Re: z/OS 3.1 documentation

2023-10-29 Thread Jeremy Nicoll
On Sun, 29 Oct 2023, at 20:51, Paul Gilmartin wrote:
> On Wed, 18 Oct 2023 17:08:27 -0700, Tom Brennan wrote:
>
>>In my tests, symlinks (mklink command) needs admin auth to create.  That
>>would scare people I think.
>>
> ???  Feels like a silly restriction.  Is there a reason for it?  Integrity?

If this is the sort of link that lets someone define a sort of shortcut with
one name that points to a file with a completely different name, but
doesn't clearly indicate that (in File Explorer for example) ... then it's
surely something that malware would be likely to do to disguise its
elements.

Bear in mind that Windows already defaults to not showing file 
extensions in File Explorer - lunacy in my view.

So it's probably to protect naive users.
 
-- 
Jeremy Nicoll - my opinions are my own.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OS 3.1 documentation

2023-10-29 Thread Paul Gilmartin
On Wed, 18 Oct 2023 17:08:27 -0700, Tom Brennan wrote:

>In my tests, symlinks (mklink command) needs admin auth to create.  That
>would scare people I think.
>
???  Feels like a silly restriction.  Is there a reason for it?  Integrity?

I have one starting to work in Rexx, avoiding the VBS constraint.
What platforms support VBS, anyway?

Rexx seems to be easier than my 2.5 attempt, ,\mostly in sed.

-- 
gil

]

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: updated_pause_element_token zero after IEAVPSE

2023-10-29 Thread Peter Relson
Mark H wrote

Can someone give me a clue as to what IEAVPSE is telling me when it returns 
rc=0 and updated_pause_element_token as zeros ? A subsequent attempt at using 
that token results in rc=4.


As far as I know, there is no expected case where you get back rc=0 with an 
updated PET of zeros. The updated PET is zeroed only on non-0 RC cases. The 
"subsequent attempt" result is what you'd expect from passing in a PET of zeros.

Perhaps you can show exactly what your invocation is and exactly what your data 
is and the return information.

Peter Relson
z/OS Core Technology Design


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Cloud Storage

2023-10-29 Thread ITschak Mugzach
I have seen some Model9 implementations during security assessments.
Usually the S3 backup is taken to their on perm server that stores the data
on a DS8xxx (or compatible) and mirrors that elsewhere using standard
DS*xxx mirroring. So restore can be at the regular disk speed on site or on
backup site.

ITschak

ITschak Mugzach
*|** IronSphere Platform* *|* *Information Security Continuous Monitoring
for z/OS, x/Linux & IBM I **| z/VM coming soon  *




On Sun, Oct 29, 2023 at 7:29 AM Brian Westerman <
brian_wester...@syzygyinc.com> wrote:

> Yes,
>
> I have 4 smaller clients that use cloud tape connector who store the
> second copy of migrated datasets to the cloud, as well as some DR related
> items.  Also, I have their DS8K DASD conduct backups of the full DASD
> volumes directly to the cloud.  The neat part of doing that directly is
> there is no CPU overhead involved in the process.
>
> In a DR test, we reload the cloud volumes from the cloud, and we direct
> HSM to use the second migrate copy instead of the primary one.  It did seem
> a 'little" slow, but was offset by the fact that we had the volumes
> immediately available to be loaded.  We had no tapes to transfer.
>
> Those sites could not afford and frankly did not need PPRC and a second
> DS8K sitting around so they saved a lot of hardware costs.
>
> Obviously I'm over simplifying a bit, but if you put the thought into the
> process, you can have a viable DR for frankly a very low cost.  The biggest
> cost issue for using the cloud isn't writing the data, it's reading it
> back, depending on what your plan is, it can cost several times as much to
> read as it does to write.
>
> One of the sites uses Adabas, and after we flashcopy the database to a
> backup set of volumes, we then use CTC to write that saved database to the
> cloud and as the PLOGs are created, they are also copied to the cloud.
>
> Obviously none of these sites are a bank, and redoing work between the
> last PLOG (they cut them hourly) and the current time is completely
> possible and not a real hardship.
>
> Writing to the cloud isn't as fast as writing to a VTS, but it's not super
> slow either.  Just make sure you have a zIIP processor so that the CPU
> overhead on your actual CPs is kept in the trivial zone.  Normally you
> wouldn't have any production processes that write directly to the cloud.  I
> try to have HSM do most of the work where possible, even if that means
> creating an extra backup copy of "important" production datasets.  It's a
> lot of work to set things up properly, but then most DR solutions are
> pretty involved.  If you don't spend a lot of time thinking it all through,
> your DR test, and more importantly the actual DR will likely fail, so take
> your time and think it all through.
>
> Brian
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN