Re: unix commands in batch and su
On Tue, 13 Jun 2023 16:42:05 -0500, Kirk Wolf wrote: >FYI, with Co:Z Batch instead of BPXBATCH, you just provide STDIN input to the >shell like you would from a terminal. +1[*] for Co:Z Batch Jantje. [*] Well, make that 1.000.000. It is so much better than any of the IBM ways of doing Unix scripts in batch. I don't know how I would do my job without it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: zHPF gotcha's ?
On Fri, 14 Apr 2023 14:48:28 +, Mark Jacobs wrote: >We've been using zHPF for many years, no problems. We also just recently >enabled VTOC_USE_ZHPF in DEVSUPxx, also no problems. I'd check for any missing >maintenance both for z/OS and DB2 that mention zHPF. FIXCAT >IBM.Function.zHighPerformanceFICON would be something to check. > Thanks, Mark, that is useful information. Did you activate zHPF one LPAR at a time or in a big bang for all LPARs in the sysplex? Thanks, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: zHPF gotcha's ?
On Fri, 14 Apr 2023 13:49:38 +, Martin Packer wrote: >Not to answer the question but to note you can see zHPF effectiveness in SMF >73 Channel Path Activity data. > Dear Martin, Yes, I have read that. But there, the problem is that SMF73 comes after the fact. I will have to have zHPF already activated before I see its activity in the SMF73. And if activating will cause havoc, I will be hang out to dry... Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
zHPF gotcha's ?
Dear Listers, After having wade through the last 5 years worth of posts in this list where the word zHPF is mentioned I am now tending to my headache. And I still have no real answer to my questions... I am all but a storage administrator, let that be clear. - Are there any gotcha's in activating zHPF? - Does one activate zHPF one LPAR at a time or in a big bang for all LPARs in the sysplex? - Do I have to tell DB2 that zHPF has been activated for it to take advantage of it? We use DB2 and some sequential datasets, but no VSAM. CICS and IMS/DC as transaction monitors. Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Simple C language dynamic CALL's?
On Sun, 19 Mar 2023 20:01:30 +, Farley, Peter wrote: >Or is there a simpler (non-DLL) way to set up single-procedure dynamically >called subroutines in C? > Did you look at the pragma linkage options ? Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Tcpip ports
On Tue, 24 Jan 2023 16:51:38 +, Shelia Chalk wrote: >Hello, > >I am looking for a report or something that will tell me what ports are being >used(reserve or not reserve). We are using the TC/IPI Monitor ISPF Application by Dave Alcock. planetmvs.com/freeware/tcpipm.html Does the job for me... Thanks, Dave! Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Is there a TCPTRACEROUTE equivalent for z/OS ?
On Fri, 21 Oct 2022 17:53:39 -0500, Mike Schwab wrote: >z/OS TCP/IP activity trace > >https://www.ibm.com/docs/en/zos/2.3.0?topic=capture-zos-tcpip-activity-trace > Well, yes, that's the z/OS equivalent of Wireshark. I doubt that will tell me what route my packets are following through the network. Correct me if I am wrong... Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Is there a TCPTRACEROUTE equivalent for z/OS ?
On Fri, 21 Oct 2022 15:56:31 -0500, Mike Schwab wrote: >Here's the source for Linux https://github.com/mct/tcptraceroute >Here's the source for Win32 https://github.com/0xcafed00d/tracetcp > I'd hoped someone would already have done the port... Thanks, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Is there a TCPTRACEROUTE equivalent for z/OS ?
On Fri, 21 Oct 2022 15:14:37 -0500, Mike Schwab wrote: >https://www.ibm.com/docs/en/zos/2.2.0?topic=traceroute-tso-tracerte-command-debug-network-problems > UDP but you specify the port. I already found that, yes. But as you say: UDP. I need TCP... Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Is there a TCPTRACEROUTE equivalent for z/OS ?
Dear Listers, I tried PING and TRACERTE and failed because the firewall blocks ICMP and the UDP ports. What I really need to diagnose my problem is a port of the Linux command tcptraceroute. And friend Google let me down, not finding an implementation of this command on z... So, I am calling on the esteemed body of knowledge that is supporting this list: would any of you know of a utility/command/script that enables one to test a route using the TCP protocol? Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: What is the preferred way of starting PAGENT
On Fri, 16 Sep 2022 13:04:26 -0500, Michael Babcock wrote: >I was under the impression that if PAGENT isn't running, then no new >connections can start. > Well, in our set-up, with PAGENT stopped after the TCIP stack has come up (and PAGENT having had the chance to install the policy), we can still start new TN3270 connections. We did specify NOPURGE NOFLUSH... Still we would have a far more warm and comfy feeling if PAGENT would remain up, being restarted whenever it stops unscheduled... Any recommendations? Cheers, Jantje. >> >> Thanks and very best regards, >> >> Jantje. >> >> -- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > >-- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: What is the preferred way of starting PAGENT
On Fri, 16 Sep 2022 09:03:23 -0500, Matthew Stitt wrote: >Here are my AUTOLOG statements from the TCP/IP profile: > >AUTOLOG 5 > PAGENT ; AT-TLS Policy server > GPMSERVE DELAYSTART TTLS ; RMF Server > ... Dear Matthew, This is very similar to what we now have in our sandbox set-up. And it does indeed start the PAGENT when the stack is started. The DELAYSTART servers only fire up when the AT-TLS is readily configured and available with all policies installed. So, the happy-days scenario is covered well. What is worrying us is that with this set-up is that when, for whatever reason the PAGENT stops, it is not restarted automatically. As I said before: that does not seem to hamper neither the ongoing, nor the new TN3270 connections. But then why the Redpaper says that the PAGENT should remain up? Any comments welcome. Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
What is the preferred way of starting PAGENT
Esteemed Listers, As we are required to support TLSv1.2 for our TN3270 sessions, we are now implementing AT-TLS. Using the 'IBM Personal Communications and IBM z/OS TTLS Enablement' Redpaper, I have the configuration of the PAGENT, TCPIP and TELNET regions going. Remains to decide what is the correct way of starting it all up... The Redpaper says I have to add an AUTOLOG statement for PAGENT to the TCPIP profile. However, the 'AUTOLOG considerations' paragraph in the 'IP Configuration Guide' gives a complicated explanation from which we take away that I should not be using the AUTOLOG because in our installation, it will not be listening on any port. The Redpaper states that 'The task (PAGENT) should remain up.' However, when I stop it after TCPIP has come up, nothing harmful seems to happen and new TN3270 sessions can start up quite fine. So, what is the best practice, please? Thanks and very best regards, Jantje. P.S. We have System Automation and can use that for starting and stopping if needed. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: I knew Cobol 6.3 takes more resources to compile than 4.2 but should I be concerned about how much?
On Mon, 18 Apr 2022 20:18:18 +, Pommier, Rex wrote: >Hi list, > >Should I be concerned about the amount of resources Cobol 6.3 is occasionally >using as compared to 4.2? No. But you have to cater for the requirements... > I have one particular example that was brought to our attention due to the > fact that we ran out of page space in our small shop. I finally got it to > compile after tripling my page space. It is a CICS program and is only 11270 > lines long. I am compiling with Expediter, but have optimization(0) > configured so there is no additional compile-time processing being done to > optimize the load module. I removed Expediter and still had the issues. > Here are my comparisons. Has anybody else seen this kind of huge increase? > Yes. Except that we are using maximum options for optimization. So, yes, you pay more for the compile, but that is compensated many times over at execution time. I have to recommend you do use optimization and that you carefully study the different compile options that drive optimization (OPT, TUNE, ARCH, ...). There is a lot (an I mean A LOT) of CPU consumption to be saved at execution time. > 2 seconds to 23-31 minutes is insane. > Yes, but I think that is because of paging kicking in, I guess. Is there not more physical storage available so as to avoid paging? Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: DB2: Combining result sets
On Mon, 18 Apr 2022 20:48:13 +0300, Binyamin Dissen wrote: >Seems that I have been knocked off of the DB2-L listserv. > Sorry to hear that... Maybe re-apply because the real SQL specialists live over there. >I am doing a union of three queries where it is possible that the critical >columns are in more than one of the queries. > >For example: > > select col1, col2 col3, 'source 1' > from table1 > where something > union > select col1, col2, col3, 'source 2' > from table2 > where something > union > select col1, col2, col3, 'source 3' >from table3 >where something > >I would like a single row even if the data (col1, col2, col3) is in more than >one of the queries, so that 'source1' is returned if in table1 and table2 >and/or table3, 'source 2' if not in table1 but in table2 (and perhaps table3) >and 'source 3' if only in table 3. > To be tested: select col1, col2, col3, min(source_tbl) as first_tbl from ( select col1, col2, col3, 'source 1' as source_tbl from table1 where something union all select col1, col2, col3, 'source 2' as source_tbl from table2 where something union all select col1, col2, col3, 'source 3' as source_tbl from table3 where something ) as cols group by col1, col2, col3 ; This of course supposes that the source-table-identifying values you assign in the different sub queries have the values they have in your example. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Passwordless login omvs
On Sun, 13 Mar 2022 10:38:36 +0400, Jake Anderson wrote: >The certificate I have kept in my home directory of omvs. So from CENTOS I >do SSH certificate_path Mainframeuser@ZOS >still it asks for password. Is there any parameter within SSHD_CONFIG had >to be tweaked ? > The devil is in the details... Ownership of all the files involved, permissions on all the files involved, even their location in the directory structure, it all must be just right on both server and client side. And it is not just the certificate... your public key must be known to the server and the server public key must be known to the client (installed in the right file in the right directory with the right ownership and permissions). You can use the -vvv option on your ssh command line on the client and wade through the log that will produce. Overwhelming at first, but in the end you will find some message indicating what is wrong. How to fix it? You will want to read some documentation en GIYF. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Batch job elapsed time baseline and alerts
Esteemed listers, I have been tasked to put a procedure in place that will generate an alert when a batch job "takes longer than usual" to complete. Yes, I know, that is a rather vaguely stated requirement... I know I can find figures about the elapsed time of a batch job in one of the SMF records. I think I can build a database of historic runtimes and with a bit of thought, I am sure I can come up with a query that will list me the "outliers". But in order to generate an alert when a job takes too long, I will need some mechanism that gives me the information about that job while it is still running. And while I could perhaps interrogate the system (although I don't have a clear idea on how to actually do that) every so often about the running jobs and compare the time taken of each running job to the database, I am afraid that would take far too much resources. Indeed, with several hundreds if not thousands jobs running at any give time, the task of getting all the figures of these running jobs and comparing this to the database will definitely not be cheap in system resources. We don't have any budget for vendor products, I am afraid... And we're short of MSU's... Any suggestions? Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IHS Apache - authentication via LDAP
On Tue, 19 Oct 2021 16:21:46 -0500, Alan Altmark wrote: >Does anyone know if the z/OS IHS (Apache) server supports password expiry and >change when performing authentication via LDAP? That is, if the web server >prompts for credentials and the pw is expired, will it enter into a dialog to >get it changed? > I am not using LDAP at all, authentication is done against RACF in our installation. But here goes anyway, maybe you can get some ideas from it... SAFRunAsEarly On SAFRunAs %%CLIENT%% AuthName ServerStatus AuthTypeBasic AuthBasicProvider saf AuthSAFExpiredForm /change-saf-password Require saf-group GSYST Require saf-group GSECADM SetHandler server-status This is a little part of my httpd.conf, where the server status link is defined. The SAFRunAs makes the request being run with the identity of the client (the browser). UserID and password are asked for if needed (using Basic Authenthication, see the AuthType clause), authentication is done against RACF (SAF, that is...). If the password is expired, a redirect is done towards the /change-saf-password location where the built-in password change page is defined: SetHandler saf-change-pw # AuthSAFExpiredForm specified here to ensure that # mod_authnz_saf can redirect back to the form if there was an # error when trying to update the password. AuthSAFExpiredForm /change-saf-password Hope this helps. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: C signal() and abends not being signaled
On Tue, 19 Oct 2021 09:13:09 -0700, Charles Mills wrote: >I have a lot of experience with catching signals in a "conventional MVS" >started task written in C++. (Signal handling is a C function but also >available in C++.) In my experience the signal handler was perfect at catching >S0C4 type exceptions with SIGSEGV. > Catching the SIGSEGV does the job. *THANKS!* >That said, as @Joe says, the C signal handling is not real conducive to "make >note of the problem and continue on where you were" processing. > O, and returning from the signal handler does indeed resume processing after the instruction that caused the abend. No need jumping through neither SPIE nor STAE hoops. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
C signal() and abends not being signaled
Esteemed listers,
I have the situation that in the vast majority of cases the C program just
works fine, but in an infinitesimal small number of cases, it gets a S0C4
abend. I could perhaps, through intricate testing and comparing of lots of
things -- and burning huge amounts of CPU in doing so -- prevent the abend from
happening, but I would rather avoid the cost of that testing and instead
privilege the normal case.
So, I thought to use the signal() function to take control in those very few
cases where the abend occurs.
However...
signal or no signal, LE takes that CEEDUMP and the program stops, no matter
what.
What am I missing?
I reduced my program to bare minimum to prove the point. Here is the code:
#include
#include
#include
#ifdef __cplusplus
extern "C" void StrAbn(int);
#else
void StrAbn(int);
#endif
int main(int argc, char *argvݨ) {
printf("Setting abend handler\n");
if (signal(SIGABND, StrAbn) == SIG_ERR) {
perror("Could not signal user signal");
abort();
} else {
printf("Abend handler set\n");
}
printf("This must cause an abend\n");
strcpy(0,"Coucou");
printf("Continuing after abend\n");
return(0);
}
void StrAbn(int SIG_TYPE) {
printf("Trapped a vicious abend\n");
signal(SIG_TYPE, SIG_IGN);
printf("Exiting after the abend\n");
exit(0);
}
The output says:
Setting abend handler
Abend handler set
This must cause an abend
and it does cause an abend. But control does not come to my signal handling
routine. The "Trapped a vicious abend" never appears.
I have been reading up on LE condition handling and on the use of the signal()
function, and I have searched the archives of this very list. All to no avail.
For what it is worth: I do see the following LE options:
ABPERC(NONE)
ABTERMENC(ABEND)
DEBUG
POSIX(OFF)
NOTEST(ALL,"*","PROMPT","INSPPREF")
TRAP(ON,SPIE)
So, what do I need to do to actually trap that abend and get control back in my
program when it happens?
Any and all suggestions are welcome.
Thanks and very best regards,
Jantje.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How to stack large instream data inside BPXBATCH
On Mon, 18 Oct 2021 15:17:22 -0400, Billy Ashton wrote: >Hi again...is there a way to run a single BPXBATCH JCL member that Can I suggest you move to COZBATCH? So much simpler to use and far better functionality IMHO. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Passing user/pw in to BPXBATCH SFTP
Co:ZBatch, Co:Z sftp and passwordless authentication (using ssh keys) have done it very well for me. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP-Links in IBM Websites and PTFs
On Thu, 15 Apr 2021 12:03:38 +0200, Radoslaw Skorupka wrote: >While I agree ftp links should be changed to https, I would remind a >browser is not necessary to use ftp, it's really easy to circumvent it. > No, it is not. Not when the corporate firewall blocks FTP traffic. :-( Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Anyone have SFTP JCL to share?
On Wed, 14 Apr 2021 19:12:40 +, Billy Ashton wrote:
>cases. The file is pretty large, and the support tech said I have to
>copy it to OMVS to use SFTP for uploading it. I am not sure I have that
>space available on the other side, so I was wondering if anyone here has
>a BPX batch job that will send a file to CA or Broadcom from the z/OS
>file without having to first copy the file to my Unix filesystem.
>
Co:Z saved my b.t many times over...
•• PROTECTED 関係者外秘
//myuserF JOB 'Jantje','SFTP',
// MSGLEVEL=(1,1),CLASS=C,MSGCLASS=X,
// NOTIFY=
//*
// SET ENV=D
//*
//*---
//* Send a file to the Linux server. -
//*---
//*
//PUTSFTP PROC LOGIN=,PASS=,SERVER=,INFILE=
//*
//SAVLOGIN EXEC PGM=COZBATCH,REGION=64M,
// PARM='/remoteuser='
//STEPLIB DD DISP=SHR,DSN=COZ.LOADLIB.COZ
//SAVEARGS DD DISP=(,PASS),DSN=&SAVEARG
//*
//SAVPASS EXEC PGM=COZBATCH,REGION=64M,
// PARM='/PASSWD_DSN=MY.PDS.CNTL()'
//STEPLIB DD DISP=SHR,DSN=COZ.LOADLIB.COZ
//SAVEARGS DD DISP=(OLD,PASS),DSN=&SAVEARG
//*
//SAVIFILE EXEC PGM=COZBATCH,REGION=64M,
// PARM='/INFILE='
//STEPLIB DD DISP=SHR,DSN=COZ.LOADLIB.COZ
//SAVEARGS DD DISP=(OLD,PASS),DSN=&SAVEARG
//*
//SAVSRVR EXEC PGM=COZBATCH,REGION=64M,
// PARM='/server='
//STEPLIB DD DISP=SHR,DSN=COZ.OADLIB.COZ
//SAVEARGS DD DISP=(OLD,PASS),DSN=&SAVEARG
//*
//RUNSFTP EXEC PGM=COZBATCH,REGION=64M
//STEPLIB DD DISP=SHR,DSN=COZ.LOADLIB.COZ
//SAVEARGS DD DISP=(OLD,DELETE),DSN=&SAVEARG
//STDINDD *
# Add CO:Z to the PATH.
export PATH=/coz/coz-2.4.3/bin:${PATH}
# These are used to read the ssh password from a (secured) dataset
export SSH_ASKPASS=read_passwd_dsn.sh
export DISPLAY=none
ssh_opts="-oBatchMode=no" # allows ssh to use SSH_ASKPASS program
ssh_opts="$ssh_opts -oConnectTimeout=60"
ssh_opts="$ssh_opts -oServerAliveInterval=60"
##h_opts="$ssh_opts -oStrictHostKeyChecking=no" # accept initial host ke
# Invoke the Co:Z sftp client with an in-line batch of commands
# Note that "-oBatchMode=no" must be specified before "-b"
# since ssh opts are first-sticky
cozsftp $ssh_opts -b - $remoteuser@$server <
Re: z/OS LDAP Server
On Tue, 23 Mar 2021 17:09:04 +, Jack Zukt wrote: >Hi, > >I have been given the task of implementing a z/OS LDAP server on a sandbox. My sincere condolences. ;-) >The idea is to have this LDAP acting as a bridge between RACF and a program >running on a Linux or windows platform (an userid administration program of >some kind). Aye, aye, aye... >My doubt at this point is if I need to implement anything else besides the >SDBM configuration. It seems to be that I do not need DB2 for the task at >hand. Just SDM is all you need. >Any advice would be greatly appreciated Be weary when they come along and ask you for a technical user ID with SPECIAL... They want to play God in your mainframe... Cheers, Jantje. P.S. You can use LDAP Admin hhtp://www.ldapadmin.org to test the LDAP access into your RACF. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Actual signs set by the DP (divide decimal) instruction
On Tue, 19 Jan 2021 11:40:34 -0600, John Ganci wrote: >In order to see how z390 handles the signs, a short program that does some >divisions for (dividend,divisor) pairs having signs A,B,C,D (16 combinations) >was run on z390. Partial results: Why not post your test program code iso. of the results. Someone could perhaps run the program on real iron... Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: CICS and COBOL DISPLAY UPON CONSOLE
On Thu, 14 Jan 2021 17:55:39 +, Frank Swarbrick wrote: >I just accidentally did a DISPLAY UPON CONSOLE statement in a CICS program I would recommend using E C WRITE OPEARTOR if you really need to talk through the console. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: JCL to tar USS directory
On Thu, 14 Jan 2021 09:00:21 -0600, Bill Giannelli wrote: >can anyone provide JCL to tar a USS directory? IMHO, if you are going to do anything in Unix on mainframe, you want to use Co:Z from DovetailedTechnologies: https://www.dovetail.com/index.html I am not affiliated in any way with Dovetail, except as a very happy user of their excellent stuff. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How debug convoluted #ifdef logic/how get __opendir2() defined
SKIPSRC(HIDE) compile option will hide any code that is excluded as a result of the #ifdef logic. From there, you will have to try the different candidate #define and run a compile after each modification of those. Yes, there will be a cominatorial explosion. Sorry, I can't think of any better solution. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Checksum/Md5 file
On Fri, 16 Oct 2020 18:53:39 +, Sasso, Len wrote:
>Anyone know if a Checksum/Md5 file can be created on a IBM Mainframe?
Yes.
>If so, how?
package com.jantje.checksum;
import com.ibm.jzos.FileFactory;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStream;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
public class MD5CheckSum {
public static byte[] createChecksum(String filename) throws IOException,
NoSuchAlgorithmException {
InputStream inputStream = FileFactory.newInputStream(filename);
//InputStream inputStream = new FileInputStream(filename);
byte[] buffer = new byte[1024];
MessageDigest complete = MessageDigest.getInstance("MD5");
int numRead;
do {
numRead = inputStream.read(buffer);
if (numRead > 0) {
complete.update(buffer, 0, numRead);
}
} while (numRead != -1);
inputStream.close();
return complete.digest();
}
public static String getMD5Checksum(String filename) throws IOException,
NoSuchAlgorithmException {
byte[] b = createChecksum(filename);
String result = "";
for (int i = 0; i < b.length; i++) {
result +=
Integer.toString((b[i] & 0xff) + 0x100, 16).substring(1);
}
return result;
}
public static void getMD5CheckSums(String parmFileName) throws IOException,
NoSuchAlgorithmException {
BufferedReader fileNames = FileFactory.newBufferedReader(parmFileName);
try {
String datasetName;
while ((datasetName = fileNames.readLine()) != null) {
System.out.print(String.format("%1$-50s", datasetName));
System.out.println(getMD5Checksum(datasetName));
}
} finally {
fileNames.close();
}
}
public static void main(String args[]) {
try {
getMD5CheckSums(args[0]);
} catch (Exception e) {
e.printStackTrace();
}
}
}
Cheers,
Jantje.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TN3270E TNPROFx question
On Sun, 27 Sep 2020 19:23:03 -0400, Tony Thigpen wrote: >I want TN3270E connections on a specific port to display the VTAM USSTAB >instead of going directly into CICS. But, if I take the existing >"DEFAULTAPPL PRODCICS" out of the TNPROF0 member, I am getting what I >think is the 'solicitor' panel and not the USSTAB I set up. BEGINVTAM PORT 23 992 DEFAULTLUS TCP1..TCP00010 ENDDEFAULTLUS LUGROUP LUGUK1 TCP00011..TCP00020 ENDLUGROUP LUMAP UTBA011A 123.123.123.123 LINEMODEAPPL TSO ; Send all line-mode terminals directly to TSO. ALLOWAPPL TSO* DISCONNECTABLE ; Allow all users access to TSO ; applications. ; TSO is multiple applications all beginning with TSO, ; so use the * to get them all. If a session is closed, ; disconnect the user rather than log off the user. ALLOWAPPL * ; Allow all applications that have not been ; previously specified to be accessed. USSTCP USSTCPBX ENDVTAM Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FSUM7351 Not Found for -Xshareclasses
On Fri, 31 Jul 2020 08:35:15 -0700, Lizette Koehler wrote: >I am trying to determine if we can execute on OMVS in z/OS > > > >Java -Xshareclasses:listAllCaches > You will need the java command on you PATH. export PATH=/where/ever/your/jre/is/bin:$PATH Then try the command again. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Transport of choice for sending data to IBM's ECuRep
On Fri, 17 Jul 2020 11:05:49 -0700, Ed Jaffe wrote: >With IBM threatening to discontinue plain FTP next Monday, I'm wondering >what is the transport of choice for sending data to ECuRep? My choice: //* //ZOSPDUU EXEC PGM=AMAPDUPL //SYSUDUMP DD SYSOUT=* //SYSPRINT DD SYSOUT=* //DEBUGDD SYSOUT=* //SYSUT1 DD DISP=SHR,DSN=YOUR.DATASET.TO.UPLOAD //FTPCMDS DD * CCC //SYSINDD * * The -f specifies the TCPDATA dataset to be used. It specifies * NETRCLEVEL 2 in order to get user ID and password from your * .NETRC dataset. TARGET_SYS=-d -e -f"//'YOUR.FTP.DATA'" -v ftps.ecurep.ibm.com TARGET_DSN=YOUR.SAMPLE.NAME WORK_DSN=YOUR.WORK.FTPOUT * Size of work datasets in MB. To be modulated as a function of the * total file size to transfer. The number of chunks must remain below * 999. WORK_DSN_SIZE=100 * Number of parallel FTP sessions. More is faster, but can saturate * the network. 3 is a good starting point. Maximum is 20. CC_FTP=03 DIRECTORY=/toibm/mvs/ * The PMR to which the uploaded file is to be attached. The PMR must * exist and be active. Check this number! PMR=12345.123.123 //* N Notes: 1) You must have a dataset called .FTP.DATA with the configuration of th FTP options to use. Mine contains: NETRCLEVEL2 SECURE_FTPALLOWED SECURE_MECHANISM TLS TLSRFCLEVEL RFC4217 TLSMECHANISM FTP SECURE_CTRLCONN CLEAR SECURE_DATACONN PRIVATE KEYRING ECuReP EPSV4 TRUE FWFRIENDLYTRUE PASSIVEONLY TRUE FTPKEEPALIVE 60 DEBUG BAS DEBUG SOC(3) DEBUG SEC DEBUG CMD DEBUG FLO The NETRCLEVEL 2 is required to take the user/pass from your NETRC dataset. The SECURE_CTRLCONN CLEAR along with the CCC in the FTPCMDS DD are required to make the firewall understand what you are saying. (We have Bluecoat too...). The KEYRING ECuReP refers to the RACF keyring where you have stored the chain of CERTAUTH certificates required to validate the certificate the eCuReP site will present to authenticate itself. I have only DigiCert Global Root G2 in there. 2) You must have a dataset called .NETRC with the user/pass for your eCuRep acocunt in it. It must contain just one line like: machine ftps.ecurep.ibm.com login E-abcdefgh password abcd-aBcD-AbCd-abcd-ABCD with of course the values for your login instead of the abcdefgh and the corresponding password. This is NOT the account you use to manage your service requests. It is an account you have to request specifically to transfer stuff to eCuReP. 3) The PMR number must be the right number for your case. The case must be active. This works for me in batch. Cheers, Jantje. P.S. It did take me about 20 tries to get the firewall stuff right... The scars are still all over me... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IHS NTLM authentication
On Mon, 13 Jul 2020 09:37:44 +0800, Timothy Sipples wrote: >If your organization has some sort of reasonable identity management >service that provisions, de-provisions, and otherwise manages user >identities, then you could probably hook TLS client certificate management >for z/OS into that. Any options there? There is indeed a coupling from the HR management system into RACF. And I know somewhere there are client certificates in AD. It is worth digging into that, indeed. Thanks for the suggestion. Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IHS NTLM authentication
On Thu, 9 Jul 2020 12:57:39 +0800, Timothy Sipples wrote: >How many worms? How many TLS client certificates do you expect you'll need >for this purpose? Much, much more than a few. And for a rather moving target. We tend to have quite a bit of turnover in the service desk department, unfortunately. > >Especially if the answer is "more than a few," how about using the z/OS >PKI Services? If it were me, yes, we would go for that. But... Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IHS NTLM authentication
On Wed, 8 Jul 2020 07:59:39 -0600, Grant Taylor wrote: >Discussing NTLM makes me think that you might be in an environment with >Active Directory, which means Kerberos. Not yet, actually. But then I would need to implement Kerberos on mainframe, because my problem is that I need to authenticate (and authorize) against RACF, not AD... Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IHS NTLM authentication
On Tue, 7 Jul 2020 19:25:46 +0800, Timothy Sipples wrote: >Have those "powers that be" offered a list of acceptable alternatives? No, of course not. >Unless they insist, I don't think NTLM over HTTP is a good protocol idea I don't think so either. >nowadays for a variety of reasons, so can we skip that one? Probably not. See above… :-( >The IBM HTTP Server for z/OS supports TLS client certificate >authentication with RACF. That's not basic authentication, so it >ostensibly qualifies. It's also widely accepted. Have you considered that >option? Not yet, because it opens a different can of worms: that of having to manage the client certificates. I am not sure I want to do that… But I agree: it would be a good alternative. >Or you could adopt a token-based approach. The classic way is forms-based >authentication, i.e. some application-based mechanism. H…. That would mean I need to code to interrogate RACF, with all the problems of running authorised (z/OS lingo) code. I don't want to go there unless I really, really, *really* have to. > Another, widely >accepted choice is OAuth 2.0. However, OAuth 2.0 would require either a >custom, additional module or an authenticating proxy arrangement of some >kind. I don't know that one. But does look as a lot of hassle for something where basic authentication over HTTPS is all I really need. Thanks for the suggestions. At the very least, they give me some ammunition… Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IHS NTLM authentication
On Mon, 6 Jul 2020 09:24:36 -0600, Grant Taylor wrote: > >You might want to try this on a stock version of Apache, probably on a >Linux (virtual) machine somewhere. Ha, but the more stock versions of Apache run on Windows or Linux and typically come with a pre-compiled module that one just loads... But the IHS I am dealing with runs on z/OS and does not have the module I need included. > > From memory IBM HTTP Server /should/ be a one-for-one replacement for a >comparable version of Apache HTTP Server. It is indeed a rather 1-4-1. > >Get the procedure down in a more common environment and then try to >apply it to IHS. I am already rather clear on the procedure, it is the module I am missing. > >You might also inquire in more typical Apache HTTP Server and / or >Oracle HTTP Server (also a recompile of Apache) forums. I rather doubt if I can get z/OS help over there... > >The motivation might be annoying. It is. Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IHS NTLM authentication
Dear listers, Would any of you have implemented the NTLM authentication scheme in their IBM HTTP Server by Apache on z/OS? This would require the mod_ntlm2, but the Sourceforge files date from 2003, does not seem to support NTLM v2, which is a requirement. Besides, I need to authenticate users against RACF, not against a Windows domain controller... So before I set out on a wild (old...) goose chase, I thought I better ask first. And if you wonder why... Well... Some powers that be have decided not to allow basic authentication anymore, even over HTTPS. So I am looking for an alternative. Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: MQ question
On Wed, 15 Apr 2020 12:28:53 +, Bill Johnson wrote: > Don't think there is but the question I have is why are you afraid to delete > and redefine the pageset? Because lots of other stuff may be sitting in that pageset, besides that one XMIT queue that can be very easily cleared with the CLEAR QLOCAL() Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: JES2 - stopping users from sending output to specific outputclass
On Mon, 2 Mar 2020 16:03:28 -0600, Keith Costley wrote: >We are having an issue with users using a restricted output class based on >standards. We are looking for a way to prevent this from happening by >canceling the job if the JCL contains SYSOUT=X. We are an ACF2 shop but I am >unaware if ACF2 security can limit this through a security definition. The >other option is a possible exit. Ask Google about JESSPOOL ACF2 Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Rexx or similar to clone a RACF user?
On Fri, 17 Jan 2020 10:25:57 -0800, Charles Mills wrote: >So my question is: does anyone know of a CBT or similar tool to clone a RACF >user, or does anyone have a Rexx script that they might be willing to share? > I don't have a script. I do recommend you stick to granting access to group profiles only. I have found the IEERID00 utility very useful in investigating what permissions and other stuff a given user has. It produces CLIST that lets you delete the user ID and all related. I found those CLISTs (with some editing, of course!) handy. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Ftp batch accessing desktop
On Mon, 6 Jan 2020 17:43:40 +0400, Peter wrote: >Does anyone have a sample JCL to connect desktop ftp server and get files >and replace on preallocated Mainframe dataset ? The fact that the server is on a desktop is not relevant (except for reliability and availability, of course). >Basically I would like to achieve it via batch JCL. //FTP EXEC PGM=FTP,PARM='your.desktop.server(EXIT', // REGION=4M //NETRCDD DISP=SHR,DSN=YOUR.PASSWORD.DATASET(PASSMBR) //SYSTCPD DD DSN=YOUR.TCPIP.PARMLIB(TCPDATA),DISP=SHR //SYSPRINT DD SYSOUT=* //OUTPUT DD SYSOUT=* //INPUT DD * binary cd /your/server/dir get serverfile 'YOUR.MAINFRAM.DATASET(DATAMBR) quit Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Editing HLASM source with Visual Studio - columns 73-80
On Tue, 10 Dec 2019 09:37:08 -0800, Charles Mills wrote: >FWIW I would love that feature but I have never solved that on Notepad++. I >wanted to make just column 72 display red so (a.) I would know if I crossed >the line and (b.) I would know if I had my continuation character in the right >place. > Settings/Preferences… Editing Vertical Edge Settings Show Vertical Edge Line mode Number of columns 72 It does not change the colour, but it does draw a line. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Submitting batch if you don't have TSO
On Wed, 4 Sep 2019 14:06:21 -0400, Bob Bridges wrote: >Not sure where to ask this, Here is fine... So, I've read the whole thread and unless I am missing something, I don't think you run any more risk than what you would have if none of your users have a TSO segment. As others have pointed out, the USER= is superfluous, because, by default, when CICS submits the job it is with that userID anyway. Then, yes, there are tons of ways to get a job into the system, but submitting JCL from TSO in se will not allow any user to submit that job as the CICS region userID. Unless of course your security set-up allows uncontrolled usage of the USER= clause on the job card. For any mere mortal to submit a job with a USER= on the job card, your security package (TSS in your case, RACF in mine) will have to be instructed to allow that particular mortal to do so. SURROGAT does indeed cover your fear. Set a (very) generic profile that forbids any surrogate user and then set specific profiles to grant the access to only those that actually need it. Apart from that, I would recommend to use the USER= clause on the job card of the jobs that are submitted by your CICS regions, but then to specify a DIFFERENT user ID than that of the region. Give the CICS region user ID (and nobody else) SURROGATE on this other user ID. O, and, yes, I would worry about what JCL can be submitted from CICS, but I understand that is under control in your installation (the assembler program, you spoke about). Very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: zOS GENCERT
On Wed, 28 Aug 2019 11:31:33 -0500, Joel M Ivey wrote: >In zOS, is it possible to extract a private key, making it viewable by a >human, generated by the RACF RACDCERT GENCERT command? RACDCERT EXPORT perhaps? https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.2.0/com.ibm.zos.v2r2.icha400/le-export.htm Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Question about batch programs using EXCI in a parallel Sysplex
On Fri, 8 Mar 2019 08:16:10 +1300, Laurence Chiu wrote: >But we have a number of batch jobs that calls CICS transactions in those >regions and we are wondering what happens if the batch job is running in a >LPAR where the region isn't. > >Will it abend or will MRO work out to send the work to the region running >in the other LPAR? I just ran a quick test and was able to see the effect of an EXCI batch running on one LPAR in the CICS running on another. Don't know what the requirements are in terms of MRO and/or VTAM definitions, though. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Question about batch programs using EXCI in a parallel Sysplex
I think you'll want to ask this question in the CICS list. https://listserv.uga.edu/cgi-bin/wa?A0=CICS-L Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Do I need to copy a mainframe flat file to OMVS, before I access the data from a JAVA program?
On Thu, 10 Jan 2019 18:11:47 -0500, Cameron Conacher wrote: >Thanks everyone. >Looks like I have some reading to do :-) Yes. And while you are at it, do have a look at the excellent jZos stuff originally from Dovetailed, but now included in the JVM. It has (amongst many other goodies) a ZFile class. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: end-to-end visibility of mainframe performance
On Sun, 25 Nov 2018 06:47:26 -0600, Munif Sadek wrote: >Dear listers > >I am looking for MVP (minimum Viable Product) to provide End-to-End >visibility of Business Applications where back-end is Mainframe - CICS >(Inbound services via CICS Listener, Liberty, Outbound via CICS Web Services) >MQ (CICS - MQ, DB2 - MQ, FTE etc) DB2 (CICS-DB2, JDBC, ODBC etc) and of zOS. > You might want to look at Dynatrace. Does an excellent job on all front-ends and includes mainframe. >We do have various products - SAS / MXG / CMF / Mainview / NetMaster /RMF / >CICS PA / True Sight / BMC CAZe Wow, all that together… wish we had half of that. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Checksum or hashing
On Wed, 21 Nov 2018 04:21:10 -0600, Jantje. wrote:
>Attached is a little Java program I did years ago for exactly that purpose. It
>uses the excellent jzos for reading just about any type of dataset or file.
>
So far for attachments...
Here is the code:
package com.tme.mainframemove;
import com.ibm.jzos.FileFactory;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStream;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
public class MD5CheckSum {
public static byteíù createChecksum(String filename) throws IOException,
NoSuchAlgorithmException {
InputStream inputStream = FileFactory.newInputStream(filename);
//InputStream inputStream = new FileInputStream(filename);
byteíù buffer = new byteí1024ù;
MessageDigest complete = MessageDigest.getInstance("MD5");
int numRead;
do {
numRead = inputStream.read(buffer);
if (numRead > 0) {
complete.update(buffer, 0, numRead);
}
} while (numRead != -1);
inputStream.close();
return complete.digest();
}
public static String getMD5Checksum(String filename) throws IOException,
NoSuchAlgorithmException {
byteíù b = createChecksum(filename);
String result = "";
for (int i = 0; i < b.length; i++) {
result +=
Integer.toString((bíiù & 0xff) + 0x100, 16).substring(1);
}
return result;
}
public static void getMD5CheckSums(String parmFileName) throws IOException,
NoSuchAlgorithmException {
BufferedReader fileNames = FileFactory.newBufferedReader(parmFileName);
try {
String datasetName;
while ((datasetName = fileNames.readLine()) != null) {
System.out.print(String.format("%1#-50s", datasetName));
System.out.println(getMD5Checksum(datasetName));
}
} finally {
fileNames.close();
}
}
public static void main(String argsíù) {
try {
getMD5CheckSums(argsí0ù);
} catch (Exception e) {
e.printStackTrace();
}
}
}
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Checksum or hashing
On Tue, 20 Nov 2018 13:36:56 +, Sankaranarayanan, Vignesh wrote: >Is there any utility for z/OS that lets us create SHA1 or MD5 or some such >hash/fingerprint of a dataset or USS file. >The use case is to compare these hashes at source (z/OS) and destination >(linux) after transferring some sizable datasets. Not sure if there is a utility… Attached is a little Java program I did years ago for exactly that purpose. It uses the excellent jzos for reading just about any type of dataset or file. Should be easy enough to amend it to use some stronger hash than the MD5 I used way back when... Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: The story of why Chrome and Firefox will soon block sites with certain SSL certificates
On Sun, 9 Sep 2018 20:33:42 +, Jesse 1 Robinson wrote: >We just downloaded new Receive Order certs from GeoTrust at IBM's direction. >We don't use a browser for this purpose, but the disruptive potential is >disturbing. > Dear Skip, Would you mind checking which CA signed your new certificate, please? I am having trouble using mine: it seems to be signed by some intermediate CA, not the 'Equifax Secure CA' that is announced in the book. And I am missing that intermediate certificate. Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Ftp - no translation but add CRLF
On Sun, 29 Jul 2018 11:23:00 +, Gadi Ben-Avi wrote: >Hi, > >Is it possible to tell ftp to transfer a file from z/OS to windows without >translating the data, but adding CRLF at the end of each record? > I seem to remember one can specify a translation table explicitly. What if you build a custom translation table that translates each code point onto itself? You can then use ASCII mode (which should add the CRLF), specifying your 1-to-1 translation table (which should actually not translate anything). Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Linklist and APF
On Thu, 5 Jul 2018 17:18:24 +0200, R.S. wrote: > >The job works when all 3 libraries are in steplib concatenation. When I >remove LIB1 and LIB2 it doesn't work. Maybe there is a same-name-different-content module in one of the other libs in linklist before lib1 and 2 ? Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM i as JCL replacement (was: Rexx as JCL replacement)
On Thu, 5 Jul 2018 15:08:01 -0500, Dana Mitchell wrote: >Most everything is menu driven, Indeed it is, but hitting PF14 on that menu will show you the equivalent CL command with all the options you just filled in in the right place and with the correct syntax. Just cut that into your CL source... or onto your command line for that matter. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM i as JCL replacement (was: Rexx as JCL replacement)
On Thu, 5 Jul 2018 16:28:10 -0300, Clark Morris wrote: > >For batch processes how does the i series command language compare to >JCL. One typically uses CL to program ones batch jobs. And when I say 'program' that is exactly what I mean. CL is a very complete programming language. It really does not compare to JCL on mainframe; it is way more powerful. > How are competing requests for file access handled? Depends on how you set up commitment control for your job. From 'not-at-all' to full-blown 2-phase commit; just tell the system what you need for that particular job. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM i as JCL replacement (was: Rexx as JCL replacement)
On Thu, 5 Jul 2018 06:40:39 -0700, Charles Mills wrote: >Many moons ago we ported a product from z/OS to the AS/400 and were similarly >impressed with the sorts of things you mention. The OS was solid as a rock. Hear, hear ! > >There is a major learning curve Having gone down that path, I have to contradict this statement. OK, granted, there are a few quirks one has to get used to, but the fact that the whole system, from the hardest "real system-programmer" stuff to the development, to the end user is really consistent in the way things behave and are presented, makes it IMHO easy to grasp. > -- the darned thing is unlike any other computer. That is true. > Also as I recall a lot of services were only available via panels -- like if > ISPF were the *only* way to accomplish certain z/OS tasks. This is no longer true. In the recent versions of the OS, there are numerous API's available to call from CL, COBOL, C, even Java, that do almost everything and anything. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 7-digit Job IDs
On Sat, 30 Jun 2018 06:27:59 -0700, Charles Mills wrote: >A search of Google for seven-digit jobs leads to headhunter sites. > I am sure you deserve a seven-digit salary -- but are not getting it :-( Try adding site:ibm.com to your Googling. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IOEZ00793E Error=111 reason=EF016015 received while attempting to convert directory / to version 5 format
On Wed, 27 Jun 2018 16:17:55 +, Steely.Mark wrote: >zFS Thu Jan 26 14:45:58 EST 2017 > >Description: SAF CKACC returned error. > > > >Action: The user did not have the correct permission on the object for the > >operation requested. Change the permissions on the object or have a user that > >is authorized execute the operation. > >*** > Thanks. Now the next hurdle is to find out what the correct permission is on what object and for what operation. All you software vendors, please, next time you put out an error message, include the relevant information: what operation exactly was attempted on which object, and what was the expected and the actual obtained result? I mean, when you write that IF statement to test that return code, you know what is happening (and what is going wrong...), so, please, TELL US. I'll find out, eventually… Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IOEZ00793E Error=111 reason=EF016015 received while attempting to convert directory / to version 5 format
On Wed, 27 Jun 2018 12:11:55 -0400, Tom Conley wrote: > >TSO BPXMTEXT EF016015. THANK YOU!! This is useful. Why is this not mentioned in the book, one wonders... Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IOEZ00793E Error=111 reason=EF016015 received while attempting to convert directory / to version 5 format
Dear Listers, Can anyone please point me to some documentation where the error code and/or reason code for the above error message is? I am converting directories in a zFS to version 1.5 and for some directories this is not working. I get the above error message, but the manual says only: IOEZ00793E Error=ReturnCode reason=ReasonCode received while attempting to convert directory name to version 5 format Explanation The directory failed to convert to version 5 format. ReturnCode The error code. ReasonCode The reason code. name The directory name. System action The program continues. Severity svc_c_sev_error Administrator Response Correct the error and try again. OK, great. :-( what is the error??? Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How to move to zFS V5 - painlessly
On Wed, 6 Jun 2018 12:24:21 -0700, Lizette Koehler
wrote:
>List -
>
>
>I am afraid there is no mass conversion utility,
This is true, but I found that
find . -type d -exec zfsadm convert -path {} \;
comes pretty darn close. The not-faint-hearted may even substitute a / for the
. in the above command.
Very best regards,
Jantje.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Stack Exchange mainframe proposal
I'll stick with IBMMAIN-L if you don't mind. Have already too many subscriptions as it is... Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Using system symbols in JCL IF statement
On Tue, 15 May 2018 08:37:36 -0500, Paul Gilmartin <paulgboul...@aim.com> wrote: >I believe the only comparisons supported by IF are to a result, such as a >return >code, of a previous step. All examples given do indeed lead one to believe that, but the actual documentation does not specify such a requirement. It does say that the parts to be compared in the expression must be numeric. https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.ieab600/relationexp.htm says: A relational-expression consists of: Comparison operators Logical operators NOT (¬) operators Relational-expression keywords Numeric values I did the test, comparing a symbol (that has a numeric value assigned to it) to a constant numeric value and it works just fine. No RC in my test. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Using system symbols in JCL IF statement
On Mon, 14 May 2018 13:56:42 +0300, Binyamin Dissen <bdis...@dissensoftware.com> wrote: >IF does not support string comparisons. > >What you can do is add a step that generates a return code based on the symbol >value and use that return code in an IF statement. Or just use a numeric value in your symbol… Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Wed, 11 Apr 2018 05:58:47 -0500, Jantje. <jan.moeyers...@gfi.be> wrote: >On Tue, 10 Apr 2018 09:25:42 -0400, zMan <zedgarhoo...@gmail.com> wrote: > >>Well...not sure how you searched, but "rexx maximum arguments" finds it >>pretty quickly, albeit not as fast as "rexx 20 arguments" (of course, once >>you know the answer already...) >> > >I should have used Google from the start... > Then again... If I would have known that the problem was the number of arguments, I would have come up with those search words much sooner... Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Tue, 10 Apr 2018 09:25:42 -0400, zMan <zedgarhoo...@gmail.com> wrote: >Well...not sure how you searched, but "rexx maximum arguments" finds it >pretty quickly, albeit not as fast as "rexx 20 arguments" (of course, once >you know the answer already...) > I should have used Google from the start... Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Mon, 9 Apr 2018 14:31:18 -0700, Gerhard Adam <gada...@charter.net> wrote: >Just seems like a lot of discussion trying to pass 22 arguments, when the >limit is 20. > You're right. Only, as I was not aware of the existence of that limit... >After that it's merely a question of how you can convey the information using >whatever means you have available. > I am using now a different separator character (one I am rather sure will never occur in the value of the arguments to pass), glueing all arguments together into one and parsing them back out in the invoked function. That does the trick. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Mon, 9 Apr 2018 16:40:22 -0400, Phil Smith III <li...@akphs.com> wrote: >Eh? You invoke ALERTSN. But do so apparently incorrectly. Actually, I try to invoke ALERTSN, but it does not get invoked. > >What does TRACE I show? Exactly that: it shows the invocation being tempted and failing. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Mon, 9 Apr 2018 14:25:28 -0500, Paul Gilmartin <paulgboul...@aim.com> wrote: >Correct, however the current version, TSO/E REXX User's Guide Version 2 >Release 3 >(SA32-0982-30), says in the preceding paragraph: > >Passing Arguments >Values passed to an exec are usually called arguments. Arguments can > consist of >one word or a string of words. Words within an argument are separated by > blanks. >The number of arguments passed depends on how the exec is invoked. >Passing Arguments Using the CALL Instruction or REXX Function Call >When you invoke a REXX exec using either the CALL instruction or a > REXX function >call, you can pass up to 20 arguments to an exec. Each argument must be >separated by a comma. > Thanks, Gil, for that pointer. How come I missed that? Jantje. P.S. A more to-the-point error message text would have helped. If something along the lines of "too many arguments" would have appeared in the text... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Mon, 9 Apr 2018 09:19:19 -0700, Gerhard Adam <gada...@charter.net> wrote: >Normal continuation rules would apply, but it appears that there is a limit >of 20 arguments. You have 22, which produces the error I would be very grateful if you could point me to the documentation that confirms this. I swear: I have searched for it... Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Mon, 9 Apr 2018 09:37:20 -0400, Phil Smith III <li...@akphs.com> wrote: >Then you're apparently calling it wrong. I see double commas in the error >output: that suggests you have doubled commas in the wrong place, because if >they're seen as continuation, ALERTSN won't see them at all. Well... ALERTSN is not seeing any of it. The error message is emitted while ALERTSNB is in control. ALERTSN is never invoked. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Fri, 6 Apr 2018 17:57:14 -0700, Lizette Koehler <stars...@mindspring.com> wrote: >Personally in REXX I use a list with SPACE between each arg and a blank comma >at the end > >VAR =' a b c ' , > ' d e f ' Unfortunately, that will not work as I have values in the arguments that contain blanks. Using a blank as the delimiter doesn't cut it, then. Or rather cuts it at each blank, also the blank that is supposed to be part of the value. > >Next, if you did not know, there is a TSO/REXX group can you also post these >kinds of questions to > Actually, I ought to know. I will subscribe there and ask the question again if this esteemed body of mainframe specialist would not come up with an answer (I am sure they will...) Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Fri, 6 Apr 2018 17:21:19 +, Grinsell, Don <dgrins...@mt.gov> wrote: >Start your continuation lines with a comma: > > RS=ALERTSN(SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC, > ,SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST, > ,MONENV,RESOURCE,EXTRINFO,ACTIVE,CLOSING,FTPERR, > ,APPLTYPE,APPLNAME,UNIQUE) > Commas at the beginning or at the end makes no difference... : 87 +++ RS=ALERTSN(SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC,,SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST,,MONENV,RESOURC E,EXTRINFO,ACTIVE,CLOSING,FTPERR,,APPLTYPE,APPLNAME,UNIQUE) IRX0040I Error running ALERTSNB, line 87: Incorrect call to routine Thanks for the suggestion anyway, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Many arguments to a Rexx function call
On Fri, 6 Apr 2018 15:27:19 +, Farley, Peter x23353 <peter.far...@broadridge.com> wrote: >Use SPACE COMMA at the end of each separate line of arguments except the last >line with the closing parenthesis. > >Comma at the end of a Rexx line says concatenate the next line with the >current line, so your ARGUMENT comma is taken as a CONTIUATION comma. Adding >SPACE COMMA after the ARGUMENT comma on each continuing line will solve your >problem. Tried that: RS=ALERTSN(SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC, , SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST, , MONENV,RESOURCE,EXTRINFO,ACTIVE,CLOSING,FTPERR, , APPLTYPE,APPLNAME,UNIQUE) already too, but no luck: 87 +++ RS=ALERTSN(SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC, ,SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST, ,MONENV,RESOU RCE,EXTRINFO,ACTIVE,CLOSING,FTPERR, ,APPLTYPE,APPLNAME,UNIQUE) IRX0040I Error running ALERTSNB, line 87: Incorrect call to routine Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Many arguments to a Rexx function call
Dear Listers, How can I make this: RS=ALERTSN(SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC, SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST, MONENV,RESOURCE,EXTRINFO,ACTIVE,CLOSING,FTPERR, APPLTYPE,APPLNAME,UNIQUE) actually work? What happens is that the values of STSDESC and SUBSRC get concatenated and then the rest of the argument list is shifted up one place. Same with HOST and MONENV. FTPERR, APPLTYPE, PPLNAME and UNIQUE don't get a value assigned in the called function, because by then, the arguments have been shifted too much and there are none left to give them any value. I know that are a lot of arguments, but I cannot for the life of me find a book that states there is a limitation to the number of arguments in a function call. The problem is definitely with the continuation of the statement over several lines. I have searched both User Guide and Reference Manual and both seem to indicate one has to put a comma at the end of the line that is to be continued. But when I do that: RS=ALERTSN(SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC,, SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST,, MONENV,RESOURCE,EXTRINFO,ACTIVE,CLOSING,FTPERR,, APPLTYPE,APPLNAME,UNIQUE) I get: 55 +++ RS=ALERTSN(SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC,,SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST,,MONENV,RESOURC E,EXTRINFO,ACTIVE,CLOSING,FTPERR,,APPLTYPE,APPLNAME,UNIQUE) IRX0040I Error running ALERTSNB, line 55: Incorrect call to routine Then I thought to get clever and I built one long string containing the entire call in one line and executed that by using INTERPRET: LongInstr='RS=(ALERTSN SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC,'!!, 'SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST,'!!, 'MONENV,RESOURCE,EXTRINFO,ACTIVE,CLOSING,FTPERR,'!!, 'APPLTYPE,APPLNAME,UNIQUE') interpret LongInstr No such luck :-( 59 +++ RS=ALERTSN(SEV,TYPENAME,ELEMENT,DESC,STATUS,STSDESC,SUBSRC,SOURCE,LOCATION,SYSTYPE,PLTFTYPE,IMPACT,HOST,MONENV,RESOURCE ,EXTRINFO,ACTIVE,CLOSING,FTPERR,APPLTYPE,APPLNAME,UNIQUE) 59 +++ interpret LongInstr IRX0040I Error running ALERTSNB, line 59: Incorrect call to routine It's Friday afternoon and I have a headache... To all you Rexx experts, please, how does one go about passing many arguments to a function? Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FW: Linux (zLinux) on zSeries
On Fri, 23 Mar 2018 00:18:56 -0500, Munif Sadek <munif.sa...@gmail.com> wrote: >Req: TYPE A >Rsp: 200 Representation type is Ascii NonPrint >Req: NLST /software/RHEL/generic.ins/. >Rsp: 550 No data sets found. > >But I can assure you DataSet or unix file generic.ins is there. May someone >help Please? > >regards >Prabhat > >-- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN From https://en.wikipedia.org/wiki/List_of_FTP_commands : NLST Returns a list of file names in a specified directory. But it looks to me you have specified a file instead of the directory. I suggest you go over the parameters again; there is probably a field in which you have entered too much data. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: MQ series - "view" the messages in a QUEUE?
On Tue, 27 Feb 2018 12:04:29 -0600, John McKown <john.archie.mck...@gmail.com> wrote: >books, does anyone know of an IBM supplied program that I can use which >will "unload" the messages in a QUEUE to a data set? Something like: I think you will want to install the MQ Explorer (use version 7 or 8, it will connect to your version 6 QM) on your workstation. That way, you can look at all MQ objects and messages. MQGem has MQEdit CapitalWare has MQ Visual Edit Very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX say 'location:https://... in a batch job
On Thu, 8 Feb 2018 08:34:36 -0600, John McKown <john.archie.mck...@gmail.com> wrote: > >I think what you are wanting is a way for a step in a batch job to "invoke" >a REST service. Yes, you can write REXX to do this. But it is basically >doing "low level" sockets programming in REXX using REXX Sockets. Not necessarily. Using curl in a Unix shell script (which you can call through bpxwunix) it becomes a lot easier. The people at Rocket Software did an excellent job on porting curl (and other Unix utilities) to zOS. Works like a charm. Thanks Rocket, you saved me days of tinkering... Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM HTTP Server powered by Apache - Rexx, trace and stderr
On Mon, 5 Feb 2018 13:28:34 -0600, Paul Gilmartin <paulgboul...@aim.com> wrote: >In a UNIX environment (I hope you are) I have used: Yes, the Apache processes are in the UNIX environment, it seems to me. >address SYSCALL >"dup 1" >stdout = RETVAL >"dup2 2 1" > >Then TRACE output will go to stderr. Unfortunately, so will SAY. Indeed, the root cause of my problem is that Rexx does not separate trace output from any other output. > But you >can switch back with: > >"dup2 (stdout) 1" A lot of hassle. But I guess there is not much of an alternative... >RFE? Yes, please. Thanks for the suggestion; I'll go back to the drawing board now and see what comes out. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IBM HTTP Server powered by Apache - Rexx, trace and stderr
Esteemed Listers, I have a Rexx script running as CGI in the IBM HTTP Server powered by Apache. Now, I need to debug it, so I switched on trace in the Rexx. Immediately everything went belly-up. Indeed, Apache thinks the trace output are HTTP headers and brutally stops processing the CGI because the format of the trace text obviously is not conforming to the syntax for HTTP headers. I then get an HTTP 500 Internal Server Error in my browser. Theory has it that whatever a CGI script writes to stderr goes to the Apache error log. So... Is there any way of getting Rexx to send its trace output to stderr instead of stdout? Google usually is my friend, but on this occasion it did not bring up anything useful, I am afraid... Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Problem with JCL
On Wed, 31 Jan 2018 05:05:45 -0800, Gerhard Adam <gada...@charter.net> wrote: >Sorry, but how is this not just a standard condition code test? > Because the devil is in the details... OP said: "including the DSN allocations" Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Problem with JCL
On Tue, 30 Jan 2018 15:36:29 +, Ward Able, Grant <gwarda...@dtcc.com> wrote: >I have a situation where I need to execute a single JCL procedure, but ONLY >execute some steps (including the DSN allocations) for part B or part C, >depending on the return code of part A. May I suggest you use dynamic allocation for that? I don't think there is any other way of achieving your requirement. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: COBOL source code quality check for performance
On Thu, 25 Jan 2018 14:44:16 +, Allan Staller <allan.stal...@hcl.com> wrote: >Application Performance Analyzer (IBM) >STROBE (or successor?) Compuware > >Both will identify "hot spots" in the code , which can then be repaired. > I thought these look at the running program and sample it's CPU usage. How would they help in analyzing the _source_ code? Thanks, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IBM HTTP Server powered by Apache reading TCPIP PARMLIB. Why?
Esteemed Listers, STC12934 0090 ICH408I USER(PUBLIC ) GROUP(EXTERNAL) NAME() 600 600 0090SYS1.TCPIP.PARMLIB CL(DATASET ) VOL(TCAM01) 600 0090INSUFFICIENT ACCESS AUTHORITY 600 0090FROM SYS1.TCPIP.PARMLIB.** (G) 600 0090ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) STC12934 0090 IEC150I 913-38,IFG0194E,HTTPD2,STEP1,SYS8,ADDC,TCAM01, 601 The IBM HTTP Server powered by Apache is trying to read TCPIP PARMLIB. Would anyone have any idea why? I am not sure I want to grant access to this user ID, especially because I chose that one in order to restrict access as much as possible so as to mitigate any risk of accidentally disclosing files. Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM HTTP Server powered by Apache - very erratic responding to modify and stop commands
On Wed, 6 Dec 2017 14:51:45 +, Nims,Alva John (Al) <ajn...@ufl.edu> wrote: >I too am in the middle of switching servers and I believe IBM says you have to >use the "apachectl -k stop", because more than one instance of the WebServer >is started, so the "apachectl -k stop" shuts all of them down. Well... That is indeed one possibility and from my testing it seems to work most (but not all) of the time. The issue I have with that approach is that it is not automation-friendly IMHO. A modify or stop command just ought to work. IBM has written the apache module for it, shouldn't they just make it work? And yes, I know, there will be multiple processes, but they are all under control of the master httpd daemon process. It should be able to find all it's children. I does when spoken to via apachectl, why would it not when spoken to via some other means of communication? Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM HTTP Server powered by Apache - very erratic responding to modify and stop commands
Sorry, forgot to mention: IBM_HTTP_Server/9.0.0.4 (Unix) on z/OS 2.2 Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IBM HTTP Server powered by Apache - very erratic responding to modify and stop commands
Dear Listers, I am migrating from Domino Go to IBM HTTP Server powered by Apache. So, I set up an STC and can start that very well. I did include the LoadModule zos_cmds_module modules/mod_zos_cmds.so directive (well, it was there already in the sample httpd.conf) in order to enable the MODIFY and STOP commands. Now, I find the server to be very erratic in responding to modify and stop commands. It is already an automation challenge to find out to what process one has to send the commands, but that is not what I am complaining about. Indeed, even when I am 100% sure to have addressed the command to the correct process, only halve of the time it actually reacts to it. And even then, it does not always stop. I've seen cases where it responds with: 2017339 13:55:39.45-P HTTPD1,A=005A 2017339 13:55:40.64 STC12796 BPXM023I (WEBADM) IHS is stopping 2017339 13:55:40.65 STC12796 BPXM023I (WEBADM) CRIHS0002I IHS TMMETEST is stopping. but then just continues to run. In that case, the only way to bring the server down is to use the apachectl -k stop from a Unix shell... Has anyone on the list seen similar behaviour? Were you able to fix it? How? Am I entitled to a PMR? Thanks and very best regards, Jantje. P.S. I tried my friend Google, with various combinations of the words stop, erratic, modify, not stopping, etc. and of course "IBM HTTP Server powerd by Apache". All to no avail. A search in the archives of this esteemed list did not yield an answer to my questions either. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SAS - DB2 conversion to Java
On Thu, 23 Nov 2017 05:30:45 -0600, Munif Sadek <munif.sa...@gmail.com> wrote: >Martin/Andrew > >SMF/CMF are least of our concern at the moment. We are initially inclined for >any automated tool that can >A.read SAS PDBs and convert them to DB2 tables and/or flat file. Tool must >cater take for packed, COMP data elements. >B. Can read SAS code and give us some basic converted Java code >C. Will be good if the tool can convert DB2I calls to JDBC calls > I can see another of these 2-year/USD2mio projects coming, that, after 5 years and USD 12mio gets washed down the drain... Sorry if I sound negative, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: thought on data integration: Using MS Excel & MQSeries to get data from z/OS.
On Tue, 22 Aug 2017 07:38:59 -0500, John McKown <john.archie.mck...@gmail.com> wrote: >is familiar with MS VBA. So what he wants to do is to have a VBA >program which can use the Windows MQSeries dll to communicate with a >CICS transaction. This transaction would read or write the data on Maybe have your programmer consider http://www.mqgem.com/qload.html I'am sure a VBA wizard can easily drive this program to get and put the messages on the Excel end. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Help with invalid XML code issue
On Sat, 10 Jun 2017 14:26:32 -0700, Lizette Koehler <stars...@mindspring.com> wrote: > >I was supplied with an xml file to use to install a product. When it runs it >fails with the following error message. This is done on the mainframe in the >OMVS function. Try uploading it in binary mode (no conversion to EBCDIC). Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How is the name for UID=0 chosen in directory listing in Unix System Services
On Thu, 4 May 2017 07:44:48 -0500, Bruce Wells <brwe...@us.ibm.com> wrote: >On Wed, 3 May 2017 08:38:23 -0500, Paul Gilmartin <paulgboul...@aim.com> wrote: >>It should improve in z/OS 2.3: >> >> http://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/5/897/ENUS217-085/index.html_locale=en I will definitely like that improvement. >Prior to 2.3, the value shown will be the oldest user historically to have >been assigned UID(0). Which is to say, the first user ID displayed after >issuing: > >SEARCH CLASS(USER) UID(0) Indeed, that is the one I am seeing. Thanks to you both, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Migration of Mainframe to other plat form.
On Wed, 3 May 2017 10:29:14 +0200, James Wellingtin <jameswelling...@gmail.com> wrote: >Hey >I know this here might be a bit of a nasty question to ask >Have a customer who has intensions of migrate to another platform than IBM >Mainframe, don't know what ? >They have asked MetaWare to be the stakeholder in this . Different vendor, but I just saw a similar project, budgeted at €2mio and 1.5 years elapsed, scrapped after only €5mio spent over a period of 2.5 years. Problem was (amongst others...) the architectural change: In your mainframe, CICS and DB2 live right next to each-other, talking through X-memory calls, so doing 1750 SQL statements in one CICS transaction isn't an issue. Put a network (even if it is just a loopback adapter...) in between you Java application server and your MS SQL Server, then do the maths... Nowhere near the sub-second response time that is required to make the application viable... O, and that converted code is just as maintainable as the pseudo-assembler code the LIST option of your average COBOL compiler gives you. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
How is the name for UID=0 chosen in directory listing in Unix System Services
Dear Listers, I have 55 users (mostly for deamons, but not all) having UID=0. When I do a ls -l on any directory, I see the files belonging to root (owner uid = 0) are attributed to belong to one user ID out of that list of 55. I know the UID is what is holding the single truth about ownership, but I am wondering how the reverse look-up works. It does systematically choose the same name to show, whether this is for file ownership or for process ownership (ps -ef command). Is there documentation where this reverse lookup process is described? Does anyone know how it works? Thanks and very best regards, Jantje. P.S. The only potential "problem" I would like to solve is a cosmetic one, obviously. It would be nicer to show 'root' instead of a given userID. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Adventures in JCL: PROCs, symbols and instream data
On Wed, 26 Apr 2017 15:14:27 +1000, Andrew Rowley <and...@blackhillsoftware.com> wrote: > >Does anyone know of a neater way to do this (using JCL only)? Is there >any way to avoid the need for the triple apostrophes? > //JOB1 JOB CLASS=A, // MSGCLASS=H, // NOTIFY= // SET Q= //* //TEST PROC MESSAGE='Hello World' // SET MESSAGE= Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Force uninstall of CISCO Anyconnect VPN Client
On Wed, 8 Mar 2017 20:17:49 +0200, Binyamin Dissen <bdis...@dissensoftware.com> wrote: >My CISCO anyconnect got stuck, and I attempted an uninstall/reinstall cycle >(which has worked in the past) That sounds like you are using some form of MS Windows. I have found Revo Uninstaller doing a rather thorough job on getting rid of the left-overs of an uncomplete uninstall. I have no link with them other than that I have used the free version of the software. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: CA acquires Veracode.
Sincere condolences to the people at Veracode... Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SFTP on z/OS
On Fri, 3 Feb 2017 07:58:24 -0600, Kirk Wolf <k...@dovetail.com> wrote: >Standard SSH/SFTP doesn't support X.509 certificate's for authentication, Doesn't it? I didn't know that... >(z/OS OpenSSH does allow you to put SSH public and private keys in a Key >Ring Certificate, but only the keys are used; the certificate and its >signature are irrelevant.) OK, so then I need a trustworthy channel to get me the public key. Still an issue of trust, but a different one, I expect. Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SFTP on z/OS
On Wed, 1 Feb 2017 07:51:23 -0600, Kirk Wolf <k...@dovetail.com> wrote: >> Remember that although the integrity of public keys needs to be guarded, >their privacy does not. >So it is common to use other secure communications, like publishing the >public key on a https: web page. The issue I have with that is one of trust: In the end, I just have to trust whatever the Root Certification Authority is. Or actually, I have to trust Microsoft to have correctly verified the identity of that RCA and the integrity of the certificate they present, because it is MS that installed that certificate in my browser. (s/MS/Google/g for Chrome...) Cheers, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
