Re: IODF switches
Can you supply the pertinent part of your IOCP? Otherwise, it seems your CHPID's entry switch information is incomplete. Regards, Kevin -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Sue Chiam Sent: Wednesday, July 22, 2015 11:04 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: IODF switches Hi Mainframers, -D M=DEV(400) IEE174I 14.12.12 DISPLAY M 161 DEVICE 00400 STATUS=DEVICE IS BOXED: RESIDUAL DATA FOLLOWS CHP 52 4D ENTRY LINK ADDRESS.. .. DEST LINK ADDRESS 1108 0208 PATH ONLINE YN PATH OPERATIONAL YY I have missed something in the IODF regarding the 'entry link address', I have done this before and I cannot see what was the missing bit? There are 4 FICON switches. . 3592 ATL ].--.]switch 01 switch 02 CU 400 ]. .]. ./-Ö/-Ödev 400-403 ]. .].CHPID ./ Ö / Ö ]..] ]. .].--08] 01 ]01--ISL---01] 02 ]08]..] ]. 2818 .] 4D Ö / Ö / ]..] ]. .] Ö-/Ö-/]..] ]. .] ].3590.] ]. .] ]..] ]. .]. ./-Ö/-Ö]..] ]. .]../ Ö / Ö ]..] ]. .].--08] 10 ]01--ISL---01] 11 ]08]..] ]. 2818 .] 52 Ö / Ö / ]..] ]. .] Ö-/Ö-/]..] ].--.] ]..] switch 10 switch 11 - I would expect to see in the 'D M=DEV(400)' as the ENTRY LINK ADDRESS for CHPID 52 '1008' and for CHPID 4D '0108' Any help is greatly appreciated. Regards, Sue. - IMPORTANT NOTICE : The information in this email is confidential and may also be privileged. If you are not the intended recipient, any use or dissemination of the information and any disclosure or copying of this email is unauthorised and strictly prohibited. If you have received this email in error, please promptly inform us by reply email or telephone. You should also delete this email and destroy any hard copies produced. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: VSAM extents
On Thu, 23 Jul 2015 18:32:12 +, william janulin wrote: In running a download job that populates this cluster, when it goes to allocate additional extents, it is doing it in track allocations of 540 trks. I would have thought that it would allocate the secondary allocation of 1 cylinders. The dataclass I am using specifies extended format and extended addressability. What am I missing? APAR OA44214 The issue is that when a zFS aggregate dynamically extends the secondary allocation defined for the zFS aggregate is not used. Instead, zFS made a change to only extend by approx 36 cylinders each time. 540 trks = 36 cyls Norbert Friemel -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMP/E question
...I need an easy solution to report the DDDEFs which belong to a specific FMID... As you have discovered, there is no LIST or REPORT command that will do what you want. However, use the BUILDMCS command for your desired FMID, then check out the BUILDMCS Entry Summary Report, as it will identify the DDDEF entries needed for that FMID, in addition to all the other entries associated with the FMID. Kurt Quackenbush -- IBM, SMP/E Development -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Defining Existing Page Datasets into a New Mastercat
Mike, I saw that page before posting. All these various page datasets already exist in my production mastercat. The ServerPac install by a coworker built a new mastercat. I use PAGE as a high-level qualifier catalogued directly into the mastercat and do not want to have to define PAGE as an alias. A coworker and I tried the following and it appears to have worked. A LISTCAT from both systems reading both masters produced identical information (as it should, seeing it reads the VVDS). //STEP1 EXEC PGM=IDCAMS //SYSPRINT DD SYSOUT=* //SYSINDD * DEFINE PAGESPACE - ( NAME(VSAM.PAGESPACE.NAME) - RECATALOG VOLUME(YOURVOL)) - CATALOG(YOURCAT) /* -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mike Schwab Sent: Thursday, July 23, 2015 7:42 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Defining Existing Page Datasets into a New Mastercat http://www-01.ibm.com/support/knowledgecenter/SSLTBW_1.13.0/com.ibm.zos.r13.idai200/da6i215z.htm%23da6i215z On Thu, Jul 23, 2015 at 5:54 AM, Richards, Robert B. robert.richa...@opm.gov wrote: *Spoiled Alert * I used to have CRPLUS for years and was spoiled by the ease of use of running its MERGECAT command to handle copying system specific entries for LOGREC, etc. as well as all of the PLPA, COMMON and LOCAL page datasets from numerous other lpars/systems. Now back to current reality without CR+. After RTFMs, I am less than confident that I will succeed in redefining all of these entries into a new mastercat. Hence this post. Can I buy a clue? Bob p.s. Note to self - Don't forget how to do things without having the nice tools! :( -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Library out of space issue while APPLY RSU
Hello All, Problem got resolved by stopping LLA etc and then renaming those load module dataset and then creating new . Thanks to all for helping us. Regards Venkat. On Thu, Jul 23, 2015 at 6:27 PM, Mark Pace pacemainl...@gmail.com wrote: I've was taught the method to copy one RES to another and apply maintenance to the alternate RES volume(s). And I have had many of the same space issues being discussed here. The method you describe of having an install set of RES and HFS volumes sounds like a better method and I would like to try to setup one of my test environments to work this way. Is this method documented somewhere? On Wed, Jul 22, 2015 at 11:01 AM, J O Skip Robinson jo.skip.robin...@sce.com wrote: This is the same issue discussed in the recent thread Deleting data sets in use. Please (re)read the last few posts there. You need additional SAF authority in the FACILITY class to give you the option of renaming/deleting a data set that *appears* to be in use by virtue of DSN. It's caveat emptor, so be very careful how you do it. That's the near-term workaround. For a long-term solution, I highly recommend doing business in a different way. You should not install maintenance directly to *either* of your 'working' sysres volumes. You should maintain a separate install-only set of sysres and HFS data sets. These should be named with high-level qualifier(s) unique to your SMPE environment, different from production and different from any other z/OS release you need to maintain. For example, ZOSR21 or ZOSR13. These will never be in use outside of your SMPE environment. When you're ready to IPL a new maintenance level, copy your install environment over the alternate sysres environment using production HLQs like SYS1. This is not a trivial change, but you'll be happier once you reach the goal. . . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of venkat kulkarni Sent: Wednesday, July 22, 2015 7:36 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU I am working as UID 0 with all required authority. I don't see any issue with it. Still can you please suggest the authority required,So that I can cross verify. Regards Venkat On Wed, Jul 22, 2015 at 7:59 PM, Blake, Daniel J [CTR] dbl...@fdic.gov wrote: I get a screen that will allow me to override the in-use message. Perhaps you don't have the authority you need. Dan Blake -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of venkat kulkarni Sent: Wednesday, July 22, 2015 10:26 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU Hello Dan, This solution wont work because we are running system from primary RES volume and applying Maintenence on Alt RES volume and DDDEF also pointing to Alt RES volume dataset. Now, When I tried renaming Alt volume dataset with .old extension, I am getting below error. ÄÄ DSLIST - Data Sets on volume RESALT Data set in use Command - Enter / to select action Message Volume --- RSYS1.SASMMOD1 RESALT * End of Data Set list ÚÄ Ä¿ ³ Data set 'SYS1.SASMMOD1' in use by another user, try later or enter HELP for ³ ³ a list of jobs and users allocated to 'SYS1.SASMMOD1'. ³ Regards Venkat On Wed, Jul 22, 2015 at 7:31 PM, Blake, Daniel J [CTR] dbl...@fdic.gov wrote: Been there, done that. Yes the system has a reserve on the dataset names. However if you have the proper authority you can: 1. Rename the files using IDCAMS or ISPF 3.4. Make sure you rename, not delete them. 2. Then allocate new, larger ones using *.NEW or something that fits your naming conventions as the LLQ. 3. Uncatalog the *.NEW data sets. 4. Rename the uncataloged data sets dropping the .NEW LLQ. 5. Rerun your SMP/E jobs. 6. Some point in time delete the old data sets from step 1. Note: I am assuming that SMP/E is pointing to your maintenance volume, not your IPL volume. Dan -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of
Re: Defining Existing Page Datasets into a New Mastercat
OOPS. That was left over from another command I had in the same job stream, but which I elided from my response to you. I forgot to remove the DD as well. I haven't had an caffeine yet. On Thu, Jul 23, 2015 at 8:09 AM, Richards, Robert B. robert.richa...@opm.gov wrote: Thanks John. Confirmation is always a confidence booster. My job worked without the equivalent LIHTS1 DD. Bob -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Thursday, July 23, 2015 8:55 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Defining Existing Page Datasets into a New Mastercat On Thu, Jul 23, 2015 at 5:54 AM, Richards, Robert B. robert.richa...@opm.gov wrote: *Spoiled Alert * I used to have CRPLUS for years and was spoiled by the ease of use of running its MERGECAT command to handle copying system specific entries for LOGREC, etc. as well as all of the PLPA, COMMON and LOCAL page datasets from numerous other lpars/systems. Now back to current reality without CR+. After RTFMs, I am less than confident that I will succeed in redefining all of these entries into a new mastercat. Hence this post. Can I buy a clue? Bob p.s. Note to self - Don't forget how to do things without having the nice tools! :( Mike showed you how to create a _new_ page dataset into a new master catalog. But I take it you want to simply recatalog an existing page data set into a new master catalog. Thanks to DFSMS, it is now possible to catalog a PAGESPACE in multiple master catalogs. Just use the RECATALOG parameter. //STEP010 EXEC PGM=IDCAMS //LIHTS1 DD DISP=OLD,UNIT=SYSDA,VOL=SER=LIHTS1 //SYSPRINT DD SYSOUT=* //SYSINDD * DEF PAGESPACE(NAME( page-space.dsn ) - VOLUME( volser ) - RECATALOG ) CAT( new.master.catalog ) -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Defining Existing Page Datasets into a New Mastercat
On Thu, Jul 23, 2015 at 5:54 AM, Richards, Robert B. robert.richa...@opm.gov wrote: *Spoiled Alert * I used to have CRPLUS for years and was spoiled by the ease of use of running its MERGECAT command to handle copying system specific entries for LOGREC, etc. as well as all of the PLPA, COMMON and LOCAL page datasets from numerous other lpars/systems. Now back to current reality without CR+. After RTFMs, I am less than confident that I will succeed in redefining all of these entries into a new mastercat. Hence this post. Can I buy a clue? Bob p.s. Note to self - Don't forget how to do things without having the nice tools! :( Mike showed you how to create a _new_ page dataset into a new master catalog. But I take it you want to simply recatalog an existing page data set into a new master catalog. Thanks to DFSMS, it is now possible to catalog a PAGESPACE in multiple master catalogs. Just use the RECATALOG parameter. //STEP010 EXEC PGM=IDCAMS //LIHTS1 DD DISP=OLD,UNIT=SYSDA,VOL=SER=LIHTS1 //SYSPRINT DD SYSOUT=* //SYSINDD * DEF PAGESPACE(NAME( page-space.dsn ) - VOLUME( volser ) - RECATALOG ) CAT( new.master.catalog ) -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Defining Existing Page Datasets into a New Mastercat
http://www-01.ibm.com/support/knowledgecenter/SSLTBW_1.13.0/com.ibm.zos.r13.idai200/da6i215z.htm%23da6i215z On Thu, Jul 23, 2015 at 5:54 AM, Richards, Robert B. robert.richa...@opm.gov wrote: *Spoiled Alert * I used to have CRPLUS for years and was spoiled by the ease of use of running its MERGECAT command to handle copying system specific entries for LOGREC, etc. as well as all of the PLPA, COMMON and LOCAL page datasets from numerous other lpars/systems. Now back to current reality without CR+. After RTFMs, I am less than confident that I will succeed in redefining all of these entries into a new mastercat. Hence this post. Can I buy a clue? Bob p.s. Note to self - Don't forget how to do things without having the nice tools! :( -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Deleting data sets in use
On Wed, Jul 22, 2015 at 8:55 PM, Paul Gilmartin 000433f07816-dmarc-requ...@listserv.ua.edu wrote: snip TEMP is one of the few z/OS facilities that I miss in UNIX. I really miss GDGs. I am, sort of, emulate them in the shell by doing something like: base-name.$(date +'%Y-%m-%dT%H_%M_%S').txt but that is just plain _ugly_ and if I create a file in my program, I must do the equivalent in my own code. I'm just lazy. Also, the system won't automatically clean up older generations. I end up needing to do it periodically in a crontab entry. -- gil -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
From Twitter: Virtual Keypunch
Punch your own cards virtually at the Virtual Keypunch http://www. masswerk.at/keypunch/ http://t.co/kmAs5g12Ld -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Deleting data sets in use
I am probably over simplifying the issue or I am sure the smart folks at IBM would have done this already but it seems to be that if the DSN ENQ included a VOLSER, then the system would be able to distinguish between a truly ENQ Dataset and one that has the same name of an ENQ Dataset that resides on another volume. If the file is really in use, I would want to have the protection of jumping through hoops to make sure this is done by someone who truly understands what they are doing and its possible impact. David Evans From: Paul Gilmartin 000433f07816-dmarc-requ...@listserv.ua.edu To: IBM-MAIN@LISTSERV.UA.EDU Date: 07/22/2015 08:56 PM Subject:Re: Deleting data sets in use Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On 2015-07-22 19:10, John McKown wrote: On Wed, Jul 22, 2015 at 4:25 PM, Pommier, Rex rpomm...@sfgmembers.com wrote: I don't know about anybody else here but I much prefer z/OS making me jump through a hoop or two before deleting a dataset that has an enqueue on it than UNIX which allows (or at least it did somewhat recently) me to delete a file that is open/in use/actively being updated by somebody else. What is worse is the total lack of a _system level_ interlock on an inode (which is a subtle difference from a file). This means that I can run multiple update jobs concurrently and totally hose up the contents. This is _somewhat_ mitigated by the fact that all local references (a file descriptor) to an inode are actually, in effect, pointers to a global open inode table in the kernel. Which means that the system I/O buffer is shared. There is a type of locking for inodes, but it is discretionary and not mandatory. IMO, not sufficient. the z/OS locking by ENQ is to a large extent also discretionary. Two or more users can allocate a DSN SHR, and any or all of them can update it unbeknownst to the others. Integrity is ensured only by established conventions. The ability to delete a file (actually unlink a directory entry) while it is open does have one nice effect (FSVO nice). A program which needs a temporary disk work area (there are no TEMP type file names in UNIX) can do an open() with OCREAT+OEXCL to atomically create and open a new file. If the file exists, the open() fails. If it succeeds, the code can then immediately unlink() the entry. This removes the name from the directory, TEMP is one of the few z/OS files that I miss in UNIX. POSIX requires that tmpfile() create a file in such fashion that The file shall be automatically deleted when all references to the file are closed. This practically requires that tmpfile() unlink the file before returning. z/OS violates this requirement. IBM doesn't care. but the inode on disk still exists and can be used just like any normal file, including normal expansion. The need for this, in UNIX, is that there is nothing like OS/360's DISP parameter to automatically delete a file name when the program ends. And, unlike OS/360 et al., if the entire system crashes, the inode will be automatically removed when the system is rebooted, and an fsck is done when the filesystem is mounted. I will grant that z/OS very rarely fails and leave temporary data sets on the work volumes. I have _no_ idea why the creators of UNIX never came up with the equivalent of an ENQ. And I don't think that other types of locks are as good (e.g. have a directory called /enq and try to atomically create and open a resource name as a file name, failing if the open() fails.) TEMP is one of the few z/OS facilities that I miss in UNIX. OTOH, it's priceless to me that rename() is preemptive and atomic, providing a rudimentary LUW isolation. For example, I have a process in which I need occasionally to update a file via FTP. I FTP to an incoming temp name and rename on success to the permanent name. Consumers will never encounter: o An incomplete file in transition o Absence of the file during a RENAME timing window. (I have gotten WTF queries from a consumer who happened to notice the incoming file in transition.) If I needed to do this for a collection of related files, I could do so by preemptively replacing a symbolic link to a directory. I dearly wish I had similar facilities for z/OS Legacy data sets. Imagine renaming a data set nondisruptively while the target DSN is in use. I could do some of this with DSN aliases and/or JCLLIB members with SET commands for prefixes. It's a poor approximation since JCLLIB only governs batch processes. The marvel of UNIX lies in its first three letters, UNI; that all processes, foreground and background, can use the same command set -- no JCL vs. CLIST vs. ISPF LM* vs. IDCAMS ... -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Library out of space issue while APPLY RSU
In caafjfphe+t9tq-kkgoc+a5-acaqqacyv+yznrh+pb7wsefu...@mail.gmail.com, on 07/23/2015 at 07:27 AM, venkat kulkarni venkatkulkarn...@gmail.com said: Can you please provide me full command for increasing size for SASMMOD1 What makes you think you need to. Did you rerun with compesss after expanding the directory? -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 3705
In 20150723001436.90b364874...@lara.ugcs.caltech.edu, on 07/22/2015 at 05:14 PM, glen herrmannsfeldt g...@ugcs.caltech.edu said: Probably some real terminals, The answer may depend on the terminals. Yes one can run emulated programs on an emulated host with emulated terminals connected to an emulated 3705. Youl' probably use a simulated 270x rather than a simulated 3705, epspecially if you can't find NCP, EP, PEP and NTO. I'd use TELNET NVT if the host supports it. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: logging-DDname ignored
In 1199467315769376.wa.paulgboulderaim@listserv.ua.edu, on 07/22/2015 at 09:23 PM, Paul Gilmartin 000433f07816-dmarc-requ...@listserv.ua.edu said: I read: Poorly. I read: ... Note that logging-DDname is ignored if it is specified on the DD statement which describes a data set that is the target on the PARMDD keyword ... ignored!? WTF!? Why? Because it conflicts. So is there no way to see what substitutions are performed So your home computer is an ENIAC? There are two ways. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 3705
In 20150722212511.3f5b44874...@lara.ugcs.caltech.edu, on 07/22/2015 at 02:25 PM, glen herrmannsfeldt g...@ugcs.caltech.edu said: I believe SuperWylbur is a commercial product, derived from one of the others. OSI-EDS-SSI. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Deleting data sets in use
On Thu, 23 Jul 2015 08:47:50 -0500, John McKown wrote: On Thu, Jul 23, 2015 at 8:36 AM, David Evans wrote: I am probably over simplifying the issue or I am sure the smart folks at IBM would have done this already but it seems to be that if the DSN ENQ included a VOLSER, then the system would be able to distinguish between a truly ENQ Dataset and one that has the same name of an ENQ Dataset that resides on another volume. If the file is really in use, I would want to have the protection of jumping through hoops to make sure this is done by someone who truly understands what they are doing and its possible impact. I had thought the same thing. But, first, what volser would be in the ENQ name? The first problem is that, for JCL at least, the ENQ for a DSN referenced in the JCL is done by the initiator at job start time, before the first step starts. So any DISP=NEW data sets don't have a volume yet. And they won't until, and unless, the creating step is initiated. So there's a problem just to start with. There there is the question of which volser in the ENQ? For existing DSNs, should it be just the first of a multi-volume DSN (but what if somebody does a VOL=SER=.. for the 2nd volume of a 3 volume set?), or every volume in a multi-volume. What about when the DSN extends to a new volume? I guess that would require another ENQ to be issued. So we need to be sure the system can do so at the proper time. And what to do if the ENQ fails at that point? Select another volume? Wait? Abend? There are likely more impediments that I just can't think of at present. Much of this could be done, and should have been done. IBM was short sighted; perhaps resource constrained. At the time any volser becomes known, issue an ENQ SHR for each volser+dsn combination. I believe that an integrity threat occurs only when scratching an extent; at that point, upgrade the ENQ to EXC; if that fails, ABEND -- the user should have requested EXC in the first place. There's no good place to issue those ENQs. An IBM employee has mentioned code that does low-level I/O to DASD, never issuing OPEN but relying on the DSN ENQ EXC to preserve integrity. It's possible to allocate a new data set without ever acquiring an ENQ EXC DSN. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Deleting data sets in use
On Thu, Jul 23, 2015 at 8:36 AM, David Evans dev...@trustmark.com wrote: I am probably over simplifying the issue or I am sure the smart folks at IBM would have done this already but it seems to be that if the DSN ENQ included a VOLSER, then the system would be able to distinguish between a truly ENQ Dataset and one that has the same name of an ENQ Dataset that resides on another volume. If the file is really in use, I would want to have the protection of jumping through hoops to make sure this is done by someone who truly understands what they are doing and its possible impact. I had thought the same thing. But, first, what volser would be in the ENQ name? The first problem is that, for JCL at least, the ENQ for a DSN referenced in the JCL is done by the initiator at job start time, before the first step starts. So any DISP=NEW data sets don't have a volume yet. And they won't until, and unless, the creating step is initiated. So there's a problem just to start with. There there is the question of which volser in the ENQ? For existing DSNs, should it be just the first of a multi-volume DSN (but what if somebody does a VOL=SER=.. for the 2nd volume of a 3 volume set?), or every volume in a multi-volume. What about when the DSN extends to a new volume? I guess that would require another ENQ to be issued. So we need to be sure the system can do so at the proper time. And what to do if the ENQ fails at that point? Select another volume? Wait? Abend? There are likely more impediments that I just can't think of at present. David Evans -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: From Twitter: Virtual Keypunch
Now THAT was both amusing and pointless! Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Thursday, July 23, 2015 6:26 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: From Twitter: Virtual Keypunch Punch your own cards virtually at the Virtual Keypunch http://www. masswerk.at/keypunch/ http://t.co/kmAs5g12Ld -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: BEGINROUTES/ENDROUTES
Anne, If you were not aware, there is a TCPIP list that may be more helpful with these types of questions. There also might be something in the archives for TCPIP on this already. To join, if you have not done so TCPIP To subscribe, send mail to lists...@vm.marist.edu with the command (paste it!) in the e-mail message body: SUBSCRIBE IBMTCP-L Or this url and go to the bottom of the webpage: http://www2.marist.edu/htbin/wlvindex?IBMTCP-L Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Crabtree, Anne D Sent: Thursday, July 23, 2015 7:00 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: BEGINROUTES/ENDROUTES Planning to replace GATEWAY with BEGINROUTES/ENDROUTES in z/OS V2R1. Went through the steps of dumping TCPIP and using IPCS to get the statements. Question Why does it generate a ROUTE of 0.0.0.0 and then I get this when I IPL: EZZ0650I ADDRESS MASK 0.0.0.0 INCORRECT ON LINE 178 Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: BEGINROUTES/ENDROUTES
No, I do not. Would address be same as what was on DEFAULTNET with GATEWAY stmt? Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace Sent: Thursday, July 23, 2015 10:31 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: BEGINROUTES/ENDROUTES Do you have a ROUTE DEFAULT ? ROUTE DEFAULT 199.44.xxx.x MPCLNK1 MTU 1492 On Thu, Jul 23, 2015 at 9:59 AM, Crabtree, Anne D anne.d.crabt...@wv.gov wrote: Planning to replace GATEWAY with BEGINROUTES/ENDROUTES in z/OS V2R1. Went through the steps of dumping TCPIP and using IPCS to get the statements. Question Why does it generate a ROUTE of 0.0.0.0 and then I get this when I IPL: EZZ0650I ADDRESS MASK 0.0.0.0 INCORRECT ON LINE 178 Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- The postings on this site are my own and don’t necessarily represent Mainline’s positions or opinions Mark D Pace Senior Systems Engineer Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: BEGINROUTES/ENDROUTES
Do you have a ROUTE DEFAULT ? ROUTE DEFAULT 199.44.xxx.x MPCLNK1 MTU 1492 On Thu, Jul 23, 2015 at 9:59 AM, Crabtree, Anne D anne.d.crabt...@wv.gov wrote: Planning to replace GATEWAY with BEGINROUTES/ENDROUTES in z/OS V2R1. Went through the steps of dumping TCPIP and using IPCS to get the statements. Question Why does it generate a ROUTE of 0.0.0.0 and then I get this when I IPL: EZZ0650I ADDRESS MASK 0.0.0.0 INCORRECT ON LINE 178 Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- The postings on this site are my own and don’t necessarily represent Mainline’s positions or opinions Mark D Pace Senior Systems Engineer Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: BEGINROUTES/ENDROUTES
Will do. Thanks! Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: Thursday, July 23, 2015 10:13 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: BEGINROUTES/ENDROUTES Anne, If you were not aware, there is a TCPIP list that may be more helpful with these types of questions. There also might be something in the archives for TCPIP on this already. To join, if you have not done so TCPIP To subscribe, send mail to lists...@vm.marist.edu with the command (paste it!) in the e-mail message body: SUBSCRIBE IBMTCP-L Or this url and go to the bottom of the webpage: http://www2.marist.edu/htbin/wlvindex?IBMTCP-L Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Crabtree, Anne D Sent: Thursday, July 23, 2015 7:00 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: BEGINROUTES/ENDROUTES Planning to replace GATEWAY with BEGINROUTES/ENDROUTES in z/OS V2R1. Went through the steps of dumping TCPIP and using IPCS to get the statements. Question Why does it generate a ROUTE of 0.0.0.0 and then I get this when I IPL: EZZ0650I ADDRESS MASK 0.0.0.0 INCORRECT ON LINE 178 Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: to C programmers on a z13
Thank you for that presentation. Interesting indeed. If you think INSPECT has performance issues, did you ever look at the code generated by INITIALIZE? *Shudder* Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of David Crayford Sent: Thursday, July 23, 2015 12:18 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: to C programmers on a z13 On 22/07/2015 10:26 PM, Farley, Peter x23353 wrote: Do you remember the presentation number, or which at which SHARE meeting it was presented? I would be interested to read it myself. IIRC, it was this one about Java 8 https://share.confex.com/share/124/webprogram/Handout/Session16815/IBM%20Java%20News.pdf. Check out SIMD string operations. You'll notice a lot of string searching, translation methods. Now imagine what you could do if you exploited those same instructions in a language like COBOL. INSPECT statement on steroids! INSPECT has always been a performance issue. Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of David Crayford Sent: Wednesday, July 22, 2015 7:57 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: to C programmers on a z13 I've read a SHARE presentation that they are planning use the SIMD instructions to move data. memcpy() on steroids! Java JVMs and compiler optimizers can take advantage of these new instructions in interesting ways. On 22/07/2015 7:49 PM, John McKown wrote: This might be of some interest: http://www.ibm.com/developerworks/library/ba-parallelism-z13-simd-trs / abstract The IBM z13 hardware provides a new SIMD unit. This article describes how to use the IBM z/OS XL C/C++ language to take advantage of the new processor and exploit the enhanced parallelism it offers. This article also provides an overview of the new data types, the operations that can be done on those data types, and the built-in functions to make vector programming easier. /abstract -- This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: BEGINROUTES/ENDROUTES
Ah. Ok. Will try that. Thanks! Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace Sent: Thursday, July 23, 2015 10:48 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: BEGINROUTES/ENDROUTES Yes it is the same as your old GATEWAY. What I believe you are seeing is TCPIP creating a DEFAULT ROUTE since you did not provide one. On Thu, Jul 23, 2015 at 10:35 AM, Crabtree, Anne D anne.d.crabt...@wv.gov wrote: No, I do not. Would address be same as what was on DEFAULTNET with GATEWAY stmt? Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace Sent: Thursday, July 23, 2015 10:31 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: BEGINROUTES/ENDROUTES Do you have a ROUTE DEFAULT ? ROUTE DEFAULT 199.44.xxx.x MPCLNK1 MTU 1492 On Thu, Jul 23, 2015 at 9:59 AM, Crabtree, Anne D anne.d.crabt...@wv.gov wrote: Planning to replace GATEWAY with BEGINROUTES/ENDROUTES in z/OS V2R1. Went through the steps of dumping TCPIP and using IPCS to get the statements. Question Why does it generate a ROUTE of 0.0.0.0 and then I get this when I IPL: EZZ0650I ADDRESS MASK 0.0.0.0 INCORRECT ON LINE 178 Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- The postings on this site are my own and don’t necessarily represent Mainline’s positions or opinions Mark D Pace Senior Systems Engineer Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- The postings on this site are my own and don’t necessarily represent Mainline’s positions or opinions Mark D Pace Senior Systems Engineer Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
PCI DSS compliance question
We have a customer who is exploring how to achieve PCI DSS compliance in their z/OS environment. Their perception (I deliberately do not use the word conviction, as they are by no means convinced of this) is that they need to move the CDE applications to a separate Sysplex. This seems excessive to me, but I am not a QSA by any means; my competing perception is based on not having seen other customers do that, including banks and issuers. Also, there's a concern that having an internal firewall between the z/OS systems and the internal network will lead to downtime, because firewalls aren't that reliable. Again, that doesn't jibe with my impression; I've done many deployments where z/OS work had to pause to wait for a firewall change, but that was a one-time thing (well, ok, I've also seen things break because the firewall got changed later to undo some change-maybe this is what they're referring to-but that's a process issue, not a firewall weakness per se). And yes, I realize these are pretty vague questions, but that's the stage we're at. Any thoughts much appreciated! -- ...phsiii Phil Smith III Senior Architect Product Manager, Mainframe Enterprise HP Security Voltage p...@voltage.commailto:p...@voltage.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
BEGINROUTES/ENDROUTES
Planning to replace GATEWAY with BEGINROUTES/ENDROUTES in z/OS V2R1. Went through the steps of dumping TCPIP and using IPCS to get the statements. Question Why does it generate a ROUTE of 0.0.0.0 and then I get this when I IPL: EZZ0650I ADDRESS MASK 0.0.0.0 INCORRECT ON LINE 178 Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: BEGINROUTES/ENDROUTES
Yes it is the same as your old GATEWAY. What I believe you are seeing is TCPIP creating a DEFAULT ROUTE since you did not provide one. On Thu, Jul 23, 2015 at 10:35 AM, Crabtree, Anne D anne.d.crabt...@wv.gov wrote: No, I do not. Would address be same as what was on DEFAULTNET with GATEWAY stmt? Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace Sent: Thursday, July 23, 2015 10:31 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: BEGINROUTES/ENDROUTES Do you have a ROUTE DEFAULT ? ROUTE DEFAULT 199.44.xxx.x MPCLNK1 MTU 1492 On Thu, Jul 23, 2015 at 9:59 AM, Crabtree, Anne D anne.d.crabt...@wv.gov wrote: Planning to replace GATEWAY with BEGINROUTES/ENDROUTES in z/OS V2R1. Went through the steps of dumping TCPIP and using IPCS to get the statements. Question Why does it generate a ROUTE of 0.0.0.0 and then I get this when I IPL: EZZ0650I ADDRESS MASK 0.0.0.0 INCORRECT ON LINE 178 Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Bldg 6, Room B-110 Charleston, WV 25305 (304)957-8292 (304)558-1441 fax -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- The postings on this site are my own and don’t necessarily represent Mainline’s positions or opinions Mark D Pace Senior Systems Engineer Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- The postings on this site are my own and don’t necessarily represent Mainline’s positions or opinions Mark D Pace Senior Systems Engineer Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Strange 047 abend
From: michelbutz michealb...@comcast.net To: IBM-MAIN@LISTSERV.UA.EDU Date: 07/23/2015 02:13 AM Subject: Re: Strange 047 abend Sent by: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU There wasn't a dump just got a message from TEST system abend 047 I'll allocate sysudump To my TSO session A 047 abend occurs when a MODESET SVC (x'6B') is issued while you are not (APF Authorized or Supervisor State or Key 0). And that is the expected state of affairs if you are running under TSO TEST. Jim Mulder z/OS System Test IBM Corp. Poughkeepsie, NY -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMP/E question
Feel free to post the code when written! :-) -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Juergen Kehr Sent: Thursday, July 23, 2015 11:23 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E question Thanks for all the replies. The last messages which recommend to use BUILDMCS (or GENERATE) to get the required information are solving my problem. With the BUILDMCS ENTRY SUMMARY REPORT and a few fairly easy REXX procedures, i should be able to produce a report to identify those z/OS libraries (for example LINKLIB, LPALIB etc.), which are used by programs outside the base z/OS package, and that was the reason to create such a report. Kind regards Juergen Kehr -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: PCI DSS compliance question
Allan Staller wrote: There was a workshop given by Gwen Dente of IBM ATS a couple of years back. PCI COMPLIANCE with z/OS Communications Server and System Z It should be of immeasurable help. Is this it: http://www.stuhenderson.com/Handouts/BWRUG_PCIStart_CS.pdf ? If so, thanks, that's useful (starting about slide 31-the previous slides are background). If not, I'll keep looking. ...phsiii P.S. Lizette, thanks, I shoulda thought to post to RACF-L at the same time, have done so now. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: PCI DSS compliance question
Phil, There is a RACF list that might also provide insight on PCI DSS functions. If you have not joined, you can do so at this url RACFhttp://www.listserv.uga.edu/archives/racf-l.html Here are some links that might help with understanding http://www-01.ibm.com/support/knowledgecenter/SSSN2Y_2.0.0/com.ibm.tsiem.doc _2.0/mmodules/pci_about.html http://searchsecurity.techtarget.com/tip/Mainframe-security-best-practices-f or-compliance-with-PCI-DSS You will probably have to provide an email to read this. I use a bogus one for this site http://www.ibmsystemsmag.com/aix/administrator/security/System--Secured/ http://www.rshconsulting.com/RSHpres/RSH_Consulting__PCI__RACF__2012-05.pdf The way the data is protected should provide the direction for PCI DSS functions. If only authorized users can access the data and no one else, then additional layers of security may cause performance considerations. Money vs. Security vs. Importance of Data Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Phil Smith Sent: Thursday, July 23, 2015 7:55 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: PCI DSS compliance question We have a customer who is exploring how to achieve PCI DSS compliance in their z/OS environment. Their perception (I deliberately do not use the word conviction, as they are by no means convinced of this) is that they need to move the CDE applications to a separate Sysplex. This seems excessive to me, but I am not a QSA by any means; my competing perception is based on not having seen other customers do that, including banks and issuers. Also, there's a concern that having an internal firewall between the z/OS systems and the internal network will lead to downtime, because firewalls aren't that reliable. Again, that doesn't jibe with my impression; I've done many deployments where z/OS work had to pause to wait for a firewall change, but that was a one-time thing (well, ok, I've also seen things break because the firewall got changed later to undo some change-maybe this is what they're referring to-but that's a process issue, not a firewall weakness per se). And yes, I realize these are pretty vague questions, but that's the stage we're at. Any thoughts much appreciated! -- ...phsiii Phil Smith III Senior Architect Product Manager, Mainframe Enterprise HP Security Voltage p...@voltage.commailto:p...@voltage.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: PCI DSS compliance question
There was a workshop given by Gwen Dente of IBM ATS a couple of years back. PCI COMPLIANCE with z/OS Communications Server and System Z It should be of immeasurable help. HTH, snip We have a customer who is exploring how to achieve PCI DSS compliance in their z/OS environment. Their perception (I deliberately do not use the word conviction, as they are by no means convinced of this) is that they need to move the CDE applications to a separate Sysplex. This seems excessive to me, but I am not a QSA by any means; my competing perception is based on not having seen other customers do that, including banks and issuers. /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMP/E question
Thanks for all the replies. The last messages which recommend to use BUILDMCS (or GENERATE) to get the required information are solving my problem. With the BUILDMCS ENTRY SUMMARY REPORT and a few fairly easy REXX procedures, i should be able to produce a report to identify those z/OS libraries (for example LINKLIB, LPALIB etc.), which are used by programs outside the base z/OS package, and that was the reason to create such a report. Kind regards Juergen Kehr -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: PCI DSS compliance question
Gwen's workshop was very valuable in showing how to translate the DCSS to z/OS terms, but also on how to educate the QSA. Most QSA are not mainframe literate, and so approach things from the LUW perspectives of single server for a purpose and the separation of applications. Use of compensating controls will be important. Jerry Whitteridge Lead Systems Engineer Safeway Inc. 925 738 9443 Corporate Tieline - 89443 If you feel in control you just aren't going fast enough. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Staller, Allan Sent: Thursday, July 23, 2015 8:21 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: PCI DSS compliance question There was a workshop given by Gwen Dente of IBM ATS a couple of years back. PCI COMPLIANCE with z/OS Communications Server and System Z It should be of immeasurable help. HTH, snip We have a customer who is exploring how to achieve PCI DSS compliance in their z/OS environment. Their perception (I deliberately do not use the word conviction, as they are by no means convinced of this) is that they need to move the CDE applications to a separate Sysplex. This seems excessive to me, but I am not a QSA by any means; my competing perception is based on not having seen other customers do that, including banks and issuers. /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Email Firewall made the following annotations. -- Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately.. == -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Library out of space issue while APPLY RSU
I don't know of any IBM doc, but I'm sure that it's been presented in one or more SHARE user sessions over the years. Like cat-skinning, there's more than one way do it. (BTW does the cat care that much on *how* it gets skinned?) Our method may be outre, but we've used it since the advent of ServerPac, which provides a 'temporary' user catalog to manage install data sets. We keep that user catalog for the life of a release. All sysres data sets live on the install pack with their actual 'production' names, e.g. SYS1.LINKLIB. These data sets are referenced externally--including DDDEFs--with an HLQ unique to that release, say ZOSV2R1. This 'artificial' HLQ is an alias that points to the release-specific user catalog, which contains the entry for the actual SYS1.LINKLIB on install sysres V21RES. MCAT alias ZOSV2R1 -- user cat MVSV21.ICF.INSTALL -- NONVSAM--SYS1.LINKLIB on volume V21RES This method, while appearing complex, has some advantages: 1. Install data sets are referenced only by name (including the artificial HLQ), so volser references are never used. This reduces the chance of accidentally hitting the wrong SYS1.LINKLIB to nearly nil. 2. Since the install volume contains DSN SYS1.LINKLIB, the volume can be copied to the alternate sysres without renames. 3. Because install data sets have unique names, phantom ENQs with production names pretty much disappear. . . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace Sent: Thursday, July 23, 2015 5:57 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU I've was taught the method to copy one RES to another and apply maintenance to the alternate RES volume(s). And I have had many of the same space issues being discussed here. The method you describe of having an install set of RES and HFS volumes sounds like a better method and I would like to try to setup one of my test environments to work this way. Is this method documented somewhere? On Wed, Jul 22, 2015 at 11:01 AM, J O Skip Robinson jo.skip.robin...@sce.com wrote: This is the same issue discussed in the recent thread Deleting data sets in use. Please (re)read the last few posts there. You need additional SAF authority in the FACILITY class to give you the option of renaming/deleting a data set that *appears* to be in use by virtue of DSN. It's caveat emptor, so be very careful how you do it. That's the near-term workaround. For a long-term solution, I highly recommend doing business in a different way. You should not install maintenance directly to *either* of your 'working' sysres volumes. You should maintain a separate install-only set of sysres and HFS data sets. These should be named with high-level qualifier(s) unique to your SMPE environment, different from production and different from any other z/OS release you need to maintain. For example, ZOSR21 or ZOSR13. These will never be in use outside of your SMPE environment. When you're ready to IPL a new maintenance level, copy your install environment over the alternate sysres environment using production HLQs like SYS1. This is not a trivial change, but you'll be happier once you reach the goal. . . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of venkat kulkarni Sent: Wednesday, July 22, 2015 7:36 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU I am working as UID 0 with all required authority. I don't see any issue with it. Still can you please suggest the authority required,So that I can cross verify. Regards Venkat On Wed, Jul 22, 2015 at 7:59 PM, Blake, Daniel J [CTR] dbl...@fdic.gov wrote: I get a screen that will allow me to override the in-use message. Perhaps you don't have the authority you need. Dan Blake -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of venkat kulkarni Sent: Wednesday, July 22, 2015 10:26 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU Hello Dan, This solution wont work because we are running system from primary RES volume and applying Maintenence on Alt RES volume and DDDEF also pointing to Alt RES volume dataset. Now, When I tried renaming Alt volume dataset with .old extension, I am getting below error. ÄÄ DSLIST
Re: Defining Existing Page Datasets into a New Mastercat
Thanks John. Confirmation is always a confidence booster. My job worked without the equivalent LIHTS1 DD. Bob -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Thursday, July 23, 2015 8:55 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Defining Existing Page Datasets into a New Mastercat On Thu, Jul 23, 2015 at 5:54 AM, Richards, Robert B. robert.richa...@opm.gov wrote: *Spoiled Alert * I used to have CRPLUS for years and was spoiled by the ease of use of running its MERGECAT command to handle copying system specific entries for LOGREC, etc. as well as all of the PLPA, COMMON and LOCAL page datasets from numerous other lpars/systems. Now back to current reality without CR+. After RTFMs, I am less than confident that I will succeed in redefining all of these entries into a new mastercat. Hence this post. Can I buy a clue? Bob p.s. Note to self - Don't forget how to do things without having the nice tools! :( Mike showed you how to create a _new_ page dataset into a new master catalog. But I take it you want to simply recatalog an existing page data set into a new master catalog. Thanks to DFSMS, it is now possible to catalog a PAGESPACE in multiple master catalogs. Just use the RECATALOG parameter. //STEP010 EXEC PGM=IDCAMS //LIHTS1 DD DISP=OLD,UNIT=SYSDA,VOL=SER=LIHTS1 //SYSPRINT DD SYSOUT=* //SYSINDD * DEF PAGESPACE(NAME( page-space.dsn ) - VOLUME( volser ) - RECATALOG ) CAT( new.master.catalog ) -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: PCI DSS compliance question
Or a more general link for it is https://www.ibm.com/developerworks/community/forums/html/category?id=a4c83a8 c-1106-418e-bcae-323eb6641707 Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: Thursday, July 23, 2015 9:37 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: PCI DSS compliance question Another place to go and chat would be developer works for security https://www.ibm.com/developerworks/community/forums/html/forum?id =-0 000---1255 Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM- m...@listserv.ua.edu] On Behalf Of Phil Smith Sent: Thursday, July 23, 2015 8:48 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: PCI DSS compliance question Allan Staller wrote: There was a workshop given by Gwen Dente of IBM ATS a couple of years back. PCI COMPLIANCE with z/OS Communications Server and System Z It should be of immeasurable help. Is this it: http://www.stuhenderson.com/Handouts/BWRUG_PCIStart_CS.pdf ? If so, thanks, that's useful (starting about slide 31-the previous slides are background). If not, I'll keep looking. ...phsiii P.S. Lizette, thanks, I shoulda thought to post to RACF-L at the same time, have done so now. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Library out of space issue while APPLY RSU
I've was taught the method to copy one RES to another and apply maintenance to the alternate RES volume(s). And I have had many of the same space issues being discussed here. The method you describe of having an install set of RES and HFS volumes sounds like a better method and I would like to try to setup one of my test environments to work this way. Is this method documented somewhere? On Wed, Jul 22, 2015 at 11:01 AM, J O Skip Robinson jo.skip.robin...@sce.com wrote: This is the same issue discussed in the recent thread Deleting data sets in use. Please (re)read the last few posts there. You need additional SAF authority in the FACILITY class to give you the option of renaming/deleting a data set that *appears* to be in use by virtue of DSN. It's caveat emptor, so be very careful how you do it. That's the near-term workaround. For a long-term solution, I highly recommend doing business in a different way. You should not install maintenance directly to *either* of your 'working' sysres volumes. You should maintain a separate install-only set of sysres and HFS data sets. These should be named with high-level qualifier(s) unique to your SMPE environment, different from production and different from any other z/OS release you need to maintain. For example, ZOSR21 or ZOSR13. These will never be in use outside of your SMPE environment. When you're ready to IPL a new maintenance level, copy your install environment over the alternate sysres environment using production HLQs like SYS1. This is not a trivial change, but you'll be happier once you reach the goal. . . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of venkat kulkarni Sent: Wednesday, July 22, 2015 7:36 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU I am working as UID 0 with all required authority. I don't see any issue with it. Still can you please suggest the authority required,So that I can cross verify. Regards Venkat On Wed, Jul 22, 2015 at 7:59 PM, Blake, Daniel J [CTR] dbl...@fdic.gov wrote: I get a screen that will allow me to override the in-use message. Perhaps you don't have the authority you need. Dan Blake -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of venkat kulkarni Sent: Wednesday, July 22, 2015 10:26 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU Hello Dan, This solution wont work because we are running system from primary RES volume and applying Maintenence on Alt RES volume and DDDEF also pointing to Alt RES volume dataset. Now, When I tried renaming Alt volume dataset with .old extension, I am getting below error. ÄÄ DSLIST - Data Sets on volume RESALT Data set in use Command - Enter / to select action Message Volume --- RSYS1.SASMMOD1 RESALT * End of Data Set list ÚÄ Ä¿ ³ Data set 'SYS1.SASMMOD1' in use by another user, try later or enter HELP for ³ ³ a list of jobs and users allocated to 'SYS1.SASMMOD1'. ³ Regards Venkat On Wed, Jul 22, 2015 at 7:31 PM, Blake, Daniel J [CTR] dbl...@fdic.gov wrote: Been there, done that. Yes the system has a reserve on the dataset names. However if you have the proper authority you can: 1. Rename the files using IDCAMS or ISPF 3.4. Make sure you rename, not delete them. 2. Then allocate new, larger ones using *.NEW or something that fits your naming conventions as the LLQ. 3. Uncatalog the *.NEW data sets. 4. Rename the uncataloged data sets dropping the .NEW LLQ. 5. Rerun your SMP/E jobs. 6. Some point in time delete the old data sets from step 1. Note: I am assuming that SMP/E is pointing to your maintenance volume, not your IPL volume. Dan -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of venkat kulkarni Sent: Wednesday, July 22, 2015 9:41 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU Hello, Thanks for reply. Yes, I am applying Maintenance not on production system. Can you please suggest on the issue I discussed before. Regards Venkat. On Wed, Jul 22, 2015 at 4:29 PM, Paul Gillis
VSAM extents
To list; OK, I need some clarification on this. I have a job that defines a cluster: //CREATE EXEC PGM=IDCAMS,REGION=64M,COND=(0,LT) //SYSPRINT DD SYSOUT=* //SYSIN DD * DEFINE - CLUSTER - ( - NAME(WAS850.ZFS) - LINEAR - CYL(1 1) - DATACLASS(DBAGDC) - VOLUMES(Z1W850 Z1W851) - SHAREOPTIONS(3) - ) /* In running a download job that populates this cluster, when it goes to allocate additional extents, it is doing it in track allocations of 540 trks. I would have thought that it would allocate the secondary allocation of 1 cylinders. The dataclass I am using specifies extended format and extended addressability. What am I missing? Bill J. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: PCI DSS compliance question
Another place to go and chat would be developer works for security https://www.ibm.com/developerworks/community/forums/html/forum?id=-0 000---1255 Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Phil Smith Sent: Thursday, July 23, 2015 8:48 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: PCI DSS compliance question Allan Staller wrote: There was a workshop given by Gwen Dente of IBM ATS a couple of years back. PCI COMPLIANCE with z/OS Communications Server and System Z It should be of immeasurable help. Is this it: http://www.stuhenderson.com/Handouts/BWRUG_PCIStart_CS.pdf ? If so, thanks, that's useful (starting about slide 31-the previous slides are background). If not, I'll keep looking. ...phsiii P.S. Lizette, thanks, I shoulda thought to post to RACF-L at the same time, have done so now. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: icetool findrep
This topic did not show up in my inbox but is available via google groups https://groups.google.com/forum/#!topic/bit.listserv.ibm-main/YEB4cb-PRWs It is quite simple to replace the values taking the change values from a different file. //STEP0100 EXEC PGM=SORT //SYSOUT DD SYSOUT=* //SORTIN DD * 120150209 //SORTOUT DD DSN=S,DISP=(,PASS),SPACE=(TRK,(1,0),RLSE) //SYSINDD * OPTION COPY,STOPAFT=1,NULLOUT=RC4 OUTFIL BUILD=(C'DATEVAL,C''',6,8,C,/, C'IDVAL,C''',1,5,C,80:X) //* //STEP0200 EXEC PGM=SORT,COND=(4,LE,STEP0100) //SYSOUT DD SYSOUT=* //SYMNAMES DD DISP=SHR,DSN=S //SYMNOUT DD SYSOUT=* //SORTIN DD * AND B.DATA_RIFERIMENTO = DATA AND B.CODICE_MOD_PER = 'CR' WHERE A.ID = ID AND A.DATA_INIZIO DATA //SORTOUT DD SYSOUT=* //SYSINDD * OPTION COPY INREC FINDREP=(INOUT=(C'DATA',DATEVAL, C'ID',IDVAL)) //* The output from this job is AND B.DATA_RIFERIMENTO = 20150209 AND B.CODICE_MOD_PER = 'CR' WHERE A.ID = 1 AND A.DATA_INIZIO 20150209 Thanks, Kolusu DFSORT Development IBM Corporation -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Library out of space issue while APPLY RSU
The STGADMIN profile affects only the ability to rename a dataset whose name matches one in use. You still need the same access you would need to rename the dataset if it were not in use. While not popular, I prefer to create the profile with a wild card in the DSN (or at least part of it) to avoid having to create a profile for each target library that may have this problem -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of venkat kulkarni Sent: Thursday, July 23, 2015 2:39 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Library out of space issue while APPLY RSU Thanks. So you mean to have access on CLASS === FACILITY PROFILE === 'STGADMIN.DPDSRN.SYS1.SASMMOD1' So, while providing access, what should I mention, UACC = NONE and access to my user id is = ALTER Or, something else can be solution on this. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Library out of space issue while APPLY RSU
Thanks. So you mean to have access on CLASS === FACILITY PROFILE === 'STGADMIN.DPDSRN.SYS1.SASMMOD1' So, while providing access, what should I mention, UACC = NONE and access to my user id is = ALTER Or, something else can be solution on this. On Thu, Jul 23, 2015 at 8:35 AM, Thomas Conley pinnc...@rochester.rr.com wrote: On 7/22/2015 9:57 PM, venkat kulkarni wrote: Hello Tom, Thanks for reply. Can you please provide me full command for increasing size for SASMMOD1 , as I have never used this utility before. My current size is Data Set Name . . . : SYS1.SASMMOD1 General Data Current Allocation Volume serial . . . : RESALTAllocated blocks . : 29 Device type . . . . : 3390Allocated extents . : 1 Organization . . . : PO Maximum dir. blocks : 10 Record format . . . : U Record length . . . : 0 Block size . . . . : 32760 Current Utilization 1st extent blocks . : 29 Used blocks . . . . : 29 Secondary blocks . : 0 Used extents . . . : 1 Used dir. blocks . : 3 Number of members . : 18 On Thu, Jul 23, 2015 at 7:21 AM, Thomas Conley pinnc...@rochester.rr.com wrote: On 7/22/2015 9:41 PM, venkat kulkarni wrote: Thanks to all. I checked JOB report more carefully and found that COMPRESS and RETRY was specified on the APPLY, so SMP/E was able to recover in most of these cases. If we check the CAUSER SYSMOD SUMMARY REPORT, only SASMMOD1 failed after debatching. An easy option is to enlarge SASMMOD1 using FIXPDS command, but I am not sure how to use this to increase size of this dataset. Can anybody suggest, how can we perform this. Regards Venkat FIXPDS ADDCYL(x) FIXPDS ADDCYL(x) is the command within PDS. If you go to cbttape.org, download file182 and follow the install instructions, you should be able to run the command. If you're a member of SHARE, you can grab my PDS - The Swiss Army Knife of Utilities presentation at share.org, which shows how to exploit PDS. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Defining Existing Page Datasets into a New Mastercat
*Spoiled Alert * I used to have CRPLUS for years and was spoiled by the ease of use of running its MERGECAT command to handle copying system specific entries for LOGREC, etc. as well as all of the PLPA, COMMON and LOCAL page datasets from numerous other lpars/systems. Now back to current reality without CR+. After RTFMs, I am less than confident that I will succeed in redefining all of these entries into a new mastercat. Hence this post. Can I buy a clue? Bob p.s. Note to self - Don't forget how to do things without having the nice tools! :( -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN