Re: Minimum LPAR size for z15 processor

[Mark Zelden]

On Fri, 4 Aug 2023 16:17:25 +, Mark Jacobs  
wrote:

>We're migrating our CF processors from z13's to z15's. One of the CF LPARs on 
>the z13 is assigned 1.5GB. There are no structures there, it's just used as 
>placeholder for STP timing links. Will that LPAR activate on a z15 processor 
>with the same 1.5GB allocation, or will we need to bump it up some?
>
>Mark Jacobs
>

If you are asking if it needs 8G, that is for z/OS 2.3 and above on a z15 and 
has nothing to do with a CF.
I have a sandbox CF LPARs that have 1GB.   They even have structures in them. 
:-) 

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS
ITIL v3 Foundation Certified
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Tom Marchant]

You can do all of those things with the workplace. It has been available since 
ISPF 4.2 in 1995. If you don't have it on your primary option panel, you can 
access it with ISPFWORK from any panel. I have been using it for the last 25 
years and haven't had the need to use 3.4 since then. 

The biggest difference between 11 and 3.4 is that, unless you have "Prefix 
Dsname Level" checked on 3.4, you don't need quotes around the DSNAME Level. 
With the Workplace, AFAIK, it always acts the way 3.4 does if you have "Prefix 
Dsname Level" selected. Also, the workplace always gives you enhanced member 
lists.

The major thing that the workplace gives me is the ability to create arbitrary 
lists of DSNAME masks and have them all included. For example, if you create a 
list that includes
'foo.**.bar'
'bar.**'

and issue DL against that list, you will get a data set list that includes all 
foo.**.bar data sets and all data sets beginning with bar. Having done that, I 
can issue SRCHFOR against them all, as just one example

The list that I use the most has something like this:

'app1.release1.source
'app1.release1.maclib
'app1.release1.listing
'app1.release1.load
'app2.release2.source
'app2.release2.maclib
'app2.release2.listing
'app2.release2.load
etc. for the products that I typically work with.

The actual HLQ is not app1, etc, but something more descriptive of the product, 
so I couldn't use app*.

You wouldn't have to reinvent anything, just learn something that is new to you

In case you wondered, it has nothing to do with the ISPF Workstation Agent. I 
used to use that for z/OS <-> PC file transfer, but the WSA has been removed. 
It wasn't fast, but it was easy to use, at least for me.

-- 
Tom Marchant

On Fri, 4 Aug 2023 15:05:23 -0400, Bob Bridges  wrote:

>Hm, not use 3.4?  I still have to go there pretty often, for tasks such as 
>
>- When cleaning up DATASET-class permissions in the security system, I need to 
>know what datasets actually exist
>- When deleting old user IDs, I want to pass any important datasets belonging 
>to the dearly departed to his old boss
>- When I'm hunting for  production job that might do a task I'm interested in 
>(although I guess I would mostly use 3.14 for that)
>- While investigating a parmfile or procfile or other system dataset for the 
>first time
>
>Dunno that I could live without 3.4.  Well, I ~could~, but I'd basically have 
>to reïnvent it is all.
>
>Option 11; not sure that's in the menu my current client provided to me.  
>Obviously I haven't been using it.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: USS Features

[Farley, Peter]

Re: “It's absurd that on a multi-million $ computer, a user expects to allocate 
a 100GB file that is for their private use. It would be different if multiple 
users were accessing that file. This file would be far cheaper on a $5,000 
computer and provide the same functionality.”



Not absurd when open-source downloads to implement a POC to try out the product 
***ON z/OS*** can easily take at least tens of GB , and adding up enough of 
those multi-GB files will easily get you to 100GB.



Not to mention the make/compile/build “temporary” space needed.  More GB’s for 
sure.



Re: “… someone didn't talk to the z/OS storage admin”, some storage admins are 
not that easy to talk to.  Some seem to have the mindset that giving out or 
acquiring more storage for expanded programmer use takes money directly out of 
their pockets.  And that’s if the storage admins work for the same company as 
the programmer.  If they are “hired hands” who work for a facilities management 
firm, you have to get your company to tell them this is work that should be 
done or you get ignored because it isn’t in the contract.



Not every shop has cooperative denizens or sharp-enough contract negotiators.



Peter

From: IBM Mainframe Discussion List  On Behalf Of Jon 
Perryman
Sent: Friday, August 4, 2023 6:30 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: USS Features



> On Sunday, July 30, 2023 at 08:23:54 PM PDT, Andrew Rowley 
> mailto:and...@blackhillsoftware.com>> wrote:



>> Whatever.  We use automount, and the "space" wasted is way too trivial to 
>> worry about.

> If it's trivial, you're probably not using actually using it.



Unix people don't understand trivial for z/OS. z/OS files are littered with 
unused space in each block and at the end of the file. This can be very 
significant. In many cases, we consider a lot of wasted space trivial. There 
are a lot of things we consider trivial that is considered wasteful to Unix 
mentality (e.g. redundancy). A Unix file will never waste more than 4K.



> A low end laptop has 250GB available. How much space should a z/OS user

> be able to use (to do their job) before they have to make a special

> request to the storage management group? 10GB? 100GB?



Typical Unix mindset is "me" instead of "business needs". This same problem 
will exist in a properly configured Unix system that has set disk quotas. Just 
because most do not implement disk quotas doesn't make it right.



It's absurd that on a multi-million $ computer, a user expects to allocate a 
100GB file that is for their private use. It would be different if multiple 
users were accessing that file. This file would be far cheaper on a $5,000 
computer and provide the same functionality.



> Some of my testing runs to (temporarily) 100GB+ for input and output

>files. I run it on the PC because the space isn't available on the

> mainframe, but It would be nice to be able to run it on z/OS. If you get

> a few users with usage spikes to 100GB the space might not be so trivial.



What possible business benefit is there to running on z/OS instead of a PC when 
you are the only user of this file? If multiple users want to do similar things 
at the same time, then it's time to consider some coordination.



>> gil answered that one... if you really have a good reason to go poking

>> around in users' business.

> HSM recalls are the big problem with that. And authorized_keys is the

> sort of question where auditors might require you to be poking around in

> users' business.



If HSM recalls are a problem, then someone didn't talk to the z/OS storage 
admin. He's the one who has the knowledge and tools to handle extreme 
situations.



z/OS is about RAS (Reliability, Availability and Serviceability). Consider the 
same situation on Unix where RAS is not a concern. You fill up a filesystem and 
disrupt every user on that system.

--



This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: USS Features

[Jon Perryman]

 > On Sunday, July 30, 2023 at 08:23:54 PM PDT, Andrew Rowley 
 >  wrote:

>> Whatever.  We use automount, and the "space" wasted is way too trivial to 
>> worry about.
> If it's trivial, you're probably not using actually using it.

Unix people don't understand trivial for z/OS. z/OS files are littered with 
unused space in each block and at the end of the file. This can be very 
significant. In many cases, we consider a lot of wasted space trivial. There 
are a lot of things we consider trivial that is considered wasteful to Unix 
mentality (e.g. redundancy). A Unix file will never waste more than 4K.

> A low end laptop has 250GB available. How much space should a z/OS user
> be able to use (to do their job) before they have to make a special
> request to the storage management group? 10GB? 100GB?

Typical Unix mindset is "me" instead of "business needs". This same problem 
will exist in a properly configured Unix system that has set disk quotas. Just 
because most do not implement disk quotas doesn't make it right.

It's absurd that on a multi-million $ computer, a user expects to allocate a 
100GB file that is for their private use. It would be different if multiple 
users were accessing that file. This file would be far cheaper on a $5,000 
computer and provide the same functionality.

> Some of my testing runs to (temporarily) 100GB+ for input and output
>files. I run it on the PC because the space isn't available on the
> mainframe, but It would be nice to be able to run it on z/OS. If you get
> a few users with usage spikes to 100GB the space might not be so trivial.

What possible business benefit is there to running on z/OS instead of a PC when 
you are the only user of this file? If multiple users want to do similar things 
at the same time, then it's time to consider some coordination. 

>> gil answered that one... if you really have a good reason to go poking
>> around in users' business.
> HSM recalls are the big problem with that. And authorized_keys is the
> sort of question where auditors might require you to be poking around in
> users' business.

If HSM recalls are a problem, then someone didn't talk to the z/OS storage 
admin. He's the one who has the knowledge and tools to handle extreme 
situations.

z/OS is about RAS (Reliability, Availability and Serviceability). Consider the 
same situation on Unix where RAS is not a concern. You fill up a filesystem and 
disrupt every user on that system.  

   
  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Mike Schwab]

The goal is to assign application security to a group then add the group to
the user's definition.  When a person transfers then you add and deleted
groups to the user while the user keeps access to personal datasets.

On Fri, Aug 4, 2023, 15:51 Steve Thompson  wrote:

> Don't know if TSS implements groups. But with groups, I can have
> access to certain DSNs read only, others update|delete|create. I
> can have access to console commands from TSO, but not have logon
> access to CICS. Just as examples.
>
> Having to change TSO IDs is problematic because one loses access
> to their private data sets... (tools you wrote for making
> ISPF/Roscoe or whatever better...).
>
> So role based using group definitions that give one authority
> until they don't need it (or can't justify it), is what I think
> you mean and need.
>
> Steve Thompson
>
> On 8/4/2023 4:25 PM, Wayne Bickerdike wrote:
> > To implement this would require systems that implement application
> > security. The idea that a systems programmer of any type would be able to
> > perpetrate fraud is a stretch.
> >
> > I had access to everything mainframe (RACF, CICS, z/OS) in a top secret
> > installation. I wouldn't be able to place a purchase order but I could
> nuke
> > any dataset. I was also too damn busy doing my job to compromise the
> > systems.
> >
> > The worst case is where staff inherit privileges as they change roles.
> That
> > was a problem. Makes a case for role based security. Change roles > New
> > role based ID.
> >
> > On Fri, Aug 4, 2023 at 11:34 PM Michael Babcock 
> > wrote:
> >
> >> I ran across this in a CICS security admin book (which should also apply
> >> to z/OS sysprogs):
> >>
> >> Roles and separation of duties
> >>
> >>   A key security principle is the separation of duties between
> >> different users so that no one person has sufficient access privilege to
> >> perpetrate damaging fraud. *This configuration is required by various
> >> audit regulations such as the United States Federal Law known as the
> >> Sarbanes-Oxley Act of 2002
> >> <
> >>
> https://www.ibm.com/links?url=https%3A%2F%2Fwww.govinfo.gov%2Fcontent%2Fpkg%2FPLAW-107publ204%2Fpdf%2FPLAW-107publ204.pdf
> >>> .*
> >>   An example of this separation of duties, is that someone with the
> >> role of CICS System Programmer must not also have the role of RACF
> >> Security Administrator.
> >>
> >>
> >> Does anyone know exactly which section of SOX it's referring to?
> >>
> >> --
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >>
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Attila Fogarasi]

Sox 404 is the section that mandates segregation of duties. It applies to
non-IT systems as well as IT, so not z/OS or even security specific, rather
"good business practices".

On Fri, Aug 4, 2023 at 11:34 PM Michael Babcock 
wrote:

> I ran across this in a CICS security admin book (which should also apply
> to z/OS sysprogs):
>
> Roles and separation of duties
>
>  A key security principle is the separation of duties between
> different users so that no one person has sufficient access privilege to
> perpetrate damaging fraud. *This configuration is required by various
> audit regulations such as the United States Federal Law known as the
> Sarbanes-Oxley Act of 2002
> <
> https://www.ibm.com/links?url=https%3A%2F%2Fwww.govinfo.gov%2Fcontent%2Fpkg%2FPLAW-107publ204%2Fpdf%2FPLAW-107publ204.pdf
> >.*
>
>  An example of this separation of duties, is that someone with the
> role of CICS System Programmer must not also have the role of RACF
> Security Administrator.
>
>
> Does anyone know exactly which section of SOX it's referring to?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Bob Bridges]

In TSS a "group" is just a place to hang a GID for use in OMVS ... although 
some software vendors use it for other purposes too.  But it doesn't get 
resource permissions; in TSS, a "profile" is a collection of permissions, and 
it's assigned to multiple users, so I think it's analogous to a group in Active 
Directory.  And I would say it's not very much like a group in RACF.

To implement RBAC in TSS I should think you want (once you’ve created 
satisfactory naming scheme for your profiles) to have your access-control 
software maintain a list of profiles that pertain to each role code, and when 
someone changes roles the software should remove the profiles that relate to 
the old role and add the profiles for the new role.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Americans who travel abroad for the first time are often shocked to discover 
that, despite all the progress that has been made in the last 30 years, many 
foreign people still speak in foreign languages.  -Dave Barry */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Steve Thompson
Sent: Friday, August 4, 2023 16:51

Don't know if TSS implements groups. But with groups, I can have access to 
certain DSNs read only, others update | delete | create. I can have access to 
console commands from TSO, but not have logon access to CICS. Just as examples.

Having to change TSO IDs is problematic because one loses access to their 
private data sets... (tools you wrote for making ISPF/Roscoe or whatever 
better...).

So role based using group definitions that give one authority until they don't 
need it (or can't justify it), is what I think you mean and need.

--- On 8/4/2023 4:25 PM, Wayne Bickerdike wrote:
> To implement this would require systems that implement application 
> security. The idea that a systems programmer of any type would be able 
> to perpetrate fraud is a stretch.
>
> I had access to everything mainframe (RACF, CICS, z/OS) in a top 
> secret installation. I wouldn't be able to place a purchase order but 
> I could nuke any dataset. I was also too damn busy doing my job to 
> compromise the systems.
>
> The worst case is where staff inherit privileges as they change roles. 
> That was a problem. Makes a case for role based security. Change roles 
> > New role based ID.
>
> --- On Fri, Aug 4, 2023 at 11:34 PM Michael Babcock  
> wrote:
>> I ran across this in a CICS security admin book (which should also 
>> apply to z/OS sysprogs):
>>
>> Roles and separation of duties
>>
>>   A key security principle is the separation of duties between 
>> different users so that no one person has sufficient access privilege 
>> to perpetrate damaging fraud. *This configuration is required by 
>> various audit regulations such as the United States Federal Law known 
>> as the Sarbanes-Oxley Act of 2002 < 
>> https://www.ibm.com/links?url=https%3A%2F%2Fwww.govinfo.gov%2Fcontent
>> %2Fpkg%2FPLAW-107publ204%2Fpdf%2FPLAW-107publ204.pdf
>>> .*
>>   An example of this separation of duties, is that someone with 
>> the role of CICS System Programmer must not also have the role of 
>> RACF Security Administrator.
>>
>> Does anyone know exactly which section of SOX it's referring to?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Bob Bridges]

Role-based security ("RBAC") is a ton of work to set up the first time, but I'm 
sold on its worth.  More companies I've worked for than not, in the past 20 
years, have implemented it or are implementing it, despite the huge effort 
required.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Most people are not avoiding our gospel, they are avoiding ~us~.  -from 
"Shame off You" by Alan D Wright */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Wayne Bickerdike
Sent: Friday, August 4, 2023 16:25

To implement this would require systems that implement application security. 
The idea that a systems programmer of any type would be able to perpetrate 
fraud is a stretch.

I had access to everything mainframe (RACF, CICS, z/OS) in a top secret 
installation. I wouldn't be able to place a purchase order but I could nuke any 
dataset. I was also too damn busy doing my job to compromise the systems.

The worst case is where staff inherit privileges as they change roles. That was 
a problem. Makes a case for role based security. Change roles > New role based 
ID.

--- On Fri, Aug 4, 2023 at 11:34 PM Michael Babcock  
wrote:
> I ran across this in a CICS security admin book (which should also 
> apply to z/OS sysprogs):
>
> Roles and separation of duties
>
>  A key security principle is the separation of duties between 
> different users so that no one person has sufficient access privilege 
> to perpetrate damaging fraud. *This configuration is required by 
> various audit regulations such as the United States Federal Law known 
> as the Sarbanes-Oxley Act of 2002 < 
> https://www.ibm.com/links?url=https%3A%2F%2Fwww.govinfo.gov%2Fcontent%
> 2Fpkg%2FPLAW-107publ204%2Fpdf%2FPLAW-107publ204.pdf
> >.*
>
>  An example of this separation of duties, is that someone with the 
> role of CICS System Programmer must not also have the role of RACF 
> Security Administrator.
>
>
> Does anyone know exactly which section of SOX it's referring to?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Bob Bridges]

In fact I used to do that; I was an employee at a truck manufacturer for 14 
year and had those commands, and a few others, in my command table.  But by the 
time I started contracting in '96, I'd forgotten exactly where to get at the 
command table, and just got used to typing the TSO prefix.  Now I do it without 
thinking.  Every so often I think about looking it up and doing it again, but 
nah, if I type "tso" without thinking then it'd slow me down to try to remember 
~not~ to do it.

...Although occasionally I type too fast and drop a letter.  Maybe I should 
think again.

And yes, I learned long ago that personal, idiosyncratic tools are personal and 
idiosyncratic.  I would be delighted if everyone tried my tools and thought 
they were the best thing since sliced bread, but that happens only rarely.

I did, once years ago, write a tool for a bunch of DYL users at my company.  We 
were teaching them how to write their own inquiries using DYL-280II, instead of 
interrupting the developers with ad-hoc requests, and it was such a hit that we 
set up a special initiator for DYL jobs - two of them, in fact, I think - and 
the users sometimes had to wait two to four hours for their job to run, only to 
learn when it finally got to the head of the line that they'd forgotten to 
declare a variable or something.  So I wrote a REXX, and named it DYLCHK, that 
"compiled" their code in the foreground and told them right away whether their 
code was syntactically correct.  I left there in '96, and I heard later they're 
still using it.  So I feel all validated.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Obedience is the road to freedom, humility the road to pleasure, unity the 
road to personality.  -C S Lewis, "The Weight of Glory" */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Jon 
Perryman
Sent: Friday, August 4, 2023 15:14

You can easily add "ed" to the ISPF command table (I think it's table ISPCMDS) 
and drop the "TSO".  Write an exec that TBADDs each command. Additionally, I 
find I need to refer back to the original screen. I start a new screen from the 
exec so both can be seen using swap.

Having a command to display a reflist can also useful. Let your tools work for 
you instead of you working for your tools. If it works for you then use it but 
don't do it because we find it useful.

> --- On Friday, August 4, 2023 at 10:15:01 AM PDT, Bob Bridges 
>  wrote:
> I generally type "tso ed " on the ISPF command line.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Jon Perryman]

 > On Friday, August 4, 2023 at 01:25:32 PM PDT, Wayne Bickerdike 
 >  wrote:

> The idea that a systems programmer of any type would be able to
> perpetrate fraud is a stretch.

A sysprog who can't perpetrate fraud is not a good sysprog. There is a huge 
difference between desire having the ability. Not having the time does not mean 
you couldn't have done so. 

> To implement this would require systems that implement application security. 

z/OS implements security in ways that are not apparent. There are obvious SAF 
calls implemented in CICS and IMS. There are many more that you never hear 
about built into most products. Think about all the SAF classes that can be 
activated. They are used somewhere. A security admin can secure every little 
thing but rarely has the will to do so. Not one security admin creates rules 
specific to each user. Not one security admin activates all security classes. 
Some take the view they are keeping honest people honest while others are very 
restrictive.

On Friday, August 4, 2023 at 01:25:32 PM PDT, Wayne Bickerdike 
 wrote:  
 
 To implement this would require systems that implement application
security. The idea that a systems programmer of any type would be able to
perpetrate fraud is a stretch.

I had access to everything mainframe (RACF, CICS, z/OS) in a top secret
installation. I wouldn't be able to place a purchase order but I could nuke
any dataset. I was also too damn busy doing my job to compromise the
systems.

The worst case is where staff inherit privileges as they change roles. That
was a problem. Makes a case for role based security. Change roles > New
role based ID.

On Fri, Aug 4, 2023 at 11:34 PM Michael Babcock 
wrote:

> I ran across this in a CICS security admin book (which should also apply
> to z/OS sysprogs):
>
> Roles and separation of duties
>
>      A key security principle is the separation of duties between
> different users so that no one person has sufficient access privilege to
> perpetrate damaging fraud. *This configuration is required by various
> audit regulations such as the United States Federal Law known as the
> Sarbanes-Oxley Act of 2002
> <
> https://www.ibm.com/links?url=https%3A%2F%2Fwww.govinfo.gov%2Fcontent%2Fpkg%2FPLAW-107publ204%2Fpdf%2FPLAW-107publ204.pdf
> >.*
>
>      An example of this separation of duties, is that someone with the
> role of CICS System Programmer must not also have the role of RACF
> Security Administrator.
>
>
> Does anyone know exactly which section of SOX it's referring to?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


-- 
Wayne V. Bickerdike

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Steve Thompson]

Don't know if TSS implements groups. But with groups, I can have 
access to certain DSNs read only, others update|delete|create. I 
can have access to console commands from TSO, but not have logon 
access to CICS. Just as examples.


Having to change TSO IDs is problematic because one loses access 
to their private data sets... (tools you wrote for making 
ISPF/Roscoe or whatever better...).


So role based using group definitions that give one authority 
until they don't need it (or can't justify it), is what I think 
you mean and need.


Steve Thompson

On 8/4/2023 4:25 PM, Wayne Bickerdike wrote:

To implement this would require systems that implement application
security. The idea that a systems programmer of any type would be able to
perpetrate fraud is a stretch.

I had access to everything mainframe (RACF, CICS, z/OS) in a top secret
installation. I wouldn't be able to place a purchase order but I could nuke
any dataset. I was also too damn busy doing my job to compromise the
systems.

The worst case is where staff inherit privileges as they change roles. That
was a problem. Makes a case for role based security. Change roles > New
role based ID.

On Fri, Aug 4, 2023 at 11:34 PM Michael Babcock 
wrote:


I ran across this in a CICS security admin book (which should also apply
to z/OS sysprogs):

Roles and separation of duties

  A key security principle is the separation of duties between
different users so that no one person has sufficient access privilege to
perpetrate damaging fraud. *This configuration is required by various
audit regulations such as the United States Federal Law known as the
Sarbanes-Oxley Act of 2002
<
https://www.ibm.com/links?url=https%3A%2F%2Fwww.govinfo.gov%2Fcontent%2Fpkg%2FPLAW-107publ204%2Fpdf%2FPLAW-107publ204.pdf

.*

  An example of this separation of duties, is that someone with the
role of CICS System Programmer must not also have the role of RACF
Security Administrator.


Does anyone know exactly which section of SOX it's referring to?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN





--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Wayne Bickerdike]

To implement this would require systems that implement application
security. The idea that a systems programmer of any type would be able to
perpetrate fraud is a stretch.

I had access to everything mainframe (RACF, CICS, z/OS) in a top secret
installation. I wouldn't be able to place a purchase order but I could nuke
any dataset. I was also too damn busy doing my job to compromise the
systems.

The worst case is where staff inherit privileges as they change roles. That
was a problem. Makes a case for role based security. Change roles > New
role based ID.

On Fri, Aug 4, 2023 at 11:34 PM Michael Babcock 
wrote:

> I ran across this in a CICS security admin book (which should also apply
> to z/OS sysprogs):
>
> Roles and separation of duties
>
>  A key security principle is the separation of duties between
> different users so that no one person has sufficient access privilege to
> perpetrate damaging fraud. *This configuration is required by various
> audit regulations such as the United States Federal Law known as the
> Sarbanes-Oxley Act of 2002
> <
> https://www.ibm.com/links?url=https%3A%2F%2Fwww.govinfo.gov%2Fcontent%2Fpkg%2FPLAW-107publ204%2Fpdf%2FPLAW-107publ204.pdf
> >.*
>
>  An example of this separation of duties, is that someone with the
> role of CICS System Programmer must not also have the role of RACF
> Security Administrator.
>
>
> Does anyone know exactly which section of SOX it's referring to?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


-- 
Wayne V. Bickerdike

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Automount (was USS Features)

[Jon Perryman]

 > On Monday, July 31, 2023 at 08:29:07 AM PDT, Radoslaw Skorupka wrote:

> Regarding automount feature: IMHO it is less than useless.

While there is truth to what you say about automount, there are uses where 
people find it useful because it provides features that some customers need. 
Most notably, everything in a filesystem is randomly placed within that 
filesystem without any controls. Ask a z/OS storage admin if he could tolerate 
the same situation where all z/OS datasets are placed randomly (no SMS nor disk 
esoterics).  

On Monday, July 31, 2023 at 08:29:07 AM PDT, Radoslaw Skorupka 
<0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote:  
 
 Regarding automount feature: IMHO it is less than useless.
- It require some effort to establish and manage (including storage adm.)
- It wastes space, because even smallest empty home directory occupies 
first extent of the ZFS/HFS.
- Space (extents) taken by some large files and then deleted is still 
occupied by the user.
- Tools like find may omit currently unmounted directories, sometimes 
making the search ineffective.
- I vaguely remember the z/OS Unix does not like excessive filesystems 
being mounted.
- Automount/demount consume some resources.
- Last, but not least: I observed the are more active TSO users than USS 
users. The same apply to CICS, etc. Sometimes one may enter TSO OMVS 
just out of curiosity. In case of automount yet another filesystem is 
created.


 From the other hand one can create common filesystems for all home 
directories.
When needed it can be divided among multiple filesystems.
Users with large needs may have dedicated filesystems.
Empty user directory does not consume resources. Even "touched".


My €0.02


-- 
Radoslaw Skorupka
Lodz, Poland



W dniu 31.07.2023 o 17:08, Paul Gilmartin pisze:
> On Mon, 31 Jul 2023 09:43:38 -0500, Grant Taylor wrote:
>
>> On 7/31/23 8:06 AM, Rick Troth wrote:
>>> per-user automount does not necessarily waste space
>> IMHO automount is completely independent of shared / separate per user
>> disk space.
>>
>>> The thing which is mounted might be a sub-directory of a shared space.
>> Agreed.
>>
> Wasn't true in the Bad Old Days, when the only thing that could be mounted
> was an entire HFS content (or an NFS [sub]directory.)
>
> And I was dismayed that the MVS mount maps needed to differ between
> MVS NFS server and client.  Solaris was smarter: mount on the server
> would look at the map, say, "Oh! That's me!" and mount the directory as local.
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Jon Perryman]

 > On Friday, August 4, 2023 at 11:16:00 AM PDT, Schmitt, Michael 
 >  wrote:

> award anyone who can figure out how to effectively use the ISPF Workplace.


Wasn't the goal of ISPF Workplace to keep Unix programmers engaged when working 
on z/OS? z/OS takes away the need for so many of their skills that they need to 
be distracted in some other way. z/OS people say just give me something useful 
and simple because I don't need thousands of commands.

   

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Jon Perryman]

 > On Friday, August 4, 2023 at 10:15:01 AM PDT, Bob Bridges 
 >  wrote:

> I generally type "tso ed " on the ISPF command line.

You can easily add "ed" to the ISPF command table (I think it's table ISPCMDS) 
and drop the "TSO".  Write an exec that TBADDs each command. Additionally, I 
find I need to refer back to the original screen. I start a new screen from the 
exec so both can be seen using swap.

Having a command to display a reflist can also useful. Let your tools work for 
you instead of you working for your tools. If it works for you then use it but 
don't do it because we find it useful.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Bob Bridges]

Hm, not use 3.4?  I still have to go there pretty often, for tasks such as 

- When cleaning up DATASET-class permissions in the security system, I need to 
know what datasets actually exist
- When deleting old user IDs, I want to pass any important datasets belonging 
to the dearly departed to his old boss
- When I'm hunting for  production job that might do a task I'm interested in 
(although I guess I would mostly use 3.14 for that)
- While investigating a parmfile or procfile or other system dataset for the 
first time

Dunno that I could live without 3.4.  Well, I ~could~, but I'd basically have 
to reïnvent it is all.

Option 11; not sure that's in the menu my current client provided to me.  
Obviously I haven't been using it.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Lazlo's Chinese Relativity Axiom:  No matter how great your triumphs or how 
tragic your defeats, approximately one billion Chinese couldn't care less. */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Tom 
Marchant
Sent: Friday, August 4, 2023 13:36

I use data set lists in the ISPF workplace (option 11) for similar reasons. 
I have rarely used 3.4 for decades.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Minimum LPAR size for z15 processor

[P H]

With z15, there will be a new level of CFCC. This may require additional 
memory. Although there are no structures, to be safe, I recommend you use the 
CFSizer tool.



From: IBM Mainframe Discussion List  on behalf of 
Mark Jacobs <0224d287a4b1-dmarc-requ...@listserv.ua.edu>
Sent: 04 August 2023 17:17
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Minimum LPAR size for z15 processor

We're migrating our CF processors from z13's to z15's. One of the CF LPARs on 
the z13 is assigned 1.5GB. There are no structures there, it's just used as 
placeholder for STP timing links. Will that LPAR activate on a z15 processor 
with the same 1.5GB allocation, or will we need to bump it up some?

Mark Jacobs

Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted email.

GPG Public Key - 
https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Paul Gilmartin]

On Fri, 4 Aug 2023 17:33:18 +, Jon Perryman wrote:

> > On Friday, August 4, 2023 at 09:24:10 AM PDT, Tom Marchant  wrote:
>
>> What if you copy the JCL to a new data set, replacing all the EXEC PGM=xxx> 
>> to EXEC PGM=IEFBR14? and submit it?
>
>Substituting IEFBR14 only stops program processing. JCL processing will still 
>alloc, delete and possibly other bad things.in
>
Better, then, to wrap everything with a disabling IF .. ENDIF.  Need to add a 
precedng
IEFBR14 because IF doesn't affect the first job step.

(I'd say not JCL processing but  the initiator performs allocation/deletion.)

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Schmitt, Michael]

You, sir, win the 100 points I have been waiting to award anyone who can figure 
out how to effectively use the ISPF Workplace.

Now explain it to the rest of us.  

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Tom 
Marchant
Sent: Friday, August 4, 2023 12:36 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Mainframe Makers WAS: Ars Technica: The IBM mainframe: How it 
runs and why it survives

I use data set lists in the ISPF workplace (option 11) for similar reasons.
I have rarely used 3.4 for decades.

--
Tom Marchant

On Fri, 4 Aug 2023 13:14:54 -0400, Bob Bridges  wrote:

>No, sorry, what I really mean is that instead of going to ISPF option 2 and 
>typing in a DSN, I generally type "tso ed " on the ISPF command line.  
>Same for VW and BR, and a few other REXX execs.
>
>The ED, BR and VW commands run the DSN I give it through RENDSN, a routine 
>that checks the string against a list I maintain.  So if I say "tso ed jg", 
>it'll look up JG and return the name of whatever PDS I'm using at the current 
>installation for general JCL.  The RENDSN list has a few dozen DSNs in it that 
>I use often enough to bother recording them; that way I don't have to remember 
>the name of the production CFILE, or where the SuperSession parms are stored, 
>or whether at this client the common REXX library for the security team is 
>this or that.  So most of my most commonly used "DSNs" are really two- or 
>three-char shortcuts.  Saves me some thinking and a lot of typing.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Jon Perryman]

 > On Friday, August 4, 2023 at 09:37:43 AM PDT, Paul Gilmartin 
 > <042bfe9c879d-dmarc-requ...@listserv.ua.edu> wrote:

> Where's JES3 Setup processing when you need it?

Setup processing doesn't help Dave because it requires the job be submitted and 
queued. It also ignores inter-job relationships. He wants to verify during the 
day to avoid calls at night. I'm surprised that Dave doesn't have a job 
schedular which most likely does everything he wants. I suspect that he is in a 
development environment where he is given jobs to run at night and he doesn't 
want to do one-off additions to the job schedular.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Tom Marchant]

I use data set lists in the ISPF workplace (option 11) for similar reasons. 
I have rarely used 3.4 for decades.

-- 
Tom Marchant

On Fri, 4 Aug 2023 13:14:54 -0400, Bob Bridges  wrote:

>No, sorry, what I really mean is that instead of going to ISPF option 2 and 
>typing in a DSN, I generally type "tso ed " on the ISPF command line.  
>Same for VW and BR, and a few other REXX execs.
>
>The ED, BR and VW commands run the DSN I give it through RENDSN, a routine 
>that checks the string against a list I maintain.  So if I say "tso ed jg", 
>it'll look up JG and return the name of whatever PDS I'm using at the current 
>installation for general JCL.  The RENDSN list has a few dozen DSNs in it that 
>I use often enough to bother recording them; that way I don't have to remember 
>the name of the production CFILE, or where the SuperSession parms are stored, 
>or whether at this client the common REXX library for the security team is 
>this or that.  So most of my most commonly used "DSNs" are really two- or 
>three-char shortcuts.  Saves me some thinking and a lot of typing.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Jon Perryman]

 > On Friday, August 4, 2023 at 09:24:10 AM PDT, Tom Marchant  wrote:

> What if you copy the JCL to a new data set, replacing all the EXEC PGM=xxx> 
> to EXEC PGM=IEFBR14? and submit it?

Substituting IEFBR14 only stops program processing. JCL processing will still 
alloc, delete and possibly other bad things.in



   
  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Bob Bridges]

No, sorry, what I really mean is that instead of going to ISPF option 2 and 
typing in a DSN, I generally type "tso ed " on the ISPF command line.  
Same for VW and BR, and a few other REXX execs.

The ED, BR and VW commands run the DSN I give it through RENDSN, a routine that 
checks the string against a list I maintain.  So if I say "tso ed jg", it'll 
look up JG and return the name of whatever PDS I'm using at the current 
installation for general JCL.  The RENDSN list has a few dozen DSNs in it that 
I use often enough to bother recording them; that way I don't have to remember 
the name of the production CFILE, or where the SuperSession parms are stored, 
or whether at this client the common REXX library for the security team is this 
or that.  So most of my most commonly used "DSNs" are really two- or three-char 
shortcuts.  Saves me some thinking and a lot of typing.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* A few observations and much reasoning lead to error; many observations and a 
little reasoning to truth.  -Alexis Carrel */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Tom 
Marchant
Sent: Friday, August 4, 2023 12:53

ITYM ISPF commands. Or maybe FASTPATH commands. 
Surely you don't often use the TSO editor rather than the ISPF editor?

--- On Fri, 4 Aug 2023 00:22:39 -0400, Bob Bridges  
wrote:
>Come to think of it, I still use TSO commands more often than some of the ISPF 
>menu options - ED and VW and BR commands rather than options 1 and 2, for 
>instance.  I'm just happier with a command interface than some menus.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Jon Perryman]

 > On Friday, August 4, 2023 at 04:04:39 AM PDT, Seymour J Metz 
 >  wrote:

> Back in the bad old days, IBM showed the expansion immediately after the JCL. 
> Alas, in MVS they chose to show it as a message in a separate JES dataset. 
> Have they moved IEF653I to be inline since then?

I'm guessing your right that IEF653I is still in JESMSGLG and probably won't be 
displayed in TYPERUN=SCAN. Since the IEF653I comes out at interpreter phase, 
chances are the interpreter only interprets a step just before it runs. 

This also means the instorage JCL will have only been converted and awaiting 
interpreter. If Dave needs the converted JCL in addition to the variables, then 
he can grab it from storage without all the JESJCL funk otherwise just forget 
my previous suggestion. 

Thanks.

On Friday, August 4, 2023 at 04:04:39 AM PDT, Seymour J Metz 
 wrote:  
 
 Back in the bad old days, IBM showed the expansion immediately after the JCL. 
Alas, in MVS they chose to show it as a message in a separate JES dataset. Have 
they moved IEF653I to be inline since then?


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Paul Gilmartin [042bfe9c879d-dmarc-requ...@listserv.ua.edu]
Sent: Friday, August 4, 2023 12:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Accessing JCL SETs in Rexx

On Fri, 4 Aug 2023 03:32:01 +, Jon Perryman wrote:

> > On Thursday, August 3, 2023 at 12:21:34 PM PDT, David Spiegel  wrote:
>> My intention is to read a Job and make sure that all datasets are available,
>> but, the dsnames contain SET variables.
>
>The converter / interpreter will resolve variables. Submit the job with 
>typerun scan or hold should generate the information you want.
>
I've found SCAN to be almost worthless.  It doesn't always report invalid data 
set names.

>If you're not comfortable with control blocks, IPCS and dumps, then you can 
>use SDSF to extract the converted JCL albeit a little funky to process.
>
Is there a JES data set accessible by SDSF that shows symbols resolved?
what does it show if symbol resolution extends a line beyond column 71?

In  fact, any continuation that splits a data set name can be "a little funky
to process."

--
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS performance question

[rpinion865]

I am working with the Development LPAR (SC08D3).  Below is the TSO service 
class definition for that LPAR.

Service Class Name . . . . . : TSOSC   

Description  . . . . . . . . . TSO Production and Development  

Workload Name  . . . . . . . . TSO   (name or ?)

Base Resource Group  . . . . .   (name or ?)   

Cpu Critical . . . . . . . . . NO(YES or NO)   

I/O Priority Group . . . . . . NORMAL(NORMAL or HIGH)  

Honor Priority . . . . . . . . DEFAULT   (DEFAULT or NO)   



Specify BASE GOAL information. Action Codes: I=Insert new period,  

E=Edit period, D=Delete period. 



-- Period --  --- Goal --- 

Action  #  Duration   Imp.  Description

  ___  _   _   

  __1  500 190% complete within 00:00:00.060   

  __2  _   4Execution velocity of 40   

Next, is a mangled text view of the Development (SC08D3) LPAR definition.
Customize Image Profiles: Z15A:SC08D3 : SC08D3 : Processor  Turn on context 
sensitive help.  
Collapse Z15A:SC08D3 
Collapse SC08D3 
 General 
 Processor 
 Security 
 Storage 
 Options 
 Load 
 Crypto 
Group Name  


Open or close the list box
Logical Processor Assignments
Dedicated processors
Select
Processor Type
Initial
Reserved
Selected
Central processors (CPs)
1
0
Selected
z Integrated Information Processors (zIIPs)
1
0
Not Dedicated Processor Details for:
CPs 
zIIPs 
CP Details
Initial processing weight   
60
1 to 999
Initial capping
Enable workload manager 
Minimum processing weight   
0
Maximum processing weight   
0
Absolute Capping
None 
Number of processors 
(0.01 to 255.0) 
0.18
 




Sent with Proton Mail secure email.

--- Original Message ---
On Thursday, August 3rd, 2023 at 12:17 PM, Allan Staller 
<0387911dea17-dmarc-requ...@listserv.ua.edu> wrote:


> Classification: Confidential
> 
> You did not say where the TSO response time issues were being observed. I 
> suspect, from the information provided it is on SC08D3(possible) or SC14D4 
> (most likely).
> 
> If you look, I suspect the majority of CPU consumption is from the *MSTR DB2 
> address space. DB2 will charge this back to the "user". This address space is 
> most likely running in the SYSSTC Service class.
> 
> I suggest you look at the service class definitions for TSO. At least 80% of 
> all transactions should end in TSO Service Class Period 1, 80 % of the rest 
> in TSO Service Class Period 2 (16%) and the remainder in TSO Service Class 
> period 3 (4 %). Another variation could be TSO Service Class Period 1 at 96% 
> and TSO Service Class Period 2 4%; No TSO Service Class Period 3.
> 
> Depending on the scheme chosen above, except for the last TSO Service Class, 
> all should run as importance 1. They may have different performance goals, 
> but the importance should be 1.
> 
> " From the activation profile for Development (SC08D3) the Processor 
> definition has the absolute Capping box Number of processors box set to 
> 0.18.”. This sentence does not make sense as written.
> 
> HTH,
> 
> -Original Message-
> From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On Behalf Of 
> rpinion865
> 
> Sent: Thursday, August 3, 2023 10:10 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: z/OS performance question
> 
> [CAUTION: This Email is from outside the Organization. Unless you trust the 
> sender, Don’t click links or open attachments as it may be a Phishing email, 
> which can steal your Information and compromise your Computer.]
> 
> Let me start off by saying I am not a z/OS performance and capacity planning 
> expert. If anything, I am a novice. I am looking for a trivial answer to a 
> non-trivial question.
> We have a z15 (8562-T02) running three z/OS 2.4 LPAR's, Production (SC10D1), 
> Development (SC08D3), and Sysprog (SC14D4). Below is information from the RMF 
> Partition Report. My question/problem is this. On the Development LPAR, when 
> a DB2 database restore job runs, the MVS Busy goes to 100% as seen from both 
> SDSF DA and RMF CPU reports. Most of the CPU Busy goes to the DB2 restore 
> job. The batch job runs in a discretionary service class, and TSO users run 
> in a higher service class with goal mode. But, response time for the TSO 
> users gets long, 3 to 5 seconds between enter keys, ISPF screen 

Re: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Tom Marchant]

ITYM ISPF commands. Or maybe FASTPATH commands. 
Surely you don't often use the TSO editor rather than the ISPF editor?

-- 
Tom Marchant

On Fri, 4 Aug 2023 00:22:39 -0400, Bob Bridges  wrote:

>Come to think of it, I still use TSO commands more often than some of the ISPF 
>menu options - ED and VW and BR commands rather than options 1 and 2, for 
>instance.  I'm just happier with a command interface than some menus.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Tom Marchant]

I see IEFC653I in the JESJCL data set. I don't know why IEFC653I seems to have 
replaced IEF653I.

-- 
Tom Marchant

On Fri, 4 Aug 2023 11:04:24 +, Seymour J Metz  wrote:

>Back in the bad old days, IBM showed the expansion immediately after the JCL. 
>Alas, in MVS they chose to show it as a message in a separate JES dataset. 
>Have they moved IEF653I to be inline since then?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Willy Jensen]

Maybe some DISP=(OLD,DELETE) might have unforseen consequenses when actually 
executing the JCL, even with PGM=IEFBR14.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Paul Gilmartin]

On Fri, 4 Aug 2023 11:24:06 -0500, Tom Marchant wrote:

>What if you copy the JCL to a new data set, replacing all the EXEC PGM=xxx 
>to EXEC PGM=IEFBR14? and submit it?
>
>JCL errors would be pretty obvious.
>
Where's JES3 Setup processing when you need it?

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Tom Marchant]

What if you copy the JCL to a new data set, replacing all the EXEC PGM=xxx 
to EXEC PGM=IEFBR14? and submit it?

JCL errors would be pretty obvious.

-- 
Tom Marchant

On Thu, 3 Aug 2023 21:58:22 +, David Spiegel  
wrote:

>The purpose of the scan is to ensure that my jobs which implement a Middleware 
>upgrade have a good chance of succeeding.
>These jobs are SUBMITd at 02:00 when the adrenaline is flowing, Teams messages 
>are non-stop and the stress level is through the roof.
>The last thing I want to do is start looking for missing Datasets and/or 
>RENAME conflicts.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Minimum LPAR size for z15 processor

[Mark Jacobs]

We're migrating our CF processors from z13's to z15's. One of the CF LPARs on 
the z13 is assigned 1.5GB. There are no structures there, it's just used as 
placeholder for STP timing links. Will that LPAR activate on a z15 processor 
with the same 1.5GB allocation, or will we need to bump it up some?

Mark Jacobs

Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted email.

GPG Public Key - 
https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Kirk Wolf]

No.   Here's what the JCL References says for "EXPORT" -

Purpose: Use the EXPORT statement to make specific JCL symbols available to the 
job step program.
Exported JCL symbols can be accessed during the job execution phase using the 
JCL Symbol Service
(IEFSJSYM) or the JES Symbol Service (IAZSYMBL). Symbols must be set to a value 
subsequent to the
EXPORT statement for the symbol value to be exported.

So, without exporting, I don't believe that there is a supported API for a 
program to see JCL or JES symbols.

Kirk Wolf

On Thu, Aug 3, 2023, at 7:02 PM, Sri h Kolusu wrote:
> Kirk,
> 
> Does this work for symbols that are NOT exported?
> 
> For ex:
> 
> // SET HLQ=
> // SET MLQ=SOME
> // SET TLQ=DSN
> // SET FLQ=DUMP
> // SET MYDSN=
> // SET MYVOL=SYS001
> // SET DCLAS=EDCCOMPR
> // SET SCLAS=STANDARD
> // SET PRI=5000
> // SET SEC=2000
> // SET VU=3
> // SET DV=SYSDA
> // SET AU=TRK
> //*
> //SYMEX EXEC PGM=COZBATCH
> //SYSMDUMP DD DSN=,
> //DISP=(NEW,CATLG),
> //DATACLAS=,STORCLAS=,EATTR=OPT,
> //UNIT=(,),SPACE=(,(,),RLSE),
> //DCB=(RECFM=FBS,LRECL=4160,BLKSIZE=24960)
> /*
> //STDIN DD *
> ENV | GREP "JES_"
> /*
> 
> Thanks,
> Kolusu
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Farley, Peter]

Thanks Robert, that looks useful for the rest of us as well.

There are ISV products (we use JCLCHECK) that also perform this function as 
part of preparing JCL for production install, but freely shared code is good 
too.

However, even the best “checker” software can’t tell you if newly-introduced 
application files (especially GDG’s) that won’t exist until the first batch job 
to create them actually runs are going to be available after JCL turnover to 
production.

Peter

From: IBM Mainframe Discussion List  On Behalf Of 
Robert Prins
Sent: Friday, August 4, 2023 10:54 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Accessing JCL SETs in Rexx



In essence, I've not used this since about forever, but when we, as in I,

decided we needed to start using parametrized procs at Willis around the

Y2K  time, and people were frustrated by not being able to see the wood

from the trees, I very quickly knocked up the code below, I have no clue if

it's still working, but we used it in SDSF on the JCL of TYPRUN=SCAN

submitted jobs, to get rid of all the IEF653I messages. Feel free to play

around with it, if you see to improve it, please share your code, and if

you don't like GPL'ed code, though!



Robert







And yes, it requires, IIRC, nice parameters on procs and the invocation of

procs and on set statements, so one per line. And no, it was a Q hack, so

error-checking is non-existent, expect to invoke it lots of times after

uncommenting the "trace ?r" or by preceding it with "EXECUTIL TS"



Enjoy,



Robert



On Fri, 4 Aug 2023 at 11:04, Seymour J Metz 
mailto:sme...@gmu.edu>> wrote:



> Back in the bad old days, IBM showed the expansion immediately after the

> JCL. Alas, in MVS they chose to show it as a message in a separate JES

> dataset. Have they moved IEF653I to be inline since then?

>

>

> --

> 

> From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf

> of Paul Gilmartin [042bfe9c879d-dmarc-requ...@listserv.ua.edu]

> Sent: Friday, August 4, 2023 12:02 AM

> To: IBM-MAIN@LISTSERV.UA.EDU

> Subject: Re: Accessing JCL SETs in Rexx

>

> On Fri, 4 Aug 2023 03:32:01 +, Jon Perryman wrote:

>

> > > On Thursday, August 3, 2023 at 12:21:34 PM PDT, David Spiegel  wrote:

> >> My intention is to read a Job and make sure that all datasets are

> available,

> >> but, the dsnames contain SET variables.

> >

> >The converter / interpreter will resolve variables. Submit the job with

> typerun scan or hold should generate the information you want.

> >

> I've found SCAN to be almost worthless.  It doesn't always report invalid

> data set names.

>

> >If you're not comfortable with control blocks, IPCS and dumps, then you

> can use SDSF to extract the converted JCL albeit a little funky to process.

> >

> Is there a JES data set accessible by SDSF that shows symbols resolved?

> what does it show if symbol resolution extends a line beyond column 71?

>

> In  fact, any continuation that splits a data set name can be "a little

> funky

> to process."

--

This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[David Spiegel]

Hi Gil,
JCL is stored in a file and is read by EXECIO.

Regards,
David



From: IBM Mainframe Discussion List  on behalf of 
Paul Gilmartin <042bfe9c879d-dmarc-requ...@listserv.ua.edu>
Sent: Thursday, August 3, 2023 3:53:05 p.m.
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: Accessing JCL SETs in Rexx

On Thu, 3 Aug 2023 19:21:27 +, David Spiegel wrote:
>
>My intention is to read a Job and make sure that all datasets are available, 
>but, the dsnames contain SET variables.
>
By "read a Job" do you mean that JCL resides in a file or PDS member
and you want to read that JCL with EXECIO or linein() and identify
all data set names in equivalent JCL having substituted values in
its SET statements?

I doubt that you can do that without writing your own parser/interpreter.

But perhaps TYPRUN=HOLD and scan the JESJCL with the SDSF API.

--
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Michael Babcock]

I ran across this in a CICS security admin book (which should also apply 
to z/OS sysprogs):


Roles and separation of duties

    A key security principle is the separation of duties between 
different users so that no one person has sufficient access privilege to 
perpetrate damaging fraud. *This configuration is required by various 
audit regulations such as the United States Federal Law known as the 
Sarbanes-Oxley Act of 2002 
.*


    An example of this separation of duties, is that someone with the 
role of CICS System Programmer must not also have the role of RACF 
Security Administrator.



Does anyone know exactly which section of SOX it's referring to?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[ITschak Mugzach]

Paul,

END is how the variable name ends. It can be separated  by comma, a dot,
tow dots and a space. After substituting the variable with its value, I
clean double dots for example.

Remember that in the op situation, the input is a jock library. Nothing was
submitted nor running. IEF messages are not relevant in this case.

Btw, substituting DD cards a
Is relatively simple. Try to parse parm fields that might have spaces,
brackets and apostrophes and variables inside

Best,
ITschak

בתאריך יום ו׳, 4 באוג׳ 2023 ב-16:26 מאת Paul Gilmartin <
042bfe9c879d-dmarc-requ...@listserv.ua.edu>:

> On Fri, 4 Aug 2023 10:02:29 +0300, Itschak Mugzach  wrote:
> >...
> >   - Substitution is more complex since you have several END options and
> to
> >   ignore temporary datasets such as those starting with '&'
>
> What's an END option?  (Example?)
>
> I need to submit an RCF that the JCL Ref. fails to clarify the effect of
> substitutioh's resulting in a name beginning with "&" or "&" in the
> equivalent JCL. as in:
> //   SET V1=''
> //  SET  V2='&BAR'
> //*
> //STEP  EXEC PGM=MYPGM
> //DD1  DD  DSN=,...
> //DD2  DD  DSN=,...
>
>
> On Fri, 4 Aug 2023 11:58:13 +, Seymour J Metz wrote:
>
> >Senior moment - it was the disposition messages, not the substitution
> messages, that got moved. For substitution the change was using a message
> id.
> >
> I believe that substitution messages can be issued by the Converter but
> disposition
> messages only after step execution.
>
> And I find it an irritating omission that substitution messages do not
> report
> substitution of "&" for "&".
>
> --
> gil
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
ITschak Mugzach
*|** IronSphere Platform* *|* *Information Security Continuous Monitoring
for z/OS, x/Linux & IBM I **| z/VM coming soon  *

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Channelized I/O WAS: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Seymour J Metz]

Also ADP.


From: IBM Mainframe Discussion List  on behalf of Bob 
Bridges 
Sent: Friday, August 4, 2023 8:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

Right, I think it was "EDP" (electronic data processing) when I started.  Or 
maybe even that wasn't the first one I was aware of; it's been a long time now.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Neither irony nor sarcasm is argument.  -Samuel Butler */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Seymour J Metz
Sent: Friday, August 4, 2023 07:14

Also 'Data Processing'; I vaguely recall that there were a few more terms.


From: P H [04843e86df79-dmarc-requ...@listserv.ua.edu]
Sent: Friday, August 4, 2023 5:23 AM

> BTW: When I started my career during the early 70s, IT didn't exist. It was 
> 'computers' or 'computing'.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Paul Gilmartin]

On Fri, 4 Aug 2023 10:02:29 +0300, Itschak Mugzach  wrote:
>...
>   - Substitution is more complex since you have several END options and to
>   ignore temporary datasets such as those starting with '&'

What's an END option?  (Example?)

I need to submit an RCF that the JCL Ref. fails to clarify the effect of
substitutioh's resulting in a name beginning with "&" or "&" in the
equivalent JCL. as in:
//   SET V1=''
//  SET  V2='&BAR'
//*
//STEP  EXEC PGM=MYPGM
//DD1  DD  DSN=,...
//DD2  DD  DSN=,...


On Fri, 4 Aug 2023 11:58:13 +, Seymour J Metz wrote:

>Senior moment - it was the disposition messages, not the substitution 
>messages, that got moved. For substitution the change was using a message id.
>
I believe that substitution messages can be issued by the Converter but 
disposition
messages only after step execution.

And I find it an irritating omission that substitution messages do not report
substitution of "&" for "&".

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Channelized I/O WAS: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Bob Bridges]

Right, I think it was "EDP" (electronic data processing) when I started.  Or 
maybe even that wasn't the first one I was aware of; it's been a long time now.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Neither irony nor sarcasm is argument.  -Samuel Butler */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Seymour J Metz
Sent: Friday, August 4, 2023 07:14

Also 'Data Processing'; I vaguely recall that there were a few more terms.


From: P H [04843e86df79-dmarc-requ...@listserv.ua.edu]
Sent: Friday, August 4, 2023 5:23 AM

> BTW: When I started my career during the early 70s, IT didn't exist. It was 
> 'computers' or 'computing'.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Seymour J Metz]

Senior moment - it was the disposition messages, not the substitution messages, 
that got moved. For substitution the change was using a message id.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Seymour J Metz [sme...@gmu.edu]
Sent: Friday, August 4, 2023 7:04 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Accessing JCL SETs in Rexx

Back in the bad old days, IBM showed the expansion immediately after the JCL. 
Alas, in MVS they chose to show it as a message in a separate JES dataset. Have 
they moved IEF653I to be inline since then?


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Paul Gilmartin [042bfe9c879d-dmarc-requ...@listserv.ua.edu]
Sent: Friday, August 4, 2023 12:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Accessing JCL SETs in Rexx

On Fri, 4 Aug 2023 03:32:01 +, Jon Perryman wrote:

> > On Thursday, August 3, 2023 at 12:21:34 PM PDT, David Spiegel  wrote:
>> My intention is to read a Job and make sure that all datasets are available,
>> but, the dsnames contain SET variables.
>
>The converter / interpreter will resolve variables. Submit the job with 
>typerun scan or hold should generate the information you want.
>
I've found SCAN to be almost worthless.  It doesn't always report invalid data 
set names.

>If you're not comfortable with control blocks, IPCS and dumps, then you can 
>use SDSF to extract the converted JCL albeit a little funky to process.
>
Is there a JES data set accessible by SDSF that shows symbols resolved?
what does it show if symbol resolution extends a line beyond column 71?

In  fact, any continuation that splits a data set name can be "a little funky
to process."

--
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Robert Prins]

In essence, I've not used this since about forever, but when we, as in I,
decided we needed to start using parametrized procs at Willis around the
Y2K  time, and people were frustrated by not being able to see the wood
from the trees, I very quickly knocked up the code below, I have no clue if
it's still working, but we used it in SDSF on the JCL of TYPRUN=SCAN
submitted jobs, to get rid of all the IEF653I messages. Feel free to play
around with it, if you see to improve it, please share your code, and if
you don't like GPL'ed code, though!

Robert

/* REXX edit macro to clean up JCL*/
/*** trace ?r * \| *
*   (C) Copyright Robert AH Prins, 1995-2015   *

*  --  *
* | Date   | By   | Remarks  | *
* |+--+--| *
* ||  |  | *
* |+--+--| *
* | 2015-12-28 | RAHP | Add routine to find SET symbols  | *
* |+--+--| *
* | 2001-06-04 | RAHP | New version of SDSF (column changes) | *
* |+--+--| *
* | 1997-05-16 | RAHP | Cater for just one parameter on proc | *
* |+--+--| *
* | 1995-04-06 | RAHP | Initial version  | *
* |+--+--| *

* EUNSUB is a REXX edit macro to remove IEFC653I substitution  *
* messages from submitted JCL. *

* Send questions, suggestions and/or bug reports to:   *
*  *
* rob...@prino.org / robert.ah.pr...@gmail.com *
*  *
* Robert AH Prins  *
* Ozkiniu gatve 48 *
* Vilnius 08405*
* Lithuania*

* This program is free software: you can redistribute it and/or*
* modify it under the terms of the GNU General Public License as   *
* published by the Free Software Foundation, either version 3 of   *
* the License, or (at your option) any later version.  *
*  *
* This program is distributed in the hope that it will be useful,  *
* but WITHOUT ANY WARRANTY; without even the implied warranty of   *
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
* GNU General Public License for more details. *
*  *
* You should have received a copy of the GNU General Public License*
* along with this program. If not, see   *
***/
"ISREDIT MACRO (PARM)"
parm  = translate(parm)
/*
signal get_set
exit
*/

"isredit (L) = line 1"
if pos(' JOB ', l) = 0 then
  exit 1

p = pos('//', l)

numeric digits 32

iefc653i= 'IEFC653I'

lin = right('//', p + 1)
"isredit line_after .zl = (LIN)"

"isredit x 'EXEC PGM=' all"
"isredit x '*' all" p + 2

"isredit f ' EXEC ' first nx"
do while rc = 0
  "isredit LABEL .zcsr = .EF 0"
  "isredit (EF) = linenum .EF"
  "isredit f ' EXEC ' next nx"

  if rc = 0 then
"isredit LABEL .zcsr = .EL 0"
  else
"isredit LABEL .zl   = .EL 0"

  "isredit (EL) = linenum .EL"

  "isredit (EXEC) = line .EF"

  parse value exec with '//' . 'EXEC ' proc ',' .
  if length(proc) > 8 then
parse value exec with '//' . 'EXEC ' proc ' ' .

  "isredit f 'XX"proc"' .EF .EL first"
  "isredit LABEL .zcsr = .EP 0"
  "isredit (EP) = linenum .EP"

  if ep - ef > 1 then
rc = process(+ef + 1, +ep - 1)

  "isredit f p'^'" p + 2 ".EP .EL first"
  "isredit f p'^'" p + 2 ".EP .EL next"
  "isredit LABEL .zcsr = .EE 0"
  "isredit (EE) = linenum .EE"

  if ee - ep >= 1 then
rc = process(+ep, +ee - 1)

  call delete_iefc653i

  "isredit f ' EXEC ' first nx .EL .ZL"
end

"isredit reset"
exit

/***
* SUBSTITUTE:   

Re: Channelized I/O WAS: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[P H]

Data Processing, most probably from DP division of IBM of that time.

Sent from Outlook for Android

From: IBM Mainframe Discussion List  on behalf of 
Seymour J Metz 
Sent: Friday, August 4, 2023 12:14:07 PM
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

> The one I worked on at a sister (can I say this or should it be 'person' 
> organisation of CERN) had a grand total of 1 MB main memory!

That sounds more appropriate for a 65 than a 195.

> BTW: When I started my career during the early 70s, IT didn't exist. It was 
> 'computers' or 'computing'.

Also 'Data Processing'; I vaguely recall that there were a few more terms.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of P H 
[04843e86df79-dmarc-requ...@listserv.ua.edu]
Sent: Friday, August 4, 2023 5:23 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

In response to your comments and some made by others, my 2 cents worth.

This discussion started talking about mainframes and 'split' into sub-threads 
questioning/focusing on IBM z e.g., z/Architecture, what has z ever done, any 
uniqueness/special features of z etc.

In my response, I tried to answer some Qs and correcting some of the numbers 
which were being quoted. I did end by saying 'horses for courses'. No single 
system/platform is perfect. All have their uniqueness, strengths and weakness. 
Today, other platforms may have similar functions/features as z and some may be 
even better, the point is during the evolution of z under it's different 
marketing names (S/360, S/370, S/390, eServer, System z etc) z has evolved, 
adapted and embraced technologies which businesses require for modern 
workloads. z continues to evolve! z can't be everything to everyone. There are 
alternatives to 'mainframes' both from IBM (POWER) and others.

Talking about weakness, as an example I did mention that my x86 also has 
limitations. I don't need a better machine, especially an overpriced Mac. Just 
like some customers think they don't need an overpriced z. With today’s mind 
set of 'good enough' computing i.e. if it doesn't work reboot, if what you have 
meets your needs, so be it.


Just like your iPhone, my smartphone has most probably more power/memory than 
S370/195 of early 70s. The one I worked on at a sister (can I say this or 
should it be 'person' organisation of CERN) had a grand total of 1 MB main 
memory! However, I doubt our smartphones could process tons of data generated 
by accelerators causing collisions of energetic particles to investigate the 
structure of the atomic nucleus. Even during the 70's S370/195 did it very 
successfully i.e., process large amounts of data (strength of the I/O subsystem 
??).


Yes, there are other suppliers of MF like systems. Someone else on this thread 
mentioned that they saw a demo of one which had similar RAS capabilities as of 
z. I am familiar with that system. Great demo that lots customers rushed to 
introduce these into their IT infrastructure. One customer I know of, who soon 
after Y2K were encouraged by their 'consultants' to ditch their centralised IBM 
MF installed lots of these systems at all their distributed sites, 3 systems at 
each site (Dev/Test/Prod). In case of this customer the hype of the demo turned 
sour as the systems were more 'down' then 'up'. To overcome the RAS 
deficiencies the solution was to have 'spare' systems on site. No pun intended, 
needless to say these systems were sunset and almost 20 years later the 
customer is still using z. I am sure amongst this list, others will have 
examples of customers ditching other platforms including z for all sorts of 
reasons.


We can debate for ever which system is better etc. At the end of day just put 
your money where your mouth is into what best suits your IT needs


BTW: When I started my career during the early 70s, IT didn't exist. It was 
'computers' or 'computing'.




From: IBM Mainframe Discussion List  on behalf of 
David Crayford 
Sent: 04 August 2023 00:42
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

> On 3 Aug 2023, at 2:26 am, P H 
> <04843e86df79-dmarc-requ...@listserv.ua.edu> wrote:
>
> The numbers quoted by Tom:
>
> So I pointed out there's only 12 I/O drawers max on a z16 which is 12 x
> 16 = 192 slots or 384 ports max.  He replied, but didn't seem to fully
> accept that answer.
>
> are 100% correct. These numbers are the MAXIMUM. Depending on the 
> configuration, these could be a lot less e.g. the number of coupling links 
> 

Re: Channelized I/O WAS: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[P H]

My mistake, the 370/195 had 2 MB, this customer's 360/75 had 1 MB

Sent from Outlook for Android

From: IBM Mainframe Discussion List  on behalf of 
Seymour J Metz 
Sent: Friday, August 4, 2023 12:14:07 PM
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

> The one I worked on at a sister (can I say this or should it be 'person' 
> organisation of CERN) had a grand total of 1 MB main memory!

That sounds more appropriate for a 65 than a 195.

> BTW: When I started my career during the early 70s, IT didn't exist. It was 
> 'computers' or 'computing'.

Also 'Data Processing'; I vaguely recall that there were a few more terms.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of P H 
[04843e86df79-dmarc-requ...@listserv.ua.edu]
Sent: Friday, August 4, 2023 5:23 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

In response to your comments and some made by others, my 2 cents worth.

This discussion started talking about mainframes and 'split' into sub-threads 
questioning/focusing on IBM z e.g., z/Architecture, what has z ever done, any 
uniqueness/special features of z etc.

In my response, I tried to answer some Qs and correcting some of the numbers 
which were being quoted. I did end by saying 'horses for courses'. No single 
system/platform is perfect. All have their uniqueness, strengths and weakness. 
Today, other platforms may have similar functions/features as z and some may be 
even better, the point is during the evolution of z under it's different 
marketing names (S/360, S/370, S/390, eServer, System z etc) z has evolved, 
adapted and embraced technologies which businesses require for modern 
workloads. z continues to evolve! z can't be everything to everyone. There are 
alternatives to 'mainframes' both from IBM (POWER) and others.

Talking about weakness, as an example I did mention that my x86 also has 
limitations. I don't need a better machine, especially an overpriced Mac. Just 
like some customers think they don't need an overpriced z. With today’s mind 
set of 'good enough' computing i.e. if it doesn't work reboot, if what you have 
meets your needs, so be it.


Just like your iPhone, my smartphone has most probably more power/memory than 
S370/195 of early 70s. The one I worked on at a sister (can I say this or 
should it be 'person' organisation of CERN) had a grand total of 1 MB main 
memory! However, I doubt our smartphones could process tons of data generated 
by accelerators causing collisions of energetic particles to investigate the 
structure of the atomic nucleus. Even during the 70's S370/195 did it very 
successfully i.e., process large amounts of data (strength of the I/O subsystem 
??).


Yes, there are other suppliers of MF like systems. Someone else on this thread 
mentioned that they saw a demo of one which had similar RAS capabilities as of 
z. I am familiar with that system. Great demo that lots customers rushed to 
introduce these into their IT infrastructure. One customer I know of, who soon 
after Y2K were encouraged by their 'consultants' to ditch their centralised IBM 
MF installed lots of these systems at all their distributed sites, 3 systems at 
each site (Dev/Test/Prod). In case of this customer the hype of the demo turned 
sour as the systems were more 'down' then 'up'. To overcome the RAS 
deficiencies the solution was to have 'spare' systems on site. No pun intended, 
needless to say these systems were sunset and almost 20 years later the 
customer is still using z. I am sure amongst this list, others will have 
examples of customers ditching other platforms including z for all sorts of 
reasons.


We can debate for ever which system is better etc. At the end of day just put 
your money where your mouth is into what best suits your IT needs


BTW: When I started my career during the early 70s, IT didn't exist. It was 
'computers' or 'computing'.




From: IBM Mainframe Discussion List  on behalf of 
David Crayford 
Sent: 04 August 2023 00:42
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

> On 3 Aug 2023, at 2:26 am, P H 
> <04843e86df79-dmarc-requ...@listserv.ua.edu> wrote:
>
> The numbers quoted by Tom:
>
> So I pointed out there's only 12 I/O drawers max on a z16 which is 12 x
> 16 = 192 slots or 384 ports max.  He replied, but didn't seem to fully
> accept that answer.
>
> are 100% correct. These numbers are the MAXIMUM. Depending on the 
> configuration, these could be a lot less e.g. the number of coupling links 
> 

Re: Channelized I/O WAS: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[Seymour J Metz]

> The one I worked on at a sister (can I say this or should it be 'person' 
> organisation of CERN) had a grand total of 1 MB main memory!

That sounds more appropriate for a 65 than a 195.

> BTW: When I started my career during the early 70s, IT didn't exist. It was 
> 'computers' or 'computing'.

Also 'Data Processing'; I vaguely recall that there were a few more terms.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of P H 
[04843e86df79-dmarc-requ...@listserv.ua.edu]
Sent: Friday, August 4, 2023 5:23 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

In response to your comments and some made by others, my 2 cents worth.

This discussion started talking about mainframes and 'split' into sub-threads 
questioning/focusing on IBM z e.g., z/Architecture, what has z ever done, any 
uniqueness/special features of z etc.

In my response, I tried to answer some Qs and correcting some of the numbers 
which were being quoted. I did end by saying 'horses for courses'. No single 
system/platform is perfect. All have their uniqueness, strengths and weakness. 
Today, other platforms may have similar functions/features as z and some may be 
even better, the point is during the evolution of z under it's different 
marketing names (S/360, S/370, S/390, eServer, System z etc) z has evolved, 
adapted and embraced technologies which businesses require for modern 
workloads. z continues to evolve! z can't be everything to everyone. There are 
alternatives to 'mainframes' both from IBM (POWER) and others.

Talking about weakness, as an example I did mention that my x86 also has 
limitations. I don't need a better machine, especially an overpriced Mac. Just 
like some customers think they don't need an overpriced z. With today’s mind 
set of 'good enough' computing i.e. if it doesn't work reboot, if what you have 
meets your needs, so be it.


Just like your iPhone, my smartphone has most probably more power/memory than 
S370/195 of early 70s. The one I worked on at a sister (can I say this or 
should it be 'person' organisation of CERN) had a grand total of 1 MB main 
memory! However, I doubt our smartphones could process tons of data generated 
by accelerators causing collisions of energetic particles to investigate the 
structure of the atomic nucleus. Even during the 70's S370/195 did it very 
successfully i.e., process large amounts of data (strength of the I/O subsystem 
??).


Yes, there are other suppliers of MF like systems. Someone else on this thread 
mentioned that they saw a demo of one which had similar RAS capabilities as of 
z. I am familiar with that system. Great demo that lots customers rushed to 
introduce these into their IT infrastructure. One customer I know of, who soon 
after Y2K were encouraged by their 'consultants' to ditch their centralised IBM 
MF installed lots of these systems at all their distributed sites, 3 systems at 
each site (Dev/Test/Prod). In case of this customer the hype of the demo turned 
sour as the systems were more 'down' then 'up'. To overcome the RAS 
deficiencies the solution was to have 'spare' systems on site. No pun intended, 
needless to say these systems were sunset and almost 20 years later the 
customer is still using z. I am sure amongst this list, others will have 
examples of customers ditching other platforms including z for all sorts of 
reasons.


We can debate for ever which system is better etc. At the end of day just put 
your money where your mouth is into what best suits your IT needs


BTW: When I started my career during the early 70s, IT didn't exist. It was 
'computers' or 'computing'.




From: IBM Mainframe Discussion List  on behalf of 
David Crayford 
Sent: 04 August 2023 00:42
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

> On 3 Aug 2023, at 2:26 am, P H 
> <04843e86df79-dmarc-requ...@listserv.ua.edu> wrote:
>
> The numbers quoted by Tom:
>
> So I pointed out there's only 12 I/O drawers max on a z16 which is 12 x
> 16 = 192 slots or 384 ports max.  He replied, but didn't seem to fully
> accept that answer.
>
> are 100% correct. These numbers are the MAXIMUM. Depending on the 
> configuration, these could be a lot less e.g. the number of coupling links 
> could reduce the numbers. If z16 is ordered with BPA power supplies, the MAX 
> I/O drawers go down from 12 to 10.
>
> I have already mentioned things like cache, memory, I/O Subsystem, on chip 
> data compression/Crypto (z has been a leader for this)/Sort/AI capabilities.

Maybe for crypto but certainly not for AI. My iPhone has a more sophisticated 
AI engine than the z16.  Other platforms have integrated AI 

Re: Accessing JCL SETs in Rexx

[Seymour J Metz]

Back in the bad old days, IBM showed the expansion immediately after the JCL. 
Alas, in MVS they chose to show it as a message in a separate JES dataset. Have 
they moved IEF653I to be inline since then?


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Paul Gilmartin [042bfe9c879d-dmarc-requ...@listserv.ua.edu]
Sent: Friday, August 4, 2023 12:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Accessing JCL SETs in Rexx

On Fri, 4 Aug 2023 03:32:01 +, Jon Perryman wrote:

> > On Thursday, August 3, 2023 at 12:21:34 PM PDT, David Spiegel  wrote:
>> My intention is to read a Job and make sure that all datasets are available,
>> but, the dsnames contain SET variables.
>
>The converter / interpreter will resolve variables. Submit the job with 
>typerun scan or hold should generate the information you want.
>
I've found SCAN to be almost worthless.  It doesn't always report invalid data 
set names.

>If you're not comfortable with control blocks, IPCS and dumps, then you can 
>use SDSF to extract the converted JCL albeit a little funky to process.
>
Is there a JES data set accessible by SDSF that shows symbols resolved?
what does it show if symbol resolution extends a line beyond column 71?

In  fact, any continuation that splits a data set name can be "a little funky
to process."

--
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Channelized I/O WAS: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[P H]

In response to your comments and some made by others, my 2 cents worth.

This discussion started talking about mainframes and 'split' into sub-threads 
questioning/focusing on IBM z e.g., z/Architecture, what has z ever done, any 
uniqueness/special features of z etc.

In my response, I tried to answer some Qs and correcting some of the numbers 
which were being quoted. I did end by saying 'horses for courses'. No single 
system/platform is perfect. All have their uniqueness, strengths and weakness. 
Today, other platforms may have similar functions/features as z and some may be 
even better, the point is during the evolution of z under it's different 
marketing names (S/360, S/370, S/390, eServer, System z etc) z has evolved, 
adapted and embraced technologies which businesses require for modern 
workloads. z continues to evolve! z can't be everything to everyone. There are 
alternatives to 'mainframes' both from IBM (POWER) and others.

Talking about weakness, as an example I did mention that my x86 also has 
limitations. I don't need a better machine, especially an overpriced Mac. Just 
like some customers think they don't need an overpriced z. With today’s mind 
set of 'good enough' computing i.e. if it doesn't work reboot, if what you have 
meets your needs, so be it.


Just like your iPhone, my smartphone has most probably more power/memory than 
S370/195 of early 70s. The one I worked on at a sister (can I say this or 
should it be 'person' organisation of CERN) had a grand total of 1 MB main 
memory! However, I doubt our smartphones could process tons of data generated 
by accelerators causing collisions of energetic particles to investigate the 
structure of the atomic nucleus. Even during the 70's S370/195 did it very 
successfully i.e., process large amounts of data (strength of the I/O subsystem 
??).


Yes, there are other suppliers of MF like systems. Someone else on this thread 
mentioned that they saw a demo of one which had similar RAS capabilities as of 
z. I am familiar with that system. Great demo that lots customers rushed to 
introduce these into their IT infrastructure. One customer I know of, who soon 
after Y2K were encouraged by their 'consultants' to ditch their centralised IBM 
MF installed lots of these systems at all their distributed sites, 3 systems at 
each site (Dev/Test/Prod). In case of this customer the hype of the demo turned 
sour as the systems were more 'down' then 'up'. To overcome the RAS 
deficiencies the solution was to have 'spare' systems on site. No pun intended, 
needless to say these systems were sunset and almost 20 years later the 
customer is still using z. I am sure amongst this list, others will have 
examples of customers ditching other platforms including z for all sorts of 
reasons.


We can debate for ever which system is better etc. At the end of day just put 
your money where your mouth is into what best suits your IT needs


BTW: When I started my career during the early 70s, IT didn't exist. It was 
'computers' or 'computing'.




From: IBM Mainframe Discussion List  on behalf of 
David Crayford 
Sent: 04 August 2023 00:42
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: Channelized I/O WAS: Mainframe Makers WAS: Ars Technica: The 
IBM mainframe: How it runs and why it survives

> On 3 Aug 2023, at 2:26 am, P H 
> <04843e86df79-dmarc-requ...@listserv.ua.edu> wrote:
>
> The numbers quoted by Tom:
>
> So I pointed out there's only 12 I/O drawers max on a z16 which is 12 x
> 16 = 192 slots or 384 ports max.  He replied, but didn't seem to fully
> accept that answer.
>
> are 100% correct. These numbers are the MAXIMUM. Depending on the 
> configuration, these could be a lot less e.g. the number of coupling links 
> could reduce the numbers. If z16 is ordered with BPA power supplies, the MAX 
> I/O drawers go down from 12 to 10.
>
> I have already mentioned things like cache, memory, I/O Subsystem, on chip 
> data compression/Crypto (z has been a leader for this)/Sort/AI capabilities.

Maybe for crypto but certainly not for AI. My iPhone has a more sophisticated 
AI engine than the z16.  Other platforms have integrated AI engines, AMD 
ZenDNN, Intel oneDNN etc. Both ship with open source libraries and toolkits 
sadly lacking for z/OS. I noticed that IBM have shipped patched Python packages 
for TensorFlow and SnapML that exploit Telum for Linux on Z. I suppose like 
everything, we’ll have to wait a while for z/OS. Java 11 still does not utilise 
zEDC compression on z/OS.

Talking about compression and crypto, Intel have hardware accelerators as part 
of QAT, either PCIe cards or on-die. You could argue that the compression tech 
is better than zEDC as it supports more formats then just gzip.

https://www.intel.com/content/www/us/en/architecture-and-technology/intel-quick-assist-technology-overview.html


>
> Talking about the I/O Subsystem, this is a key strength when it comes to 
> handling large number of I/Os. 

Re: Channelized I/O WAS: Mainframe Makers.... WAS: Ars Technica: The IBM mainframe: How it runs and why it survives

[David Crayford]

> On 4 Aug 2023, at 1:01 pm, Timothy Sipples  wrote:
> 
> David Crayford wrote:
>> Other platforms have integrated AI engines, AMD ZenDNN,
>> Intel oneDNN etc. Both ship with open source libraries and
>> toolkits sadly lacking for z/OS.
> 
> Did you miss zDNN?
> 

Nope, I’m aware. Not quite as open source as the other toolkits but it’s good 
that IBM have embraced Github. 

> https://github.com/IBM/zDNN
> https://www.ibm.com/docs/en/zos/2.5.0?topic=consider-z-deep-neural-network-library-zdnn



> 
>> I noticed that IBM have shipped patched Python packages for
>> TensorFlow and SnapML that exploit Telum for Linux on Z.
>> I suppose like everything, we’ll have to wait a while for z/OS.
> 
> Missed this one too?
> 
> https://community.ibm.com/community/user/ibmz-and-linuxone/blogs/evan-rivera/2023/02/24/python-ai-toolkit-for-ibm-zos

I suspect you are not familiar with the Python AI Toolkit for z/OS. Apart from 
SciPy, NumPy and some stuff for Jupyter notebooks there is nothing related to 
AI in that bundle. It’s nothing more than a curated set of Python packages. 
Please correct me if I’m wrong. 

> 
> Quoting from the IBM Redpaper:
> 
> "The Python AI Toolkit for IBM z/OS also benefits from the IBM zSystems 
> hardware investments that are lower in the stack. Acceleration from the IBM 
> Integrated Accelerator for AI provides benefits when running AI workloads 
> that are built on top of the Python AI Toolkit for IBM z/OS. With this 
> workload execution acceleration, enterprises can meet successfully some of 
> the most stringent service-level agreements (SLAs) when integrating AI into 
> business-critical workloads."
> 
> https://www.redbooks.ibm.com/abstracts/redp5709.html

Maybe wait until there is actually some tangible AI libraries such as 
TensorFlow, PyTorch and SnapML before blowing trumpets. 

> 
> —
> Timothy Sipples
> Senior Architect
> Digital Assets, Industry Solutions, and Cybersecurity
> IBM zSystems/LinuxONE, Asia-Pacific
> sipp...@sg.ibm.com
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Accessing JCL SETs in Rexx

[Itschak Mugzach]

OK. If this is a scan and not run-time, you should be able to identify all
types of variables: System variables (returned by MVSVAR(SYMDEF,xxx)), JCL
SET commands, and PROC variables. This is the general case. If you only
look at your private case that involves only JCL SET variables, you should
look at a code like the one below (I have a complete solution but it is
part of our IronSphere Breaking Lines product that performs code review).
Some things to consider:


   - It will only work if the DD and DSNAME/PATH/DSN are on the same line.
   I usually make a DD a single line to solve this.
   - Substitution is more complex since you have several END options and to
   ignore temporary datasets such as those starting with '&&'
   - The reason I am using an index (SYMINDX) is to be able to access the
   variables directly and sequentially.

Best,
ITschak

JCLSUBS:
   Parse Arg $Lib $Mem
   $Dsn = $lib'('$Mem')'

   If (Sysdsn($Lib) /= OK) Then Do
  Say 'MEMBER OR DATASET DOES NOT EXIST'
  Exit 8
  End

   "Alloc f(JCLMEMBR) DA('"$Lib"("$Mem")') SHR"
   "ExecIO * DiskR JCLMEMBR (Stem JCL. Fini"

   SymIndx = 0

   Do i = 1 to JCL.0
  Jcl.i  = Substr(Jcl.i,1,71)
  Parse Var JCL.i xName xTYpe XRest

  If (xType = 'SET') Then Do
 Interpret xrest
 Parse Var xRest xVar '=' xValue
 xVar   = Strip(xVar)
 SymIndx = SymIndx + 1
 Sym.SymIndx = xVar
 Sym.xVar = xValue
 SAy xVar '=' xValue
 End

  End

   Do i = 1 to JCL.0
  Parse Var JCL.i xName xTYpe XRest

  If (xType /= 'DD') Then Do
 Iterate
 End

  xPos1 = WordPos('DSN=',xRest)
  xPos2 = WordPos('DSNAME=',xRest)
  xPos3 = WordPos('PATH=',xRest)

  If (xPos1 > 0) Then Do
 Parse Var xRest . 'SN=' xDsn ' ' .
 End

  If (xPos2 > 0) Then Do
 Parse Var xRest . 'SNName=' xDsn ' ' .
 End

  If (xPos3 > 0) Then Do
 Parse Var xRest . 'ATH=' xDsn ' ' .
 End

  xPos = Pos(',',xDsn)

  If (xPos > 0) Then Do
 Parse Var xDsn xdsn ',' .
 End

  Call Substitute
  End

   Return

*| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere
Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux
and IBM I **|  *

*|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|*
*Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il  **|*





On Fri, Aug 4, 2023 at 12:58 AM David Spiegel <
0468385049d1-dmarc-requ...@listserv.ua.edu> wrote:

> Hi R'Itschak AMVS"H,
> Yes, it is a scan.
> The purpose of the scan is to ensure that my jobs which implement a
> Middleware upgrade have a good chance of succeeding.
> These jobs are SUBMITd at 02:00 when the adrenaline is flowing, Teams
> messages are non-stop and the stress level is through the roof.
> The last thing I want to do is start looking for missing Datasets and/or
> RENAME conflicts.
>
> Shabbat Shalom
>
> Regards,
> David
> 
> From: IBM Mainframe Discussion List  on behalf
> of ITschak Mugzach 
> Sent: Thursday, August 3, 2023 3:54:18 PM
> To: IBM-MAIN@LISTSERV.UA.EDU 
> Subject: Re: Accessing JCL SETs in Rexx
>
> David,
>
> So this is not a run time issue, but a scan of a jcl before submition?
>
> ITschak Mugzach
> *|** IronSphere Platform* *|* *Information Security Continuous Monitoring
> for z/OS, x/Linux & IBM I **| z/VM coming soon  *
>
>
>
>
> On Thu, Aug 3, 2023 at 10:21 PM David Spiegel <
> 0468385049d1-dmarc-requ...@listserv.ua.edu> wrote:
>
> > Hi Gil,
> > My intention is to read a Job and make sure that all datasets are
> > available, but, the dsnames contain SET variables.
> >
> > Regards,
> > David
> >
> > Sent from my Bell Samsung device over Canada’s largest network.
> > 
> > From: IBM Mainframe Discussion List  on behalf
> > of Paul Gilmartin <042bfe9c879d-dmarc-requ...@listserv.ua.edu>
> > Sent: Thursday, August 3, 2023 1:58:20 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU 
> > Subject: Re: Accessing JCL SETs in Rexx
> >
> > On Thu, 3 Aug 2023 17:11:08 +, David Spiegel wrote:
> > >
> > >Does anyone know how to access the JCL SET variables from Rexx.
> > >
> > What are your constraints?  I could envision invoking your REXX with
> > BPXWUNIX or BPXBATCH and passing your symbols in
> > //STDPARM  DD  *,SYMBOLS=JCLONLY
> > ...
> >
> > --
> > gil
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
> --
> For IBM-MAIN