Re: Importing x.509 Certs in to RACF

[Peter Vels]

You have:
RACDCERT ADD(IBMUSER.CERT.DIGICERT)   CERTAUTHTRUST
WITHLABEL('DigiCertCA’)

Try adding apostrophes to the data set name:
RACDCERT ADD('IBMUSER.CERT.DIGICERT')   CERTAUTHTRUST
WITHLABEL('DigiCertCA’)

On Fri, 5 May 2023 at 13:07, Matt Hogstrom  wrote:

> I had VB 240 but I’ll rein it in an see what we get.
>
> Oddly, I was hoping to find a roadmap that would help out.   Seems like
> there are a number of variables in terms of how certs are delivered, how
> they get uploaded, what encodings are used, etc.  At the end of the day I’d
> like to get this documented to save the next guy a pile of work.
>
> Matt Hogstrom
> m...@hogstrom.org
> +1-919-656-0564
> PGP Key: 0x90ECB270
> Facebook   LinkedIn <
> https://linkedin/in/mhogstrom>  Twitter 
>
> “It may be cognitive, but, it ain’t intuitive."
> — Hogstrom
>
>
>
> > On May 4, 2023, at 10:52 PM, Peter Vels  wrote:
> >
> > It could be that your data set attributes aren't quite right. Try
> something
> > like LRECL=84, RECFM=VB.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Importing x.509 Certs in to RACF

[Matt Hogstrom]

I’m at 240 VB but I’ll try pulling it in … 

I was hoping to find a roadmap that would help out.   Seems like there are a 
number of variables in terms of how certs are delivered, how they get uploaded, 
what encodings are used, etc.  At the end of the day I’d like to get this 
documented to save the next guy a pile of work.


Matt Hogstrom
> On May 4, 2023, at 10:52 PM, Peter Vels  wrote:
> 
> It could be that your data set attributes aren't quite right. Try something
> like LRECL=84, RECFM=VB.
> 
> On Fri, 5 May 2023 at 11:49, Matt Hogstrom  wrote:
> 
>> I’m attempting to import an x.509 cert for TLS.  The certificate is valid
>> and originates on a distributed system.  I have the cert and the private
>> key.  I’m trying to import the cert into RACF.  I’ve tried creating a pfx
>> file (pkcs12) as well as importing the text based certs individually.  Each
>> time I try I end up with an error.  The below was my attempt to import the
>> DigiCertCA against which my certificate was created.  I admit this is not
>> my area of speciality so I suspect I’m doing something stupid.  Here is the
>> ADD command.
>> 
>> RACDCERT ADD(IBMUSER.CERT.DIGICERT)   CERTAUTHTRUST
>> WITHLABEL('DigiCertCA’)
>> 
>> IRRD103I An error was encountered processing the specified input data
>> set.
>> 
>> The certificate is in ISO8859-1 on my Mac and I transfer it to USS as
>> binary and tag is as ISO8859-1.
>> 
>> Anyone have a workflow for adding a TLS cert ?   The IBM documentation is
>> accurate I’m sure  but not helpful.
>> 
>> 
>> Matt Hogstrom
>> 
>> “It may be cognitive, but, it ain’t intuitive."
>> — Hogstrom
>> 
>> 
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Importing x.509 Certs in to RACF

[Matt Hogstrom]

I had VB 240 but I’ll rein it in an see what we get. 

Oddly, I was hoping to find a roadmap that would help out.   Seems like there 
are a number of variables in terms of how certs are delivered, how they get 
uploaded, what encodings are used, etc.  At the end of the day I’d like to get 
this documented to save the next guy a pile of work.

Matt Hogstrom
m...@hogstrom.org
+1-919-656-0564
PGP Key: 0x90ECB270
Facebook   LinkedIn 
  Twitter 

“It may be cognitive, but, it ain’t intuitive."
— Hogstrom



> On May 4, 2023, at 10:52 PM, Peter Vels  wrote:
> 
> It could be that your data set attributes aren't quite right. Try something
> like LRECL=84, RECFM=VB.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Importing x.509 Certs in to RACF

[Peter Vels]

It could be that your data set attributes aren't quite right. Try something
like LRECL=84, RECFM=VB.

