commercial license and support agreements are also available, see: http://dovetail.com/support.html For a recent webinar (slides and recording) on the Co:Z Launcher, see our webinars page: http://dovetail.com/webinars.html On Wed, Jan 4, 2012 at 6:55 PM, Gerard Nicol gerard.ni...@tapetrack.comwrote: Kirk, I didn't mean to trivialize it, but it's not rocket science either. So what's the deal with Co:Z Launcher? Did someone say it's free as in beer? Gerard -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: IBM manual formats
FWIW, we use Linux on our desktops and have found that the following process works fantastic for IBM manuals. Something similar might be possible on Windoze (or OSX) with a similar tool or under cygwin, but I haven't tried it. 1) Use the DownLoadThemAll FireFox plugin to download all of the PDFs at once 2) I wrote the following shell script which makes symlinks to the original file names, using the PDF title. This has the advantage that I can very quickly find a manual using find file name in Nautilus, but the links between PDFs still work. 3) We use Evince as a reader, which works much better if you have fast processor and even better if you put your manuals on an SSD. I supposed that you could also use a PDF indexer, like Google Desktop, but I haven't seen the need. #!/bin/sh # Make symlinks to all .pdf files in the current directory to names that match their Title: ls -1 *.pdf | while read f do echo Examining: $f title=$(pdfinfo $f | grep Title: | cut -c17- | tr -d '/\\:' | tr ' ' '_') if test -n $title -a ! -s $title.pdf ; then echo link $title.pdf - $f ln -s $f $title.pdf fi done Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: z/OS version of NetCat or native JCL support
I agree with Tony - there is more to it than just raw socket I/O. You could port netcat to z/OS and combine it with something that handles the rest. Like this: // EXEC PGM=MYPGM //OUTPUT DD DSN=TEMP,DISP=(NEW,PASS),... //* // EXEC PGM=COZBATCH an improved BPXBATCH //INPUTDD DSN=TEMP,DISP=(OLD,DELETE) //STDIN DD * # format and translate the records into # a stream that is piped into netcat fromdsn -l crlf -t ISO8859-1 //DD:INPUT | nc myhost.com 5000 // But, *you don't have to port netcat to z/OS*, since you could use the Co:Z Launcher to reach out and run netcat on a Unix/Linux appliance (zBX blade?), like this: (changing one line) // EXEC PGM=MYPGM //OUTPUT DD DSN=TEMP,DISP=(NEW,PASS),... //* // *EXEC PROC=COZLNCH,ARGS='u1@linuxappliance'* //INPUTDD DSN=TEMP,DISP=(OLD,DELETE) //STDIN DD ** # Same commands, but this now runs on the linuxappliance, # but fromdsn reaches back to z/OS to read the DD fromdsn -l crlf -t ISO8859-1 //DD:INPUT | nc myhost.com 5000 // Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Jan 4, 2012 at 6:07 PM, Tony Harminc t...@harminc.net wrote: Well, perhaps. But there are many options to consider if you want something like your //SYSUT2 DD SOCKET=5000 If something like IEBGENER (or presumably any QSAM/BSAM using program) is going to be able to make use of it, you need to be able to specify how records are translated into a byte stream, and a few other things: - where is the data going? Don't you need more than just SOCKET=, e.g. IP=n.n.n.n or a DNS-resolvable name? - do you want line ending sequences inserted, and if so, which ones? CR, CRLF, NL, LF,...? - do you want character set translation, and if so, which from and to code pages? - do you want RDWs or the like to indicate record lengths? In what far-end-friendly format? - do you want TCP, UDP, or something else? - what should happen when something goes wrong? -- no one is listening at the far end? -- the far end refuses the connection? -- the near end won't permit you to bind to the port? -- etc. - if you've chosen TCP (or another reliable protocol) do you want a timeout, and if so, how should it be indicated to IEBGENER? These are certainly not unanswerable questions, but for almost all cases a fair bit more information than SOCKET=5000 would have to be provided. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: Portable jar command?
Gil, For a portable script that uses the jar command, I would first look in $PATH, and then in $JAVA_HOME/bin. Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Data encrypt
A couple of comments - - Clear key ciphers are perfectly appropriate for many applications. Take for example SSL/TLS or SSH - an symmetric cipher key is generated for each session and is only used to encrypt/decrypt the data for that session. One might argue that it is safer for the program not to have the session key, but it has the clear text data. - Even with large block sizes, direct access to CPACF cipher instructions is measurably faster than ICSF. It depends on your point of view as to whether you think that the difference is important.For me, the CPACF cipher instructions are just as easy to code to as ICSF, and then you don't have to worry about whether ICSF is configured / started. Kirk Wolf Dovetailed Technologies http://dovetail.com PS Our OpenSSH Accelerator for z/OS was implemented hooking the OpenSSL cipher and mac routines in Ported Tools OpenSSH to use CPACF instructions if available. For typical AES ciphers / SHA-1 hashes used by ssh, this reduces the CPU time of ssh on z/OS by 70%. For more information, see: http://dovetail.com/solutions.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SLightly O/T Perl
John - I agree with you on the report. I wonder how HLASM would compare in this kind of study :-) On Wed, Nov 2, 2011 at 11:02 AM, John Gilmore johnwgilmore0...@gmail.comwrote: I took the trouble to read the original reports from SIU, and I am underwhelmed. They reflect a peculiar, often implicitly but widely held academic notion that a language A that is easier than another language B for novices to learn is better than B. There is still, I suppose, something to be said for teaching some programming in order to demystify computers, and for this purpose simplistic languages may well be useful. We are, however, long past the era in which one needed to be a programmer, albeit usually a poor one, to use computers at all. Professional programmers will certainly be needed in the future; but what they need in a programming language is expressive power, not simplicity achieved by leaving the hard parts out. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SLightly O/T Perl
Oh well, I guess that this thread had to go this direction :-) What we need is a language that dynamically adapts to the programmer. A compiler for this language could recognize not only valid syntax in the language, but also detect unskilled programmers and automatically limit their access to some (or all ;-) features. Using advanced heuristics, in some cases the compiler would just write messages like: Sorry, you are an idiot. Compilation aborted. Many programmers, being sadists, would actually enjoy being explicitly abused by their compiler, so I would expect such a language to be very popular. Compiler plugins might be added that would do things like exploit social networks to engineer personal attacks against the programmer. Of course, in some cases, code can be well written but based on insane requirements. In such cases, the compiler might launch attacks on the architects or management. Kirk Wolf On Wed, Nov 2, 2011 at 2:16 PM, McKown, John john.mck...@healthmarkets.comwrote: The worst was one I heard about from a friend. In the days of punched cards. The programmer literally would write code: A100. ADD +1 TO A. SUBTRACT B FROM C GIVING D. PERFORM A200. ADD +500 TO ANOTHER-VARIABLE. PERFORM B300. She said it was hell to repunch the cards. But the programmer insisted that COBOL should read like a novel! The programmer also felt that COMPUTE was a tool of the devil. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Turriff, Leslie Sent: Wednesday, November 02, 2011 2:08 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SLightly O/T Perl I suspect that the COBOL code you're referring to was crippled by poorly-chosen identifiers. Even the most readable language can be made inscrutable by (im)prudent choice of variable names. :-) Leslie Turriff State of Missouri Information Technology Services Division -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of McKown, John Sent: Wednesday, November 02, 2011 13:53 To: IBM-MAIN@bama.ua.edu Subject: Re: SLightly O/T Perl It's better than APL. And depends on the coder not using weird idioms. I've seen COBOL which is incomprehensible. IIRC, COBOL was supposedly designed so that an English speaking army private could write clean code. Which simply proves that programmers can't speak English (properly). -- John McKown Systems Engineer IV -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Which RACF/SAF profiles affect OMVS tape mounting via SVC99 with S99NOMNT=0 ?
Given a z/OS Unix process (OMVS address space) that uses SVC99 with S99NOMNT=0 to allocate a tape dataset, does anyone know which RACF/SAF profiles are used to limit the ability to mount tapes? I assume that TSOAUTH / MOUNT is not applicable. I saw a reference on this list to FACILITY/TAPEDEV, but I don't find it documented. (actually, the program uses BPXWDYN with MOUNT, which under the covers uses SVC99 with S99NOMNT=0) Thanks, Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SLightly O/T Perl
Darn - prior art. So much for my patent application :-) On Wed, Nov 2, 2011 at 4:34 PM, Ed Finnell efinnel...@aol.com wrote: Early on(mid sixties) there was a 'Blue Fortran'(not IBM) that cursed diagnostics at you then would printout a 'one finger salute' at the end. It was humorous for awhile... In a message dated 11/2/2011 3:56:54 P.M. Central Daylight Time, allan.stal...@kbmg.com writes: Sorry, you are an idiot. Compilation aborted. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Batch COBOL as a Consumer of Web Services
John, As you point out, the cost of creating a Java JVM in a batch COBOL jobstep can be a problem. For short running jobs, or ones that only need to make a couple of WS calls, it may not make sense. For long running COBOL jobs that make many calls, you can start a JVM and then reuse it so that the performance may be more than acceptable. Other than Java, I can think of these options: - write your own SOAP client in COBOL or C or Assembler. I would probably do the XML mapping to/from the SOAP structures in COBOL directly using z/OS XMLSS, and then do the rest of the http SOAP client in C (reusing one of the many open source http C clients). - port gSOAP (written in C++) to z/OS and build your own COBOL glue routines to it. I really like gSOAP, having used it on Windows and Solaris several years ago. I would expect it to readily port to z/OS, but I haven't tried it myself. - I believe that there are also several vendors that have SOAP clients for batch COBOL, but I don't know any specifics. Kirk Wolf Dovetailed Technologies http://dovetail.com On Tue, Nov 1, 2011 at 3:41 PM, Roberts, John J jrobe...@dhs.state.ia.uswrote: At this installation we have a business rules engine from a company called Corticon. The interface to the Corticon servers is via SOAP web services. We also have Windows Web Servers that expose ASP.Net Web Services. We need to be able to access these web services from Batch COBOL programs. I have developed a solution that seems to work well enough. In my architecture, batch programs invoke CICS programs via the EXCI interface. These CICS programs in turn issue the EXEC CICS INVOKE WEBSERVICE commands. So far so good. But I have concerns about this architecture. For one, it requires the CICS region to be alive when we are processing Batch Runs in the evening. And I wish performance was a bit better. So, I wonder if there is a better way? I know that Batch COBOL invoking a JAVA Web Client is possible and I have seen stuff in the IBM-MAIN archives talking about the JZOS Batch Toolkit developed by the guys at Dovetailed Technologies. But I am a bit hesitant since I have heard stories about poor performance. So my questions for the list: (1)How many have gone this route for consuming web services from a Batch COBOL client? (2)How easy/tricky to setup and code? (3)What kind of performance? (4)Are there any comparisons between the JAVA approach versus the EXCI/CICS approach re performance, developer effort, etc? John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: DSCB DSECTs?
OK, now that you mention DSCBs, let me ask the VTOC gurus a question about
FMT1/8 DS1LSTAR -
I want to confirm my reading of how the number of used tracks for a
dataset is calculated in the context of large and extended formats.
Here's some pseudo-code for how I think it is calculated:
used_tracks = DS1LSTAR.TT (the first two bytes of the TTR)
if (DS1STRP) {
used_tracks = (DS1TRBAL 16) + used_tracks; // two new high-order
bytes
} else if (DS1LARGE) {
used_tracks = (DS1TTTHI 16) + used_tracks; // one new high-order byte
}
This seems odd to me - am I understanding this correctly?
My other question has to do with PDS-Es. I've read that LSTAR can't be
used, but I notice that ISPF 3.4 has used% for PDS-Es.
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
On Fri, Oct 28, 2011 at 10:42 AM, Chase, John jch...@ussco.com wrote:
Thanks, Bill, John and Tony.
Abject frustration here, as I was just reading this stuff last week, and
today just drew a blank on where I was reading it.
And they keep telling me that getting old(er) is better than the
alternative ;-)
-jc-
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Bill Fairchild
Sent: Friday, October 28, 2011 10:35 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: DSCB DSECTs?
The answer to this question was given a couple of weeks ago by Bob
Shannon and it is in the IBM-MAIN
archives, always a good place to search along with the Internet for
technical info.
Try doing an ISPF 3.14 against SYS1.MACLIB(*) and/or SYS1.MODGEN(*)
for the character string DSCB.
Yes, there will be lots of hits, but the correct macro will also be
found, and it will have a lot more
lines of text in it than any of the others displayed.
Or look in SYS1.MODGEN(IECSDSL1).
Bill Fairchild
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Chase, John
Sent: Friday, October 28, 2011 10:14 AM
To: IBM-MAIN@bama.ua.edu
Subject: DSCB DSECTs?
OK, now I know I've gone blind: I can't seem to find a DSECT for the
various formats of DSCBs. It
also seems the Data Areas manuals aren't published any more (I don't
find them in the z/OS 1.11 MVS or
DFSMS bookshelves). I've run SuperC searches on MACLIB and MODGEN,
but nothing there jumps out.
Would one of you be so kind as to shove my nose into the right book or
macro?
TIA,
-jc-
--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@bama.ua.edu
with the message: GET IBM-MAIN INFO Search the archives at
http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Please Help IBM Fix 'Broken' PDSE Problems
Ed, Would it be possible to write small test drivers that run in multiple address spaces and concurrently access a PDS/E in (random generated) patterns similar to your product/site use? If such a thing could be built that would reliably reproduce the problem, then you could give it to IBM. Of course, this would be painful, and perhaps not even possible.But if it were, then you would also have a fix/regression test. Kirk Wolf Dovetailed Technologies On Fri, Oct 28, 2011 at 11:50 AM, Edward Jaffe edja...@phoenixsoftware.comwrote: On 10/28/2011 4:53 AM, Jim Thomas wrote: Has there been any isolation to environmental factors and or specific OEM utilities used ??. I presume that you do have dumps of the 0F4's ??. LOL! Of course! We've had hundreds of dumps. IBM analyzed some of them and discovered that they are all virtually identical--the 0F4 is issued because the PDSE is broken. The most recent detailed analysis showed that a directory page of a PDSE contained member data. IBM cannot tell from the after-the-fact 0F4 abend how it got that way. These PDSEs are larger than the largest allowable PDS and we do parallel updates to them (something PDS simply cannot do) so there is no way to replace this function with PDS. I speculate, for a smaller PDSE, that if you can always guarantee externally serialized updates, as if the PDSE was a PDS (e.g., by using DISP=OLD), you *might* be able to avoid this problem. But, that's just a SWAG. It's not my code. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: HFS sharing and rolling product upgrades
John,
Thanks for your kind words. Much of what we offer owes large success to
pesky users who send us feedback and suggestions :-)
Your example reminds me that eventually we would like to add an idcams
shell command, which would allow:
catsearch cicsts*.** |\
cut -d '.' -f 2- |\
sort -u |\
while read i;do
echo DEFINE ALIAS(NAME(CICSTS.$i) -
echoSYMBOLICRELATE(CICSVER..$i))
done | idcams
Of course, if you like batch, this would easily run under COZBATCH :-)
FWIW, you may have noticed that there is a com.ibm.jzos.AccessMethodServices
class that provides a callable IDCAMS interface from Java.
Cheers,
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
PS consider using awk to build job to do the whole thing in a pipeline
without temp files.
*Something* like:
catsearch cicsts*.** |\
cut -d '.' -f 2- |\
sort -u |\
awk '
BEGIN {
print //JOBNAME JOB (ACCT),PGMR,CLASS=A,MSGCLASS=H;
print //IDCAMS EXEC PGM=IDCAMS;
print //SYSPRINT DD SYSOUT=*;
print //SYSIN DD *;
} {
print DEFINE ALIAS(NAME(CICSTS.,$1,) -;
printSYMBOLICRELATE(CICSVER..,$1,));
} END {
print //
}' |\
submit -j
On Thu, Oct 27, 2011 at 9:08 AM, McKown, John john.mck...@healthmarkets.com
wrote:
If you run multiple releases of CICS on a single image, you might want to
change that slightly:
cd /usr/lpp/cicsts
mkdir cicsts32-RSU1109
mkdir cicsts32-RSU1110
mkdir cicsts41-RSU1109 #assuming there is an RSU1109 for CICS/TS 4.1
mkdir cicsts41-RSU1110 #similar to above
ln -s '$SYSSYMR/cicsts32-CICSVER.' cicsts32
ln -s '$SYSSYMR/cicsts41-CICSVER.' cicsts41
What might be even more interesting would be if the
release-to-use-on-this-image of CICS were in CICVER and the RSU for that
release was in CICSRSU. Now, if you run multiple versions/RSUs on one
image, make some more static symbols. One for the desired RSU for each CICS
release. Examples: RSUCV32 and RSUCV41.
mkdir CICSTS32-RSU1109
mkdir CICSTS32-RSU1110
mkdir CICSTS41-RSU1109
mkdir CICSTS41-RSU1110
ln -s '$SYSSYMR/CICSVER.-CICSRSU.' local
ln -s '$SYSSYMR/CICSTS32-RSUCV32' cicsts32
ln -s '$SYSSYMR/CICSTS41-RSUCV41' cicsts41
and then use /usr/lpp/cicsts/local instead of /usr/lpp/cicsts/cicsts32.
That gets you the recommended CICS version and RSU for this z/OS image. If
you use /usr/lpp/cicsts/cicsts32, you get the desired RSU for release 3.2 on
this z/OS image. If you use /usr/lpp/cicsts/cicsts41, you get the desired
RSU for release 4.1 on this z/OS image.
In BPXPRMxx:
MOUNT FILESYSTEM('OMVS.CICSRSU..CICSVER.')
MOUNTPOINT('/usr/lpp/cicsts/CICSVER.-CICSRSU.')
TYPE(HFS) MODE(READ) AUTOMOVE(INCLUDE,*)
If you wanted to, you could simply have one MOUNT for every existant
CICS-RSU that you have
MOUNT FILESYSTEM('OMVS.RSU1109.CICSTS32')
MOUNTPOINT('/usr/lpp/cicsts/CICSTS32-RSU1109')
TYPE(HFS) MODE(READ) AUTOMOVE(INCLUDE,*)
and duplicate the above for each CICS/RSU combination you have.
In IEASYMxx:
SYMDEF(CICSVER='CICSTS32')
SYMDEF(CICSRSU='RSU1110')
SYMDEF(RSUCV32='RSU1110')
SYMDEF(RSUCV41='RSU1109')
Now, combine this with some nifty catalog SYMBOLICRELATE type ALIASes, you
could do:
DEFINE ALIAS(NAME('CICSTS.rest.of.dsn') -
SYMBOLICRELATE('CICSVER..rest.of.dsn'))
But I hear your complaint. Oh, damn! I have to do a LISTCAT and then code
up all those DEFINEs. What a PITA! I agree. So why bother? Do it the easy
way. Install Dovetailed Technologies set of free to download and use Co:Z
products. They are excellent and did I mention you can download and use them
FOR NO COST or signed license? You don't even need to fill out a form to be
approved. Did you know that the JZOS currently distributed by IBM with their
Java was originally from Dovetailed? Brilliant people. Nice people, too!
(Hi, Kirk!) So, once you've installed at least the dataset pipes portion of
Co:Z, you can run a simple UNIX shell script to create the DEFINE ALIAS
commands for you!
catsearch cicsts*.** |\
cut -d '.' -f 2- |\
sort -u |\
while read i;do
echo DEFINE ALIAS(NAME(CICSTS.$i) -
echoSYMBOLICRELATE(CICSVER..$i));
doneidcams.sysin
cat idcams.jcl EOJ
//JOBNAME JOB (ACCT),PGMR,CLASS=A,MSGCLASS=H
//IDCAMS EXEC PGM=IDCAMS
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
EOJ
cat null.jcl EOJ
//
EOJ
cat idcams.jcl idcams.sysin null.jcl | submit -j
#end of script
Feel free to use TSO and REXX or ISPF EDIT to do the same. But I doubt that
it will be quite as easy as I've shown above. That took me about 5 minutes
to write an debug. Repeat the above script for each CICS release high level
qualifier, if they don't all start with the characters 'cicsts...' . If you
repeat the script, you might (most likely will) get some duplicate aliases.
But that should be OK. You could probably work the RSU into the DSN similar
to what was done in the UNIX aliases.
--
John McKown
Systems Engineer IV
IT
Administrative Services Group
HealthMarkets(r)
9151 Boulevard 26 * N. Richland Hills * TX
Re: As IBM CEO, Ginni Rometty will bring some Midwestern charm
I've heard of southern charm, but many coast-dwellers view all of fly-over territory as pejoratively charming :-) Kirk Wolf Dovetailed Technologies http://dovetail.com (a Midwesterner, a Midwest company) On Thu, Oct 27, 2011 at 4:40 PM, Scott Ford scott_j_f...@yahoo.com wrote: Kirk, I am born and breed Midwesterner also (Indianapolis, Indiana)... Havent heard the 'term' either... Scott J Ford Software Engineer http://www.identityforge.com From: Kirk Talman rkueb...@tsys.com To: IBM-MAIN@bama.ua.edu Sent: Thursday, October 27, 2011 5:09 PM Subject: Re: As IBM CEO, Ginni Rometty will bring some Midwestern charm I was born and raised in the Midwest but I have never heard the term Midwestern charm before Our greatest danger in life is in permitting the urgent things to crowd out the important. - Charles E. Hummel Efforts and courage are not enough without purpose and direction. - John F. Kennedy IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu wrote on 10/27/2011 03:50:40 PM: From: Ed Gould ps2...@yahoo.com To: IBM-MAIN@bama.ua.edu Date: 10/27/2011 03:55 PM Subject: As IBM CEO, Ginni Rometty will bring some Midwestern charm Sent by: IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu With Virginia Ginni Rometty, the newly named CEO to succeed Sam Palmisano at IBM Corp., the business machines company is likely to see a little more in Midwestern charm. Ms. Rometty is a Chicago native and graduate of Northwestern University, where she serves as a trustee. I wrote about her more than a year ago, when she was named a possible contender for the top job. Ms. Rometty, who has been leading IBM's global business services, previously oversaw the consulting arm of PricewaterhouseCoopers, which was acquired by IBM in 2002. Her job was to attract big customers as well as redesign and run the company's human resources and finance businesses ? key departments for IBM. ?Ginni Rometty combines performance and charisma,? said George F. Colony, chairman of Forrester Research, in a New York Times story about her earning the CEO job. ?She orchestrated a massive charm campaign to bring the PricewaterhouseCoopers people into the fold. That was the trial by fire for her.? More recently, Ms. Rometty is credited with leading the growth and development of IBM's huge services business. Time magazine noted in 2002 that her vast Rolodex and industry expertise would make her a force at the company. And maybe her skills in scuba diving ? her favorite sport ? came into play, too, the magazine said, quoting Ms. Rometty as saying, It's 98% calm and 2% terror. Read more: http://www.chicagobusiness.com/article/20111026/BLOGS03/ 111029828/as-ibm-ceo-ginni-rometty-will-bring-some-midwestern- charm#ixzz1c0tNKjjz (fluff piece on Rometty) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - The information contained in this communication (including any attachments hereto) is confidential and is intended solely for the personal and confidential use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this communication in error and that any review, dissemination, copying, or unauthorized use of this information, or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail, and delete the original message. Thank you -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: CRLF in Unix being translated on Mainframe to x'25'
On Mon, Oct 24, 2011 at 3:43 PM, McKown, John john.mck...@healthmarkets.com wrote: On most ASCII UNIX system, the end-of-line character is a single LF (LineFeed) or 0x0A. On Windows, the normal end-of-line is a 0x0D0A (CRLF or CarriageReturn-LineFeed). On z/OS UNIX, in EBCDIC, the end-of-line character is the NL (NewLine) or 0x15. NOT 0x25. 0x25 is a CarriageReturn. When you create a file on an ASCII UNIX system, the lines end with a 0x0A. If you store this on a share where a Windows server can get at it directly and you use a Windows ftp client, the file in the z/OS UNIX system is hosed up. Just as you have seen, the lines end with a 0x25 whereas they should end with a 0x15. I view this as an error in the Windows ftp client because it demands that text line end with CRLF instead of just LF. What you can do is have your UNIX process add the extraneous CR so that the lines end with a CRLF. There is usually a program called unix2dos which can do this. If you don't have unix2dos, it can be done with a sed command: sed -i 's/$/\r/' file.on.windows. At least, this works with GNU's sed. I don't know about others. Some don't expand \r to CR. A very good explanation of an all-to-common problem. Many non-M$ ftp clients don't suffer the same stupidity. plug If you use Co:Z SFTP on z/OS and in text mode the default is to recognize any combination of CR, LF, NL as a line terminator. On output to Windows, you can specify whether you want CRLF or LF. With SSH/SFTP, you can use any Windows client, such as the free popular PuTTY psftp command. Co:Z SFTP is free to use but enterprise license and support agreements are also available. /plug Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OMVS Telnet Client
I'm not sure why you would want to telnet from z/OS to a host instead of from your workstation to that host: perhaps there are network/firewall issues? If that is the case, you could log into z/OS using ssh from your workstation and start a local port forwarder from your worstation through the z/OS host to the target server. Then simply use telnet from your local workstation through the forwarder. Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: NFS vs FTP
Is it a Unix file on z/OS or a dataset? Will you be transferring the entire file or just reading pieces? You really should run some benchmarks - especially with NFS. Also, consider how NFS security works - when you access z/OS data from a remote NFS client, you are implicitly trusting the security of the client so that unauthorized users can't access the mounted filesystem. Kirk Wolf Dovetailed Technologies http://dovetail.com PS With the (free) Co:Z Launcher you can have a hybrid application that processes data as it is transferred. Of course, you can also just transfer the file. By default the connection is tunneled in SSH, but you can also configure to use a raw socket, which is faster than either NFS or FTP. For example: // EXEC PGM=COZLNCH,ARGS='ru...@linux1.myco.com' //MYDATA DD DISP=SHR,DSN=REALLY.BIG.DATASET //COZCFG DD * ssh-tunnel=false //STDIN DD * # This script runs on the remote server, but reaches back # to pipe data into a program that processes it while transferring. # The exit code from the shell script becomes the step return code. # The default is text (EBCDIC-ASCII, newline separators, etc) fromdsn //DD:MYDATA | linux_program args ... # Or maybe you want to process a variable length binary dataset # using RDWs as record separators fromdsn -b -l rdw //DD:MYDATA | linux_program args // Now there's an answer to what zBX blades are good for - appliances to serve z/OS :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP JESLRECL Limit
The JES2 limit for internal reader is definitly 32K. I think that JES3 is still 254 (maybe 255?). Kirk Wolf Dovetailed Technologies http://dovetail.com PS With Co:Z SFTP you can submit jobs to the internal reader and use up to 32K input LRECL, and either fixed or variable length records. On Tue, Aug 30, 2011 at 12:19 PM, Joel C. Ewing jcew...@acm.org wrote: On 08/29/2011 05:22 PM, Paul Gilmartin wrote: On Sun, 28 Aug 2011 11:38:29 +0530, amit wrote: i believe your answer points to the Value and range in JES sysparms...can you set that value to 999:)? I'm mystified that a JES sysparm should appear in the publication cited, z/OS V1R12.0 Communications Server IP Configuration Reference SC31-8776-18 Which is a TCP/IP publication, not a JES publication. I find no reference to JESLRECL in: JES2 Initialization and Tuning Reference Document Number SA22-7533-10 which would seem a more appropriate publication. Where should I be looking? What's the name of the PARM? why not? Can't find where to set it. On Sun, Aug 28, 2011 at 11:09 AM, Paul Gilmartin wrote: On Sat, 27 Aug 2011 16:05:12 -0500, Mike Schwab wrote: http://publib.boulder.ibm.com/**infocenter/zos/v1r12/index.** jsp?topic=/com.ibm.zos.r12.**halz001/cjeslre.htmhttp://publib.boulder.ibm.com/infocenter/zos/v1r12/index.jsp?topic=/com.ibm.zos.r12.halz001/cjeslre.htm Why? On Sat, Aug 27, 2011 at 9:40 AM, Paul Gilmartin wrote: deleted ftp quote site jeslrecl=999 200-Jeslrecl parameter (999) must be between 1 and 254. Jeslrecl ignored. 200 SITE command was accepted Why? -- gil The jeslrecl parameter is not described in the JES manuals because it is not a JES parameter. It is a sub-parameter of the site command of the MVS FTP server, hence it is described in the manual that describes the FTP server commands, as one should expect. My reading of the IP Configuration Reference manual indicates that when submitting jobs to JES via FTP, jeslrecl plays the same role as the LRECL in a DD statement that allocates an INTRDR SYSOUT to spool a job to JES. One shouldn't expect to find jeslrecl in the JES manuals any more than one would expect to find the DD LRECL parameter described in the JES manuals. I think the restriction on JES INTRDR LRECL was raised at some point to 32KiB. If so, the FTP jeslrecl maximum value is a restriction imposed by FTP, probably for consistency with older versions of MVS. -- Joel C. Ewing,Bentonville, AR jcew...@acm.org --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/**ibm-main.htmlhttp://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Copying file to OMVS
This is not really what you asked - but the pax command can read directly from a z/OS dataset - you don't need to copy to a Unix file first. Kirk Wolf Dovetailed Technologies http://dovetail.com On Thu, Aug 25, 2011 at 7:49 AM, Angel Tamayo a.tamay...@gmail.com wrote: Hi List, Maybe someone here could have the same or similar case. I run job: //COPY1 EXEC PGM=IEBGENER,REGION=0M //SYSPRINT DD SYSOUT=* //SYSUT1 DD DISP=SHR,DSN=HLQ.COMPRESS.PAX //SYSUT2 DD PATH='/TEST/COMPRESS9', // PATHOPTS=(OWRONLY,OCREAT,OEXCL), // PATHDISP=(KEEP,DELETE) //SYSIN DD DUMMY I received message: ICH408I USER(ZOSUSER ) GROUP(OMVSGRP ) NAME(USER NAME) 479 /TEST/COMPRESS9 CL(FSOBJ ) FID(38130041) INSUFFICIENT AUTHORITY TO OPEN ACCESS INTENT(RW-) ACCESS ALLOWED(OWNER ---) EFFECTIVE UID(000999) EFFECTIVE GID(01) The RACF persons says that I need to have OMVS segment setup for my userid with UID(0). I suppose UID(0) will solve the problem but it is really the only way to solve it?. I'm looking for a solution without UID(0), any idea on this will be appreciated. As additional information ZOSUSER have authority to use SU (superuser) in OMVS environment, don't really know if this helps to this case. Angel -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SFTP and FSSEC error
Do you see this when running the z/OS sftp client or the sftp-server (IOW, the ssh client or sshd)? If the client, add the option -vvv and post the log. If the server, check syslogd for the sshd daemon for messages. Although there isn't quite enough information to make a good guess, I suspect that this might have something to do with SSHD privilege separation. In the Ported Tools OpenSSH, there are some specific RACF steps that need to be made to set up the privilege separation userid. Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Aug 24, 2011 at 1:28 PM, Bruce Wheatley bwheat...@cds.ca wrote: Wondering what we've missed in setting up for external users to use SFTP transmissions. Similar messages are appearing for different customers. This is the error: ICH408I USER(PAAA123) GROUP(G1234) NAME(CDS FTP ) 888 /tmp/ssh-PAAA123 CL(FSSEC ) FID(009D) INSUFFICIENT AUTHORITY TO CHOWN EFFECTIVE UID(089001) EFFECTIVE GID(009300) Here is the ownership: /u/paaa123ls -l /tmp/ drwx-- 2 PAAA123 OMVSGRP 4096 Aug 23 13:33 ssh-PAAA123 PAAA123 created the directory to begin with. Also posted to RACF List. TIA Bruce Wheatley Senior Information Security Analyst The Canadian Depository for Securities Limited 85 Richmond St. W. Toronto, ON M5H 2C9 (416) 365-8417 bwheat...@cds.ca -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: JRIO/JZOS zAAP eligability questions
The JZOS JNI libraries included with the z/OS Java SDK are zAAP eligible. Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, Aug 22, 2011 at 9:38 AM, Steve Austin steve.aus...@macro4.comwrote: Hello, I've read that JRIO has been deprecated and the JZOS component should be used to access native files. I assume that both must be calling the JNI. Do both, or either, maintain zAAP eligability across the JNI call? If so is this documented anywhere? Thanks Steve - This email has been scanned for all known viruses by the MessageLabs Email Security Service and the Macro 4 internal virus protection system. . -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Copy z/OS USS pax format file to another z/OS system without FTP
pax supports sequentail datasets - check the documentation. The -W seqparms= keyword also allows you to specify fopen() options, like blksize, space, recfm. I usually use blksize=27998,recfm=u for pax datasets. Kirk Wolf Dovetailed Technologies http://dovetail.com On Thu, Aug 18, 2011 at 11:29 AM, Paul Gilmartin paulgboul...@aim.comwrote: On Thu, 18 Aug 2011 09:42:20 -0500, McKown, John wrote: My mistake on the pax writing to sequential. I thought I had done it before, but I don't seem to be able to get it to work now. That should be APARable. I believe it's documented. As IND$FILE becomes increasingly irrelevant, it's time to drive a stake through its heart. Consider an interchange protocol for which the data stream format documentation is unavailable! -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Get a user password from RACF.
Agreed. Maybe a good application for RACF Passtickets? On Thu, Aug 18, 2011 at 2:14 PM, Cris Hernandez #9 hernandez...@yahoo.comwrote: this begs the question... why? If you need to use the ID, why not just change the password? only answer I can come up with is that the ID's password is embedded in a bunch of stuff across applications and/or platforms. if that's the case, then you got procedural issues to iron out with solutions that don't involve displaying passwords. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: UNIX (USS)
Don, I agree - for those forced to run Windows, running Linux VMs under Windows is a good option for education. cygwin is also invaluable. We use Linux desktops (currently Ubuntu 10.04), and have found also that only a few things require Windoze. VirtualBox is also a good VM host on Linux for Windows VMs. Some other benefits of Linux desktops that we have found: - never had a virus, spyware, etc. (but that doesn't mean that you don't need firewalls, good security, etc) - in 6 years, never had to reload the OS to speed it back up :-) - with Linux, your package manager is like SMPE - it tracks your installed programs. After you get used to this, you never want to go back. - the Ubuntu support community is fantastic Kirk Wolf Dovetailed Technologies http://dovetail.com PS With a Unix/Linux client, our Dataset Pipes tools have some cool capabilities not available on Windows On Wed, Aug 17, 2011 at 10:45 AM, Grinsell, Don dgrins...@mt.gov wrote: I got around that by convincing said powers that VMWare Workstation was necessary to my health and well being and now I'm happily Linuxing away. When I need to convince somebody that the problem is NOT due to my Linux environment, I've got the standard Windows desktop to prove it. Regards, Don -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Z Toolkit for z/OS Install
Sharing an address space also allows you to run shell scripts in batch and allow commands to access DD cards in the original address space. Kirk Wolf Dovetailed Technologies http://dovetail.com On Thu, Aug 11, 2011 at 10:54 AM, McKown, John john.mck...@healthmarkets.com wrote: look at _BPX_SHAREAS. There are some cases where multiple UNIX processes run in a single z/OS address space. Personally, I don't much care for it. But it could be a performance enhancement. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Scott Rowe Sent: Thursday, August 11, 2011 9:26 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Z Toolkit for z/OS Install I would be happy to be corrected, but I thought that, by definition, each process was a separate address space. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Co: Z Toolkit for z/OS Install
Randy, See our latest response to your thread on our free support forum here: http://dovetail.com/forum/viewtopic.php?f=8t=1133 (Someone here may have a suggestion as to how to diagnose region size under TSO OMVS... it would be nice if there was a simple way to display available region size from the LDA while in TSO OMVS). Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Aug 10, 2011 at 9:31 AM, Randy Hoekstra randy.hoeks...@haworth.comwrote: I'm trying to install the Co: Z Toolkit for z/OS under TSO OMVS and can't get around the FSUM9225 no memory: EDC5132I NOT ENOUGH MEMORY. errors with a TSO region size of 2047M. Our test system CSA = 2404K, ECSA = 61588K. Any suggestions? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Z Toolkit for z/OS Install
John, I almost never disagree with you, but if you run the TSO OMVS shell the forked OMVS address spaces inherit the REGION= size from the original TSO address space. For example, if I turn on debug mode and run the cozsftp command under TSO OMVS, it will dump out the LDA: /S0W1/tmpexport COZ_LOG=D /S0W1/tmpcozsftp Co:Z SFTP version: 1.9.0 (5.0p1) 2011-05-09 Copyright (C) Dovetailed Technologies, LLC. 2008. All rights reserved. .. *ZosUtil[D]: region size requested = 10K, Actual below/above limit = 8168K / 10K* .. The 10K region size is what my TSO logon proc used. Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Aug 10, 2011 at 9:50 AM, McKown, John john.mck...@healthmarkets.com wrote: The OMVS environment DOES NOT RUN IN YOUR TSO ADDRESS SPACE! Look in your OMVS segment for the RACF id. TSO OMVS is just a terminal emulator to a UNIX shell prompt. This shell is running in a separate address space. The size is in the OMVS segment for the RACF (aka TSO) id. Sample output from my id: quote OMVS INFORMATION UID= 001009 HOME= /u/tsh009 PROGRAM= /bin/sh CPUTIMEMAX= NONE ASSIZEMAX= NONE FILEPROCMAX= NONE PROCUSERMAX= NONE THREADSMAX= NONE MMAPAREAMAX= NONE /quote The important part is ASSIZEMAX. The output from D OMVS,O is: quote CURRENT UNIX CONFIGURATION SETTINGS: MAXPROCSYS = 2000MAXPROCUSER =250 MAXFILEPROC = 64000MAXFILESIZE = NOLIMIT MAXCPUTIME = 2147483647MAXUIDS =500 MAXPTYS =256 MAXMMAPAREA = 40960MAXASSIZE = 2147483647 MAXTHREADS = 2000MAXTHREADTASKS =500 MAXCORESIZE = 2147483647MAXSHAREPAGES = 131072 IPCMSGQBYTES= 262144IPCMSGQMNUM = 1 IPCMSGNIDS =500IPCSEMNIDS =500 IPCSEMNOPS = 25IPCSEMNSEMS = 25 IPCSHMMPAGES=256IPCSHMNIDS =500 IPCSHMNSEGS = 10IPCSHMSPAGES= 262144 /quote Again, the important value is MAXASSIZE which is the MAXimum AddressSpace SIZE. Or, the default region if not otherwise specified, depending on any overrides from the IEFUSI exit. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * john.mck...@healthmarkets.com * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Randy Hoekstra Sent: Wednesday, August 10, 2011 9:31 AM To: IBM-MAIN@bama.ua.edu Subject: Co: Z Toolkit for z/OS Install I'm trying to install the Co: Z Toolkit for z/OS under TSO OMVS and can't get around the FSUM9225 no memory: EDC5132I NOT ENOUGH MEMORY. errors with a TSO region size of 2047M. Our test system CSA = 2404K, ECSA = 61588K. Any suggestions? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Co: Z Toolkit for z/OS Install
Duh, I'm not sure what I forgot about your REXX LDA tool... I've even used it myself before :-) Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Aug 10, 2011 at 12:41 PM, Mark Zelden m...@mzelden.com wrote: Which was how I originally determined what Kirk wrote about where the region size came from for TSO OMVS (and ISHELL).But it is also documented somewhere in the manuals. Using my exec was just a lot easier than trying to find where it is documented. :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: base arithmetic in REXX
Like this? - http://en.wikipedia.org/wiki/Base_36 (included is a Python examples, and links to other implementations. REXX left as an excercise for the reader :-) Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, Aug 1, 2011 at 9:35 AM, Norbert Friemel nf.ibmm...@web.de wrote: On Mon, 1 Aug 2011 04:21:42 -0500, John McKown wrote: anybody know an easy way to encode a base 10 number into base 26? Basically, I want to make a decimal number into the English alphabet: A-Z. I was hoping there was a simpler way than: Perhaps not simpler: arg input_number . if datatype(input_number,W) , bpxwunix(typeset -i26 a amp;let a=input_number amp;print $a,,stdout.) = 0 , stdout.0 = 1 , left(stdout.1,3) = 26# then output = translate(substr(stdout.1,4), , ABCDEFGHIJKLMNOPQRSTUVWXYZ, , 0123456789abcdefghijklmnop) else output = A say output Have fun! Norbert Friemel -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP from IBM's book server
FWIW, I use the Firefox DownLoadThemAll! Firefox to quickly download all *.pdf files from the the z/OS library page into the same folder. Then, since I'm using Linux, what I do is to make symbolic link file names so that I have not only the original pub number file names but file names that match the PDF title. I use the following shell script to build these: #!/bin/sh # Make symlinks to all .pdf files in the current directory to names that match their Title: ls -1 *.pdf | while read f do echo Examining: $f title=$(pdfinfo $f | grep Title: | cut -c17- | tr -d '/\\:' | tr ' ' '_') if test -n $title -a ! -s $title.pdf ; then echo link $title.pdf - $f ln -s $f $title.pdf fi done What's nice about the result is that I can use the Nautilus (the file explorer) find feature to quickly locate manuals by name, but then once I'm in a manual, the PDF links to other manuals still work. If you are still not jealous, I recently upgraded my desktop to a 6 core beast that has important stuff on a solid state drive. The PDF viewer, including searching, etc. really screams... Kirk Wolf Dovetailed Technologies http://dovetail.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/os SSH question
Gil, I probably wasn't clean in my earlier post, but the advantage to putting SSH private keys in a SAF Keyring is that the security administrator can allow a user to USE the key to sign an authentication request but not allow the same user to have access to the key itself (to copy, distribute, etc). Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Jul 27, 2011 at 5:25 PM, Paul Gilmartin paulgboul...@aim.comwrote: On Wed, 27 Jul 2011 15:11:32 -0500, Hal Merritt wrote: If you distribute the keys they become public information, so then what's the point? Secret keys need to be kept secret. So, strictly speaking, each user would need a unique key that only they can access. There is the problem that one untrustworthy (or merely careless) user can disseminate an authorized key (perhaps inadvertently). But he can't grant others permission to do damage he couldn't do himself. This may help: http://en.wikipedia.org/wiki/Secure_Shell#Key_management I use it; I don't fully understand it. When I want to grant a user access to a group, I copy _one_ (not every) entry from that user's authorized_keys file to the group's authorized keys file. That gives the user access to the group; it does not give the group (or me) access to the user. --gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
