zOSMF

2022-05-04 Thread BM
Does anyone have/implemented a test process for zOSMF, something that will 
check access to all the services and validate security is working and all parts 
up and available.

Thanks,

BM

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: What is SUBCOM?

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 20:15:54 -0500, Paul Gilmartin wrote:

>On Wed, 4 May 2022 23:19:07 +, Ronald Wells wrote:
>
>>Search google ibm term subcom -- good definitions
>> 
>I've looked at several of those, to no  avail.  Where can I find the
>answer to my question below?
> 
Ah!  found it: 


With my simple-minded CMS skills, I have long been perplexed that:
ADDRESS MVS EXECIO ... from an Exec started from TSO and
ADDRESS MVS EXECIO ... from an Exec started from UNIIX
have different syntax.  Are there really two different instances of
the MVS command environment?  Why‽

>>-Original Message-
>>From: Paul Gilmartin
>>Sent: Wednesday, May 4, 2022 6:12 PM
>>   ...
>>Where are the commands supported in the MVS command environment listed?

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: What is SUBCOM?

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 23:19:07 +, Ronald Wells wrote:

>Search google ibm term subcom -- good definitions
> 
I've looked at several of those, to no  avail.  Where can I find the
answer to my question below?

>-Original Message-
>From: Paul Gilmartin
>Sent: Wednesday, May 4, 2022 6:12 PM
>   ...
>Where are the commands supported in the MVS command environment listed?

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 20:12:11 -0400, Phil Smith III \ wrote:

>Shmuel wrote:
>.   ...
>>That is, SUBCOM is available from the TSO and MVS host command
>environments."
>
>Oh. Well, Rob had written:
>>When invoked outside of SDSF, as your example shows, it returns a non-zero
>return code to indicate that it is not been invoked from SDSF NP %.
>
>>The reason for this is that users can code rexx that can be called from
>both environments and can take decisions based on the RC.
> 
I'm trying to visualize the Venn diagram for two predicates and four regions:
In SDSF vs. not in SDSF
ISFCALLS(ON) vs. ISFCALLS(OFF)

What distinct behaviors characterize those four regions?

Also, in 
:
SSTYPE=JES2
requests that SDSF process JES2 rather than determining whether to process 
JES2 or JES3.

I'd expect that there be a complementary:
SSTYPE=JES3

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Phil Smith III
Shmuel wrote:

>From z/OS 2.5 TSO/E REXX Reference, SA32-0972-50:

 

>"You can use the SUBCOM command in REXX execs that run in any address
space, TSO/E or non-TSO/E.

>That is, SUBCOM is available from the TSO and MVS host command
environments."

 

Oh. Well, Rob had written:
>When invoked outside of SDSF, as your example shows, it returns a non-zero
return code to indicate that it is not been invoked from SDSF NP %.

>The reason for this is that users can code rexx that can be called from
both environments and can take decisions based on the RC.

 

So I guess I'm suggesting that this is not the correct way to determine
whether you're "in" SDSF.

 

But it sounds like his original, well-meant suggestion to add the ISFQUERY
call is just plain not useful for this case, alas. Darn. I was hoping to be
able to find out what the settings were, and for Lionel's utility to be able
to display them. So it's a big "nevermind"!


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: What is SUBCOM?

2022-05-04 Thread Sri h Kolusu
>> Unclearly documented in 
>> .

If it's a TSO command, why is it not documented in the  TSO command Ref?

Where are the commands supported in the MVS command environment listed?

Gil,

The link you posted is a part of " TSO/E REXX commands"  in the manual " z/OS 
TSO/E REXX Reference" 

This is the beginning of the " TSO/E REXX commands"  

https://www.ibm.com/docs/en/zos/2.5.0?topic=reference-tsoe-rexx-commands

>> But which host command environments support it?  Is SUBCOM supported by only 
>> the TSO and MVS host command environments?  

The link explains what is available depending on how the exec is invoked (from 
TSO/E, non-TSO/E address space, from ISPF)

 
Thanks,
Kolusu

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: What is SUBCOM?

2022-05-04 Thread Ronald Wells
Search google ibm term subcom -- good definitions

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Paul Gilmartin
Sent: Wednesday, May 4, 2022 6:12 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: What is SUBCOM?

** EXTERNAL EMAIL - USE CAUTION **


On Wed, 4 May 2022 19:11:46 +, Seymour J Metz wrote:
>
>From z/OS 2.5 TSO/E REXX Reference, SA32-0972-50:
>
>"You can use the SUBCOM command in REXX execs that run in any address space, 
>TSO/E or non-TSO/E.
>That is, SUBCOM is available from the TSO and MVS host command environments."
>
OK.  It's a command.  But which host command environments support it?  Is 
SUBCOM supported by only the TSO and MVS host command environments?  If so, I'd 
like to see the word "only" in the sentence quoted above, and "That is" omitted 
because it seems to imply that the second sentence is a consequence or a 
paraphrase of the first.

Which of the following work, and why (not)?
address TSO 'SUBCOM TSO'
address MVS 'SUBCOM MVS'
address ISREDIT 'SUBCOM ISREDIT'
address ISPEXEC 'SUBCOM ISPEXEC'
address SDSF'SUBCOM SDSF   '
address SH  'SUBCOM SH '

Unclearly documented in 
.

If it's a TSO command, why is it not documented in the  TSO command Ref?

Where are the commands supported in the MVS command environment listed?

--
gil


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Email Disclaimer

This E-mail contains confidential information belonging to the sender, which 
may be legally privileged information. This information is intended only for 
the use of the individual or entity addressed above. If you are not the 
intended recipient, or an employee or agent responsible for delivering it to 
the intended recipient, you are hereby notified that any disclosure, copying, 
distribution, or the taking of any action in reliance on the contents of the 
E-mail or attached files is strictly prohibited.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


What is SUBCOM?

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 19:11:46 +, Seymour J Metz wrote:
>
>From z/OS 2.5 TSO/E REXX Reference, SA32-0972-50:
>
>"You can use the SUBCOM command in REXX execs that run in any address space, 
>TSO/E or non-TSO/E.
>That is, SUBCOM is available from the TSO and MVS host command environments."
>
OK.  It's a command.  But which host command environments
support it?  Is SUBCOM supported by only the TSO and MVS host
command environments?  If so, I'd like to see the word "only" in
the sentence quoted above, and "That is" omitted because it
seems to imply that the second sentence is a consequence or
a paraphrase of the first.

Which of the following work, and why (not)?
address TSO 'SUBCOM TSO'
address MVS 'SUBCOM MVS'
address ISREDIT 'SUBCOM ISREDIT'
address ISPEXEC 'SUBCOM ISPEXEC'
address SDSF'SUBCOM SDSF   '
address SH  'SUBCOM SH '

Unclearly documented in 
.

If it's a TSO command, why is it not documented in the  TSO command Ref?

Where are the commands supported in the MVS command environment listed?

-- 
gil


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Checksum of "legacy" load module?

2022-05-04 Thread Charles Mills
I don't think LOAD would obviate the CSECT order issue. I also think
separate checksums by CSECT would be nice as a way to pinpoint any
differences.

I think one could defer overlay support until Version 2. 

I have certainly not thought the utility through thoroughly. I have
experience dealing with load modules at the record and byte level (I wrote
software that copied a load module PDS -> PC -> PDS, resulting in an
executable load module) but I know next to nothing about the DASD structure
of program objects.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Farley, Peter x23353
Sent: Wednesday, May 4, 2022 1:46 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

Why not checksum (or otherwise securely hash) the memory images of the
module after each one to be compared is LOADed to the same starting storage
address so that address resolution doesn't cause irrelevant differences?
Wouldn't that be simpler?

Of course, then you would have to somehow deal with overlay modules and
RMODE SPLIT modules . . .  Never mind, dumb idea.

Peter

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of
Charles Mills
Sent: Wednesday, May 4, 2022 4:28 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

I should close the loop on this. I never actually did this, having
determined that the checksum test would be negative (different) in any
event.

It appears that depending on the order that PTFs were applied, the CSECTs
are in a different order in the load module, and so two programs that are
utterly functionally equivalent would have different checksums.

You know what would be an interesting product? A program that would take a
load module, "decompose" it into its constituent CSECTs, and checksum them
(including RLDs and ESDs), both individually and as a whole (in some
consistent order, such as collating sequence by name). That would let you
compare two load modules "logically," and if they were different, tell you
which CSECTs were different, independent of CSECT order, block size, etc. 

(Yes, you can hypothesize a program where CSECT order made a difference, but
it sounds unusual to me.)

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Charles Mills
Sent: Thursday, April 28, 2022 8:57 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

I apologize. Other things got in the way and I have not yet done this.

I recognize the great possibility of "false negatives": two load modules
could be functionally identical but checksum differently.

One might even quibble about the meaning of "functionally identical": if one
load module does LHI R0,0 and another does LA R0,0 are they functionally
identical? Most people would say they were, but obviously a checksum program
would (or should!) disagree.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Seymour J Metz
Sent: Thursday, April 28, 2022 5:23 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

If you do a COPY then the records, and hence the hash, should be identical.
It's COPYMOD that reblocks.

I don't know of any utility that will compare only the csect text. Further,
two load modules might differ only in the RLD records, and that definitely
should be picked up as a change in version.

--

This message and any attachments are intended only for the use of the
addressee and may contain information that is privileged and confidential.
If the reader of the message is not the intended recipient or an authorized
representative of the intended recipient, you are hereby notified that any
dissemination of this communication is strictly prohibited. If you have
received this communication in error, please notify us immediately by e-mail
and delete the message and any attachments from your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SAF without an ESM

2022-05-04 Thread coasthermit
Many years back I IPLed my onepak system with RACF disabled to see what 
happened.Every access of a resource sent a reply prompt to the console for 
YES/NO.It took a while but I eventually got enough of MVS up that I could logon 
to TSO/E.I considered writing my own RACF exit that returned OK for every 
access request, but in the end I just built a default RACF data base for that 
system to use.Maybe SAF still works the same way.
 Original message From: zMan  Date: 
5/5/22  00:51  (GMT+08:00) To: IBM-MAIN@LISTSERV.UA.EDU Subject: SAF without an 
ESM On https://www.ibm.com/docs/en/zos-basic-skills?topic=zos-what-is-saf , 
IBMsays:> System authorization facility or SAF is an interface defined by MVS™ 
that> enables programs to use system authorization services to control access 
to> resources, such as data sets and MVS commands. SAF either processes> 
security authorization requests directly or works with RACF®, or other> 
security product, to process them.Someone on r/mainframe asks what SAF does 
without an ESM. I'm thinking "notmuch", but the last sentence above sort of 
suggests otherwise--unless "SAFeither processes security authorization requests 
directly" means "returnsRC=0 in all cases", in which case it would be accurate 
but IMHO overlyvague. 
Thoughts?--For
 IBM-MAIN subscribe / signoff / archive access instructions,send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Coping the content of a single member into other members

2022-05-04 Thread Michael Brennan
Use IEBCOPY with the rename option:

//SYSIN   DD *
 COPY INDD=((SYSUT1,R)),OUTDD=SYSUT2
 S MEMBER=((INIT,NEWNAME1))
 COPY INDD=((SYSUT1,R)),OUTDD=SYSUT2
 S MEMBER=((INIT,NEWNAME2))

Keep repeating the COPY and S MEMBER statements until you have replaced
every member that you desire too.
You have to repeat the COPY statement as IEBCOPY does not let you have
duplicate members in a Select statements.

Michael

On Wed, May 4, 2022 at 10:13 AM esst...@juno.com  wrote:

> .
> I should be able to accomplish this, but I seem to be having a brain
> freeze.
> .
>  I have about 30 Members in a PDS that contain different values (CLEAR,
> GET, START, RESUME, etc.)
> At times I want to replace the contents of all 30 Members with the value
> of INIT.
> .
> Essentially I want to copy the CONTENT of a specific Member into the 30
> other members - replacing the contents of those members.
> IEBCOPY copies/replaces the member.
> I want to replace the value in each member with the same contents of INIT.
> .
> Any thoughts on what IBM utility can accomplish this ?
> .
> Will ADRDSSU provide that capbility ?
> .
> Sample JCL would be helpful -
> .
> Paul
> .
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


-- 
Michael Brennan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Checksum of "legacy" load module?

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 13:28:29 -0700, Charles Mills wrote:
>.   ...
>It appears that depending on the order that PTFs were applied, the CSECTs
>are in a different order in the load module, and so two programs that are
>utterly functionally equivalent would have different checksums.
>
I had one co-worker who (compulsively?) supplied ORDER statements for all
his CSECTs, eliminating uncontrolled variables.  This became increasingly
challenging with modern compilers emitting a collection of sections difficult
to predict.  IIRC,  wrote a utility to enumerate the CSECTs from a SYSPRINT.

And I persuaded another co-worker to eschew PC sections which SMP/E
accumulates in a secular fashion.

>You know what would be an interesting product? A program that would take a
>load module, "decompose" it into its constituent CSECTs, ...
>...
>(Yes, you can hypothesize a program where CSECT order made a difference, but
>it sounds unusual to me.)
> 
Some programmers bracket their modules with trivial sections in order
to calculate their total size.

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Checksum of "legacy" load module?

2022-05-04 Thread Farley, Peter x23353
Why not checksum (or otherwise securely hash) the memory images of the module 
after each one to be compared is LOADed to the same starting storage address so 
that address resolution doesn't cause irrelevant differences?  Wouldn't that be 
simpler?

Of course, then you would have to somehow deal with overlay modules and RMODE 
SPLIT modules . . .  Never mind, dumb idea.

Peter

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Charles Mills
Sent: Wednesday, May 4, 2022 4:28 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

I should close the loop on this. I never actually did this, having determined 
that the checksum test would be negative (different) in any event.

It appears that depending on the order that PTFs were applied, the CSECTs are 
in a different order in the load module, and so two programs that are utterly 
functionally equivalent would have different checksums.

You know what would be an interesting product? A program that would take a load 
module, "decompose" it into its constituent CSECTs, and checksum them 
(including RLDs and ESDs), both individually and as a whole (in some consistent 
order, such as collating sequence by name). That would let you compare two load 
modules "logically," and if they were different, tell you which CSECTs were 
different, independent of CSECT order, block size, etc. 

(Yes, you can hypothesize a program where CSECT order made a difference, but it 
sounds unusual to me.)

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Charles Mills
Sent: Thursday, April 28, 2022 8:57 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

I apologize. Other things got in the way and I have not yet done this.

I recognize the great possibility of "false negatives": two load modules could 
be functionally identical but checksum differently.

One might even quibble about the meaning of "functionally identical": if one 
load module does LHI R0,0 and another does LA R0,0 are they functionally 
identical? Most people would say they were, but obviously a checksum program 
would (or should!) disagree.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Seymour J Metz
Sent: Thursday, April 28, 2022 5:23 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

If you do a COPY then the records, and hence the hash, should be identical.
It's COPYMOD that reblocks.

I don't know of any utility that will compare only the csect text. Further, two 
load modules might differ only in the RLD records, and that definitely should 
be picked up as a change in version.

--

This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Checksum of "legacy" load module?

2022-05-04 Thread Charles Mills
I should close the loop on this. I never actually did this, having
determined that the checksum test would be negative (different) in any
event.

It appears that depending on the order that PTFs were applied, the CSECTs
are in a different order in the load module, and so two programs that are
utterly functionally equivalent would have different checksums.

You know what would be an interesting product? A program that would take a
load module, "decompose" it into its constituent CSECTs, and checksum them
(including RLDs and ESDs), both individually and as a whole (in some
consistent order, such as collating sequence by name). That would let you
compare two load modules "logically," and if they were different, tell you
which CSECTs were different, independent of CSECT order, block size, etc. 

(Yes, you can hypothesize a program where CSECT order made a difference, but
it sounds unusual to me.)

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Charles Mills
Sent: Thursday, April 28, 2022 8:57 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

I apologize. Other things got in the way and I have not yet done this.

I recognize the great possibility of "false negatives": two load modules
could be functionally identical but checksum differently.

One might even quibble about the meaning of "functionally identical": if one
load module does LHI R0,0 and another does LA R0,0 are they functionally
identical? Most people would say they were, but obviously a checksum program
would (or should!) disagree.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Seymour J Metz
Sent: Thursday, April 28, 2022 5:23 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Checksum of "legacy" load module?

If you do a COPY then the records, and hence the hash, should be identical.
It's COPYMOD that reblocks.

I don't know of any utility that will compare only the csect text. Further,
two load modules might differ only in the RLD records, and that definitely
should be picked up as a change in version.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Rob Scott
ISFMIGRL DD can be allocated to DUMMY  provide relief for the original reported 
problem which occurred for a REXX exec invoked from SDSF NP with a % character. 
The issue you are describing seems to be for SDSF rexx called from TSO .

Did specifying ISFPREFIX and ISFOWNER resolve the issue?

If not, there are SDSF trace facilities that might help and they are documented 
in the User Guide.




Rob Scott

Principal Architect, Mainframe Systems Tools

Distinguished Engineer
Rocket Software
77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA
Tel: +1.781.684.2305
Email: rsc...@rs.com
Web: www.rocketsoftware.com


From: IBM Mainframe Discussion List  on behalf of 
Phil Smith III 
Sent: Wednesday, May 4, 2022 7:41:17 PM
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: SDSF - ISPF questions (wishes?)

EXTERNAL EMAIL





Rob Scott wrote, in part:
> If this does not help you solve the problems, please open a case with IBM
and our support will help debug.



OK, thanks. I can't open a case as we don't have that kind of access as an
IBM Dallas customer.



That APAR really shouldn't be suggesting ISFMIGRL when it appears not to be
a thing, of course.



If this were CMS, you could issue:
address command 'SUBCOM SDSF'
to test whether the SDSF subcommand environment was available (RC=0, yes;
RC=1, no). Too bad a generic equivalent didn't get carried into Rexx in
z/OS.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



Rocket Software, Inc. and subsidiaries ? 77 Fourth Avenue, Waltham MA 02451 ? 
Main Office Toll Free Number: +1 855.577.4323
Contact Customer Support: 
https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
http://www.rocketsoftware.com/manage-your-email-preferences
Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy


This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 19:11:46 +, Seymour J Metz  wrote:
>?
>
>From z/OS 2.5 TSO/E REXX Reference, SA32-0972-50:
>
>"You can use the SUBCOM command in REXX execs that run in any address space, 
>TSO/E or non-TSO/E.
>That is, SUBCOM is available from the TSO and MVS host command environments."
>
I stand corrected.  Clearly documented in 
.
Is this new?  Like Phil, I was accustomed to having it only in CMS.

I'll submit an RCF on:
When you run an exec in a non-TSO/E address space, the following default 
host command environments are available:
MVS (the default environment) 
...
In fact, when I run an exec in UNIX shell, clearl " a non-TSO/E address space",
the default environment is not MVS but SH.
___
>From: Phil Smith III
>Sent: Wednesday, May 4, 2022 2:41 PM
>...
>If this were CMS, you could issue:
>address command 'SUBCOM SDSF'
>to test whether the SDSF subcommand environment was available (RC=0, yes;
>RC=1, no). Too bad a generic equivalent didn't get carried into Rexx in
>z/OS.

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Seymour J Metz
?

>From z/OS 2.5 TSO/E REXX Reference, SA32-0972-50:

"You can use the SUBCOM command in REXX execs that run in any address space, 
TSO/E or non-TSO/E.
That is, SUBCOM is available from the TSO and MVS host command environments."


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Phil Smith III [li...@akphs.com]
Sent: Wednesday, May 4, 2022 2:41 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF - ISPF questions (wishes?)

Rob Scott wrote, in part:
> If this does not help you solve the problems, please open a case with IBM
and our support will help debug.



OK, thanks. I can't open a case as we don't have that kind of access as an
IBM Dallas customer.



That APAR really shouldn't be suggesting ISFMIGRL when it appears not to be
a thing, of course.



If this were CMS, you could issue:
address command 'SUBCOM SDSF'
to test whether the SDSF subcommand environment was available (RC=0, yes;
RC=1, no). Too bad a generic equivalent didn't get carried into Rexx in
z/OS.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 14:41:17 -0400, Phil Smith III wrote:
>...
>That APAR really shouldn't be suggesting ISFMIGRL when it appears not to be
>a thing, of course.
> 
Yes.

>If this were CMS, you could issue:
>address command 'SUBCOM SDSF'
>to test whether the SDSF subcommand environment was available (RC=0, yes;
>RC=1, no). Too bad a generic equivalent didn't get carried into Rexx in
>z/OS.
> 
Yes.  I've similarly wished for:
SUBCOM ISREDIT  (I know an alternative.)
SUBCOM ISPEXEC  (I know no alternative.)

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Phil Smith III
Rob Scott wrote, in part:
> If this does not help you solve the problems, please open a case with IBM
and our support will help debug.

 

OK, thanks. I can't open a case as we don't have that kind of access as an
IBM Dallas customer.

 

That APAR really shouldn't be suggesting ISFMIGRL when it appears not to be
a thing, of course.

 

If this were CMS, you could issue:
address command 'SUBCOM SDSF'
to test whether the SDSF subcommand environment was available (RC=0, yes;
RC=1, no). Too bad a generic equivalent didn't get carried into Rexx in
z/OS.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Python order question

2022-05-04 Thread Linda Chui


Another approach is to resubmit via ShopZ but include a comment about not 
wanting S  There's a detailed set of instructions written on how to do that 
for Node.js, but you can follow the same for Python:
https://community.ibm.com/community/user/ibmz-and-linuxone/blogs/blog-entry1/2019/07/15/obtain-the-smpe-edition-and-optional-support-of-ibm-sdk-for-nodejs-zos

Hope this helps!



On Thu, 28 Apr 2022 11:57:31 -0400, Matt Hogstrom  wrote:

>I downloaded the pax edition from here 
>
>
>Matt Hogstrom
>m...@hogstrom.org
>
>“It may be cognitive, but, it ain’t intuitive."
>— Hogstrom
>
>> On Apr 28, 2022, at 11:51 AM, IBM user  wrote:
>> 
>> Has anyone figured out how to order Python without the S subscription 
>> through shopZ? Whenever I try, it forces me to choose a bundle that includes 
>> the S
>> 
>
>--
>For IBM-MAIN subscribe / signoff / archive access instructions,
>send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 13:51:03 -0400, Phil Smith III wrote:
>...
>Maybe; I missed it because it's meaningless as written. Just define a dummy 
>DD*?
>
It's somewhat common for utilities to condition their behavior on
the mere existence of a DD.

>...  Or what? Googling "isfmigrl" is a Googlewhack!
>
You probably noticed that's an APAR: 
:
Local fix
As a work-around, the SDSF special DD ISFMIGRL can be
allocated to avoid this problem.

Status
CLOSED FIN
PE  NoPE

>*No, makes no difference, I just tried it.
>
Can one APAR an APAR?

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SAF without an ESM

2022-05-04 Thread Michael Joseph
Check out CBT file 165 (www.cbttape.org). Craig Yasuna wrote a functional ESM 
that shows you how to handle the SAF calls and returns.

Regards,
Michael Joseph
Sr. Systems Engineer
Blue Hill Data Services | Fully Managed Data Center Hosting Solutions  

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Charles Mills
Sent: Wednesday, May 4, 2022 1:21 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SAF without an ESM

EXTERNAL EMAIL: Do not reply, click links, or open attachments until you verify 
the SMTP address (sender @domain.com) next to the display name is a trusted 
address.



My impression is that it does whatever you want it to do! That is, it either 
permits everything, or you get to write your own rules; write your own ESM, 
essentially. You need to write the part that SAF calls, and of course you also 
need to come up with some sort of administration, some way to configure what 
you have written.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of zMan
Sent: Wednesday, May 4, 2022 9:51 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: SAF without an ESM

On https://www.ibm.com/docs/en/zos-basic-skills?topic=zos-what-is-saf , IBM
says:

> System authorization facility or SAF is an interface defined by MVS™ 
> that enables programs to use system authorization services to control 
> access to resources, such as data sets and MVS commands. SAF either 
> processes security authorization requests directly or works with 
> RACF®, or other security product, to process them.


Someone on r/mainframe asks what SAF does without an ESM. I'm thinking "not 
much", but the last sentence above sort of suggests otherwise--unless "SAF 
either processes security authorization requests directly" means "returns
RC=0 in all cases", in which case it would be accurate but IMHO overly vague. 
Thoughts?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OSMF Portable Software Instance - Deployment Question

2022-05-04 Thread Kurt J. Quackenbush
Still trying to understand your desired outcome.  You do want to create a new 
master catalog, OK, but are you also trying to create new user catalogs 
connected to the new master, or are you trying to connect existing user 
catalogs to the new master?  z/OSMF currently supports the former but not the 
latter.  Or of course maybe you don't want any user catalogs at all.  That's 
also fine.

Let's assume the target data set name for one of your zFS data sets is 
OMVS.ROOT.ZFS, and the temporary catalog alias for your new master catalog is 
ZOS25.  When creating the workflow instances z/OSMF expects to find a data set 
alias ZOS25.OMVS.ROOT.ZFS, related to data set OMVS.ROOT.ZFS.  (Sorry, zFS is 
VSAM, so not a data set alias, but a PATH.)  So, if you create names and 
catalog entries like that, then Software Management should be able to find all 
the data sets and create the workflow instance.  Check out the generated RENAME 
job for examples of how Software Management creates those names and catalog 
entries.

Kurt Quackenbush
IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com
Chuck Norris never uses CHECK when he applies PTFs.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Wednesday, May 4, 2022 12:15 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: z/OSMF Portable Software Instance - Deployment Question

Kurt,

Our Shop standard dictates that a new master catalog is created with every z/OS 
upgrade. An additional standard clones new master catalogs from the new z/OS 
master catalog so that every lpar has its own new master catalog as the 
implementation rolls across the board. So, yes, I really want to create that 
new master catalog. What I want, in this case, doesn't matter.

I used IEFBR14 to create the names that the configuration was expecting and 
still no joy. I am assuming z/OSMF's instance was aware that the source 
datasets were ZFS files and expected the targets to be the same. Is this 
assumption correct? If so, I'll try to get the SMS sheriff to modify the ACS 
routines this one time to allow for their creation as ZOS25.OMVS.*. That should 
enable the workflow instance creation to proceed, right?

Bob

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Phil Smith III
Oops, when I said it was a Googlewhack I meant to add that the lone hit *is*
this APAR.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Rob Scott
Isfquery has a couple of uses.

It can be used  inside a rexx exec invoked from NP to extract the environment 
variables.

When invoked outside of SDSF, as your example shows, it returns a non-zero 
return code to indicate that it is not been invoked from SDSF NP %.

The reason for this is that users can code rexx that can be called from both 
environments and can take decisions based on the RC.

As you are running SDSF rexx outside of SDSF, you will have to code the special 
variable values like ISFOWNER prior to the first ISFEXEC statement.

If this does not help you solve the problems, please open a case with IBM and 
our support will help debug.

Rob Scott
Rocket Software


Rob Scott

Principal Architect, Mainframe Systems Tools

Distinguished Engineer
Rocket Software
77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA
Tel: +1.781.684.2305
Email: rsc...@rs.com
Web: www.rocketsoftware.com


From: IBM Mainframe Discussion List  on behalf of 
Farley, Peter x23353 <031df298a9da-dmarc-requ...@listserv.ua.edu>
Sent: Wednesday, May 4, 2022 6:28:17 PM
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: SDSF - ISPF questions (wishes?)

EXTERNAL EMAIL




I see the "local workaround" in that APAR says this:

As a work-around, the SDSF special DD ISFMIGRL can be
allocated to avoid this problem.

Maybe that's the solution?

Peter

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Phil Smith III
Sent: Wednesday, May 4, 2022 1:17 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF - ISPF questions (wishes?)

Rob Scott wrote:

>Try adding the following lines to your test exec after the ISFCALLS
statement :

>Rc=ISFQUERY("INIT")
>Say "Prefix="isfprefix " Owner="isfowner " Dest="isfdest "
>JES="isfjesname



But when I do so, those variables do not get set:

/* REXX */
arg j
rc = isfcalls('ON')

rc = isfquery('INIT')
say "RC from isfquery('INIT') was" rc
say "Prefix="isfprefix "Owner="isfowner "Dest="isfdest ,
"JES="isfjesname

isfprefix = '*'
address SDSF 'ISFEXEC ST' j
say 'RC from ISFEXEC ST' j 'was' rc';' jname.0 'jobs found'



output is:

* TOP OF DATA
**

READY
%ST VSH1
RC from isfquery('INIT') was 1
Prefix=ISFPREFIX Owner=ISFOWNER Dest=ISFDEST JES=ISFJESNAME RC from ISFEXEC ST 
VSH1 was 0; 1 jobs found READY END
 BOTTOM OF DATA

Hm, rc from ISFQUERY was 1. Which seems to be undocumented. Mind you, Googling 
"ISFQUERY" gets a total of FOUR hits, which seems unlikely (especially since 
none of those is a copy of the SDSF User's Guide on IBM-there is one on 
manualzz). I hunted down the actual IBM SDSF User's Guide, which still doesn't 
document ISFQUERY return codes, but I found this code snippet in there:

rc=isfquery()

if rc0 then

do

Say "** SDSF environment does not exist, exec ending."

Exit 20

end

Yes, complete with  -- wow. Anyway, that seems unlikely. What am 
I missing this time? I get the same results whether I put the isfquery before 
or after the isfcalls (yes, Rob, you said after, but the IBM sample has it 
before, so I tried both).

Lionel: I'm thinking that if we get this working, it would be useful output 
from your utility, since at a minimum it will save some "Why isn't this 
working?" (may lead to "How do I override it?" but at last it won't be a total 
mystery!)

Wait, just as I was about to hit send:
https://urldefense.com/v3/__https://www.ibm.com/support/pages/apar/PH27154__;!!Ebr-cpPeAnfNniQ8HSAI-g_K5b7VKg!NznHebwIf8mNFJoFd4sdTJv9HmPfPQfmJ4w4P1chZcZ2i1JdkxDLILhZhVJYZkrtSy_64lyjXlHR-YH7NDY$
 sounds like "ISFQUERY is flat-out busted in 2.4, we don't care, will fix 
eventually maybe". Am I reading that right? Or is this talking about something 
else? It would be nice if it documented what "will not complete successfully" 
meant-RC=1?

...phsiii
--

This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Phil Smith III
Peter Farley wrote:
>I see the "local workaround" in that APAR says this:
>>As a work-around, the SDSF special DD ISFMIGRL can be
>>allocated to avoid this problem.
>Maybe that's the solution?

 

Maybe; I missed it because it's meaningless as written. Just define a dummy
DD*? Or what? Googling "isfmigrl" is a Googlewhack!

 

*No, makes no difference, I just tried it.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Farley, Peter x23353
I see the "local workaround" in that APAR says this:

As a work-around, the SDSF special DD ISFMIGRL can be
allocated to avoid this problem.

Maybe that's the solution?

Peter

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Phil Smith III
Sent: Wednesday, May 4, 2022 1:17 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF - ISPF questions (wishes?)

Rob Scott wrote:

>Try adding the following lines to your test exec after the ISFCALLS
statement :

>Rc=ISFQUERY("INIT")
>Say "Prefix="isfprefix " Owner="isfowner " Dest="isfdest " 
>JES="isfjesname

 

But when I do so, those variables do not get set:

/* REXX */
  arg j
  rc = isfcalls('ON')

  rc = isfquery('INIT')
  say "RC from isfquery('INIT') was" rc
  say "Prefix="isfprefix "Owner="isfowner "Dest="isfdest ,
"JES="isfjesname

  isfprefix = '*'
  address SDSF 'ISFEXEC ST' j
  say 'RC from ISFEXEC ST' j 'was' rc';' jname.0 'jobs found'

 

output is:

* TOP OF DATA
**

READY
%ST VSH1
RC from isfquery('INIT') was 1
Prefix=ISFPREFIX Owner=ISFOWNER Dest=ISFDEST JES=ISFJESNAME RC from ISFEXEC ST 
VSH1 was 0; 1 jobs found READY END
 BOTTOM OF DATA

Hm, rc from ISFQUERY was 1. Which seems to be undocumented. Mind you, Googling 
"ISFQUERY" gets a total of FOUR hits, which seems unlikely (especially since 
none of those is a copy of the SDSF User's Guide on IBM-there is one on 
manualzz). I hunted down the actual IBM SDSF User's Guide, which still doesn't 
document ISFQUERY return codes, but I found this code snippet in there:

rc=isfquery()

if rc0 then

do

Say "** SDSF environment does not exist, exec ending."

Exit 20

end

Yes, complete with  -- wow. Anyway, that seems unlikely. What am 
I missing this time? I get the same results whether I put the isfquery before 
or after the isfcalls (yes, Rob, you said after, but the IBM sample has it 
before, so I tried both).

Lionel: I'm thinking that if we get this working, it would be useful output 
from your utility, since at a minimum it will save some "Why isn't this 
working?" (may lead to "How do I override it?" but at last it won't be a total 
mystery!)

Wait, just as I was about to hit send:
https://urldefense.com/v3/__https://www.ibm.com/support/pages/apar/PH27154__;!!Ebr-cpPeAnfNniQ8HSAI-g_K5b7VKg!NznHebwIf8mNFJoFd4sdTJv9HmPfPQfmJ4w4P1chZcZ2i1JdkxDLILhZhVJYZkrtSy_64lyjXlHR-YH7NDY$
  sounds like "ISFQUERY is flat-out busted in 2.4, we don't care, will fix 
eventually maybe". Am I reading that right? Or is this talking about something 
else? It would be nice if it documented what "will not complete successfully" 
meant-RC=1?

...phsiii
--

This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SAF without an ESM

2022-05-04 Thread Charles Mills
My impression is that it does whatever you want it to do! That is, it either 
permits everything, or you get to write your own rules; write your own ESM, 
essentially. You need to write the part that SAF calls, and of course you also 
need to come up with some sort of administration, some way to configure what 
you have written.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of zMan
Sent: Wednesday, May 4, 2022 9:51 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: SAF without an ESM

On https://www.ibm.com/docs/en/zos-basic-skills?topic=zos-what-is-saf , IBM
says:

> System authorization facility or SAF is an interface defined by MVS™ that
> enables programs to use system authorization services to control access to
> resources, such as data sets and MVS commands. SAF either processes
> security authorization requests directly or works with RACF®, or other
> security product, to process them.


Someone on r/mainframe asks what SAF does without an ESM. I'm thinking "not
much", but the last sentence above sort of suggests otherwise--unless "SAF
either processes security authorization requests directly" means "returns
RC=0 in all cases", in which case it would be accurate but IMHO overly
vague. Thoughts?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Phil Smith III
Rob Scott wrote:

>Try adding the following lines to your test exec after the ISFCALLS
statement :

>Rc=ISFQUERY("INIT")
>Say "Prefix="isfprefix " Owner="isfowner " Dest="isfdest " JES="isfjesname

 

But when I do so, those variables do not get set:

/* REXX */
  arg j
  rc = isfcalls('ON')

  rc = isfquery('INIT')
  say "RC from isfquery('INIT') was" rc
  say "Prefix="isfprefix "Owner="isfowner "Dest="isfdest ,
"JES="isfjesname

  isfprefix = '*'
  address SDSF 'ISFEXEC ST' j
  say 'RC from ISFEXEC ST' j 'was' rc';' jname.0 'jobs found'

 

output is:

* TOP OF DATA
**

READY
%ST VSH1
RC from isfquery('INIT') was 1
Prefix=ISFPREFIX Owner=ISFOWNER Dest=ISFDEST JES=ISFJESNAME
RC from ISFEXEC ST VSH1 was 0; 1 jobs found
READY
END
 BOTTOM OF DATA


 

Hm, rc from ISFQUERY was 1. Which seems to be undocumented. Mind you,
Googling "ISFQUERY" gets a total of FOUR hits, which seems unlikely
(especially since none of those is a copy of the SDSF User's Guide on
IBM-there is one on manualzz). I hunted down the actual IBM SDSF User's
Guide, which still doesn't document ISFQUERY return codes, but I found this
code snippet in there:

rc=isfquery()

if rc0 then

do

Say "** SDSF environment does not exist, exec ending."

Exit 20

end

Yes, complete with  -- wow. Anyway, that seems unlikely. What
am I missing this time? I get the same results whether I put the isfquery
before or after the isfcalls (yes, Rob, you said after, but the IBM sample
has it before, so I tried both).

 

Lionel: I'm thinking that if we get this working, it would be useful output
from your utility, since at a minimum it will save some "Why isn't this
working?" (may lead to "How do I override it?" but at last it won't be a
total mystery!)

 

Wait, just as I was about to hit send:
https://www.ibm.com/support/pages/apar/PH27154 sounds like "ISFQUERY is
flat-out busted in 2.4, we don't care, will fix eventually maybe". Am I
reading that right? Or is this talking about something else? It would be
nice if it documented what "will not complete successfully" meant-RC=1?

 

...phsiii


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


SAF without an ESM

2022-05-04 Thread zMan
On https://www.ibm.com/docs/en/zos-basic-skills?topic=zos-what-is-saf , IBM
says:

> System authorization facility or SAF is an interface defined by MVS™ that
> enables programs to use system authorization services to control access to
> resources, such as data sets and MVS commands. SAF either processes
> security authorization requests directly or works with RACF®, or other
> security product, to process them.


Someone on r/mainframe asks what SAF does without an ESM. I'm thinking "not
much", but the last sentence above sort of suggests otherwise--unless "SAF
either processes security authorization requests directly" means "returns
RC=0 in all cases", in which case it would be accurate but IMHO overly
vague. Thoughts?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: [EXTERNAL] I knew Cobol 6.3 takes more resources to compile than 4.2 but should I be concerned about how much?

2022-05-04 Thread Pommier, Rex
Hi list,

I have an update on this issue.  I opened a ticket with IBM and I'm thinking 
they are thinking there may be an issue with the compiler because they're still 
looking at it to see if the CPU time can be improved.  As I said earlier, we 
have multiple programs and at this point only 1 of them is behaving this bad.  
Going from .3 TCB seconds under Cobol 4.2 to 520 TCB seconds under 6.3 seems 
more than a bit excessive.

IBM came back to me with a response stating that the INITCHECK compiler option 
is the culprit.  We have this option set at INITCHECK(LAX) across the board and 
it normally doesn't cause heartburn - except in this one program.  I compiled 
the program with NOINITCHECK and the TCB time dropped by almost 90%, from 520 
seconds to 54.  Paging disappeared as storage requirements dropped by close to 
95%.  

Thank you to IBM for finding the problem as well as continuing to look to see 
if there is in fact a problem with the compiler.  Thank you also to the 
IBM-Main soldiers who are willing to lend a hand when this type of weird thing 
crops up.

More to come.

Rex

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Pommier, Rex
Sent: Monday, April 18, 2022 3:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] I knew Cobol 6.3 takes more resources to compile than 4.2 
but should I be concerned about how much?

Hi list,

Should I be concerned about the amount of resources Cobol 6.3 is occasionally 
using as compared to 4.2?  I have one particular example that was brought to 
our attention due to the fact that we ran out of page space in our small shop.  
I finally got it to compile after tripling my page space.  It is a CICS program 
and is only 11270 lines long.  I am compiling with Expediter, but have 
optimization(0) configured so there is no additional compile-time processing 
being done to optimize the load module.   I removed Expediter and still had the 
issues.  Here are my comparisons.  Has anybody else seen this kind of huge 
increase?


Cobol42 without Expediter  TCB .00499 minuteswall clock 2 seconds  paging 0 
  serv  14956
Cobol42 with Expediter   TCB  .0138 minutes   wall clock 2 seconds   paging 0   
serv 39158
Cobol63 without Expediter  TCB  8.665 minutes   wall clock 31 minutes  paging 
3185K   serv  23,371,699
Cobol63 with Expediter  TCB  8.519 minutes  wall clock 23 minutes  paging 4522K 
  serv  22,980,890

I will be opening a ticket with IBM but was wondering if anybody else has seen 
this kind of spike.  I have only seen this on one program and I have had my 
developers compile hundreds of programs.  I've seen CPU and wall clock time 
increases but nothing like this.  Obviously wall clock time is so variable due 
to other tasks running, I just included it to show the drastic increase.  2 
seconds to 23-31 minutes is insane.

Thanks,

Rex

--
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OSMF Portable Software Instance - Deployment Question

2022-05-04 Thread Richards, Robert B. (CTR)
Kurt,

Our Shop standard dictates that a new master catalog is created with every z/OS 
upgrade. An additional standard clones new master catalogs from the new z/OS 
master catalog so that every lpar has its own new master catalog as the 
implementation rolls across the board. So, yes, I really want to create that 
new master catalog. What I want, in this case, doesn't matter.

I used IEFBR14 to create the names that the configuration was expecting and 
still no joy. I am assuming z/OSMF's instance was aware that the source 
datasets were ZFS files and expected the targets to be the same. Is this 
assumption correct? If so, I'll try to get the SMS sheriff to modify the ACS 
routines this one time to allow for their creation as ZOS25.OMVS.*. That should 
enable the workflow instance creation to proceed, right?

Bob

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Wednesday, May 4, 2022 10:07 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF Portable Software Instance - Deployment Question

Bob, are you sure you really want to create a new master catalog?  Or, do you 
really want to use your existing master catalog and existing user catalogs, or 
perhaps create some new user catalogs connected to your existing master 
catalog?  The point is, if you use your existing master catalog then you don't 
need to provide, and z/OSMF won't create and use, temporary catalog aliases.

Sadly, as you are observing, you modified the data set names in the generated 
jobs so the actual data sets now don't match the configuration expected by 
z/OSMF.  Hence the errors creating the workflow instances.  Other than rename 
the data sets as expected by z/OSMF there is no way to fix this error.

If you really want to proceed on your current path, then you need to rename or 
recreate the data sets as z/OSMF expects.  Perhaps you can update your ACS 
routines, or define a STORCLAS, to create zFS data sets that have an HLQ other 
than OMVS.  If you can't do either, then I suggest you consider changing your 
configuration to use your existing master catalog so you can use your existing 
OMVS HLQ.  I suspect this is what you really wanted to do anyway.

Kurt Quackenbush
IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com Chuck 
Norris never uses CHECK when he applies PTFs.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Tuesday, May 3, 2022 11:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] z/OSMF Portable Software Instance - Deployment Question

I have a z/OSMF Software Management question that I hope someone on IBM-Main 
can provide me with the answer.

I was on the Configure CATALOGs page of a z/OS 2.5 deployment and successfully 
provided the Temporary Catalog Alias entries for three HLQs.

The issue was the fourth HLQ - OMVS. Everything I tried failed.

The alias of OMVS is already defined in our driving system's Master Catalog and 
RELATEd to a shared user catalog. Because our ACS routines only allow a HLQ of 
OMVS to allocate to the "HFS/ZFS" pool, I knew any other HLQ would not work. 
For the record, all OMVS.* data sets that I was trying to allocate would be 
unique in our driving system's master catalog. I was unable to get off of this 
webpage without specifying a Temporary Catalog Alias for it, so I specified one 
and moved on to let the six jobs be generated. Subsequently, I edited the job 
that creates and populates the OMVS datasets to REMOVE that Temporary Catalog 
Alias wherever it was referenced and submitted the job to a successful 
conclusion.

Next, I moved onto "Perform Workflows" and was instantly stopped with 21 errors 
looking for the OMVS datasets containing the Temporary Catalog Alias.OMVS.*

I do not know how to get out if this situation and there does not appear to be 
anyway to bypass/rectify it. All three workflows produce the same set of errors.

Any advice is greatly appreciated.

Bob



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Coping the content of a single member into other members

2022-05-04 Thread Seymour J Metz
What's wrong with using IEBCOPY or an ISPF script using LMCOPY?

Others have suggested alias. Is there an issue with that?


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
esst...@juno.com [esst...@juno.com]
Sent: Wednesday, May 4, 2022 11:12 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Coping the content of a single member into other members

.
I should be able to accomplish this, but I seem to be having a brain freeze.
.
 I have about 30 Members in a PDS that contain different values (CLEAR, GET, 
START, RESUME, etc.)
At times I want to replace the contents of all 30 Members with the value of 
INIT.
.
Essentially I want to copy the CONTENT of a specific Member into the 30 other 
members - replacing the contents of those members.
IEBCOPY copies/replaces the member.
I want to replace the value in each member with the same contents of INIT.
.
Any thoughts on what IBM utility can accomplish this ?
.
Will ADRDSSU provide that capbility ?
.
Sample JCL would be helpful -
.
Paul
.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Coping the content of a single member into other members

2022-05-04 Thread Paul Gilmartin
On Wed, 4 May 2022 15:12:34 GMT, essteam wrote:
>...
>I want to replace the value in each member with the same contents of INIT.
>
Why?

Would it suffice to create 30 aliases of INIT?  I believe
TSO RENAME can do that, one-by-one.

Or ISPF LMCOPY the members, one-by-one.

IEBGENER can create aliases.

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Coping the content of a single member into other members

2022-05-04 Thread Sri h Kolusu
≫ I want to replace the value in each member with the same contents of INIT.

Paul,

You can use IBM FILEMANAGER to update the contents of members in a PDS. You can 
hard code the contents or dynamically generate the change commands using DFSORT.

//STEP0100 EXEC PGM=FILEMGR
//SYSPRINT DD SYSOUT=*
//DDIN DD DISP=SHR,DSN=Your.pds.to.be.updated
//SYSINDD *
$$FILEM FCH MEMBER=(A,B,C,D..) INPUT=DDIN
C 'ABC' 'DEF'
C ‘LMN’ ‘OPQ’
//*



Thanks,
Kolusu


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Coping the content of a single member into other members

2022-05-04 Thread esst...@juno.com
.
I should be able to accomplish this, but I seem to be having a brain freeze.
.
 I have about 30 Members in a PDS that contain different values (CLEAR, GET, 
START, RESUME, etc.)
At times I want to replace the contents of all 30 Members with the value of 
INIT.
.
Essentially I want to copy the CONTENT of a specific Member into the 30 other 
members - replacing the contents of those members. 
IEBCOPY copies/replaces the member. 
I want to replace the value in each member with the same contents of INIT.
.
Any thoughts on what IBM utility can accomplish this ?
.
Will ADRDSSU provide that capbility ?
.
Sample JCL would be helpful - 
.
Paul
.
   
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OSMF Portable Software Instance - Deployment Question

2022-05-04 Thread Kurt J. Quackenbush
Bob, are you sure you really want to create a new master catalog?  Or, do you 
really want to use your existing master catalog and existing user catalogs, or 
perhaps create some new user catalogs connected to your existing master 
catalog?  The point is, if you use your existing master catalog then you don't 
need to provide, and z/OSMF won't create and use, temporary catalog aliases.

Sadly, as you are observing, you modified the data set names in the generated 
jobs so the actual data sets now don't match the configuration expected by 
z/OSMF.  Hence the errors creating the workflow instances.  Other than rename 
the data sets as expected by z/OSMF there is no way to fix this error.

If you really want to proceed on your current path, then you need to rename or 
recreate the data sets as z/OSMF expects.  Perhaps you can update your ACS 
routines, or define a STORCLAS, to create zFS data sets that have an HLQ other 
than OMVS.  If you can't do either, then I suggest you consider changing your 
configuration to use your existing master catalog so you can use your existing 
OMVS HLQ.  I suspect this is what you really wanted to do anyway.

Kurt Quackenbush
IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com
Chuck Norris never uses CHECK when he applies PTFs.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Tuesday, May 3, 2022 11:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] z/OSMF Portable Software Instance - Deployment Question

I have a z/OSMF Software Management question that I hope someone on IBM-Main 
can provide me with the answer.

I was on the Configure CATALOGs page of a z/OS 2.5 deployment and successfully 
provided the Temporary Catalog Alias entries for three HLQs.

The issue was the fourth HLQ - OMVS. Everything I tried failed.

The alias of OMVS is already defined in our driving system's Master Catalog and 
RELATEd to a shared user catalog. Because our ACS routines only allow a HLQ of 
OMVS to allocate to the "HFS/ZFS" pool, I knew any other HLQ would not work. 
For the record, all OMVS.* data sets that I was trying to allocate would be 
unique in our driving system's master catalog. I was unable to get off of this 
webpage without specifying a Temporary Catalog Alias for it, so I specified one 
and moved on to let the six jobs be generated. Subsequently, I edited the job 
that creates and populates the OMVS datasets to REMOVE that Temporary Catalog 
Alias wherever it was referenced and submitted the job to a successful 
conclusion.

Next, I moved onto "Perform Workflows" and was instantly stopped with 21 errors 
looking for the OMVS datasets containing the Temporary Catalog Alias.OMVS.*

I do not know how to get out if this situation and there does not appear to be 
anyway to bypass/rectify it. All three workflows produce the same set of errors.

Any advice is greatly appreciated.

Bob



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SDSF - ISPF questions (wishes?)

2022-05-04 Thread Rob Scott
Try adding the following lines to your test exec after the ISFCALLS statement :

Rc=ISFQUERY("INIT")
Say "Prefix="isfprefix " Owner="isfowner " Dest="isfdest " JES="isfjesname

This will show you the contents of the special variables that are active.

Prefix, Dest and Owner settings being different from expectations explains most 
of the issues with "no rows" using SDSF REXX.

Note that when a SDSF REXX is invoked via the "%" action, the values of these 
variables are inherited from your current SDSF session, however if the exec is 
executed outside of a current SDSF session (eg from option 6 (TSO)), then these 
values reflect the defaults assigned from the SDSF group and security rules.


Rob Scott
Rocket Software


-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Phil Smith III
Sent: 03 May 2022 16:47
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF - ISPF questions (wishes?)

EXTERNAL EMAIL





Lionel and I have been communicating about his very nice SDSFXDD, because it 
wasn't working for me.



For me it only finds jobs whose jobname starts with your userid. If I have jobs 
in O queue:
NP   JOBNAME  JobIDOwnerPrty C FormsDest Tot-Rec
 PHS1 JOB04436 PHS   144 A STD  LOCAL  7
 PHS1 JOB04436 PHS   144 A STD  LOCAL  1,094
 VSH1 JOB04440 PHS   144 A STD  LOCAL  7
 VSH1 JOB04440 PHS   144 A STD  LOCAL  1,094

and I create a trivial test program:
/* REXX */
trace r
  arg j
  rc=isfcalls('ON')
  address SDSF "ISFEXEC ST" j
  say 'RC from ISFEXEC ST' j 'was' rc';' jname.0 'jobs found'



Run against VSH1 it finds nothing; against PHS1 it works (finds the job).
Meanwhile, if I do ST VSH1 in SDSF, I see:
NP   JOBNAME  JobIDOwnerPrty Queue  C   Pos
 VSH1 JOB09766 RAW 1 PRINT  A58
 VSH1 JOB09767 RAW 1 PRINT  A59
 VSH1 JOB09768 RAW 1 PRINT  A60
 VSH1 JOB09769 RAW 1 PRINT  A61
 VSH1 JOB09781 RAW 1 PRINT  A62
 VSH1 JOB09782 RAW 1 PRINT  A63
 VSH1 JOB04440 PHS 1 PRINT  A   101



It isn't getting confused by those other jobs, because if I run XYZZY and then 
try my trivial test (or SDSFXDD) against that, I get nothing as well. I did 
think I had seen something at one point that said "Jobnames starting with PHS" 
but now I can't find wherever that was.



Anyone know what's going on here? Our system is very vanilla, no fancy 
exits/program products beyond RACF involved here.



...phsiii


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ 
Main Office Toll Free Number: +1 855.577.4323
Contact Customer Support: 
https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
http://www.rocketsoftware.com/manage-your-email-preferences
Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy


This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN