Re: Tracing RACF?
Hi Sean, It's GTF all the way for RACF tracing: https://developer.ibm.com/answers/questions/364448/how-do-i-set-up-diagnostics-for-running-gtf-trace/ ftp://public.dhe.ibm.com/s390/zos/racf/pdf/r07_saftrace.pdf Kind Regards, Mark --- Mark Hiscock z/OS Connect Phone: (+44)1962 818662 Email: mark.hisc...@uk.ibm.com --- From: Sean Gleann To: IBM-MAIN@LISTSERV.UA.EDU Date: 25/09/2019 12:06 Subject:Tracing RACF? Sent by:IBM Mainframe Discussion List Following a set of somewhat distressing events here, I discovered - the hard way - that our master catalog was poorly protected, and so I now have to fix it. The situation is that all users of the my system can create, read, write, update, delete files that are cataloged in the MasterCat. The original intention was that each user-id is defined in the MCat as an alias that points to one of several User Catalogs, depending on the user's 'department' within the company. That way, user id 'X1' creates 'X1.TEST', and it gets cataloged in a UCAT. So far, so good. Now I've found that if 'X1' creates file 'TEST1', it gets cataloged in the MCAT. In order to prevent this, I've used existing information to act as a model for permit 'MASTERV.CATALOG' generic id(X1) access(read) and specified that. Now, if user X1 tries to create 'X1.TEST', the result is a RACF authorisation failure. Again, so far, so good Taking the test a bit further though, I've now found that user X1 is allowed to delete file 'TEST1' from the MCat! My conclusion so far is that X1 must be getting the required access rights from another user id/group/etc, but I can't see anything apposite in any examination I do of the RACF rules (I use output from the DBSYNC Rexx procedure for this). So... Can anyone spot my error and suggest a different 'permit' command, please? Alternatively, I looked at the idea of tracing RACF activity on behalf of a specific user with SET TRACE(USERID(X1)) - but I can't see where generated output goes to nor how to interrogate it. I *have* seen mention of using GTF for this purpose, along with IPCS, but my experience with both those tools is so limited that I didn't look much further in those references - skipped on past them, looking for other possibilities but not finding any. Any help gratefully appreciated Sean -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Linux address space on z/OS 2.4
Hi all, If you want to learn more about zCX then I just listened to this this episode of Terminal Talk which covers it really well: http://terminaltalk.net/PodcastGenerator/?name=gary_puchkoff_-_z_os_container_extensions.mp3 Terminal Talk is an awesome podcast about the mainframe so check out previous topics if you haven't heard any before. Kind Regards, Mark --- Mark Hiscock z/OS Connect Phone: (+44)1962 818662 Email: mark.hisc...@uk.ibm.com --- From: John McKown To: IBM-MAIN@LISTSERV.UA.EDU Date: 25/07/2019 17:40 Subject:Re: Linux address space on z/OS 2.4 Sent by:IBM Mainframe Discussion List On Wed, Jul 24, 2019 at 11:21 PM Jake Anderson wrote: > Hi > > Just curious about 2.4 ? > > Running Linux as an address space in zOS will have an advantage over the > linux on zVM ? > > This is just a question out of curiosity. > > Jake > \ People probably need to understand zCX and Docker. zCX appears to be documented here: https://www.ibm.com/support/knowledgecenter/SSLTBW_2.4.0/com.ibm.zos.v2r4.izso100/izso100_introduction.htm -- A sine curve goes off to infinity, or at least the end of the blackboard. -- Prof. Steiner Maranatha! <>< John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: unresolved externals LE program
Hi Perhaps you need SCEEBND2 in the SYSLIB DD? https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.cbcux01/finauto.htm Kind Regards, Mark --- Mark Hiscock z/OS Connect Phone: (+44)1962 818662 Email: mark.hisc...@uk.ibm.com --- From: Joseph Reichman To: IBM-MAIN@LISTSERV.UA.EDU Date: 12/07/2019 02:43 Subject:unresolved externals LE program Sent by:IBM Mainframe Discussion List Hi I am getting unserved externals for an LE program listed below is my JCL I have CEE.SCEELKED in my syslib and as can be seen one of the external is in that module //* //STEP0200 EXEC PGM=IEWL,COND=(0,LT,STEP0100), // PARM='AMODE(31),LIST,MAP,XREF,CASE=MIXED' //SYSPRINT DD SYSOUT=* //SYSDEFSD DD SYSOUT=* //OBJ DD DSN=&,DISP=(OLD,PASS) //SYSLIB DD DISP=SHR,DSN=IBMUSER.TEST.DLLLIB // DD DISP=SHR,DSN=CEE.SCEELKED //SYSLMOD DD DISP=SHR,DSN=IBMUSER.DBGR.DLLLIB //SYSUT1 DD UNIT=SYSDA,SPACE=(CYL,(3,2)),DSN= //SYSPRINT DD SYSOUT=*,DCB=(RECFM=FB,BLKSIZE=3509) //SYSLIN DD * IMPORT CODE,SYSADATA,opendata INCLUDE OBJ(TESTPRGD) INCLUDE SYSLIB(SYSADATA) ENTRY TESTPRGD NAME TESTPRGD(R) /* z/OS V2 R3 BINDER 19:30:56 MONDAY JULY 8, 2019 BATCH EMULATOR JOB(IBMUSER$) STEP(LINK) PGM= HEWL IEW2278I B352 INVOCATION PARAMETERS - MAP,LET,LIST IEW2322I 1220 1IMPORT CODE64,'SYSADATA','openadata__FPc' IEW2322I 1220 2ENTRY TESTPRGD IEW2322I 1220 3NAME TESTPRGD(R) IEW2456E 9207 SYMBOL CEEINT UNRESOLVED. MEMBER COULD NOT BE INCLUDED FROM THE IEW2456E 9207 SYMBOL CEESTART UNRESOLVED. MEMBER COULD NOT BE INCLUDED FROM TH IEW2456E 9207 SYMBOL CEEBETBL UNRESOLVED. MEMBER COULD NOT BE INCLUDED FROM TH IEW2456E 9207 SYMBOL CEETREC UNRESOLVED. MEMBER COULD NOT BE INCLUDED FROM THE IEW2456E 9207 SYMBOL CEE0003F UNRESOLVED. MEMBER COULD NOT BE INCLUDED FROM TH *** M O D U L E M A P *** --- CLASS B_TEXTLENGTH = 1B8 ATTRIBUTES = CAT, LOAD, RMODE=ANY -- BROWSECEE.SCEELKED Row 0003753 of 0010987 Command ===> Scroll ===> PAGE Name PromptAlias-of Size TTR AC AM RM _ CEESTART 00B0 004E46 0031 ANY _ CEESTATH 0018 004E4E 0031 ANY _ CEESTATN 0018 004F05 0031 ANY _ CEESTCJG 0018 004F0C 0031 ANY _ CEESTCOS 0018 004F13 0031 ANY Joe Reichman Joe Reichman Lead Developer Sam Golob Systems Programming 170-10 73rd Ave Fresh Meadows NY 11366 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Out of heap space while invoking a jar java8 but works fine when invoke the jar when run in java7 using Ent Cobol 4.2
Hi Naz, Out of memory errors in Java on Z can happen for a number of reasons. It could really be that you've run out of heap space but it could also be that LE has hit a problem with a z/OS limit. Please can you provide more details about the exception message you get? For instance here's an OOM exception which actually means the MEMLIMIT of the address space is not large enough. java.lang.OutOfMemoryError: Failed to create a thread: retVal -1073741830, errno 132 (0x84), errno2 -1055784930 (0xc112001e) Kind Regards, Mark --- Mark Hiscock z/OS Connect Phone: (+44)1962 818662 Email: mark.hisc...@uk.ibm.com --- From: Nazih Noujaim To: IBM-MAIN@LISTSERV.UA.EDU Date: 04/06/2019 14:27 Subject:Out of heap space while invoking a jar java8 but works fine when invoke the jar when run in java7 using Ent Cobol 4.2 Sent by:IBM Mainframe Discussion List HI Everyone I have an OO Cobol program that invokes a jar on USS using java v1.8, 31 bit. When I run over 250K calls, it runs out of memory. If the jar is created in java 7 and I compile/link/run the OO cobol pgm in Java 731, it runs fine. I saw that there was some problems back in java 5 in the IBM sdk with OOM and was fixed but nothing recent. Is anyone aware of any similar issues with java 1.8? Is there any update to the JNI copy book whether you use v7 or v8? Any different options in the JVM setup/Installation that I should ask about? Here is my calling order: NewStringPlatform Invoke GetStringPlatform 2 DeleteLocalRef calls for the input and return string. I haven't been able to find any links on diffs between 7 and 8? TIA Naz -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