On Fri, 5 May 2023 at 11:49, Matt Hogstrom  wrote:

> I’m attempting to import an x.509 cert for TLS.  The certificate is valid
> and originates on a distributed system.  I have the cert and the private
> key.  I’m trying to import the cert into RACF.  I’ve tried creating a pfx
> file (pkcs12) as well as importing the text based certs individually.  Each
> time I try I end up with an error.  The below was my attempt to import the
> DigiCertCA against which my certificate was created.  I admit this is not
> my area of speciality so I suspect I’m doing something stupid.  Here is the
> ADD command.
>
> RACDCERT ADD(IBMUSER.CERT.DIGICERT)   CERTAUTHTRUST
> WITHLABEL('DigiCertCA’)
>
> IRRD103I An error was encountered processing the specified input data
> set.
>
> The certificate is in ISO8859-1 on my Mac and I transfer it to USS as
> binary and tag is as ISO8859-1.
>
> Anyone have a workflow for adding a TLS cert ?   The IBM documentation is
> accurate I’m sure  but not helpful.
>
>
> Matt Hogstrom
>
> “It may be cognitive, but, it ain’t intuitive."
> — Hogstrom
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Importing x.509 Certs in to RACF

[Matt Hogstrom]

I’m attempting to import an x.509 cert for TLS.  The certificate is valid and 
originates on a distributed system.  I have the cert and the private key.  I’m 
trying to import the cert into RACF.  I’ve tried creating a pfx file (pkcs12) 
as well as importing the text based certs individually.  Each time I try I end 
up with an error.  The below was my attempt to import the DigiCertCA against 
which my certificate was created.  I admit this is not my area of speciality so 
I suspect I’m doing something stupid.  Here is the ADD command.

RACDCERT ADD(IBMUSER.CERT.DIGICERT)   CERTAUTHTRUST
WITHLABEL('DigiCertCA’) 

IRRD103I An error was encountered processing the specified input data set.  
   

The certificate is in ISO8859-1 on my Mac and I transfer it to USS as binary 
and tag is as ISO8859-1.

Anyone have a workflow for adding a TLS cert ?   The IBM documentation is 
accurate I’m sure  but not helpful.  


Matt Hogstrom

“It may be cognitive, but, it ain’t intuitive."
— Hogstrom


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Calculating SIIS% as MSUs or MIPS

[Sri h Kolusu]

>>Every IBM document discribes this as % . I am trying to get the SIIS% value 
>>in terms of MIPS or MSUs

Shivang,

Did you look at SMF30COUNT ? If it is set, you can get address space MSU 
consumptions.

Alternatively, you can covert the CPU seconds(SMF30) to MSUs and MIPS

https://www.longpelaexpertise.com.au/ezine/CPUtoMSUMIPS.php



Thanks,
 Kolusu


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Is FESTAE still used?

[Gord Tomlin]

It fails when I do the FESTAE.

Code is

  FESTAE EXITADR=(R9),RBADDR=(R5),TCBADDR=(R4),PARAM=(R13), +
RECORD=YES,SDWALOC31=YES

Original R4 & R5 from SVC entry.


So if I understand you correctly, you are failing here in the FESTAE 
macro code:


+ L 15,RBSEXIT-RBSECT+RBPRFXLN(0,R5) OBTAIN CURRENT
+ RB SCBEXIT VALUE
+ LTR   15,15 IF ZERO - SCB AVAILABLE
+ BZIHB10036  CONTINUE PROCESSING
+ LA15,8(0,0) *You get RC=8 here* INDICATE PREVIOUS EXIT
+ IN THIS RB

RBSEXIT is where your FESTAE routine's address would have been saved. 
But the field is not empty, which suggests that there is already a 
FESTAE in place, and you can't have multiple FESTAEs for the RB.


It might be a good idea to investigate what the pre-existing FESTAE 
routine is.


--

Regards, Gord Tomlin
Action Software International
(a division of Mazda Computer Corporation)
Tel: (905) 470-7113, Fax: (905) 470-6507
Support: https://actionsoftware.com/support/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Is FESTAE still used?

[Binyamin Dissen]

It fails when I do the FESTAE.

Code is 

 FESTAE EXITADR=(R9),RBADDR=(R5),TCBADDR=(R4),PARAM=(R13), +
   RECORD=YES,SDWALOC31=YES 

Original R4 & R5 from SVC entry.

On Thu, 4 May 2023 12:57:34 -0400 Gord Tomlin
 wrote:

:>On 2023-05-04 04:20 AM, Binyamin Dissen wrote:
:>> As part of my Type 4 SVC I thought - why not use FESTAE for recovery? But I 
am
:>> finding that it always fails because the SVRB(prefix)+D4 (entry R5) has 
data.
:>> 
:>> Am I missing something obvious?
:>
:>FESTAE works.
:>
:>Where is your failure: when the FESTAE macro executes or when the 
:>recovery routine is entered?

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Calculating SIIS% as MSUs or MIPS

[shivang sharma]

Hi ,


Every IBM document discribes this as % . I am trying to get the SIIS% value
in terms of MIPS or MSUs

On Fri, 5 May 2023 at 1:49 AM, Sri h Kolusu  wrote:

> Shivang,
>
> Check these links.
>
>
> https://www.ibm.com/support/pages/identifying-%E2%80%-instruction-stream%E2%80%9D-siis-inefficiency-using-cpu-mf-counters
> 


>
>
> https://www.ibm.com/support/pages/system/files/inline-files/CPUMF_Implementation_Details.pdf
>
> Thanks,
> Kolusu
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN

[Bob Bridges]

I understood, Bill.  I even realized that both of you may not have meant "I've 
said my say and you should stop talking about it now".  It seems more likely 
that Bill Ogden meant "I'm not going to say anything more on the subject" and 
you were making a joke.  But it was too much  fun to ignore.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* We never fail God's tests; we just keep taking them until we pass.  
-attributed to Francis Frangipane */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Bill Johnson
Sent: Thursday, May 4, 2023 15:3

2 different Bills

--- On Thursday, May 4, 2023, 2:30 PM, Bob Bridges  
wrote:
I especially liked the bit at the end (which I have every confidence is not the 
end):

Bill: END  no more on this topic!

Bill> That's it, no more, I get the last word.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Seymour J Metz
Sent: Thursday, May 4, 2023 10:33

So why are you continuing this nonsense? Isn't it hypocritical to thank Darren 
and then ignore what he wrote?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Calculating SIIS% as MSUs or MIPS

[Sri h Kolusu]

Shivang,

Check these links.

https://www.ibm.com/support/pages/identifying-%E2%80%9Cstore-instruction-stream%E2%80%9D-siis-inefficiency-using-cpu-mf-counters

https://www.ibm.com/support/pages/system/files/inline-files/CPUMF_Implementation_Details.pdf

Thanks,
Kolusu

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Calculating SIIS% as MSUs or MIPS

[shivang sharma]

Hi All ,

SMF113 provides metrics to calculate siis% . At one customer shop we have
been asked to provide estimated SIIS MSUs or MIPS . Can somebody point me
an easy way to derive this.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Z/OS port of Regina REXX

[René Jansen]

> 
> I don’t do SourceForge and the svn nonsense. Git is the dominant SCM and has 
> been ported and is supported on z/OS. 
> 
I agree 100% here.

René.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN

[Bill Johnson]

2 different Bills


Sent from Yahoo Mail for iPhone


On Thursday, May 4, 2023, 2:30 PM, Bob Bridges  wrote:

I especially liked the bit at the end (which I have every confidence is not
the end):

Bill: END  no more on this topic!

Bill> That's it, no more, I get the last word.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* June: Israeli and Palestinian leaders reach an agreement under which
Israel will withdraw its settlers from the Gaza strip, arousing peace hopes
in amnesia victims everywhere.  -Dave Barry, "2005 in Review" */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of
Seymour J Metz
Sent: Thursday, May 4, 2023 10:33

So why are you continuing this nonsense? Isn't it hypocritical to thank
Darren and then ignore what he wrote?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Z/OS port of Regina REXX

[David Crayford]

> On 5 May 2023, at 1:48 am, Paul Gilmartin 
> <042bfe9c879d-dmarc-requ...@listserv.ua.edu> wrote:
> 
> On Thu, 4 May 2023 08:39:41 +0800, David Crayford wrote:
>> 
>> Note that there is a “zos” branch in the Github repository that you will 
>> have the checkout. 
>> 
> Not in SourceForge, which is mostly mentioned on 
> ?

I don’t do SourceForge and the svn nonsense. Git is the dominant SCM and has 
been ported and is supported on z/OS. 


> 
> What path to Github?  How is that related to:
> ?
> 
>> As I previously mentioned this port could be patched to support EBCDIC but 
>> you will have a heavy lift patching the Flex lexer and Bison tables. 
>> 
> Does/would autoconversion help?  (Of course, not for Classic data sets.  But 
> DSFS?)

It uses autoconversion. For programming languages you have to pick a codesetd. 
I’m sure DSFS would work.

> 
> Oh well, that’s life dealing with the major suckage that is EBCDIC! Also, the 
> interpreter uses 'fopen(filename, “rb”)’ so can in theory can handle source 
> files in MVS data sets. Unfortunately, the
>> parser expects line-ending characters so is not compatible with record 
>> oriented files.
>> 
> Doesn't XLC fake the "\n" for text files?

Yes, with ‘fopen(filename, “r”)’ in text mode. Regina opens the file in binary 
mode so it can parse by character. 

> 
> How about something like "ADDRESS LINKMVS WITH ?
> Challenging because MVS never had an organized concept of stdin, stdout, 
> stderr.
> 
> Is there a User's Guide?
> 

The doc is on 
https://sourceforge.net/projects/regina-rexx/files/regina-documentation/ and is 
good. 

> --  
> Thanks,
> gil
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN

[Bob Bridges]

I especially liked the bit at the end (which I have every confidence is not
the end):

Bill: END  no more on this topic!

Bill> That's it, no more, I get the last word.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* June: Israeli and Palestinian leaders reach an agreement under which
Israel will withdraw its settlers from the Gaza strip, arousing peace hopes
in amnesia victims everywhere.  -Dave Barry, "2005 in Review" */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of
Seymour J Metz
Sent: Thursday, May 4, 2023 10:33

So why are you continuing this nonsense? Isn't it hypocritical to thank
Darren and then ignore what he wrote?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Z/OS port of Regina REXX

[Paul Gilmartin]

On Thu, 4 May 2023 08:39:41 +0800, David Crayford wrote:
>
>Note that there is a “zos” branch in the Github repository that you will have 
>the checkout. 
>
Not in SourceForge, which is mostly mentioned on 
?

What path to Github?  How is that related to:
?

>As I previously mentioned this port could be patched to support EBCDIC but you 
>will have a heavy lift patching the Flex lexer and Bison tables. 
>
Does/would autoconversion help?  (Of course, not for Classic data sets.  But 
DSFS?)

Oh well, that’s life dealing with the major suckage that is EBCDIC! Also, the 
interpreter uses 'fopen(filename, “rb”)’ so can in theory can handle source 
files in MVS data sets. Unfortunately, the
>parser expects line-ending characters so is not compatible with record 
>oriented files.
>
Doesn't XLC fake the "\n" for text files?

How about something like "ADDRESS LINKMVS WITH ?
Challenging because MVS never had an organized concept of stdin, stdout, stderr.

Is there a User's Guide?

--  
Thanks,
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Is FESTAE still used?

[Gord Tomlin]

On 2023-05-04 04:20 AM, Binyamin Dissen wrote:

As part of my Type 4 SVC I thought - why not use FESTAE for recovery? But I am
finding that it always fails because the SVRB(prefix)+D4 (entry R5) has data.

Am I missing something obvious?


FESTAE works.

Where is your failure: when the FESTAE macro executes or when the 
recovery routine is entered?


--

Regards, Gord Tomlin
Action Software International
(a division of Mazda Computer Corporation)
Tel: (905) 470-7113, Fax: (905) 470-6507
Support: https://actionsoftware.com/support/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM RCF Documentation email address?

[Seymour J Metz]

Yes, and the "z/VM related PDFs" tab 
 on the z/VM equivalent has a  link 
to the current PoOps.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Paul Gilmartin [042bfe9c879d-dmarc-requ...@listserv.ua.edu]
Sent: Friday, April 28, 2023 11:56 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IBM RCF Documentation email address?

On Fri, 28 Apr 2023 15:04:14 +, Seymour J Metz wrote:
>
>I normally use 
>,
> which points to the PDF books.
>
... about three dozen of which were updated this week.

That page also has a link to the GA level for several releases with Adobe 
keyword indices.

--
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Can I use JOINKEYS?

[Sri h Kolusu]

>> Now let me ask, is there a way to incorporate the Sort extract that creates 
>> either or both files into the same step?

Don,

Yes, it could be done using JNF1/JNF2CNTL statements, however we may need to 
adjust the IFTHEN statements to use HIT=NEXT.   JNF1 and JNF2 can only process 
INREC statements.  So, we may need to move your OUTREC and OUTFIL to INREC 
itself.

You have both EQ and NE conditions, which we can club into a single IFTHEN and 
adjust it. 

Please send me an offline with a sample input files(both) along with DCB 
properties of them and the control cards for 2nd file also.  I will try to code 
up something. (No promises though)

Thanks,
Kolusu
DFSORT Development
IBM Corporation

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN

[Seymour J Metz]

So why are you continuing this nonsense? Isn't it hypocritical to thank Darren 
and then ignore what he wrote?


From: IBM Mainframe Discussion List  on behalf of 
billogden 
Sent: Thursday, May 4, 2023 9:54 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IBM-MAIN

Thank you for trying to stop the runaway politics.

I do spend time looking at a fair amount of history. I have some memories of
comments from the 1500s, the 1700s, the 1800s, and the early 1900s all
saying (using various terms) that "changes" (aka "progress") should be
stopped because "things are better without changes." For example, look how
many people lost their jobs when "automation" replaced horses  or how
many "traditional" healers lost their hobbies when antibiotics were
invented.
One can carry this line of thinking to almost any point in history. "Stop
progress"  "Stop the smarter people" "Stop the more capable people"
"Inventors/investors/organizers/hard-workers should not be allowed to profit
from their special work"   "etc, etc, etc"

Silly?  Look carefully at Russia from about 1920 to 1980 and see what
enforced socialism brings.

END  no more on this topic!

Bill Ogden

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN

[Bill Johnson]

Why are US oil companies subsidized? Why is agriculture subsidized? Why are 
banks bailed out almost every time? Why does government fund much of the 
pharmaceutical research? Why is socialized medicine rated higher? (France #1 US 
#37) Why are the top rated countries for quality of life always Finland, 
Sweden, & other social Democracies?

Russia was run by the communist party (dictatorship) during your period. Is 
still run by a dictator. Sham elections.

That’s it, no more, I get the last word.


Sent from Yahoo Mail for iPhone


On Thursday, May 4, 2023, 9:54 AM, billogden  wrote:

Thank you for trying to stop the runaway politics.

I do spend time looking at a fair amount of history. I have some memories of
comments from the 1500s, the 1700s, the 1800s, and the early 1900s all
saying (using various terms) that "changes" (aka "progress") should be
stopped because "things are better without changes." For example, look how
many people lost their jobs when "automation" replaced horses  or how
many "traditional" healers lost their hobbies when antibiotics were
invented. 
One can carry this line of thinking to almost any point in history. "Stop
progress"  "Stop the smarter people" "Stop the more capable people"
"Inventors/investors/organizers/hard-workers should not be allowed to profit
from their special work"  "etc, etc, etc"

Silly?  Look carefully at Russia from about 1920 to 1980 and see what
enforced socialism brings.

END  no more on this topic!

Bill Ogden

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN

[billogden]

Thank you for trying to stop the runaway politics.

I do spend time looking at a fair amount of history. I have some memories of
comments from the 1500s, the 1700s, the 1800s, and the early 1900s all
saying (using various terms) that "changes" (aka "progress") should be
stopped because "things are better without changes." For example, look how
many people lost their jobs when "automation" replaced horses  or how
many "traditional" healers lost their hobbies when antibiotics were
invented. 
One can carry this line of thinking to almost any point in history. "Stop
progress"  "Stop the smarter people" "Stop the more capable people"
"Inventors/investors/organizers/hard-workers should not be allowed to profit
from their special work"   "etc, etc, etc"

Silly?  Look carefully at Russia from about 1920 to 1980 and see what
enforced socialism brings.

END  no more on this topic!

Bill Ogden

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Password reset delegation

[Chicklon, Thomas]

I'm not aware of a way for a general user to be able to reset the PW of 
privileged users. Maybe someone else does.

But to reset other non-privileged users, take a look at 
FACILITY(IRR.PASSWORD.RESET)

https://www.ibm.com/docs/en/zos/2.2.0?topic=phrases-delegating-authority-reset-password-any-user


To authorize a general user or group to use the ALTUSER command to resume a 
revoked user or reset a user's password or password phrase (other than for a 
protected user or a user with the SPECIAL, OPERATIONS, AUDITOR, or ROAUDIT 
attribute), define a profile to protect the IRR.PASSWORD.RESET resource in the 
FACILITY class. If you do not define this profile, standard ALTUSER authority 
checking applies when RACF(r) determines whether the command issuer is 
authorized.

RACF does not log failed access attempts to IRR.PASSWORD.RESET. Rather, these 
attempts are logged as ALTUSER command violations. Successful accesses to 
IRR.PASSWORD.RESET are logged at the installation's discretion.
Tom Chicklon


From: IBM Mainframe Discussion List  On Behalf Of 
Jake Anderson
Sent: Thursday, May 4, 2023 12:59 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Password reset delegation

Hello Cross posted Is there a RACF profile which can allow a help desk user to 
reset the password for the user who has special operations attribute? I don't 
want to give help desk person a SPECIAL authority but I want to give him 
password reset
ZjQcmQRYFpfptBannerStart
CAUTION EXTERNAL EMAIL
This message came from outside your organization.
DO NOT open attachments or click on links from unknown senders or unexpected 
emails.
ZjQcmQRYFpfptBannerEnd

Hello





Cross posted



Is there a RACF profile which can allow a help desk user to reset the

password for the user who has special operations attribute?



I don't want to give help desk person a SPECIAL authority but I want to

give him password reset authority alone



Jake



--

For IBM-MAIN subscribe / signoff / archive access instructions,

send email to lists...@listserv.ua.edu with 
the message: INFO IBM-MAIN
This e-mail transmission contains information that is confidential and may be 
privileged.
It is intended only for the addressee(s) named above. If you receive this 
e-mail in error,
please do not read, copy or disseminate it in any manner.  If you are not the 
intended 
recipient, any disclosure, copying, distribution or use of the contents of this 
information
is prohibited. Please reply to the message immediately by informing the sender 
that the 
message was misdirected. After replying, please erase it from your computer 
system. Your 
assistance in correcting this error is appreciated.




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Unix System Services - strace

[David Geib]

The sysomvs ctrace data is written to OMVS dataspaces (z/OS 2.4 and below) or 
to 64-bit storage (above the bar) at z/OS 2.5  OR to dataset(s) defined for an 
external writer.

If not using an external writer, you must capture an SVC dump of 
OMVS+dataspaces.

In either case - SVC dump or dataset from external writer - you must then use 
IPCS to format the ctrace.  (aplogies for not mentioning this in the prior post)

IPCS option 2.7.1 provides a panel to build the command to format the ctrace. 

Command line (IPCS option 6) would bectrace comp(sysomvs) local full 
options((kerninfo))

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: CICS startup failure

[esst...@juno.com]

 LE CICS definitions for LE z/OS 2.5 should be dynamically installed by the 
CICS SYSTEM Installer
At least thats what has been in used in my installation.-- Original 
Message --
From: rpinion865 <042a019916dd-dmarc-requ...@listserv.ua.edu>
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: CICS startup failure
Date: Wed, 3 May 2023 19:32:15 +

Wondering if you upgraded the LE CICS definitions for LE z/OS 2.5.  See 
CEE.SCEESAMP(CEECCSD).  




Sent with Proton Mail secure email.

--- Original Message ---
On Wednesday, May 3rd, 2023 at 3:14 PM, esst...@juno.com  
wrote:


> Hello Dave -
> .
> After You manually install the list using CEDA, are you able to recycle CICS 
> with the GRPLIST to the SYSIN patrameters ?
> .
> 
> -- Original Message --
> From: Dave Quinn davequ...@prism-data.com
> 
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: CICS startup failure
> Date: Wed, 3 May 2023 06:27:49 -0500
> 
> I'm installing a new Z/OS 2.5 and am down to the last piece; a CICS TS 5.6 
> region. It would be complete except that when I add any valid GRPLIST to the 
> parameters on an initial start the startup fails and dumps without giving any 
> error. The CICS DFHCXRF indicates the autoinstall was successful but directly 
> afterwards it produces a dump and ends. If I take the GRPLIST out I am able 
> to startup and install the GRPLIST with CEDA without error.
> 
> Thoughts or recommendations of where to begin looking?
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Can I use JOINKEYS?

[Don Johnson]

Kolusu, this is great - I did not think this could be done, and it works so 
well. The changed format is fine, as that is easy to understand. Thanks so much 
for teaching me along the way!

Now let me ask, is there a way to incorporate the Sort extract that creates 
either or both of the files into the same step? I have them running as separate 
steps to create the files you used in the Join. For example, here is the 
program that creates the file you called APAR (this is the more dynamic input):

//SYSINDD * 
  SORT FIELDS=(01,10,CH,A)  
  INCLUDE COND=(001,133,SS,EQ,C'DB00248I')  
  INREC IFTHEN=(WHEN=INIT,  
 BUILD=(001,133,SQZ=(SHIFT=LEFT,MID=C' '))),
IFTHEN=(WHEN=(40,40,SS,EQ,C'('),
 PARSE=(%01=(STARTAFT=C', ',ENDBEFR=C'(',FIXLEN=8), 
%02=(ENDBEFR=C')',FIXLEN=8),
%=(STARTAFT=BLANKS,ENDBEFR=BLANKS), 
%03=(ENDBEFR=C'.',FIXLEN=2),
%04=(ENDBEFR=BLANKS,FIXLEN=1),  
%05=(ENDBEFR=BLANKS,FIXLEN=7)), 
 BUILD=(%01,X,   # Module   
%02,X,   # Subprogram   
%03,%04,X,   # Version  
%05, # Last APAR
80:X)),  # Blank fill   
IFTHEN=(WHEN=(40,40,SS,NE,C'('),
 PARSE=(%06=(STARTAFT=C', ',ENDBEFR=BLANKS,FIXLEN=8),   
%=(ENDBEFR=BLANKS), 
%07=(ENDBEFR=C'.',FIXLEN=2),
%08=(ENDBEFR=BLANKS,FIXLEN=1),  
%09=(ENDBEFR=BLANKS,FIXLEN=7)), 
 BUILD=(%06,10X, # Module   
%07,%08,X,   # Version  
%09, # Last APAR
80:X))   # Blank fill   
*   
  OUTREC IFTHEN=(WHEN=(23,1,CH,EQ,C' '),OVERLAY=(40:C'BASE')),  
 IFTHEN=(WHEN=(23,1,CH,NE,C' '),OVERLAY=(40:23,8))  
*   
  OUTFIL IFTHEN=(WHEN=(10,1,CH,NE,C' '),
   BUILD=(01:10,08,X,   
  10:19,03,X,   
  14:40,08,X,   
  23:01,16,SQZ=(SHIFT=LEFT,MID=C'(',TRAIL=C')'),
  133:X)),  
 IFTHEN=(WHEN=(10,1,CH,EQ,C' '),
   BUILD=(01:01,08,X,   
  10:19,03,X,   
  14:40,08,X,   
  23:01,08,X,   
  133:X))   
/*  

If this could be incorporated into the same JOIN step, that would be great, but 
if not, a three-step SORT job is also fine.

Don

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Is FESTAE still used?

[Binyamin Dissen]

As part of my Type 4 SVC I thought - why not use FESTAE for recovery? But I am
finding that it always fails because the SVRB(prefix)+D4 (entry R5) has data.

Am I missing something obvious?

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN