Re: IRREVX01 strangeness
In a message dated 4/17/2008 8:17:55 A.M. Central Daylight Time, [EMAIL PROTECTED] writes: I agree, but if r7 equates to 7 so as long as the first 7 bytes of the user key are equal it will work. >> Long ago and far away I had a friend teaching an IE(Industrial engineering course) and the Department committee had selected a text book mostly because it had 'programming examples' (mostly Fortran) with a subroutine library. So first assignment and he gets slammed 'cause "everything blows up". Anyway, long story short after debugging about half the code. We figured it had only been tested on the exact case and not generalized to different lengths or values. It was a long semester **Need a new ride? Check out the largest site for U.S. used car listings at AOL Autos. (http://autos.aol.com/used?NCID=aolcmp0030002851) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
I will be speaking to them tomorrow. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
> I agree, but if r7 equates to 7 so as long as the first 7 bytes of the user
> key are equal it will work.
No, it's comparing for the keyword text "USER(" which is only 5 bytes long.
Depending on what follows that text in the program, it could "work" FSVO work.
> Date: Thu, 17 Apr 2008 13:16:42 +
> From: [EMAIL PROTECTED]
> Subject: Re: IRREVX01 strangeness
> To: IBM-MAIN@BAMA.UA.EDU
>
> John:
>
> I agree, but if r7 equates to 7 so as long as the first 7 bytes of the user
> key are equal it will work.
>
> Bill
_
Get in touch in an instant. Get Windows Live Messenger now.
http://www.windowslive.com/messenger/overview.html?ocid=TXT_TAGLM_WL_Refresh_getintouch_042008
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
On Thu, 17 Apr 2008 08:05:26 -0500, McKown, John wrote: >... Of course, since >R7 is a self-defining term, the code assembles just fine self-defining term? No, there is an EQU in the code. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
-
The (in)famous CLC 0(R9,R8),FILTER 'filter('found?
was actually based on one of the IRREVX01 samples included in
SYS1.SAMPLIB(RACEXITS):
LAR7,L'USERKEY
CLC 0(R7,R5),USERKEY
with USERKEY defined as:
USERKEY DCC'USER('a PASSWORD keyword
Fascinating. I didn't know CLC was (also) an RX instruction.
I wonder how often the above code excerpt actually finds 'USER('? :-)
-jc-
That dog don't hunt! And the example is in IBM code just that way. As if
the CLC used the value in the register as the length. Of course, since
R7 is a self-defining term, the code assembles just fine. But it won't
work as intended!
Maybe it was written by a student in a Assembler class? :-)
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
John:
I agree, but if r7 equates to 7 so as long as the first 7 bytes of the user key
are equal it will work.
Bill
> Date: Thu, 17 Apr 2008 08:05:26 -0500> From: [EMAIL PROTECTED]> Subject: Re:
> IRREVX01 strangeness> To: IBM-MAIN@BAMA.UA.EDU> > > -Original
> Message-> > From: IBM Mainframe Discussion List > > [mailto:[EMAIL
> PROTECTED] On Behalf Of Chase, John> > Sent: Thursday, April 17, 2008 7:35
> AM> > To: IBM-MAIN@BAMA.UA.EDU> > Subject: Re: IRREVX01 strangeness> > > > >
> > > -Original Message-> > > From: IBM Mainframe Discussion List On
> Behalf Of Paul Whelan> > > > > > [ snip ]> > > > > > The (in)famous CLC
> 0(R9,R8),FILTER 'filter('found?> > > was actually based on one of the
> IRREVX01 samples included in> > > SYS1.SAMPLIB(RACEXITS):> > > > > > LA
> R7,L'USERKEY > > > CLC 0(R7,R5),USERKEY > > > > > > with USERKEY defined as:>
> > > > > > USERKEY DC C'USER(' a PASSWORD keyword > > > > Fascinating. I
> didn't know CLC was (also) an RX instruction.> > > > I wonder how often the
> above code excerpt actually finds 'USER('? :-)> > > > -jc-> > That dog don't
> hunt! And the example is in IBM code just that way. As if> the CLC used the
> value in the register as the length. Of course, since> R7 is a self-defining
> term, the code assembles just fine. But it won't> work as intended!> > -->
> John McKown> Senior Systems Programmer> HealthMarkets> Keeping the Promise of
> Affordable Coverage> Administrative Services Group> Information Technology> >
> The information contained in this e-mail message may be privileged> and/or
> confidential. It is for intended addressee(s) only. If you are> not the
> intended recipient, you are hereby notified that any disclosure,>
> reproduction, distribution or other use of this communication is> strictly
> prohibited and could, in certain circumstances, be a criminal> offense. If
> you have received this e-mail in error, please notify the> sender by reply
> and delete this message without copying or disclosing> it. > >
> --> For
> IBM-MAIN subscribe / signoff / archive access instructions,> send email to
> [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO> Search the archives at
> http://bama.ua.edu/archives/ibm-main.html>
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
> -Original Message-
> From: IBM Mainframe Discussion List
> [mailto:[EMAIL PROTECTED] On Behalf Of Chase, John
> Sent: Thursday, April 17, 2008 7:35 AM
> To: IBM-MAIN@BAMA.UA.EDU
> Subject: Re: IRREVX01 strangeness
>
>
> > -Original Message-
> > From: IBM Mainframe Discussion List On Behalf Of Paul Whelan
> >
> > [ snip ]
> >
> > The (in)famous CLC 0(R9,R8),FILTER 'filter('found?
> > was actually based on one of the IRREVX01 samples included in
> > SYS1.SAMPLIB(RACEXITS):
> >
> > LAR7,L'USERKEY
> > CLC 0(R7,R5),USERKEY
> >
> > with USERKEY defined as:
> >
> > USERKEY DCC'USER('a PASSWORD keyword
>
> Fascinating. I didn't know CLC was (also) an RX instruction.
>
> I wonder how often the above code excerpt actually finds 'USER('? :-)
>
> -jc-
That dog don't hunt! And the example is in IBM code just that way. As if
the CLC used the value in the register as the length. Of course, since
R7 is a self-defining term, the code assembles just fine. But it won't
work as intended!
--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology
The information contained in this e-mail message may be privileged
and/or confidential. It is for intended addressee(s) only. If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense. If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
> -Original Message-
> From: IBM Mainframe Discussion List On Behalf Of Paul Whelan
>
> [ snip ]
>
> The (in)famous CLC 0(R9,R8),FILTER'filter('found?
> was actually based on one of the IRREVX01 samples included in
> SYS1.SAMPLIB(RACEXITS):
>
> LAR7,L'USERKEY
> CLC 0(R7,R5),USERKEY
>
> with USERKEY defined as:
>
> USERKEY DCC'USER('a PASSWORD keyword
Fascinating. I didn't know CLC was (also) an RX instruction.
I wonder how often the above code excerpt actually finds 'USER('? :-)
-jc-
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
On Thu, 17 Apr 2008 02:32:05 -0500, Paul Whelan wrote:
>
>The (in)famous CLC 0(R9,R8),FILTER 'filter('found?
>was actually based on one of the IRREVX01 samples included in
>SYS1.SAMPLIB(RACEXITS):
>
>LAR7,L'USERKEY
>CLC 0(R7,R5),USERKEY
>
>with USERKEY defined as:
>
>USERKEY DCC'USER('a PASSWORD keyword
>
>I guess they must be doing something in a different way to me. Maybe I'll
>sit down and try and work through it when I get a moment.
As Binyamin said, the samplib code is incorrect. I hope you will contact the
support center and report it. Then maybe it will get fixed and someone else
won't have the same problem that you had.
Obvoiusly the sample was never tested.
--
Tom Marchant
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
Ok, for what it's worth it makes me feel a little better. Like I said before, better to understand first instead of just copying. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
On Thu, 17 Apr 2008 02:32:05 -0500 Paul Whelan <[EMAIL PROTECTED]> wrote:
:>To respond to your various questions/points:
:>Walt, I am searching backwards, that is, I begin at the end of the command
:>buffer minus the length of my search argument and work backwards. I know
:>this works through using various WTOs and forcing the thing to abend to take
:>a look at the content of the registers etc and the fact that the WTO of the
:>command buffer that Hans asked for contains:
:>STC02976 0080 ARCHFILTER(*) LIST CLASS(USER ) ALL
:>So it must be working it's way back through the command string to find my
:>search argument.
:>The (in)famous CLC 0(R9,R8),FILTER'filter('found?
:>was actually based on one of the IRREVX01 samples included in
:>SYS1.SAMPLIB(RACEXITS):
:>LAR7,L'USERKEY
:>CLC 0(R7,R5),USERKEY
:>with USERKEY defined as:
:>USERKEY DCC'USER('a PASSWORD keyword
:>I guess they must be doing something in a different way to me. Maybe I'll
:>sit down and try and work through it when I get a moment.
No, you are doing something wrong in the exact same way the IBM example is
doing something wrong.
Their code has the same bug.
:>Either way I think the moral of this particular part of the tale is
:>'understand the code first, don't just copy it'
:>In he end I used CLC FILTER,0(R8)'filter('found?
:>as suggested by William and it works just fine.
:>Thanks for all your help. I do this sort of thing far too infrequently and
:>so suffer for it!!
:>It makes it a lot easier knowing that there's people like you guys around
:>who are willing to help out.
--
Binyamin Dissen <[EMAIL PROTECTED]>
http://www.dissensoftware.com
Director, Dissen Software, Bar & Grill - Israel
Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.
I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
To respond to your various questions/points:
Walt, I am searching backwards, that is, I begin at the end of the command
buffer minus the length of my search argument and work backwards. I know
this works through using various WTOs and forcing the thing to abend to take
a look at the content of the registers etc and the fact that the WTO of the
command buffer that Hans asked for contains:
STC02976 0080 ARCHFILTER(*) LIST CLASS(USER ) ALL
So it must be working it's way back through the command string to find my
search argument.
The (in)famous CLC 0(R9,R8),FILTER 'filter('found?
was actually based on one of the IRREVX01 samples included in
SYS1.SAMPLIB(RACEXITS):
LAR7,L'USERKEY
CLC 0(R7,R5),USERKEY
with USERKEY defined as:
USERKEY DCC'USER('a PASSWORD keyword
I guess they must be doing something in a different way to me. Maybe I'll
sit down and try and work through it when I get a moment.
Either way I think the moral of this particular part of the tale is
'understand the code first, don't just copy it'
In he end I used CLC FILTER,0(R8)'filter('found?
as suggested by William and it works just fine.
Thanks for all your help. I do this sort of thing far too infrequently and
so suffer for it!!
It makes it a lot easier knowing that there's people like you guys around
who are willing to help out.
Best regards
Paul
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Attachements (Was IRREVX01 strangeness)
Text attachments are allowed. Non-text attachments will be rejected. Darren On Wed, 16 Apr 2008, Eric Bielefeld wrote: >Since when has IBM-Main allowed attachements. This is the first time I've >ever seen one. > >Eric -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
Hans Visser wrote:
> Walt,
>
> i don't think you're right.
>
> he is looping from the end of the buffer to the beginning.
>
> SRCHLOOP CRR7,R8start of buffer reached?
>BEFINALyes, exit
>CLC 0(R9,R8),FILTER 'filter('found?
>BEBADRCyes,
>S R8,ONE subtract 1 from pointer
>B SRCHLOOP try from previous position
Walt _IS_ right, assuming that this is in the program somewhere:
R9 EQU 9Register 9 EQUATE
That makes this instruction (above):
> CLC 0(R9,R8),FILTER 'filter('found?
the exact same thing as if the following had been coded:
| CLC 0(9,R8),FILTER'filter('found?
which is almost certainly NOT what is wanted. I assume that:
| FILTER DCCL7'FILTER('
is also in the program somewhere. Thus, the CLC instruction,
above, should have been written:
| CLC 0(7,R8),FILTER 'filter('found?
or, better yet, like this:
| CLC FILTER,0(R8)'filter('found?
assuming that FILTER is defined correctly in the program
such that the implied length is correct (as I did, above).
--
WB
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
Walt,
i don't think you're right.
he is looping from the end of the buffer to the beginning.
SRCHLOOP CRR7,R8start of buffer reached?
BEFINALyes, exit
CLC 0(R9,R8),FILTER 'filter('found?
BEBADRCyes,
S R8,ONE subtract 1 from pointer
B SRCHLOOP try from previous position
Mvg,
Hans Visser
Technisch Specialist
Getronics PinkRoccade
E: [EMAIL PROTECTED]
I: www.getronicspinkroccade.nl
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED]
Behalf Of Walt Farrell
Sent: woensdag 16 april 2008 21:16
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: IRREVX01 strangeness
On Wed, 16 Apr 2008 09:46:49 -0500, Paul Whelan <[EMAIL PROTECTED]> wrote:
>I'm trying to use the RACF command exit IRREVX01 to limit the types of
>searches submitted through a z/OS LDAP server and am seeing some very
>strange behaviour that I can't understand. If I tell the exit to reject any
>search command containing FILTER(*) the exit works perfectly and if I tell
>the exit to reject any search containing FILTER(SI1*) it also works perfectly.
>
>However, as we need to reject certain FILTER values I need to be a bit more
>selective and first of all find FILTER( in the command then process the
>FILTER argument(s) to decide whether to reject the command or not which is
>where I am coming unstuck. If I tell the exit to reject FILTER( (as a first
>pass before further refining the exit to check the arguments) it does not
>work, that is to say, it does not find FILTER(. It is also incapable of
>finding just FILTER.
>
Your exit seems to expect "FILTER(" exactly at the end of the command
buffer. It won't be there.
While the FILTER keyword may be last in the buffer, the string "FILTER("
would not be last, as the operand (e.g., "*)" ) will follow it.
Assuming your earlier versions looked for FILTER(*) at the end, that would
have worked. Or looking for FILTER(SI1*) at the end would have worked. But
not looking for FILTER( at the end.
--
Walt Farrell, CISSP
IBM STSM, z/OS Security Design
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
On Wed, 16 Apr 2008 14:15:32 -0500, Walt Farrell wrote:
>On Wed, 16 Apr 2008 09:46:49 -0500, Paul Whelan wrote:
>
>>I'm trying to use the RACF command exit IRREVX01 to limit the types of
>>searches submitted through a z/OS LDAP server and am seeing some very
>>strange behaviour that I can't understand. If I tell the exit to reject any
>>search command containing FILTER(*) the exit works perfectly and if I tell
>>the exit to reject any search containing FILTER(SI1*) it also works
perfectly.
>>
>>However, as we need to reject certain FILTER values I need to be a bit more
>>selective and first of all find FILTER( in the command then process the
>>FILTER argument(s) to decide whether to reject the command or not which
is
>>where I am coming unstuck. If I tell the exit to reject FILTER( (as a first
>>pass before further refining the exit to check the arguments) it does not
>>work, that is to say, it does not find FILTER(. It is also incapable of
>>finding just FILTER.
>>
>
>Your exit seems to expect "FILTER(" exactly at the end of the command
>buffer. It won't be there.
>While the FILTER keyword may be last in the buffer, the string "FILTER("
>would not be last, as the operand (e.g., "*)" ) will follow it.
>
>Assuming your earlier versions looked for FILTER(*) at the end, that would
>have worked. Or looking for FILTER(SI1*) at the end would have worked.
But
>not looking for FILTER( at the end.
The core issue with his search for "FILTER(" was identified by Binyamin Dissen
previously: the CLC in SRCHLOOP was coded as if the CLC instruction could
use 3 general purpose registers -- the "R9" in that line is what's wrong.
Either the OP needs to execute (EX) the CLC or make use of CLCL or (in this
specific case) use the correct length for the string "FILTER(" (which would be
7, not 9). Better yet for this specific case, use L'FILTER as the CLC length
so
it is computed as assembly time.
--
Tom Schmidt
(Did anyone in the State of Washington take offense to that?)
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
On Wed, 16 Apr 2008 09:46:49 -0500, Paul Whelan <[EMAIL PROTECTED]> wrote:
>I'm trying to use the RACF command exit IRREVX01 to limit the types of
>searches submitted through a z/OS LDAP server and am seeing some very
>strange behaviour that I can't understand. If I tell the exit to reject any
>search command containing FILTER(*) the exit works perfectly and if I tell
>the exit to reject any search containing FILTER(SI1*) it also works perfectly.
>
>However, as we need to reject certain FILTER values I need to be a bit more
>selective and first of all find FILTER( in the command then process the
>FILTER argument(s) to decide whether to reject the command or not which is
>where I am coming unstuck. If I tell the exit to reject FILTER( (as a first
>pass before further refining the exit to check the arguments) it does not
>work, that is to say, it does not find FILTER(. It is also incapable of
>finding just FILTER.
>
Your exit seems to expect "FILTER(" exactly at the end of the command
buffer. It won't be there.
While the FILTER keyword may be last in the buffer, the string "FILTER("
would not be last, as the operand (e.g., "*)" ) will follow it.
Assuming your earlier versions looked for FILTER(*) at the end, that would
have worked. Or looking for FILTER(SI1*) at the end would have worked. But
not looking for FILTER( at the end.
--
Walt Farrell, CISSP
IBM STSM, z/OS Security Design
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Attachements (Was IRREVX01 strangeness)
Eric, My guess is that the ban on attachments was part of the package of LISTSERV exits that Darren had to remove upon his retirement from the university. Hopefully it will not become widespread! Wayne Driscoll Product Developer NOTE: All opinions are strictly my own. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Eric Bielefeld Sent: Wednesday, April 16, 2008 11:40 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Attachements (Was IRREVX01 strangeness) Since when has IBM-Main allowed attachements. This is the first time I've ever seen one. Eric Paul Whelan <[EMAIL PROTECTED]> wrote: > Hello, >SNIP> > The code is based on the samples in SYS1.SAMPLIB(RACEXITS) and is attached. > > Best regards > Paul Whelan -- Eric Bielefeld Systems Programmer Aviva USA Des Moines, Iowa 515-645-5153 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Attachements (Was IRREVX01 strangeness)
Thanks Tom. I am actually posting from the web page this time, and I see the place for attachments. I used to use the web page all the time, after P&H Mining said I was getting too many emails. I found it hard to use, as it sometimes was hard to find my place the next day. Now I read most of the postings during the day from my internet providers webmail interface, which is often very slow. At home in Iowa I read them from Outlook Express. When I'm at home in Milwaukee, Outlook Express works great, but since I'm in Iowa, I can only read the email from Outlook, and not reply. I prefer to read it there because it takes about as long to download 20 emails to my computer as it does to delete one from the web interface until the next one displays. If I want to reply, I either have cut and paste it to my webmail interface, or go to the IBM-Main web site. Eric Bielefeld On Wed, 16 Apr 2008 11:52:50 -0500, Tom Schmidt <[EMAIL PROTECTED]> wrote: >The ibm-main LISTSERV web interface (which many of us use) has allowed >attachments for quite some time now. I don't believe this recent attachment >was the first but it certainly is (happily) infrequent here. > >-- >Tom Schmidt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Attachements (Was IRREVX01 strangeness)
On Wed, 16 Apr 2008 11:40:12 -0500, Eric Bielefeld wrote: >Since when has IBM-Main allowed attachements. This is the first time I've ever seen one. Eric, The ibm-main LISTSERV web interface (which many of us use) has allowed attachments for quite some time now. I don't believe this recent attachment was the first but it certainly is (happily) infrequent here. -- Tom Schmidt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
Paul, Could you give us the output of the WTO? Mvg, Hans Visser -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Behalf Of Paul Whelan Sent: woensdag 16 april 2008 16:47 To: IBM-MAIN@BAMA.UA.EDU Subject: IRREVX01 strangeness Hello, I'm trying to use the RACF command exit IRREVX01 to limit the types of searches submitted through a z/OS LDAP server and am seeing some very strange behaviour that I can't understand. If I tell the exit to reject any search command containing FILTER(*) the exit works perfectly and if I tell the exit to reject any search containing FILTER(SI1*) it also works perfectly. However, as we need to reject certain FILTER values I need to be a bit more selective and first of all find FILTER( in the command then process the FILTER argument(s) to decide whether to reject the command or not which is where I am coming unstuck. If I tell the exit to reject FILTER( (as a first pass before further refining the exit to check the arguments) it does not work, that is to say, it does not find FILTER(. It is also incapable of finding just FILTER. I'm sure I'm doing something stupid but just can't see it so any help with this would be greatly appreciated. The code is based on the samples in SYS1.SAMPLIB(RACEXITS) and is attached. Best regards Paul Whelan -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Attachements (Was IRREVX01 strangeness)
Since when has IBM-Main allowed attachements. This is the first time I've ever seen one. Eric Paul Whelan <[EMAIL PROTECTED]> wrote: > Hello, >SNIP> > The code is based on the samples in SYS1.SAMPLIB(RACEXITS) and is attached. > > Best regards > Paul Whelan -- Eric Bielefeld Systems Programmer Aviva USA Des Moines, Iowa 515-645-5153 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IRREVX01 strangeness
On Wed, 16 Apr 2008 09:46:49 -0500 Paul Whelan <[EMAIL PROTECTED]> wrote: :>I'm trying to use the RACF command exit IRREVX01 to limit the types of :>searches submitted through a z/OS LDAP server and am seeing some very :>strange behaviour that I can't understand. If I tell the exit to reject any :>search command containing FILTER(*) the exit works perfectly and if I tell :>the exit to reject any search containing FILTER(SI1*) it also works perfectly. :>However, as we need to reject certain FILTER values I need to be a bit more :>selective and first of all find FILTER( in the command then process the :>FILTER argument(s) to decide whether to reject the command or not which is :>where I am coming unstuck. If I tell the exit to reject FILTER( (as a first :>pass before further refining the exit to check the arguments) it does not :>work, that is to say, it does not find FILTER(. It is also incapable of :>finding just FILTER. :>I'm sure I'm doing something stupid but just can't see it so any help with :>this would be greatly appreciated. :>The code is based on the samples in SYS1.SAMPLIB(RACEXITS) and is attached. Review CLC 0(R9,R8),FILTER -- Binyamin Dissen <[EMAIL PROTECTED]> http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
IRREVX01 strangeness
Hello,
I'm trying to use the RACF command exit IRREVX01 to limit the types of
searches submitted through a z/OS LDAP server and am seeing some very
strange behaviour that I can't understand. If I tell the exit to reject any
search command containing FILTER(*) the exit works perfectly and if I tell
the exit to reject any search containing FILTER(SI1*) it also works perfectly.
However, as we need to reject certain FILTER values I need to be a bit more
selective and first of all find FILTER( in the command then process the
FILTER argument(s) to decide whether to reject the command or not which is
where I am coming unstuck. If I tell the exit to reject FILTER( (as a first
pass before further refining the exit to check the arguments) it does not
work, that is to say, it does not find FILTER(. It is also incapable of
finding just FILTER.
I'm sure I'm doing something stupid but just can't see it so any help with
this would be greatly appreciated.
The code is based on the samples in SYS1.SAMPLIB(RACEXITS) and is attached.
Best regards
Paul Whelan
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
IRREVC1A TITLE 'IRREVC1A - IRREVX01 EXIT ROUTINE TEMPLATE'
EJECT
IRREVC1A CSECT , an IRREVX01 exit routine
IRREVC1A AMODE 31
IRREVC1A RMODE ANY
IRREVC1A CSECT
SAVE (14,12),,IRREVC1A-&SYSDATE-&SYSTIME
LRR12,R15 program addressability
USING IRREVC1A,R12set base register
LRR10,R1 save parameter address
USING EVXPL,R10 base parameter map
*
* Get dynamic storage and preserve environment
*
GETDYN L R0,DYNSIZE dynamic area size to R0
GETMAIN RU,LV=(0),SP=229 getmain dynamic area
LRR11,R1 dynamic area addressability
USING DATD,R11base
STR13,SAVEAREA+4 save caller's savearea address
STR11,8(R13) save our savearea address
LRR13,R11 our savearea address to R13
SRR5,R5 initialize return code register
*
* check if this is a pre-exit invocation
*
L R3,EVXFLAGS
TM0(R3),EVXPREpre-exit ?
BNO FINAL
*
* check command's origin: RACF subsystem?
*
TM0(R3),EVXRASP executes in RACF subsystem?
BNO FINAL
*
* check for SEARCH command issued
*
L R4,EVXCALLR
TM0(R4),EVXSEARC Is this a SEARCH?
BOCHKSRCH yes
B FINAL
*
*
*
CHKSRCH L R6,EVXCMBUF
USING CMDBUF,R6
LAR7,CMDBUFD
LRR8,R7
LAR10,CMDBUFD
WTO TEXT=(R10),ROUTCDE=2,DESC=6
AHR8,CMDBUFL
LAR9,L'FILTER
SRR8,R9
SRCHLOOP CRR7,R8
BEFINAL
CLC 0(R9,R8),FILTER
BEBADRC
S R8,ONE
B SRCHLOOP
*
*
* The following code illustrates how a command exit routine can be
* used to fail certain commands and have message IRRV022I issued.
*
BADRCL R4,EVXMSSG load address of additional text
MVC 0(MSGINFOL,R4),MSGINFOcopy the text in
LAR5,8fails command and issues message
*
* free dynamic storage and return...
*
FINALEQU *
L R0,DYNSIZE dynamic area size to R0
L R13,SAVEAREA+4 restore R13
LRR1,R11 dynamic data address to R1
FREEMAIN RU,SP=229,LV=(0),A=(1) freemain dynamic area
LRR15,R5 copy return code
RETURN (14,12),T,RC=(15) restore registers and return
EJECT
*
* static data
*
DS0D
DYNSIZE DCAL4(SIZEDATD) dynamic area size
FILTER DCC'FILTER('
ONE DCF'1'increment/decrement value
MSGINFO DCC'Wildcard RACF search cancelled'
MSGINFOL EQU *-MSGINFO
DS0D
LTORG
*
* DSECT for this routine's dynamic area
*
DATD DSECT
DS0D
SAVEAREA DS18F register save area
SIZEDATD EQU *-DATD length of DSECT
*
* equates
*
R0 EQU 0
R1 EQU 1
R2 EQU 2
R3 EQU 3
R4 EQU 4
R5 EQU 5
R6 EQU 6
R7 EQU 7
R8 EQU 8
R9 EQU 9
R10 EQU 10
R11 EQU 11
R12 EQU 12
R13 EQU 13
R14 EQU 14
R15 EQU 15
EJECT
*
* MAPPINGS
*
IRREVXP
END IRREVC1A
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.h
