Re: Batch SFTP without client keys or USS files?
Do you have any special characters in your password that might not be surviving code-page translate? -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Wendell Lovewell Sent: Friday, October 16, 2020 8:15 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Batch SFTP without client keys or USS files? Caution! This message was sent from outside your organization. Thank you Rajesh, but the job will be running on z/OS systems. I cannot require any additional software like COZBATCH to be installed. Best Regards, Wendell -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Checksum/Md5 file
Hi Len Sasso, As mentioned, you can roll your own and invoke an ICSF service routine, or you can use one of several z/OS crypto products. I work for ASPG, so am particularly familiar with MegaCryption on z/OS. With MegaCryption this can be done using the MGCMAIN utility or via an application call to a crypto subroutine library. Since you may already be a customer, I will send you additional details offline. HTH, Mike -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lennie Dymoke-Bradshaw Sent: Friday, October 16, 2020 7:37 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Checksum/Md5 file Caution! This message was sent from outside your organization. Please note too that the CSNBOWH implementation requires ICSF to be active, but does not require any Crypto Express hardware, nor is it dependent on the CPACF. It is a software solution that executes within ICSF. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Jousma, David Sent: 16 October 2020 20:07 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Checksum/Md5 file Yes. https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1 .csfb400/csfb4za229.htm _ Dave Jousma AVP | Director, Technology Engineering Fifth Third Bank | 1830 East Paris Ave, SE | MD RSCB2H | Grand Rapids, MI 49546 616.653.8429 | fax: 616.653.2717 -Original Message- From: IBM Mainframe Discussion List On Behalf Of Sasso, Len Sent: Friday, October 16, 2020 2:54 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Checksum/Md5 file **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** Anyone know if a Checksum/Md5 file can be created on a IBM Mainframe? If so, how? Thank You and Please Be Safe! Len Sasso Systems Administrator Senior CSRA, A General Dynamics Information Technology Company 327 Columbia TPKE Rensselaer, NY 12144 Office Hours: M-F 7 AM - 3:45 PM Out-Of-Office: Tue., Oct. 20th - 1:30 PM - Wed., Oct 21st @ 7 AM Phone: (518) 257-4209 Cell: (518) 894-0879 Fax: (518) 257-4300 len.sa...@gdit.com URL: www.gdit.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Batch SFTP without client keys or USS files?
Thank you Rajesh, but the job will be running on z/OS systems. I cannot require any additional software like COZBATCH to be installed. Best Regards, Wendell -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Checksum/Md5 file
Please note too that the CSNBOWH implementation requires ICSF to be active, but does not require any Crypto Express hardware, nor is it dependent on the CPACF. It is a software solution that executes within ICSF. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Jousma, David Sent: 16 October 2020 20:07 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Checksum/Md5 file Yes. https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1 .csfb400/csfb4za229.htm _ Dave Jousma AVP | Director, Technology Engineering Fifth Third Bank | 1830 East Paris Ave, SE | MD RSCB2H | Grand Rapids, MI 49546 616.653.8429 | fax: 616.653.2717 -Original Message- From: IBM Mainframe Discussion List On Behalf Of Sasso, Len Sent: Friday, October 16, 2020 2:54 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Checksum/Md5 file **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** Anyone know if a Checksum/Md5 file can be created on a IBM Mainframe? If so, how? Thank You and Please Be Safe! Len Sasso Systems Administrator Senior CSRA, A General Dynamics Information Technology Company 327 Columbia TPKE Rensselaer, NY 12144 Office Hours: M-F 7 AM - 3:45 PM Out-Of-Office: Tue., Oct. 20th - 1:30 PM - Wed., Oct 21st @ 7 AM Phone: (518) 257-4209 Cell: (518) 894-0879 Fax: (518) 257-4300 len.sa...@gdit.com URL: www.gdit.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SVC 99 035C
DDname SYSPRINT is where IKJ messages go, not ddname SYSOUT :) This is clearly documented in the z/OS TSO/E Messages manual. On Sat, Oct 17, 2020 at 9:04 AM Joseph Reichman wrote: > > > HI > > > > I am dynamically allocating a new file which has 14 test units. I am > getting > a 035C meaning one them is erroneous the doc says that message IKJ56231I > points me to the right text unit > > I am running this under TEST. I allocated SYSOUT to the terminal DA(*). I > didn't see the message was wondering what file to allocate to DA(*) to see > the message > > > > Thanks > > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
SVC 99 035C
HI I am dynamically allocating a new file which has 14 test units. I am getting a 035C meaning one them is erroneous the doc says that message IKJ56231I points me to the right text unit I am running this under TEST. I allocated SYSOUT to the terminal DA(*). I didn't see the message was wondering what file to allocate to DA(*) to see the message Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Batch SFTP without client keys or USS files?
Dovetail work well for me. A sample below: //add jobcard //SFTPPUT EXEC PROC=SFTPPROC //SFTPIN DD * host=sftp.ecurep.ibm.com pwdsn="(IBMPASS)" user="" . $script_dir/sftp_connect.sh < On Behalf Of Wendell Lovewell Sent: Friday, October 16, 2020 5:10 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Batch SFTP without client keys or USS files? Thanks Kurt! I did see Ed's presentation, but at the time it was a solution for which I didn't have a problem, so it stayed in the bit bucket. Unfortunately, even with your and Ed's expert help, I'm still stumped. I just don't seem to be able to get the "SSH_ASKPASS" to work, even after reading what literally seems to be everything on the Internet about it. (My 2 hour job's gone 2 days now...) Just a reminder: I'm going from a z/OS sftp client to a non-z/os ftp server where I can't store user keys. StrictHostKeyChecking=no is saving the non-z/OS server's keys in ~/.ssh/known_hosts, but I need to specify a userid/pwd to access the server. What I have is: // EXPORT SYMLIST=(*) // SET FROM=USER.DFDSS.XMI // SET TO=CUS12345.ESTFILE //* //SFTP EXEC PGM=BPXBATCH //STDENV DD * SSH_ASKPASS=/tmp/sftp.pw.sh DISPLAY=DISPLAY //* //STDPARM DD *,SYMBOLS=JCLONLY SH cd /tmp; echo cp -Bv "//''" /tmp/ cp -Bv "//''" /tmp/ echo "echo 'ftppwd'" > sftp.pw.sh; chmod 700 sftp.pw.sh; echo "cd /FTPDir"> sftp.cmds; echo "put /tmp/ " >> sftp.cmds; echo "quit" >> sftp.cmds; chmod 600 sftp.cmds; echo ''; echo '-sftp.cmds contents:'; cat sftp.cmds; echo ''; echo '-sftp.pw.sh contents:'; cat sftp.pw.sh; echo ''; /bin/sftp -b sftp.cmds -oBatchMode=no -oPort= -oPasswordAuthentication=yes -oPreferredAuthentications=password -oStrictHostKeyChecking=no -oHostbasedAuthentication=no -oCheckHostIP=no -oPubkeyAuthentication=no -oLogLevel=DEBUG2 -oUser=ftpuser ftp.ftpserver.com; rm sftp.pw.sh; rm sftp.cmds; rm //* //STDOUT DD SYSOUT=M //STDERR DD SYSOUT=M //* Maybe my STDENV isn't getting read, but I can't prove it. I'm getting: FOTS1373 ftpu...@ftp.ftpserver.com: Permission denied (publickey,keyboard-interactive,password). Here's the tail of my output w/DEBUG1: debug1: Host '[ftp.ftpserver.com]:' is known and matches the RSA host key. debug1: Found key in /.ssh/known_hosts:2 debug1: cipher_init: aes128-ctr from source CPACF, used in non-FIPS mode debug1: rekey after 4294967296 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: cipher_init: aes128-ctr from source CPACF, used in non-FIPS mode debug1: rekey after 4294967296 blocks debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,keyboard-interactive,password debug1: No more authentication methods to try. FOTS1373 ftpu...@ftp.ftpserver.com: Permission denied (publickey,keyboard-interactive,password). debug1: zsshSmfSetConnSmfStatus: SMF status is 0 Connection closed. FOTS0841 Connection closed Here's the head, showing the contents of my sftp.pw.sh and sftp.cmds files: cp -Bv //'USER.DFDSS.XMI' /tmp/CUS12345.ESTFILE USER.DFDSS.XMI -> /tmp/CUS12345.ESTFILE: binary -sftp.cmds contents: cd /FTPDir put /tmp/CUS12345.ESTFILE CUS12345.ESTFILE quit -sftp.pw.sh contents: echo 'ftppwd' FSUM1012 The initial working directory was not specified. FSUM1006 A shell was not specified. Processing continues using the default shell name. stty: !FSUMB045 failed to get termios attributes: EDC5134I Function not implemented. debug1: Reading configuration data /etc/ssh/ssh_config debug1: zsshSmfSetConnSmfStatus: SMF status is 0 debug2: resolving "ftp.ftpserver.com" port debug2: ssh_connect_direct: needpriv 0 debug1: Connecting to ftp.ftpserver.com [192.208.58.102] port . debug1: Connection established. ... My /etc/ssh/ssh_config only has an entry for Ciphers and MACS - I think that's what IBM ships. I don't have my own ~/.ssh/ssh_config. Anyone have any ideas? Thanks again, Wendell -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN The information contained in this e-mail, and any attachment, is confidential and is intended solely for the use of the intended recipient. Access, copying or re-use of the e-mail or any attachment, or any information contained therein, by any other person is not authorized. If you are not the intended recipient please return the e-mail to the sender and delete it from your computer. Although we attempt to sweep e-mail and attachments for
Re: Batch SFTP without client keys or USS files?
Thanks Kurt! I did see Ed's presentation, but at the time it was a solution for which I didn't have a problem, so it stayed in the bit bucket. Unfortunately, even with your and Ed's expert help, I'm still stumped. I just don't seem to be able to get the "SSH_ASKPASS" to work, even after reading what literally seems to be everything on the Internet about it. (My 2 hour job's gone 2 days now...) Just a reminder: I'm going from a z/OS sftp client to a non-z/os ftp server where I can't store user keys. StrictHostKeyChecking=no is saving the non-z/OS server's keys in ~/.ssh/known_hosts, but I need to specify a userid/pwd to access the server. What I have is: // EXPORT SYMLIST=(*) // SET FROM=USER.DFDSS.XMI // SET TO=CUS12345.ESTFILE //* //SFTP EXEC PGM=BPXBATCH //STDENV DD * SSH_ASKPASS=/tmp/sftp.pw.sh DISPLAY=DISPLAY //* //STDPARM DD *,SYMBOLS=JCLONLY SH cd /tmp; echo cp -Bv "//''" /tmp/ cp -Bv "//''" /tmp/ echo "echo 'ftppwd'" > sftp.pw.sh; chmod 700 sftp.pw.sh; echo "cd /FTPDir"> sftp.cmds; echo "put /tmp/ " >> sftp.cmds; echo "quit" >> sftp.cmds; chmod 600 sftp.cmds; echo ''; echo '-sftp.cmds contents:'; cat sftp.cmds; echo ''; echo '-sftp.pw.sh contents:'; cat sftp.pw.sh; echo ''; /bin/sftp -b sftp.cmds -oBatchMode=no -oPort= -oPasswordAuthentication=yes -oPreferredAuthentications=password -oStrictHostKeyChecking=no -oHostbasedAuthentication=no -oCheckHostIP=no -oPubkeyAuthentication=no -oLogLevel=DEBUG2 -oUser=ftpuser ftp.ftpserver.com; rm sftp.pw.sh; rm sftp.cmds; rm //* //STDOUT DD SYSOUT=M //STDERR DD SYSOUT=M //* Maybe my STDENV isn't getting read, but I can't prove it. I'm getting: FOTS1373 ftpu...@ftp.ftpserver.com: Permission denied (publickey,keyboard-interactive,password). Here's the tail of my output w/DEBUG1: debug1: Host '[ftp.ftpserver.com]:' is known and matches the RSA host key. debug1: Found key in /.ssh/known_hosts:2 debug1: cipher_init: aes128-ctr from source CPACF, used in non-FIPS mode debug1: rekey after 4294967296 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: cipher_init: aes128-ctr from source CPACF, used in non-FIPS mode debug1: rekey after 4294967296 blocks debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,keyboard-interactive,password debug1: No more authentication methods to try. FOTS1373 ftpu...@ftp.ftpserver.com: Permission denied (publickey,keyboard-interactive,password). debug1: zsshSmfSetConnSmfStatus: SMF status is 0 Connection closed. FOTS0841 Connection closed Here's the head, showing the contents of my sftp.pw.sh and sftp.cmds files: cp -Bv //'USER.DFDSS.XMI' /tmp/CUS12345.ESTFILE USER.DFDSS.XMI -> /tmp/CUS12345.ESTFILE: binary -sftp.cmds contents: cd /FTPDir put /tmp/CUS12345.ESTFILE CUS12345.ESTFILE quit -sftp.pw.sh contents: echo 'ftppwd' FSUM1012 The initial working directory was not specified. FSUM1006 A shell was not specified. Processing continues using the default shell name. stty: !FSUMB045 failed to get termios attributes: EDC5134I Function not implemented. debug1: Reading configuration data /etc/ssh/ssh_config debug1: zsshSmfSetConnSmfStatus: SMF status is 0 debug2: resolving "ftp.ftpserver.com" port debug2: ssh_connect_direct: needpriv 0 debug1: Connecting to ftp.ftpserver.com [192.208.58.102] port . debug1: Connection established. ... My /etc/ssh/ssh_config only has an entry for Ciphers and MACS - I think that's what IBM ships. I don't have my own ~/.ssh/ssh_config. Anyone have any ideas? Thanks again, Wendell -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Checksum/Md5 file
On Fri, 16 Oct 2020 19:06:50 +, Jousma, David wrote: >Yes. >https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.csfb400/csfb4za229.htm > Also, convenient but not cryptographically strong: https://www.ibm.com/support/knowledgecenter/SSLTBW_2.3.0/com.ibm.zos.v2r3.bpxa500/cksum.htm > >-Original Message- >From: Sasso, Len >Sent: Friday, October 16, 2020 2:54 PM > >Anyone know if a Checksum/Md5 file can be created on a IBM Mainframe? >If so, how? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: EXTERNAL EMAIL: Checksum/Md5 file
Look at File 900 on the CBT Tape Jerry Whitteridge jerry.whitteri...@albertsons.com Manager Mainframe Systems & HP Non-Stop Albertsons Companies -Original Message- From: IBM Mainframe Discussion List On Behalf Of Sasso, Len Sent: Friday, October 16, 2020 11:54 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: EXTERNAL EMAIL: Checksum/Md5 file Anyone know if a Checksum/Md5 file can be created on a IBM Mainframe? If so, how? Thank You and Please Be Safe! Len Sasso Systems Administrator Senior CSRA, A General Dynamics Information Technology Company 327 Columbia TPKE Rensselaer, NY 12144 Office Hours: M-F 7 AM - 3:45 PM Out-Of-Office: Tue., Oct. 20th - 1:30 PM - Wed., Oct 21st @ 7 AM Phone: (518) 257-4209 Cell: (518) 894-0879 Fax: (518) 257-4300 len.sa...@gdit.com URL: www.gdit.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Checksum/Md5 file
Yes. https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.csfb400/csfb4za229.htm _ Dave Jousma AVP | Director, Technology Engineering Fifth Third Bank | 1830 East Paris Ave, SE | MD RSCB2H | Grand Rapids, MI 49546 616.653.8429 | fax: 616.653.2717 -Original Message- From: IBM Mainframe Discussion List On Behalf Of Sasso, Len Sent: Friday, October 16, 2020 2:54 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Checksum/Md5 file **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** Anyone know if a Checksum/Md5 file can be created on a IBM Mainframe? If so, how? Thank You and Please Be Safe! Len Sasso Systems Administrator Senior CSRA, A General Dynamics Information Technology Company 327 Columbia TPKE Rensselaer, NY 12144 Office Hours: M-F 7 AM - 3:45 PM Out-Of-Office: Tue., Oct. 20th - 1:30 PM - Wed., Oct 21st @ 7 AM Phone: (518) 257-4209 Cell: (518) 894-0879 Fax: (518) 257-4300 len.sa...@gdit.com URL: www.gdit.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Checksum/Md5 file
Anyone know if a Checksum/Md5 file can be created on a IBM Mainframe? If so, how? Thank You and Please Be Safe! Len Sasso Systems Administrator Senior CSRA, A General Dynamics Information Technology Company 327 Columbia TPKE Rensselaer, NY 12144 Office Hours: M-F 7 AM - 3:45 PM Out-Of-Office: Tue., Oct. 20th - 1:30 PM - Wed., Oct 21st @ 7 AM Phone: (518) 257-4209 Cell: (518) 894-0879 Fax: (518) 257-4300 len.sa...@gdit.com URL: www.gdit.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Shopz Question
Replying to my own post after opening a PMR - ServerPac version not available at this time, but CBPDO is available. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Richards, Robert B. Sent: Friday, October 16, 2020 12:39 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Shopz Question Disclaimer – I am not the CICS guy nor do I subscribe to a CICS list! My question is simple for those that may know: Is CICS TS 5.6 orderable through ShopzSeries as a ServerPac order? I attempted to use an inventory report and only 5.5 was listed as an update path. When I attempted without a report, I could see 5.6 but was told I was not entitled: ERROR: This order request is outside the scope of your Shopz user ID authority (POC (for entitled orders)). Bob -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Shopz Question
Disclaimer – I am not the CICS guy nor do I subscribe to a CICS list! My question is simple for those that may know: Is CICS TS 5.6 orderable through ShopzSeries as a ServerPac order? I attempted to use an inventory report and only 5.5 was listed as an update path. When I attempted without a report, I could see 5.6 but was told I was not entitled: ERROR: This order request is outside the scope of your Shopz user ID authority (POC (for entitled orders)). Bob -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Batch SFTP without client keys or USS files?
On Fri, 16 Oct 2020 09:27:07 -0400, Kurt Quackenbush wrote: > >> On 10/15/2020 8:36 PM, Wendell Lovewell wrote: >>> Is it possible to code a proc that would invoke SFTP to transfer a >>> file to or from a non-z/OS ftp server using only that server's public >>> key and a userid/password combination like you would use for FTP or FTPS? >> >> Yes it is possible. Check out the SSH_ASKPASS and DISPLAY environment >> variables. Here's a job snippet that should get you going in the right >> direction. > In almost any case there's the administrative requirement of configuring the server to recognize the client's user's credentials: password, certificate, public key, ... The exception is for unrestricted access, as with anonymous FTP. Is there anonymous SFTP? Publish the private key or password? >//* >//* Create the ssh_askpass script. When called, this script echoes//* >the password to the caller. It is used for obtaining the password >//* "interactively" when running sftp in the UNIX >shell//* >//ASKPASS EXEC PGM=IEBGENER >//SYSPRINT DD SYSOUT=* >//SYSIN DD DUMMY >//SYSUT2DD PATHOPTS=(OWRONLY,OCREAT,OTRUNC), >// PATHMODE=SIRWXU,FILEDATA=TEXT, >// PATH='/tgtWorkDir/Tttt/sftp.pw.sh' >//SYSUT1DD * echo 'password' >/* Stashing a password in a JCL member? But with proper access rules this is comparable to a suitably protected ~userID/.ssh/. Does SFTP require that each directory in the path from "/" be suitably protected? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: [External] Re: Cbttape - dataset being used
2 line CLIST in my ISPF CMDPROC concatenation named "W": PROC 1 DSN ISRDDN E ISPF 3.4, just enter W as a line command. Definitely a time saver. :-) Rex -Original Message- From: IBM Mainframe Discussion List On Behalf Of Graham Harris Sent: Thursday, October 15, 2020 6:54 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: [External] Re: Cbttape - dataset being used Also there is the ISPF built in ISRDDN. ENQ command on the command line. On Thu, 15 Oct 2020 at 05:32, Brian Westerman wrote: > Also there is MXI (option ENQ). Also on the CBT > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN The information contained in this message is confidential, protected from disclosure and may be legally privileged. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, distribution, copying, or any action taken or action omitted in reliance on it, is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to this message and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Batch SFTP without client keys or USS files?
On 10/16/2020 9:16 AM, Kurt Quackenbush wrote: On 10/15/2020 8:36 PM, Wendell Lovewell wrote: Is it possible to code a proc that would invoke SFTP to transfer a file to or from a non-z/OS ftp server using only that server's public key and a userid/password combination like you would use for FTP or FTPS? Yes it is possible. Check out the SSH_ASKPASS and DISPLAY environment variables. Here's a job snippet that should get you going in the right direction. Argh! Sorry about the wrap. Let me try again: //* //* Create the ssh_askpass script. When called, this script echoes//* the password to the caller. It is used for obtaining the password //* "interactively" when running sftp in the UNIX shell//* //ASKPASS EXEC PGM=IEBGENER //SYSPRINT DD SYSOUT=* //SYSIN DD DUMMY //SYSUT2DD PATHOPTS=(OWRONLY,OCREAT,OTRUNC), // PATHMODE=SIRWXU,FILEDATA=TEXT, // PATH='/tgtWorkDir/Tttt/sftp.pw.sh' //SYSUT1DD * echo 'password' /* //* //* Execute sftp in the UNIX shell. //* //* Environment variables: //* SSH_ASKPASS -- identifies a script or program that returns the //* password. //* DISPLAY -- identifies the X11 server. Any non-null value //* enables the SSH_ASKPASS program to read the password. //* //* sftp options: //* -oBatchMode=no -- batch mode is disabled, thus allowing the //* password to be obtained "interactively". //* -b filename -- identifies the file containing the sftp commands. //* -oStrictHostKeyChecking=no -- allows connection to servers that //* are not identified in the client ~/.ssh/known_hosts file. //* -oPort -- identifies the port on which the server is listening. //* //SFTP EXEC PGM=BPXBATCH //STDENVDD * SSH_ASKPASS=/tgtWorkDir/Tttt/sftp.pw.sh DISPLAY=FOOBAR /* //STDPARM DD * SH /bin/sftp -b /tgtWorkDir/Tttt/sftp.cmds -oBatchMode=no -oStrictHostKeyChecking=no -oPort=22use...@source.sftp.host.name /* //STDOUTDD SYSOUT=* //STDERRDD SYSOUT=* I didn't attend but I heard Ed Jaffe in the recent online SHARE discussed this very topic in the Bit Bucket session. I would check out his slides if you have access. Kurt Quackenbush -- IBM, SMP/E Development Chuck Norris never uses CHECK when he applies PTFs. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Batch SFTP without client keys or USS files?
On 10/15/2020 8:36 PM, Wendell Lovewell wrote: Is it possible to code a proc that would invoke SFTP to transfer a file to or from a non-z/OS ftp server using only that server's public key and a userid/password combination like you would use for FTP or FTPS? Yes it is possible. Check out the SSH_ASKPASS and DISPLAY environment variables. Here's a job snippet that should get you going in the right direction. //* //* Create the ssh_askpass script. When called, this script echoes //* the password to the caller. It is used for obtaining the password //* "interactively" when running sftp in the UNIX shell. //*//ASKPASS EXEC PGM=IEBGENER //SYSPRINT DD SYSOUT=* //SYSIN DD DUMMY //SYSUT2DD PATHOPTS=(OWRONLY,OCREAT,OTRUNC), // PATHMODE=SIRWXU,FILEDATA=TEXT, // PATH='/tgtWorkDir/Tttt/sftp.pw.sh' //SYSUT1DD * echo 'password' /* //* //* Execute sftp in the UNIX shell. //* //* Environment variables: //* SSH_ASKPASS -- identifies a script or program that returns the //* password. //* DISPLAY -- identifies the X11 server. Any non-null value //* enables the SSH_ASKPASS program to read the password. //* //* sftp options: //* -oBatchMode=no -- batch mode is disabled, thus allowing the //* password to be obtained "interactively". //* -b filename -- identifies the file containing the sftp commands. //* -oStrictHostKeyChecking=no -- allows connection to servers that //* are not identified in the client ~/.ssh/known_hosts file. //* -oPort -- identifies the port on which the server is listening. //*//SFTP EXEC PGM=BPXBATCH //STDENVDD * SSH_ASKPASS=/tgtWorkDir/Tttt/sftp.pw.sh DISPLAY=FOOBAR /* //STDPARM DD * SH /bin/sftp -b /tgtWorkDir/Tttt/sftp.cmds -oBatchMode=no -oStrictHostKeyChecking=no -oPort=22use...@source.sftp.host.name /* //STDOUTDD SYSOUT=* //STDERRDD SYSOUT=* I didn't attend but I heard Ed Jaffe in the recent online SHARE discussed this very topic in the Bit Bucket session. I would check out his slides if you have access. Kurt Quackenbush -- IBM, SMP/E Development Chuck Norris never uses CHECK when he applies PTFs. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Batch SFTP without client keys or USS files?
Classification: HCL Internal Up to the "foreign host" -Original Message- From: IBM Mainframe Discussion List On Behalf Of Paul Gilmartin Sent: Thursday, October 15, 2020 10:55 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Batch SFTP without client keys or USS files? [CAUTION: This Email is from outside the Organization. Unless you trust the sender, Don’t click links or open attachments as it may be a Phishing email, which can steal your Information and compromise your Computer.] On Thu, 15 Oct 2020 19:36:33 -0500, Wendell Lovewell wrote: > >... modifying USS files like even ~/.ssh/anything is probably also off >limits. > Why? But I'd expect you'd need to install the client's public key in the server's authorized_keys, which might be a problem. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ::DISCLAIMER:: The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Dr. John Ehrman
Sunil, You can find the PDF on this Marist page (first link on the page): https://idcp.marist.edu/assembler-resources In article you wrote: > On Wednesday, 21 February 2018 at 09:18:12 UTC-5, Don Poitras wrote: > > I worked with John back in the 90s when I was part of the languages > > group that he headed at Share. I always made it a point to attend > > his pitches as they were full of information that I could use and > > the hand-outs were always excellent. I just found that he had updated > > his excellent "Assembler Language Programming for IBM z System Servers" > > book: > > > > http://idcp.marist.edu/enterprisesystemseducation/assemblerlanguageresources-1.html > > > > > > I'm proud to say that I contributed to this. I found what I think > > is the smallest error possible in the version one of the book. There > > was a table where the bits were described for floating point values > > and one of the bits was wrong. :) > > > > He will be very missed. > > In article <5a8c8a7e...@vse2pdf.com> you wrote: > > > Those of you who have followed this list for years know well that Dr. > > > John Ehrman was the motivating force behind the development of the > > > High-Level Assembler (I often referred to him as the God Father of > > > HLASM). > > > I am deeply saddened to report that John passed away this morning > > > (Tuesday, 20 February 2018) following a protracted battle with cancer. > > > His wife, Tineke, reports: "He died in his sleep, and is now at peace and > > > pain free. John will be cremated; in the near future there will be a > > > memorial service at our church in Palo Alto." > > > I will convey any further information on the memorial to this listing. > > > > -- > > Don Poitras - SAS Development - SAS Institute Inc. - SAS Campus Drive > > sas...@sas.com (919) 531-5637 Cary, NC 27513 > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to list...@listserv.ua.edu with the message: INFO IBM-MAIN > I got to know John today while I was trying to learn Assembler via a youtube > video. The link said there was a petition to request IBM for FREE/ XA. That > link was removed and now I see > http://idcp.marist.edu/enterprisesystemseducation/assemblerlanguageresources-1.html > is also not accessible. I hope it is available freely now as John intended > it to be. > Let me know. > Was shocked to read that he passed away almost three years back. May his soul > rest in peace. -- Don Poitras -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: [External] Re: ISPF dsn sort
Many thanks to everyone who has contributed to this thread. My tests corroborate the fact that selecting the "Display Total Tracks" option affects the behaviour. Also the help for the panel (in particular for that option) explains the behaviour I am seeing. Ho hum. I live and learn. 46 years on mainframe and still going.. So as the OP I say, "Great job folks, thanks for the help". Lennie Lennie Dymoke-Bradshaw Consultant working on contract for BMC mainframe Services by RSM Partners ‘Dance like no one is watching. Encrypt like everyone is.’ -Original Message- From: IBM Mainframe Discussion List On Behalf Of Pommier, Rex Sent: 15 October 2020 15:01 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: [External] Re: ISPF dsn sort That's not what is happening. A different poster nailed it earlier. If the "Display Total Tracks" is selected on the dataset list utility screen, the first time you hit PF10/11 to go right or left, ISPF needs to read the entire list in order to populate the "total tracks" line. Thus you get the progress bar. If you don't have that selected, ISPF only works with the screen's worth of data so no progress bar until you do a sort. Once the sort is requested, ISPF needs to read the entire list to be able to do the sort correctly. Once ISPF has all the information it needs, you can resort the data any way you want and it won't need to reread it. At least that's what I've seen with my testing of it. Rex -Original Message- From: IBM Mainframe Discussion List On Behalf Of Bob Bridges Sent: Thursday, October 15, 2020 6:02 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: [External] Re: ISPF dsn sort I've never noticed the behavior, but now that the OP has pointed it out, the reading-the-list-again explanation doesn't satisfy me. If there's a delay and a progress bar when reading the list to do the sort, why is there no similar delay when scrolling right to see the data which (according to this explanation) has not yet been collected? I'm not buying it. --- Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313 /* Our world is not divided by race, color, gender, or religion. Our world is divided into wise people and fools. And fools divide themselves by race, color, gender, or religion. -Mohamad Safa */ -Original Message- From: IBM Mainframe Discussion List On Behalf Of Jesse 1 Robinson Sent: Tuesday, October 13, 2020 13:12 This is one of those IIRC posts. I think this behavior goes back decades. The reason is as Kolusu states. Moreover--IIRC--the very appearance of the 'progress bar' was in response to what could be a long delay. Delay to the point that the user might suspect that the process was hung outright. I remember when the bar was introduced with that very explanation. Everything in those distant days was slower than today. As for the difference in processing, I could imagine an RFE asking for a 'quick sort' based only on the data previously collected and displayed. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Sri h Kolusu Sent: Tuesday, October 13, 2020 9:47 AM 3.4 listing shows the list of datasets sorted on the Dataset name by default. Now when you issue SORT DSORG command , ISPF needs to read in the list once again and make DSORG as the primary key and then present you the list sorted on that order. You will -Original Message- From: IBM Mainframe Discussion List On Behalf Of Lennie Dymoke-Bradshaw Sent: Tuesday, October 13, 2020 11:18 This is something that has puzzled me for years. I can use ISPF 3.4 to display a set of data sets. If I scroll right then I am shown the space usage figures. Scroll right again and I am shown the DSORG, RECFM, Lrecl and Blksize. If I now enter SORT DSORG I am presented with a progress bar and I am informed that information is being collected to perform the sort. Given that the DSORG was already displayed, why does ISPF go and collect the same information again? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN The information contained in this message is confidential, protected from disclosure and may be legally privileged. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, distribution, copying, or any action taken or action omitted in reliance on it, is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to this message and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. -- For IBM-MAIN subscribe / signoff / archive access
Re: Cbttape - dataset being used
David, There is a ZAP for TASID in File 980 on the CBTTAPE that fixes an issue under z/os 2.2 and 2.3. Joe On Fri, Oct 16, 2020 at 4:55 AM David Crayford wrote: > On 2020-10-16 1:43 PM, Tom Conley wrote: > > On 10/15/2020 10:19 PM, David Crayford wrote: > >> There's no need to install TASID. The ISPF ISRDDN utility has an ENQ > >> dialog and is shipped as part of ISPF. From any command line enter > >> DDLIST;ENQ. > >> > > > > The major advantage to TASID is that it has a switch which will give > > you the GRS Star information so you can see the ENQ's for all the > > systems in the SYSPLEX. That feature, unfortunately, was not included > > in ISRDDN. ISRDDN will only show you local ENQ's. > > > Nice! If you have a requirement for TASID you should download it from > IBM and not the CBT tape https://www.ibm.com/support/pages/tasid-v521-tool > . > > > > Regards, > > Tom Conley > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Cbttape - dataset being used
On 2020-10-16 1:43 PM, Tom Conley wrote: On 10/15/2020 10:19 PM, David Crayford wrote: There's no need to install TASID. The ISPF ISRDDN utility has an ENQ dialog and is shipped as part of ISPF. From any command line enter DDLIST;ENQ. The major advantage to TASID is that it has a switch which will give you the GRS Star information so you can see the ENQ's for all the systems in the SYSPLEX. That feature, unfortunately, was not included in ISRDDN. ISRDDN will only show you local ENQ's. Nice! If you have a requirement for TASID you should download it from IBM and not the CBT tape https://www.ibm.com/support/pages/tasid-v521-tool. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
