Allocating GDG(+1) using SVC 99

2020-06-20 Thread Joseph Reichman
I am doing a number of snapx type dumps in a started task. I would like to
keep each and every one in a separate dsn. It would seem keeping them in a
GDG would accomplish this.

 

The Documentation says that If I turn on  S99GDGNT in S99FLAG1 I could
specify the dsn as MYSDUMP.GDG(+1) and have each snap dump in a separate
providing I do a close un allocate as a text unit (meaning I would
unallocated the dataset upon closing the snap file).

 

If I read documentation right it seems that upon a close unallocate the
relative gag number gets updated   

 

 

 

 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: WAS Liberty Start UP Issue

2020-06-20 Thread saurabh khandelwal
Hello group,
Can anybody implemented this before

On Sat, 20 Jun 2020, 05:07 saurabh khandelwal, <
sourabhkhandelwal...@gmail.com> wrote:

> Dear Eileen,
>
>
> Thanks for the reply. Can you please help me install the admin center.
>
> We also tried to install admin center to administrator this WAS liberty but,
> when I run below command to install admin center, i get below error and
> unable to run this script.
>
> /installUtility install adminCenter-1.0
>
>  # pwd
>
> /usr/lpp/liberty_zos/18.0.0.1/bin
>
> # /installUtility install adminCenter-1.0
>
>
>
> # ./installUtility install adminCenter-1.0
>
> java: toolJavaCmd 3: ./installUtility 257: FSUM7351 not found
>
> #
>
>
> I listed this bin directory to make sure that this script exist and i
> found but I unable to run this script to install admin center.
>
>
> rwxr-xr-x   1 BPXROOT  OMVSGRP 6803 Mar  9  2018 batchManager
> Devl
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3410 Mar  9  2018
> batchManager.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6802 Mar  9  2018
> binaryLog
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3958 Mar  9  2018
> binaryLog.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6811 Mar  9  2018
> bluemixUtility
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3418 Mar  9  2018
> bluemixUtility.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP16032 Mar  9  2018
> client
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP12939 Mar  9  2018
> client.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6803 Mar  9  2018
> collective
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3410 Mar  9  2018
> collective.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6808 Mar  9  2018
> configUtility
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3415 Mar  9  2018
> configUtility.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6796 Mar  9  2018
> ddlGen
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3952 Mar  9  2018
> ddlGen.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6815 Mar  9  2018
> dynamicRouting
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3422 Mar  9  2018
> dynamicRouting.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6811 Mar  9  2018
> featureManager
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3418 Mar  9  2018
> featureManager.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6811 Mar  9  2018
> installUtility
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3418 Mar  9  2018
> installUtility.bat
>
> drwxr-xr-x   3 BPXROOT  OMVSGRP 8192 Mar  9  2018
> jaxb
>
> drwxr-xr-x   3 BPXROOT  OMVSGRP 8192 Mar  9  2018
> jaxrs
>
> drwxr-xr-x   3 BPXROOT  OMVSGRP 8192 Mar  9  2018
> jaxws
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6814 Mar  9  2018
> pluginUtility
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3970 Mar  9  2018
> pluginUtility.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6802 Mar  9  2018
> productInfo
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3958 Mar  9  2018
> productInfo.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6811 Mar  9  2018
> securityUtility
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3967 Mar  9  2018
> securityUtility.bat
>
> -rwxrwxrwx   1 BPXROOT  OMVSGRP35850 Mar 24 02:56
> server
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP21141 Mar  9  2018
> server.bat
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 6814 Mar  9  2018
> serverSchemaGen
>
> -rwxr-xr-x   1 BPXROOT  OMVSGRP 3970 Mar  9  2018
> serverSchemaGen.bat
>
> -rwxrwxrwx   1 BPXROOT  OMVSGRP35850 Mar 24 02:52
> server_bkup
>
> drwxr-xr-x   3 BPXROOT  OMVSGRP 8192 Mar  9  2018
> tools
>
> drwxr-xr-x   3 BPXROOT  OMVSGRP 8192 Mar  9  2018
> zosConnect
>
> #
> pwd
>
> /usr/lpp/liberty_zos/18.0.0.1/bin
>
>
> #
>
>
> Can anyone please help us on this both issue.
>
> On Fri, Jun 19, 2020 at 4:05 PM Barkow, Eileen <
> 02bc504b1642-dmarc-requ...@listserv.ua.edu> wrote:
>
>> I had to add:
>>
>> > pollingRate="5s
>>
>> -Original Message-
>> From: IBM Mainframe Discussion List  On Behalf
>> Of saurabh khandelwal
>> Sent: Friday, June 19, 2020 8:43 AM
>> To: IBM-MAIN@LISTSERV.UA.EDU
>> Subject: WAS Liberty Start UP Issue
>>
>> Dear Group,
>>
>> We are trying to configure WAS liberty and deploy test applications.
>>
>> Our server.xml file looks like
>>
>> 
>>
>> 
>>
>>
>>
>> 
>>
>> 
>>
>> jsp-2.3
>>
>> 
>>
>>
>>
>> 
>>
>> 
>>
>> >
>>  location="/usr/lpp/liberty_zos/18.0.0.1/usr/servers/server1/
>> >
>>
>>
>>
>> 
>>
>>
>> And When we deploy application in drop in directory, I get below message
>> available in started task,
>>
>> E CWWKZ0021E: The server is not configured to handle the resource at
>> location /usr/lpp/liberty_zos/18.0.0.1/usr/servers/server1
>>  /dropins/AdvancedCommandCenter.ear.
>>
>> E CWWKM0101E: The system could not process archive data for
>> /usr/lpp/liberty_zos/18.0.0.1/usr/servers/server1/dropins/AdvancedC
>>  ommandCenter.ear.
>>
>> But we can clearly, see that our application has been expanded but
>> because of this issue we getting above, we unable to move forward.
>>
>> Can any one guide us on this.
>>
>> We also, tried to install admin center to administrator this WAS liberty
>> but, 

Re: dfdss equivalent to fdr map

2020-06-20 Thread Tim Hare
Question: does it really matter with a volume that's a virtual thing 
implemented on a RAID array?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: CL/ / Supersession

2020-06-20 Thread Tim Hare
TN3270 supports secure sockets.  Just make your TN3270 terminals "auto logon" 
to CL/Supersession and you're good.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: HOW DO I VERIFY A USERID'S ACCESS TO A DATASET

2020-06-20 Thread Walt Farrell
On Sat, 13 Jun 2020 23:32:02 -0400, Bob Bridges  wrote:

>Gil, you mustn't think I plan to make it a habit but I think I'm going to 
>disagree with you on every point, here:
>
>o Well, maybe not on the first one:  What's "TOCTTOU"?

Time Of Check To Time Of Use. As you're making the check, a security 
administrator might be changing the rules. Your program might end up getting a 
false positive or false negative.

>
>o Access rules are indeed complicated to simulate.  But why simulate them?  
>Just
>  ask RACROUTE and get an answer.  Mind you a) I'm a security geek, so maybe 
> the
>  rules seem less complicated to me.  And b) I've never used RACROUTE directly;
>  as a security geek I talk to RACF/ACF2/TSS through their TSO-level commands,
>  so maybe RACROUTE is more difficult.

The rules for properly issuing RACROUTE REQUEST=AUTH are what is complicated. 
Ignoring resources other than MVS data sets, you need to process differently 
for non-VSAM vs VSAM.

For either, you need to first check whether the data set is indicated as 
possibly having a discrete profile. For non-VSAM, that means reading the DSCB 
from the VTOC. For VSAM, it means reading the (if I remember correctly) Sphere 
record from the proper catalog (which you also have to figure out) to determine 
the cluster name. Then you need to read the RACF indicator from the catalog 
entry for the cluster name (not the component name you may be opening).

Then, for VSAM, you need to specify the cluster name (not the component name 
that may appear in the JCL).

Failure to do any of those properly will give you a potentially wrong answer, 
or an answer that is right in many cases but wrong in edge cases.

Then, there is the difficulty that if your program is not the one that will 
actually do the OPEN, you may simply get the wrong answer because RACF allows 
access rules like "user X can use data set Y but only when running program Z". 
If you are not part of program Z, the answer you get from the RACROUTE will 
differ from the answer that Z would get if it actually performed the OPEN. So, 
you might get the wrong answer, and again it might be a false positive or a 
false negative.

Also, if your program is not running authorized, or (more precisely) does not 
actually require authorization, there are ways a clever user can bypass the 
check you're doing if your program is running in an environment they can 
control, such as TSO or batch or a UNIX shell.

There are additional considerations if you are asking about the authority of a 
user other than the one you're running under.

It is much simpler, and safer, and in general more robust, to simply issue the 
OPEN in the proper program environment and let the system say Yes or No. 

-- 
Walt (former member of the RACF Design/Development team)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Question About Sub System Interface Function Call 08

2020-06-20 Thread Peter Relson

Regarding using the preferred method, I believe its always advisable to 
have more than one solution in a software tool box.

IMO, not if one solution is better than the other and covers a superset of 
the cases. 


Regarding the SSCVT, wouldn't that introduce another variable to be 
verified ?.

If this is your subsystem, then you own that field. There is nothing to 
verify unless you are trying to address your own errors or random overlays 
or misuse by authorized programs (and if you go down that route, there is 
no end to what needs to be verified). 

Peter Relson
z/OS Core Technology Design


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN