Re: Nodejs20 error installation

[Michael Babcock]

Make sure these are on:


   - z/OS 2.4 with all the following PTFs installed:
  - UI80106 
  - UI81096 
  - UI78103 
  - UI80155 
  - UI83490


Did you run the .env command?   Use

$ . /.env

Issue echo $PATH and ensure nodejs has been added to your path.



On Mon, May 27, 2024 at 1:39 AM Jake Anderson <
0655e880aa7d-dmarc-requ...@listserv.ua.edu> wrote:

> Hello
>
> I am trying to install nodejs 20 on z/OS 2.4 but I end up with below error.
> All the prerequisites PTF are available but not sure why the nodule is not
> found
>
>
>
> Setting up IBM Open Enterprise SDK for Node.js
> 20.0
>
> Checking for supported platform...SUCCESS
>
>
> Checking for supported
> hardware...SUCCESS
>
> Checking for supported OS
> version...SUCCESS
>
> Checking that /usr/bin/env
> exists...SUCCESS
>
> Checking that system prerequisite PTFs are installed (CHECK
> 1)...SUCCESS
>
> Checking that system prerequisite PTFs are installed (CHECK
> 2)...SUCCESS
>
> Checking that system prerequisite PTFs are installed (CHECK
> 3)...SUCCESS
>
> Checking that Integrated Cryptographic Service Facility is
> active...SUCCESS
>
> Checking for sufficient above the bar
> memory...SUCCESS
>
> Checking for sufficient address
> space...SUCCESS
>
> Checking that Python 3.9.14+
> exists...SUCCESS
>
> Checking that Make 4.1+
> exists...SUCCESS
>
> Checking that IBM C/C++ for Open Enterprise Languages on z/OS
> exists...SUCCESS
>
> Checking that Node.js is
> installed...FAILED
>
> ***ERROR: CEE3501S The module CRTEQCXS was not
> found.
>
>  The traceback information could not be
> determined.
>
> ***ERROR: Node.js ("node --version") failed to run. Refer to the
> instructions in
>
> Checking that npm is installed...FAILED
>
>
> ***ERROR: CEE3501S The module CRTEQCXS was not
> found.
>
>  The traceback information could not be
> determined.
>
> ***ERROR: npm ("npm --version") failed to run. Refer to the instructions in
> READ
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: JES2 Question - releasing AND requeuing HELD sysout

[Michael Babcock]

Manually change one and see what command gets generated in Syslog.

On Thu, Apr 25, 2024 at 1:52 PM Karl S Huf  wrote:

> I really thought this would have been more straightforward, and perhaps it
> is and I'm just not seeing it.
>
> I have groups of jobs that are sent to a held output class (T) that
> periodically need to be released and requeued to a different output class
> (7).
> So if my jobs all start with ABC I know I can do a $OJ command to release
> them using ABC* as a mask with something like
> $OJ(1-12),Q=T,JOBGROUP=ABC* but I'm stumped as to how to complete "the
> needful" and get the sysout re-queued over to 7.  I realize this is basic
> blocking and tackling but I guess I've been away from a console for so long
> I'm stuck staring at the weeds.
>
> Advice welcome!
>
>
> NTAC:3NS-20
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: PASSPORT 3270 emulator (PC) problem w transferring files

[Michael Babcock]

If TLS is required MS FTP doesn’t support TLS, at least on Win10.

On Wed, Apr 10, 2024 at 8:19 AM Pommier, Rex 
wrote:

> Unless it's been disabled, isn't Microsoft FTP client part of the OS?
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of  
> Sent: Wednesday, April 10, 2024 5:19 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [EXTERNAL] Re: PASSPORT 3270 emulator (PC) problem w transferring
> files
>
> I will check those and other options in PASSPORT but for the moment it is
> occupied with a transfer.
>
> As I mentioned in my earlier comment installation of a new software isn't
> possible in my situation.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> The information contained in this message is confidential, protected from
> disclosure and may be legally privileged. If the reader of this message is
> not the intended recipient or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any disclosure, distribution, copying, or any action taken or action
> omitted in reliance on it, is strictly prohibited and may be unlawful. If
> you have received this communication in error, please notify us immediately
> by replying to this message and destroy the material in its entirety,
> whether in electronic or hard copy format. Thank you.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: EXPDT added to newly allocated dataset

[Michael Babcock]

Just to rule it out, can you code the DD statement that bypasses SRS’s
allocations?

On Tue, Apr 9, 2024 at 12:52 PM Mark Jacobs <
0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:

> Good thought, but no. They're not being used on those systems.
>
> Mark Jacobs
>
> Sent from ProtonMail, Swiss-based encrypted email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>
>
> On Tuesday, April 9th, 2024 at 1:29 PM, Ituriel do Neto <
> 03427ec2837d-dmarc-requ...@listserv.ua.edu> wrote:
>
> > Maybe IGGPRE00/IGGPOST0?
> >
> >
> > Best Regards
> >
> > Ituriel do Nascimento Neto
> > z/OS System Programmer
> >
> >
> >
> >
> >
> >
> > Em terça-feira, 9 de abril de 2024 às 14:20:33 BRT, Mark Jacobs
> 0224d287a4b1-dmarc-requ...@listserv.ua.edu escreveu:
> >
> >
> >
> >
> >
> >
> > Not on these two systems. On the others we use SRS.
> >
> > Mark Jacobs
> >
> >
> > Sent from ProtonMail, Swiss-based encrypted email.
> >
> > GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
> >
> >
> >
> >
> > On Tuesday, April 9th, 2024 at 1:15 PM, Michael Babcock
> 05ad4e2d7232-dmarc-requ...@listserv.ua.edu wrote:
> >
> > > Do you have CA-DISK or similar software that manages non-SMS
> allocations?
> > >
> > > On Tue, Apr 9, 2024 at 12:07 PM Mark Jacobs <
> > > 0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:
> > >
> > > > I have an interesting problem I'm looking at and nothing seems
> obvious as
> > > > to the reason why. On two of our systems when I allocate a new SYS1
> > > > dataset, non-sms with no DATACLASS assigned by the ACS routines or
> on the
> > > > allocation itself, when I specify UNIT=3390 it's assigned an EXPDT of
> > > > today+3 days, when I allocate the same dataset on the same volume
> using
> > > > UNIT=SYSDA or UNIT=SYSALLDA it's not given an EXPDT.
> > > >
> > > > When I do the same processes on different systems in the same
> SYSPLEX, but
> > > > in a different SMSPLEX, we're not observing the same EXPDT behavior,
> with
> > > > no EXPDT assigned for both datasets.
> > > >
> > > > Does anyone have ideas on where to look?
> > > >
> > > > Mark Jacobs
> > > >
> > > > Sent from ProtonMail, Swiss-based encrypted
> > > > email.
> > > >
> > > > GPG Public Key -
> > > >
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
> > > >
> > > >
> --
> > > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > > send email to lists...@listserv.ua.edu with the message: INFO
> IBM-MAIN
> >
> > > --
> > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: EXPDT added to newly allocated dataset

[Michael Babcock]

Do you have CA-DISK or similar software that manages non-SMS allocations?

On Tue, Apr 9, 2024 at 12:07 PM Mark Jacobs <
0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:

> I have an interesting problem I'm looking at and nothing seems obvious as
> to the reason why. On two of our systems when I allocate a new SYS1
> dataset, non-sms with no DATACLASS assigned by the ACS routines or on the
> allocation itself, when I specify UNIT=3390 it's assigned an EXPDT of
> today+3 days, when I allocate the same dataset on the same volume using
> UNIT=SYSDA or UNIT=SYSALLDA it's not given an EXPDT.
>
> When I do the same processes on different systems in the same SYSPLEX, but
> in a different SMSPLEX, we're not observing the same EXPDT behavior, with
> no EXPDT assigned for both datasets.
>
> Does anyone have ideas on where to look?
>
> Mark Jacobs
>
> Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted
> email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: security fun with z/OSMF install - can't get there

[Michael Babcock]

SAN is Subject Alternate Name in a digital certificate.

In that case, I would try a different port such as 2443 or any other port
not in use.

On Wed, Mar 27, 2024 at 4:46 PM Pommier, Rex 
wrote:

> Hi Michael,
>
> I'm not following you on this one.  SANs?  In my vocabulary SAN is storage
> and we don't run a SAN for our mainframe disk.  Direct attach, 2 LPARs on
> the same physical CEC, 1 DS8910F storage direct attached, and shared chpids
> for both the disk and OSA.
>
> I did find this - which I didn't see yesterday that is probably my problem
> but I can't see what I need to change to fix it:
>
> CWWKO0221E: TCP Channel defaultHttpEndpoint-ssl initialization did not
> succeed.
>The socket bind did not succeed for host * and port 443.  The port
> might already be in use.
>Exception Message: EDC5111I Permission denied. (errno2=0x744C7246)
>
> I do a netstat on port 443 and get this:
>
> D TCPIP,TCPIP,NETSTAT,ALLCON,PORT=443
> EZZ2500I NETSTAT CS V2R4 TCPIP 496
> USER ID  CONN LOCAL SOCKET   FOREIGN SOCKET STATE
> 0 OF 0 RECORDS DISPLAYED
> END OF THE REPORT
>
> Over on the production LPAR I see that IZUSVR1 is bound to port 443.
>
> Within the z/OSMF active config file I see this on the non-working one:
> IZU_APPSERVER_HOSTNAME=TSTJES2.MNLIFE.COM
> IZU_JWKS_HOSTNAME=TSTJES2.MNLIFE.COM
> IZU_HTTP_SSL_PORT=443
> IZU_HTTP_PORT=-1
>
> TCPIP.DATA has my HOSTNAME TSTJES2 and both TSTJES2 and TSTJES2.MNLIFE.COM
> both correctly resolve to the test LPAR IP address.
>
> Over on the working one I do the same netstat and see the bind:
>
> D TCPIP,TCPIP,NETSTAT,ALLCON,PORT=443
> EZZ2500I NETSTAT CS V2R4 TCPIP 600
> USER ID  CONN LOCAL SOCKET   FOREIGN SOCKET STATE
> IZUSVR1  0004A344 172.16.128.14..443 10.53.240.151..34554   ESTBLSH
> IZUSVR1  000492CB 0.0.0.0..443   0.0.0.0..0 LISTEN
> 2 OF 2 RECORDS DISPLAYED
> END OF THE REPORT
>
> In active config:
> IZU_APPSERVER_HOSTNAME=MVSJES2.MNLIFE.COM
> IZU_JWKS_HOSTNAME=MVSJES2.MNLIFE.COM
> IZU_HTTP_SSL_PORT=443
> IZU_HTTP_PORT=-1
>
> TCPIP.DATA on working one has HOSTNAME MVSJES2 and everything resolves
> correctly.
>
> Thoughts/ideas?
>
> I'm chasing a couple other links people sent me.
>
> Rex
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Michael Babcock
> Sent: Tuesday, March 26, 2024 9:23 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [EXTERNAL] Re: security fun with z/OSMF install - can't get there
>
> Also, if you cloned prod and changed the IP added and/or domain name, I
> would check the certs.  Do the certs match the SANs?
>
> On Tue, Mar 26, 2024 at 9:16 PM Michael Babcock 
> wrote:
>
> > Does this help?
> >
> >
> > https://urldefense.com/v3/__https://kinsta.com/knowledgebase/pr-end-of
> > -file-error/*what-causes-the-pr_end_of_file_error__;Iw!!KjMRP1Ixj6eLE0
> > Fj!oaOvtuzKsu_CrFeLcgyUKF_gNSfdjsYOIW2qhL0UuZh7RZ70fpwMbhZmzveK6QkZRvM
> > nI2nXVMundFuGm1tmuiOd81fQsKoWqjD1$
> >
> >
> > On Tue, Mar 26, 2024 at 6:28 PM Pommier, Rex 
> > wrote:
> >
> >> Hi List,
> >>
> >> We are attempting our first foray into getting z/OSMF up and running.
> >> Scenario is we're backleveled maintenance-wise on our 2.4 system.  We
> >> ran the security configuration setup etc and got z/OSMF up and
> >> running on the production LPAR we are planning on running it from.
> >> However when we started to load z/OS 3.1 we ran into a problem with
> >> missing PTFs.  Got one set of PTFs installed and after adding a
> >> local_override.cfg file into the configuration directory we got
> >> z/OSMF up and running again and past that hurdle.  We hit the next
> >> one requiring a dozen more PTFs to bypass it.  We decided to move the
> >> install to our sandbox just to get z/OSMF working to the point we can
> >> use it to get our 3.1 software install back on track.  I ran
> >> disk-level flashcopy copies of my entire production LPAR to the
> >> sandbox, made the required changes (IP addresses etc) to get the
> >> sandbox up and running.  Started z/OSMF and it comes up with no
> >> errors or warnings (except the one telling me I'm using the local
> override file).  However, when I try to get to the web server I get a
> "secure connection failure"
> >> with " PR_END_OF_FILE_ERROR" trying to connect with Firefox and "
> >> 172.16.128.108 unexpectedly closed the connection" using Chrome.
> >> Security
> >> (RACF) is identical to what it is on the production LPAR.  z/OSMF
> >>

Re: security fun with z/OSMF install - can't get there

[Michael Babcock]

Also, if you cloned prod and changed the IP added and/or domain name, I
would check the certs.  Do the certs match the SANs?

On Tue, Mar 26, 2024 at 9:16 PM Michael Babcock 
wrote:

> Does this help?
>
>
> https://kinsta.com/knowledgebase/pr-end-of-file-error/#what-causes-the-pr_end_of_file_error
>
>
> On Tue, Mar 26, 2024 at 6:28 PM Pommier, Rex 
> wrote:
>
>> Hi List,
>>
>> We are attempting our first foray into getting z/OSMF up and running.
>> Scenario is we're backleveled maintenance-wise on our 2.4 system.  We ran
>> the security configuration setup etc and got z/OSMF up and running on the
>> production LPAR we are planning on running it from.  However when we
>> started to load z/OS 3.1 we ran into a problem with missing PTFs.  Got one
>> set of PTFs installed and after adding a local_override.cfg file into the
>> configuration directory we got z/OSMF up and running again and past that
>> hurdle.  We hit the next one requiring a dozen more PTFs to bypass it.  We
>> decided to move the install to our sandbox just to get z/OSMF working to
>> the point we can use it to get our 3.1 software install back on track.  I
>> ran disk-level flashcopy copies of my entire production LPAR to the
>> sandbox, made the required changes (IP addresses etc) to get the sandbox up
>> and running.  Started z/OSMF and it comes up with no errors or warnings
>> (except the one telling me I'm using the local override file).  However,
>> when I try to get to the web server I get a "secure connection failure"
>> with " PR_END_OF_FILE_ERROR" trying to connect with Firefox and "
>> 172.16.128.108 unexpectedly closed the connection" using Chrome.  Security
>> (RACF) is identical to what it is on the production LPAR.  z/OSMF config is
>> identical as well.  Does anybody have any idea what I'm missing?
>>
>> TIA,
>>
>> Rex
>>
>> --
>> The information contained in this message is confidential, protected from
>> disclosure and may be legally privileged. If the reader of this message is
>> not the intended recipient or an employee or agent responsible for
>> delivering this message to the intended recipient, you are hereby notified
>> that any disclosure, distribution, copying, or any action taken or action
>> omitted in reliance on it, is strictly prohibited and may be unlawful. If
>> you have received this communication in error, please notify us immediately
>> by replying to this message and destroy the material in its entirety,
>> whether in electronic or hard copy format. Thank you.
>>
>>
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>>
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: security fun with z/OSMF install - can't get there

[Michael Babcock]

Does this help?

https://kinsta.com/knowledgebase/pr-end-of-file-error/#what-causes-the-pr_end_of_file_error


On Tue, Mar 26, 2024 at 6:28 PM Pommier, Rex 
wrote:

> Hi List,
>
> We are attempting our first foray into getting z/OSMF up and running.
> Scenario is we're backleveled maintenance-wise on our 2.4 system.  We ran
> the security configuration setup etc and got z/OSMF up and running on the
> production LPAR we are planning on running it from.  However when we
> started to load z/OS 3.1 we ran into a problem with missing PTFs.  Got one
> set of PTFs installed and after adding a local_override.cfg file into the
> configuration directory we got z/OSMF up and running again and past that
> hurdle.  We hit the next one requiring a dozen more PTFs to bypass it.  We
> decided to move the install to our sandbox just to get z/OSMF working to
> the point we can use it to get our 3.1 software install back on track.  I
> ran disk-level flashcopy copies of my entire production LPAR to the
> sandbox, made the required changes (IP addresses etc) to get the sandbox up
> and running.  Started z/OSMF and it comes up with no errors or warnings
> (except the one telling me I'm using the local override file).  However,
> when I try to get to the web server I get a "secure connection failure"
> with " PR_END_OF_FILE_ERROR" trying to connect with Firefox and "
> 172.16.128.108 unexpectedly closed the connection" using Chrome.  Security
> (RACF) is identical to what it is on the production LPAR.  z/OSMF config is
> identical as well.  Does anybody have any idea what I'm missing?
>
> TIA,
>
> Rex
>
> --
> The information contained in this message is confidential, protected from
> disclosure and may be legally privileged. If the reader of this message is
> not the intended recipient or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any disclosure, distribution, copying, or any action taken or action
> omitted in reliance on it, is strictly prohibited and may be unlawful. If
> you have received this communication in error, please notify us immediately
> by replying to this message and destroy the material in its entirety,
> whether in electronic or hard copy format. Thank you.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: TSO ALLOC with/wo unit

[Michael Babcock]

SMS versus non-SMS?   Esoterics?

On Wed, Mar 20, 2024 at 1:57 AM ITschak Mugzach <
05a7ced721d8-dmarc-requ...@listserv.ua.edu> wrote:

> I have a program in Rexx that allocates a dataset using dsname and volume
> serial (1) . it works well in my shop but requires a unit type (2) in
> another shop. Actually the error is msg "IKJ56241I SPECIFIED UNIT IS
> UNDEFINED".
> Why does 1 work here and fails in another shop?
>
>1. ALLOC F(XXX) DA('dsname') VOLUME(volser)
>2. ALLOC F(XXX) DA('dsname') VOLUME(volser) UNIT(390)
>
> ITschak
>
> ITschak Mugzach
> *|** IronSphere Platform* *|* *Information Security Continuous Monitoring
> for z/OS, x/Linux & IBM I **| z/VM coming soon  *
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ZFS copy non-SMS to SMS

[Michael Babcock]

Have a look at page 29 of the ZFS Admin book (SC23-6887-50).  Mine is from
z/OS 2.5.“Copying the physical blocks of the aggregate to a larger data
set”.   Basically, it’s allocate, then REPRO.

On Mon, Feb 19, 2024 at 5:09 AM Radoslaw Skorupka <
0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote:

> I created a few ZFS datasets on non-SMS volume.
> Since I used ZFS parameter, it was created as EXT-ADDR, but not EXTENDED.
> Now I want to copy (dump-restore) them to SMS-managed volumes. And got
> ADR971 with rsn=8
>
> Any clue?
>
> I can see the following options:
> 1. Use copytree of pax and copy entire ZFS content to another one,
> created without EXT-ADDR or EXTENDED (and SMS-managed).
> 2. Unmount ZFS and REPRO it to another one, created as above.
> 3. Did I miss any magic option in ADRDSSU manual?
>
> --
> Radoslaw Skorupka
> Lodz, Poland
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zsh for z/OS

[Michael Babcock]

I can also cd into the bin directory and issue ./netstat and it works.

On Fri, Feb 16, 2024 at 2:33 PM Frank Swarbrick 
wrote:

> Here's a bit of an off the wall question/request.
>
> Do both 'netstat' and 'onetstat' work in zsh?
>
> In bash, only 'onetstat' works.  I think that bash under z/OS is unable to
> follow executables with the 'e' file type (external link).
>
>
> ls -FalTHp /bin/netstat /bin/onetstat
>
> erwxrwxrwx 1 BPXROOT  OMVSGRP8 Jun  1
> 2021 /bin/netstat -> ONETSTAT
>
> lrwxrwxrwx 1 BPXROOT  OMVSGRP   29 Jun  1
> 2021 /bin/onetstat -> ../usr/lpp/tcpip/bin/onetstat
>
> Frank
>
> 
> From: IBM Mainframe Discussion List  on behalf
> of Ed Jaffe <05acc3c79bf7-dmarc-requ...@listserv.ua.edu>
> Sent: Friday, February 16, 2024 12:48 PM
> To: IBM-MAIN@LISTSERV.UA.EDU 
> Subject: Re: zsh for z/OS
>
> On 2/16/2024 11:33 AM, Frank Swarbrick wrote:
> > z/OS 3.1 added the Z Shell, zsh.  Is anyone using it?  How do you like
> it.  What interesting features does it have over bash?
> >
> > I'm only at 2.5, so can't use it.
>
> I am using it. After all, what self-respecting z/OS advocate doesn't
> want to use a shell called Z?
>
> I'm not a power user. Not doing anything I couldn't also do in bash...
>
> --
> Phoenix Software International
> Edward E. Jaffe
> 831 Parkview Drive North
> El Segundo, CA 90245
> https://www.phoenixsoftware.com/
>
>
>
> 
> This e-mail message, including any attachments, appended messages and the
> information contained therein, is for the sole use of the intended
> recipient(s). If you are not an intended recipient or have otherwise
> received this email message in error, any use, dissemination, distribution,
> review, storage or copying of this e-mail message and the information
> contained therein is strictly prohibited. If you are not an intended
> recipient, please contact the sender by reply e-mail and destroy all copies
> of this email message and do not otherwise utilize or retain this email
> message or any or all of the information contained therein. Although this
> email message and any attachments or appended messages are believed to be
> free of any virus or other defect that might affect any computer system
> into
> which it is received and opened, it is the responsibility of the recipient
> to ensure that it is virus free and no responsibility is accepted by the
> sender for any loss or damage arising in any way from its opening or use.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zsh for z/OS

[Michael Babcock]

According to the man page for netstat, it’s a synonym for onetstat.
Issuing netstat in bash 5.2 says command not found.   It may be a moot
point if it’s truly a synonym.

On Fri, Feb 16, 2024 at 2:33 PM Frank Swarbrick 
wrote:

> Here's a bit of an off the wall question/request.
>
> Do both 'netstat' and 'onetstat' work in zsh?
>
> In bash, only 'onetstat' works.  I think that bash under z/OS is unable to
> follow executables with the 'e' file type (external link).
>
>
> ls -FalTHp /bin/netstat /bin/onetstat
>
> erwxrwxrwx 1 BPXROOT  OMVSGRP8 Jun  1
> 2021 /bin/netstat -> ONETSTAT
>
> lrwxrwxrwx 1 BPXROOT  OMVSGRP   29 Jun  1
> 2021 /bin/onetstat -> ../usr/lpp/tcpip/bin/onetstat
>
> Frank
>
> 
> From: IBM Mainframe Discussion List  on behalf
> of Ed Jaffe <05acc3c79bf7-dmarc-requ...@listserv.ua.edu>
> Sent: Friday, February 16, 2024 12:48 PM
> To: IBM-MAIN@LISTSERV.UA.EDU 
> Subject: Re: zsh for z/OS
>
> On 2/16/2024 11:33 AM, Frank Swarbrick wrote:
> > z/OS 3.1 added the Z Shell, zsh.  Is anyone using it?  How do you like
> it.  What interesting features does it have over bash?
> >
> > I'm only at 2.5, so can't use it.
>
> I am using it. After all, what self-respecting z/OS advocate doesn't
> want to use a shell called Z?
>
> I'm not a power user. Not doing anything I couldn't also do in bash...
>
> --
> Phoenix Software International
> Edward E. Jaffe
> 831 Parkview Drive North
> El Segundo, CA 90245
> https://www.phoenixsoftware.com/
>
>
>
> 
> This e-mail message, including any attachments, appended messages and the
> information contained therein, is for the sole use of the intended
> recipient(s). If you are not an intended recipient or have otherwise
> received this email message in error, any use, dissemination, distribution,
> review, storage or copying of this e-mail message and the information
> contained therein is strictly prohibited. If you are not an intended
> recipient, please contact the sender by reply e-mail and destroy all copies
> of this email message and do not otherwise utilize or retain this email
> message or any or all of the information contained therein. Although this
> email message and any attachments or appended messages are believed to be
> free of any virus or other defect that might affect any computer system
> into
> which it is received and opened, it is the responsibility of the recipient
> to ensure that it is virus free and no responsibility is accepted by the
> sender for any loss or damage arising in any way from its opening or use.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMP/E - Pointing Existing TARG & DLIB Zones To New CSI's

[Michael Babcock]

I work with Ross and can explain what he is trying to accomplish.   We have
a Db2 v13 Global zone for Db2 along with its associated target and DLIB
zones.   We have several Db2 related products (Admin Tool, etc) installed
into the Db2 global with their own target and dlib zones.   He wants to
upgrade an existing product but with new target and dlib zones without
losing the old version.   If he clones the existing target and dlib zones,
updates the DDDEFs and receives the new version, will SMPE try to delete
the old FMID and/or the contents of the existing libraries?

On Thu, Dec 14, 2023 at 2:42 PM Jousma, David <
01a0403c5dc1-dmarc-requ...@listserv.ua.edu> wrote:

> This statement is very confusing to me?So for DB2V13 is installed in
> its own global zone, with target and dlib zones.It’s the next part of
> your statement “use my existing target and dlib zones and update ddefs…”
> that is confusing me.   It sounds like you are trying to marry your V13
> work with some other downlevel environment?  To me it sounds like you
> already have a V13 environment, along with some “older” environment.I
> cannot tell what you are trying to accomplish.
>
>
> >> On Thu, 14 Dec 2023 11:27:16 -0600, Ross Vaughn <
> ross.vaugh...@gmail.com> wrote:
>
> >>
>
> >>> I’m upgrading a product in my DB2v13 global zone.  I plan to use my
> existing target & DLIB zones and just update my DDDEFs to point to my new
> dataset names.
>
> >>> My question is - if I want to create new CSI’s (copied from my
> existing CSIs) for
>
>
> Dave Jousma
> Vice President | Director, Technology Engineering
>
>
>
>
>
> This e-mail transmission contains information that is confidential and may
> be privileged.   It is intended only for the addressee(s) named above. If
> you receive this e-mail in error, please do not read, copy or disseminate
> it in any manner. If you are not the intended recipient, any disclosure,
> copying, distribution or use of the contents of this information is
> prohibited. Please reply to the message immediately by informing the sender
> that the message was misdirected. After replying, please erase it from your
> computer system. Your assistance in correcting this error is appreciated.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OSA-ICC Connection Question

[Michael Babcock]

Thanks to all that responded!   I appreciate the help!

On Thu, Nov 16, 2023 at 9:10 AM Jay Maynard  wrote:

> A bit of Googling reveals that TAS is a component of BMC MainView. Under
> those circumstances, that OSA-ICC session might never talk to a VTAM
> application like TSO at all; if so, then there's no need for an application
> LU to pass the emulated terminal to VTAM. In either case, TAS handles all
> communication with the device, and VTAM never gets involved.
>
> On Thu, Nov 16, 2023 at 9:02 AM Jay Maynard  wrote:
>
> > Yes, TAS is doing something under the covers. Since you're giving it a
> > device number to talk to the OSA-ICC device, that means that device is
> not
> > owned by VTAM at all, at any time; instead, TAS is talking to it directly
> > using channel programming like it's a channel-attached, non-SNA 3270
> > terminal. Under those circumstances, there's no need tor an LBUILD/LU
> > combination for that device, since VTAM's not talking to it. Instead,
> > there's an LU definition in VTAM for TAS to pass the device through to
> > VTAM, and that LU (which need not be the same one for every session) is
> > what communicates with VTAM applications like TSO.
> >
> > On Thu, Nov 16, 2023 at 8:53 AM Michael Babcock 
> > wrote:
> >
> >> Perhaps it would be better if I explain what we have.   We use the BMC
> >> suite of products including the Terminal Address Space (an alternate
> >> access method I think they call it).  Within TAS, there is a LOGON
> >> UCB(B400) parameter.  The B400 corresponds to the OSA-ICC definition.
> >> We have a Visara 500LX box that contains a 3270 session with the same
> >> LUNAME and CUADDR as the OSA-ICC definition (B400). We do not have a
> >> LBUILD for B400 CUADDR anywhere in VTAM.  I expected to see one however.
> >> I assume then that the TAS is doing something under the covers and
> >> as such VTAM doesn't need an LBUILD for B400.  We do have LBUILDs for
> >> other B4xx addresses (but they don't use TAS, they are for TSO).
> >>
> >> On 11/16/2023 5:10 AM, Radoslaw Skorupka wrote:
> >> > W dniu 16.11.2023 o 01:47, Michael Babcock pisze:
> >> >> We have an OSA-ICC connection set up as a 3270 session type.   The LU
> >> >> Name
> >> >> in that definition is TERM140.  The CUA is B400.We have a 3270
> >> >> session
> >> >> defined with the proper IP and the same LU Name of TERM140. This all
> >> >> works as expected.  My question is that I thought a VTAM APPL with an
> >> >> LUNAME of TERM140 was required but I do not see a TERM140 defined in
> >> >> VTAM
> >> >> at all.   I’m not a network guy.   Since this is working, I assume
> >> >> it’s not
> >> >> required.   Can someone enlighten me?
> >> >
> >> > In simple words, LUNAME used in OSA-ICC session definition and
> >> > emulator - it does NOT exist in any VTAM or TCPIP configuration.
> >> > Instead, VTAM use device number (devnum), which is in turn not used in
> >> > emulator session. However OSA-ICC session ties devnum with LUNAME.
> >> > Note: the same devnum can be used by different LPARs and every LPAR
> >> > has its own console/terminal. It is not shared, just "duplicate"
> >> > devnum. However OSA-ICC use devum *and* MIF and CSS to uniquely
> >> > identify the device.
> >> >
> >>
> >> --
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >>
> >
> >
> > --
> > Jay Maynard
> >
> >
>
> --
> Jay Maynard
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OSA-ICC Connection Question

[Michael Babcock]

Perhaps it would be better if I explain what we have.   We use the BMC 
suite of products including the Terminal Address Space (an alternate 
access method I think they call it).  Within TAS, there is a LOGON 
UCB(B400) parameter.  The B400 corresponds to the OSA-ICC definition.  
We have a Visara 500LX box that contains a 3270 session with the same 
LUNAME and CUADDR as the OSA-ICC definition (B400). We do not have a 
LBUILD for B400 CUADDR anywhere in VTAM.  I expected to see one however. 
   I assume then that the TAS is doing something under the covers and 
as such VTAM doesn't need an LBUILD for B400.  We do have LBUILDs for 
other B4xx addresses (but they don't use TAS, they are for TSO).


On 11/16/2023 5:10 AM, Radoslaw Skorupka wrote:

W dniu 16.11.2023 o 01:47, Michael Babcock pisze:
We have an OSA-ICC connection set up as a 3270 session type.   The LU 
Name
in that definition is TERM140.  The CUA is B400.    We have a 3270 
session

defined with the proper IP and the same LU Name of TERM140. This all
works as expected.  My question is that I thought a VTAM APPL with an
LUNAME of TERM140 was required but I do not see a TERM140 defined in 
VTAM
at all.   I’m not a network guy.   Since this is working, I assume 
it’s not

required.   Can someone enlighten me?


In simple words, LUNAME used in OSA-ICC session definition and 
emulator - it does NOT exist in any VTAM or TCPIP configuration.
Instead, VTAM use device number (devnum), which is in turn not used in 
emulator session. However OSA-ICC session ties devnum with LUNAME. 
Note: the same devnum can be used by different LPARs and every LPAR 
has its own console/terminal. It is not shared, just "duplicate" 
devnum. However OSA-ICC use devum *and* MIF and CSS to uniquely 
identify the device.




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: What happens if you IPL a LPAR defined as being in a parallel sysplex but the CF LPAR is not there

[Michael Babcock]

Bring up a one pack rescue system that can get to the same PARMLIB and
change it.

On Thu, Nov 16, 2023 at 12:54 AM Laurence Chiu  wrote:

> It was gold for me and will help me settle a dispute with some local
> sysprogs who said there would be no problem. My question is, it says if you
> don't have a CF then change GRS=TRYJOIN or =NONE. Problem is, when the
> problem occurs, how do you get online to change it? I could not find an
> operator command to change it and since the system is able to IPL,
> you can't logon to change it.
>
> On Thu, Nov 16, 2023 at 4:18 PM kekronbekron <
> 02dee3fcae33-dmarc-requ...@listserv.ua.edu> wrote:
>
> > Awesome, how do we even find such gems with TechDocs being what it is...
> > Luckily for this one, I seem to have it bookmarked.
> >
> >
> > On Thursday, November 16th, 2023 at 05:14, Attila Fogarasi <
> > fogar...@gmail.com> wrote:
> >
> >
> > > Answered a decade ago including how to continue the IPL and get running
> > > (either single system or sysplex without CF)
> > >
> >
> https://www.ibm.com/support/pages/system/files/inline-files/Where_is_My_Coupling_Facility.pdf
> > > "The paper is being written to provide clear and concise instructions
> on
> > > how to address the sysplex support team’s most common callout. Where is
> > My
> > > Coupling Facility?"
> > >
> > > On Thu, Nov 16, 2023 at 10:42 AM Mark Jacobs <
> > > 0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:
> > >
> > > > GRS will attempt to connect to ISGLOCK, fail and z/OS will go into a
> > > > X'0A3' wait state.
> > > >
> > > > Mark Jacobs
> > > >
> > > > Sent from ProtonMail, Swiss-based encrypted email.
> > > >
> > > > GPG Public Key -
> > > >
> >
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
> > > >
> > > > On Wednesday, November 15th, 2023 at 5:49 PM, Laurence Chiu <
> > > > lch...@gmail.com> wrote:
> > > >
> > > > > Thinking about a LPAR defined as being in a parallel sysplex with
> > > > > GRS=STAR.
> > > > >
> > > > > What happens if you IPL that LPAR and the CF is not active? Will it
> > > > > start,
> > > > > issue a WTOR or just fail? We are wondering what would happen if
> our
> > LPAR
> > > > > was started at the DR site (off a replicated set of volumes) but
> the
> > DR
> > > > > CEC
> > > > > did not have a CF defined. Thanks
> > > > >
> > > > >
> > --
> > > > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > > > send email to lists...@listserv.ua.edu with the message: INFO
> > IBM-MAIN
> > > >
> > > >
> --
> > > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > > send email to lists...@listserv.ua.edu with the message: INFO
> IBM-MAIN
> > >
> > >
> > > --
> > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OSA-ICC Connection Question

[Michael Babcock]

So you are saying I don’t need a VTAM APPL statement with an LU defined?

On Wed, Nov 15, 2023 at 7:47 PM Jay Maynard  wrote:

> A VTAM APPL is used for a program. The OSA-ICC looks to VTAM like a plain
> old 3270 terminal. The LU definition that mentions the device number is the
> only LU definition you need, or can have.
>
> On Wed, Nov 15, 2023 at 6:47 PM Michael Babcock 
> wrote:
>
> > We have an OSA-ICC connection set up as a 3270 session type.   The LU
> Name
> > in that definition is TERM140.  The CUA is B400.We have a 3270
> session
> > defined with the proper IP and the same LU Name of TERM140.This all
> > works as expected.  My question is that I thought a VTAM APPL with an
> > LUNAME of TERM140 was required but I do not see a TERM140 defined in VTAM
> > at all.   I’m not a network guy.   Since this is working, I assume it’s
> not
> > required.   Can someone enlighten me?
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
>
> --
> Jay Maynard
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

OSA-ICC Connection Question

[Michael Babcock]

We have an OSA-ICC connection set up as a 3270 session type.   The LU Name
in that definition is TERM140.  The CUA is B400.We have a 3270 session
defined with the proper IP and the same LU Name of TERM140.This all
works as expected.  My question is that I thought a VTAM APPL with an
LUNAME of TERM140 was required but I do not see a TERM140 defined in VTAM
at all.   I’m not a network guy.   Since this is working, I assume it’s not
required.   Can someone enlighten me?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM APAR Names

[Michael Babcock]

I’ve always gone to
https://www.ibm.com/support/pages/enhanced-holddata-zos and scrolled down
to “
*REPORT ERRSYSMODS APAR SYSMOD ID to RETAIN APAR Number mapping” to figure
out the mapping.  *



On Mon, Nov 6, 2023 at 9:20 AM Ed Jaffe  wrote:

> On 11/5/2023 4:03 PM, Shaffer, Terri wrote:
> > So I am trying to apply maintenance and want to know the actual APAR to
> look up to see if its open closed, or what?
>
> Slide 72 in SHARE New Orleans Bit Bucket X'42' explains the APAR and
> ++APAR naming convention used most often with z/OS products and components.
>
> The possible APAR prefixes are: OA, PH, PI, PK, PL, PM, PN, IO, PP, PQ,
> IR, OW, OY and OZ. The second letter of the ++APAR is the mapping.
>
> --
> Phoenix Software International
> Edward E. Jaffe
> 831 Parkview Drive North
> El Segundo, CA 90245
> https://www.phoenixsoftware.com/
>
>
>
> 
> This e-mail message, including any attachments, appended messages and the
> information contained therein, is for the sole use of the intended
> recipient(s). If you are not an intended recipient or have otherwise
> received this email message in error, any use, dissemination, distribution,
> review, storage or copying of this e-mail message and the information
> contained therein is strictly prohibited. If you are not an intended
> recipient, please contact the sender by reply e-mail and destroy all copies
> of this email message and do not otherwise utilize or retain this email
> message or any or all of the information contained therein. Although this
> email message and any attachments or appended messages are believed to be
> free of any virus or other defect that might affect any computer system
> into
> which it is received and opened, it is the responsibility of the recipient
> to ensure that it is virus free and no responsibility is accepted by the
> sender for any loss or damage arising in any way from its opening or use.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Resize a ZFS aggregate

[Michael Babcock]

It’s documented in the ZFS Administration book, section “Copying the
physical blocks of the aggregate to a larger dataset”.

Don’t format the .NEW or it doesn’t work.

On Wed, Oct 11, 2023 at 2:07 PM Mark Pace  wrote:

> Hmm - never tried repo on an zfs aggregate.  I'll give it a try.  Thanks./
>
> On Wed, Oct 11, 2023 at 3:01 PM Michael Babcock 
> wrote:
>
> > I usually allocate a .NEW, REPRO from the current to .NEW and RENAME.
> >
> > On Wed, Oct 11, 2023 at 1:59 PM Mark Pace 
> wrote:
> >
> > > Same results using replace or replaceu
> > >
> > > On Wed, Oct 11, 2023 at 2:47 PM Mark Pace 
> > wrote:
> > >
> > > > No, I've used REPLACE.  I'll give that a try.
> > > >
> > > > On Wed, Oct 11, 2023 at 2:46 PM Art Zeigler 
> > wrote:
> > > >
> > > >> Did you use the REPLACEUnconditional parameter with the restore?
> > Also,
> > > >> make sure you don't have SMS routines getting in the way.
> > > >>
> > > >> Art Zeigler
> > > >>
> > > >> 
> > > >> From: IBM Mainframe Discussion List  on
> > > behalf
> > > >> of Mark Pace 
> > > >> Sent: Wednesday, October 11, 2023 2:26 PM
> > > >> To: IBM-MAIN@LISTSERV.UA.EDU 
> > > >> Subject: Resize a ZFS aggregate
> > > >>
> > > >> I have a zfs file that has grown so large it can't any more extents.
> > > >>
> > > >> So the plan was to
> > > >> Unmount the filesystem
> > > >> Dump the file to disk dataset.
> > > >> Delete the filesystem
> > > >> Define the filesystem with larger primary and secondary extents.
> > > >> Restore the dump to the new filesystem
> > > >> and remount.
> > > >>
> > > >> BUT - when I restore the dump it deletes the filesystem I created
> and
> > > >> creates a new one using the old allocations.
> > > >>
> > > >> How do I make adrdssu use the new preallocated filesystem
> allocation?
> > > >>
> > > >> --
> > > >> The postings on this site are my own and don’t necessarily represent
> > > >> Mainline’s positions or opinions
> > > >>
> > > >> Mark D Pace
> > > >> Senior Systems Engineer
> > > >> Mainline Information Systems
> > > >>
> > > >>
> --
> > > >> For IBM-MAIN subscribe / signoff / archive access instructions,
> > > >> send email to lists...@listserv.ua.edu with the message: INFO
> > IBM-MAIN
> > > >>
> > > >>
> --
> > > >> For IBM-MAIN subscribe / signoff / archive access instructions,
> > > >> send email to lists...@listserv.ua.edu with the message: INFO
> > IBM-MAIN
> > > >>
> > > >
> > > >
> > > > --
> > > > The postings on this site are my own and don’t necessarily represent
> > > > Mainline’s positions or opinions
> > > >
> > > > Mark D Pace
> > > > Senior Systems Engineer
> > > > Mainline Information Systems
> > > >
> > > >
> > > >
> > > >
> > >
> > > --
> > > The postings on this site are my own and don’t necessarily represent
> > > Mainline’s positions or opinions
> > >
> > > Mark D Pace
> > > Senior Systems Engineer
> > > Mainline Information Systems
> > >
> > > --
> > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> > >
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
>
> --
> The postings on this site are my own and don’t necessarily represent
> Mainline’s positions or opinions
>
> Mark D Pace
> Senior Systems Engineer
> Mainline Information Systems
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Resize a ZFS aggregate

[Michael Babcock]

I usually allocate a .NEW, REPRO from the current to .NEW and RENAME.

On Wed, Oct 11, 2023 at 1:59 PM Mark Pace  wrote:

> Same results using replace or replaceu
>
> On Wed, Oct 11, 2023 at 2:47 PM Mark Pace  wrote:
>
> > No, I've used REPLACE.  I'll give that a try.
> >
> > On Wed, Oct 11, 2023 at 2:46 PM Art Zeigler  wrote:
> >
> >> Did you use the REPLACEUnconditional parameter with the restore?  Also,
> >> make sure you don't have SMS routines getting in the way.
> >>
> >> Art Zeigler
> >>
> >> 
> >> From: IBM Mainframe Discussion List  on
> behalf
> >> of Mark Pace 
> >> Sent: Wednesday, October 11, 2023 2:26 PM
> >> To: IBM-MAIN@LISTSERV.UA.EDU 
> >> Subject: Resize a ZFS aggregate
> >>
> >> I have a zfs file that has grown so large it can't any more extents.
> >>
> >> So the plan was to
> >> Unmount the filesystem
> >> Dump the file to disk dataset.
> >> Delete the filesystem
> >> Define the filesystem with larger primary and secondary extents.
> >> Restore the dump to the new filesystem
> >> and remount.
> >>
> >> BUT - when I restore the dump it deletes the filesystem I created and
> >> creates a new one using the old allocations.
> >>
> >> How do I make adrdssu use the new preallocated filesystem allocation?
> >>
> >> --
> >> The postings on this site are my own and don’t necessarily represent
> >> Mainline’s positions or opinions
> >>
> >> Mark D Pace
> >> Senior Systems Engineer
> >> Mainline Information Systems
> >>
> >> --
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >>
> >> --
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >>
> >
> >
> > --
> > The postings on this site are my own and don’t necessarily represent
> > Mainline’s positions or opinions
> >
> > Mark D Pace
> > Senior Systems Engineer
> > Mainline Information Systems
> >
> >
> >
> >
>
> --
> The postings on this site are my own and don’t necessarily represent
> Mainline’s positions or opinions
>
> Mark D Pace
> Senior Systems Engineer
> Mainline Information Systems
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Utility to Read from JES2 spool

[Michael Babcock]

Programmatically or manually?  Manually,  in SDSF, you can always put a
question mark next to the output and put an XDC next to the output you
want. Or skip the question mark and XDC the entire job.   See the SDSF help
for XDC.

On Fri, Sep 29, 2023 at 9:10 AM Roberto Halais 
wrote:

> Listers:
>
> Is there an z/os utility that will allow the reading of a spool file (in
> some class) and copy it to a sequential dataset?
>
> We need to read a report from spool and copy it o a sequential dataset.
> Just a z/os utility or a CBT tape utility.
> Thank you for any pointers.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SDSF and JESSPOOL

[Michael Babcock]

I don’t know where the build JCL came from cuz it was here before I got
here.  I’ll keep that in mind too, thanks!

On Fri, Sep 22, 2023 at 2:35 PM Mark Zelden  wrote:

> On Thu, 21 Sep 2023 06:50:01 -0500, Michael Babcock 
> wrote:
>
> >Thanks Rob!   That’s the explanation I needed!   However, I did create a
> >ISF*.** profile with a UACC of ALTER but it still didn’t work because I
> >didn’t have NOFAILRC4 (I assume).
> >
> >On Thu, Sep 21, 2023 at 2:52 AM Rob Scott 
> wrote:
> >
> >> Michael
> >>
> >> Although we strongly recommend JESSPOOL (and OPERCMDS) being active, you
> >> can use successfully use SDSF without it.
> >>
> >> The big difference in z/OS 2.5 is that SDSF will no longer fall back to
> >> any legacy ISFPRMxx authority keywords on the GROUP statements when SAF
> >> returns RC=4.
> >>
> >> How SDSF handles SAF RC=4 (returned when the ESM cannot make a
> >> determination - for example the class not active or no matching
> profile) is
> >> governed by the AUXSAF(FAILRC4/NOFAILRC4) keyword on the CONNECT
> statement
> >> in ISFPRMxx.
> >>
> >> The default value of FAILRC4 means that SDSF will translate RC=4 from
> SAF
> >> into a "denied" response, whereas NOFAILRC4 will translate to "allowed".
> >>
> >> So you could keep JESSPOOL inactive and use AUXSAF(NOFAILRC4) on your
> >> rescue system ...
>
> 
>
> If this happens to be a modified version of my onepack JCL from my web
> site / CBT file 434, when I put out the z/OS 2.5 version it will have
> CONNECT AUXSAF(NOFAILRC4) in the ISFPRM00 member that is
> supplied by default.
>
> Best Regards,
>
> Mark
> --
> Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS
> ITIL v3 Foundation Certified
> mailto:m...@mzelden.com
> Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SDSF and JESSPOOL

[Michael Babcock]

Thanks Rob!   That’s the explanation I needed!   However, I did create a
ISF*.** profile with a UACC of ALTER but it still didn’t work because I
didn’t have NOFAILRC4 (I assume).

On Thu, Sep 21, 2023 at 2:52 AM Rob Scott  wrote:

> Michael
>
> Although we strongly recommend JESSPOOL (and OPERCMDS) being active, you
> can use successfully use SDSF without it.
>
> The big difference in z/OS 2.5 is that SDSF will no longer fall back to
> any legacy ISFPRMxx authority keywords on the GROUP statements when SAF
> returns RC=4.
>
> How SDSF handles SAF RC=4 (returned when the ESM cannot make a
> determination - for example the class not active or no matching profile) is
> governed by the AUXSAF(FAILRC4/NOFAILRC4) keyword on the CONNECT statement
> in ISFPRMxx.
>
> The default value of FAILRC4 means that SDSF will translate RC=4 from SAF
> into a "denied" response, whereas NOFAILRC4 will translate to "allowed".
>
> So you could keep JESSPOOL inactive and use AUXSAF(NOFAILRC4) on your
> rescue system and this will help overcome most obstacles, however there is
> another way :
>
> SDSF has the concept of "destination operator" within the product dating
> back decades to the time when companies had print operations staff that
> needed to manage individual destinations regardless of the output-creating
> userid.
> Profiles in the SDSF class of ISFOPER.DEST.destname would allow print
> operators to manage output on individual destinations without specific
> authority to the spool object.
>
> On top of individual destination authority, there is a profile
> ISFOPER.ANYDEST.jesname in the SDSF class which, when the user has READ
> authority, performs a RECVR handshake with JES on the JESSPOOL RACROUTE
> request to grant access to the output.  So you could permit your sysprogs
> on the rescue system to this profile and keep JESSPOOL class active while
> allowing you to implement other profiles so that it is consistent with
> non-rescue system (if so desired).
>
> One thing to note is that JESSPOOL and OPERCMDS classes are not owned by
> SDSF, we check profiles in these classes on the user's behalf to enhance
> the user experience, however the owning components will make their own
> authority decisions when SDSF passes thru any request for data/action (and
> also when access is attempted outside of SDSF - for example from a SYSOUT
> archiving product or automated operations).
>
> I do have a "How SDSF Security Works" presentation that is available on
> IBM Education github :
> https://github.com/IBM/IBM-Z-zOS/tree/main/zOS-Education/zOS-V2.5-Education
>
>
> Rob Scott
> Rocket Software
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Michael Babcock
> Sent: Wednesday, September 20, 2023 6:50 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: SDSF and JESSPOOL
>
> EXTERNAL EMAIL
>
>
>
>
>
> We have a rescue system that we just brought up on z/OS 2.5.   I
> couldn't access SDSF so I defined the appropriate groups, modified
> ISFPRMxx and restarted SDSF, logged off and back on.  I could then get into
> SDSF.  I could NOT access ANY output whatsoever.  I kept getting NO
> DISPLAYABLE DATA.  We did not have the JESSPOOL class active on that
> system.  Now the SDSF security migration guide says that JESSPOOL class
> activation is not REQUIRED, but until I activated that class, I could
> not access any output.   Is the book wrong or did I have something not
> quite set right?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> 
> Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA
> 02451 ■ Main Office Toll Free Number: +1 855.577.4323
> Contact Customer Support:
> https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
> Unsubscribe from Marketing Messages/Manage Your Subscription Preferences -
> http://www.rocketsoftware.com/manage-your-email-preferences
> Privacy Policy -
> http://www.rocketsoftware.com/company/legal/privacy-policy
> 
>
> This communication and any attachments may contain confidential
> information of Rocket Software, Inc. All unauthorized use, disclosure or
> distribution is prohibited. If you are not the intended recipient, please
> notify Rocket Software immediately and destroy all copies of this
> communication. Thank you.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SDSF and JESSPOOL

[Michael Babcock]

We did not previously convert this one pack rescue system to SDSF external
security.  This is the first time IPLing it with z/OS 2.5.   I defined the
GROUP.SYSPROG.* profile in SDSF, refreshed the SDSF class, made the
necessary ISFPRMxx member and refreshed SDSF.   I could not browse any
output in SDSF.  I had to activate JESSPOOL and define the appropriate
profiles before I could browse output.

The migration guide says JESSPOOL is optional but it appeared it’s not.

On Wed, Sep 20, 2023 at 1:55 PM Radoslaw Skorupka <
0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote:

> W dniu 20.09.2023 o 19:49, Michael Babcock pisze:
> > We have a rescue system that we just brought up on z/OS 2.5.   I
> > couldn't access SDSF so I defined the appropriate groups, modified
> > ISFPRMxx and restarted SDSF, logged off and back on.  I could then get
> > into SDSF.  I could NOT access ANY output whatsoever.  I kept getting
> > NO DISPLAYABLE DATA.  We did not have the JESSPOOL class active on
> > that system.  Now the SDSF security migration guide says that JESSPOOL
> > class activation is not REQUIRED, but until I activated that class, I
> > could not access any output.   Is the book wrong or did I have
> > something not quite set right?
>
> Do you have any definitions in SDSF class?
> Hint: look for GROUP.**
>
>
>
> --
> Radoslaw Skorupka
> Lodz, Poland
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SDSF and JESSPOOL

[Michael Babcock]

We have a rescue system that we just brought up on z/OS 2.5.   I 
couldn't access SDSF so I defined the appropriate groups, modified 
ISFPRMxx and restarted SDSF, logged off and back on.  I could then get 
into SDSF.  I could NOT access ANY output whatsoever.  I kept getting NO 
DISPLAYABLE DATA.  We did not have the JESSPOOL class active on that 
system.  Now the SDSF security migration guide says that JESSPOOL class 
activation is not REQUIRED, but until I activated that class, I could 
not access any output.   Is the book wrong or did I have something not 
quite set right?


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Free SMPE product to just practice

[Michael Babcock]

How about Rocket’s Ported Tools in SMPE format?  I thought it’s free with
no support.   I can’t remember if you need to be licensed for one of their
other products first or not.

On Thu, Sep 14, 2023 at 6:36 PM Farley, Peter <
031df298a9da-dmarc-requ...@listserv.ua.edu> wrote:

> Mike, it seems to me that BUILDING an SMPE package (no matter how simple)
> and INSTALLING an SMPE package that someone else built are two different
> skill levels.  I think Tom was asking to practice the latter, the INSTALL
> skills, not the BUILD skills.
>
> Peter
>
> From: IBM Mainframe Discussion List  On Behalf
> Of Mike Schwab
> Sent: Thursday, September 14, 2023 4:05 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Free SMPE product to just practice
>
>
> Not in smpe format, but a simple application you could package.
>
> https://github.com/mainframed/DOGECICS
>
>
>
> On Thu, Sep 14, 2023 at 2:51 PM Tom Marchant
>
> <000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote:
>
> >
>
> > I don't know of any. Maybe someone else does.
>
> >
>
> > You could use any product that your installation runs and install it
> into your own data sets. That will get you practice applying, accepting,
> restoring, rejecting, etc. And if you get stuck, you can blow it all away
> and start over.
>
> >
>
> > Or you could build your own product. You don't need much. Just a load
> module, maybe a source to generate it. The result doesn't even have to do
> anything. But if you create a function sysmod (FMID) and apply it, you will
> learn a lot more.
>
> >
>
> > On Thu, 14 Sep 2023 23:36:22 +0400, Jake Anderson <
> justmainfra...@gmail.com> wrote:
>
> >
>
> > >Is there any freeware product which can be installed using SMP/e.
>
> --
>
> This message and any attachments are intended only for the use of the
> addressee and may contain information that is privileged and confidential.
> If the reader of the message is not the intended recipient or an authorized
> representative of the intended recipient, you are hereby notified that any
> dissemination of this communication is strictly prohibited. If you have
> received this communication in error, please notify us immediately by
> e-mail and delete the message and any attachments from your system.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [External] : Connect Direct for z/Os Upgrade

[Michael Babcock]

Are you using a STEPLIB?   If so, make sure ALL libraries in the STEPLIB
are APF’d and that they are on the correct volume as your APF list.

If not using a STEPLIB use TSO ISRFIND to ensure the exits are not found in
another library first.


On Mon, Aug 28, 2023 at 8:28 PM Gilson Cesar de Oliveira 
wrote:

> Hi Richard,
>
> Yes. The dataset where where the exits reside is APF.
>
> Em seg., 28 de ago. de 2023 às 16:24, Richard McIntosh <
> richard.mcint...@oracle.com> escreveu:
>
> > Is the library authorized that the exits on it? Make sure it is the APF
> > list.
> > LONG TEXT => The user-written exit program was not found in an
> > authorized
> >  library.
> >
> > Richard
> >
> >
> > -Original Message-
> > From: IBM Mainframe Discussion List  On Behalf
> > Of Gilson Cesar de Oliveira
> > Sent: Monday, August 28, 2023 2:18 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: [External] : Connect Direct for z/Os Upgrade
> >
> > We are upgrading COnnect Direct for z/Os at version 4.8 to 5.1 (this is
> > the first step to upgrade to version 6.2) and we are facing issues for
> some
> > processes when using the new version of the loadlib of Connect Direct.
> > SCIB006I SIGNON COMMAND (CONDENSED) => USERID /NODE =
> >
> > SCIC000I Connect:Direct - RC=0008 MSG=SCBA029I NODE=
>  @
> > 06:48:51 / 08/25/23
> >SHORT TEXT => SCBA029I The user exit is not in an authorized library.
> >
> > LONG TEXT => The user-written exit program was not found in an
> > authorized
> >  library.
> >
> >
> >  SYSTEM ACTION: Signon fails.
> >
> >
> >  RESPONSE: Make sure the exit is in an authorized library
> > and
> >was assembled non-reentrant and non-reusable.
> >
> > SCIC013I Terminating before EOF due to error return code (HEX) =0018
> >
> > SCIB007I  COMMAND =>  SIGNOFF FORCED BY DMBATCH
> >
> > SCIC000I Connect:Direct - RC=0010 MSG=SCIA008I NODE=
>  @
> > 06:48:52 / 08/25/23
> >SHORT TEXT => SCIA008I Syntax Error finding word SIGNON in SIGNON
> > command.
> > LONG TEXT => C:D was unable to find the word SIGNON in the first
> >
> >  command passed.  The SIGNON command MUST NOT have a
> >
> > label on it, and the word SIGNON MUST be surrounded by
> > spaces.  Common reasons for this message are:
> > 1) A LABEL starting in Column 1
> > 2) The word SIGNON starting in Column 1
> > 3) The word SIGNON not followed by a space.
> >
> > SYSTEM ACTION: Set Return code to 16, and Fail the signon
> >
> > We recompiled two exits DGAMGSAF and DGACXSIG and for some processes it's
> > working as expected but for this example above we can see errors.
> >
> > Do you have any idea why this errors are occurring?
> >
> > As a workaround we created a new version of the proc used by these
> > processes but pointing in the STEPLIB the dataset of the version V4.8
> > instead of V5.1.
> >
> > Thanks for any help.
> >
> > Regards,
> >
> > Gilson
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> email
> > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Automount (was USS Features)

[Michael Babcock]

We use automount with auto created ZFSs for each user.   We set the size so
it won’t grow beyond our settings.   Works great.

On Mon, Aug 7, 2023 at 7:57 AM Rick Troth  wrote:

>  > However it is not reality show or beauty contest, rather I'd like to
> see some real advantages of automount.
>
> Last week I learned of a peculiar use of automount in z/OS which is
> different from my experience and which a storage admin might truly
> dislike: auto-create a (possibly large, in any case yet another to
> manage) USS filespace for each user.
> Yuck.
> So I get it that some find automount counter productive.
>
> My experience has always been quite different, whether with z/OS or
> elsewhere.
> The mounted objects are often sub-directories of a shared space
> (advantage: NOT creating countless additional spaces to manage).
> The mounted objects are called for on-demand (advantage: NOT requiring a
> large table of filesystems to mount when the system starts).
>
> I was blown away the first time I ran 'df' on USS. So many things mounted!
> And many of them were program products. As a long time Unix person and
> sometime Unix admin, I do find program products to be excellent
> candidates for their own mount point (whether also their own physical
> space or shared).
> Automounter could dramatically reduce the number of things needing mount
> at boot time.
>
> My first experience with automounter was for user home directories (in
> that case, always residing in shared spaces on the back end).
> But that was the time of shared workstations: a users home dir was not
> mounted until she signed on.
>
> Summary: YES, automount has some advantages, though no, it's not always
> implemented elegantly.
>
> -- R; <><
>
>
> On 8/5/23 09:08, Radoslaw Skorupka wrote:
> > W dniu 04.08.2023 o 22:04, Jon Perryman pisze:
> >>   > On Monday, July 31, 2023 at 08:29:07 AM PDT, Radoslaw Skorupka
> >> wrote:
> >>
> >>> Regarding automount feature: IMHO it is less than useless.
> >> While there is truth to what you say about automount, there are uses
> >> where people find it useful because it provides features that some
> >> customers need. Most notably, everything in a filesystem is randomly
> >> placed within that filesystem without any controls. Ask a z/OS
> >> storage admin if he could tolerate the same situation where all z/OS
> >> datasets are placed randomly (no SMS nor disk esoterics).
> >
> > I asked storage admin (myself) and heard NO. Automount changes nothing
> > to what you described (and what is IMHO disputable, but this is
> > different thread).
> > Oh, BTW: I met many other storage admins in my career. No one liked
> > automount feature, usually they didn't express any opinion, but
> > sometimes they complain on that.
> > However it is not reality show or beauty contest, rather I'd like to
> > see some real advantages of automount.
> >
> >
> >
> >>  On Monday, July 31, 2023 at 08:29:07 AM PDT, Radoslaw Skorupka
> >> <0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote:
> >> Regarding automount feature: IMHO it is less than useless.
> >> - It require some effort to establish and manage (including storage
> >> adm.)
> >> - It wastes space, because even smallest empty home directory occupies
> >> first extent of the ZFS/HFS.
> >> - Space (extents) taken by some large files and then deleted is still
> >> occupied by the user.
> >> - Tools like find may omit currently unmounted directories, sometimes
> >> making the search ineffective.
> >> - I vaguely remember the z/OS Unix does not like excessive filesystems
> >> being mounted.
> >> - Automount/demount consume some resources.
> >> - Last, but not least: I observed the are more active TSO users than USS
> >> users. The same apply to CICS, etc. Sometimes one may enter TSO OMVS
> >> just out of curiosity. In case of automount yet another filesystem is
> >> created.
> >>
> >>
> >>   From the other hand one can create common filesystems for all home
> >> directories.
> >> When needed it can be divided among multiple filesystems.
> >> Users with large needs may have dedicated filesystems.
> >> Empty user directory does not consume resources. Even "touched".
> >>
> >>
> >> My €0.02
> >
> >
> >
> > Regards
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

[Michael Babcock]

I ran across this in a CICS security admin book (which should also apply 
to z/OS sysprogs):


Roles and separation of duties

    A key security principle is the separation of duties between 
different users so that no one person has sufficient access privilege to 
perpetrate damaging fraud. *This configuration is required by various 
audit regulations such as the United States Federal Law known as the 
Sarbanes-Oxley Act of 2002 
.*


    An example of this separation of duties, is that someone with the 
role of CICS System Programmer must not also have the role of RACF 
Security Administrator.



Does anyone know exactly which section of SOX it's referring to?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Question for the List regarding OSA cards

[Michael Babcock]

We’ve had a VIPA config so long I’m not sure we could remove it.We used
to have active/active but with the implementation of ACI it broke it.
They are looking at moving to something else so hopefully that occurs soon.


If z/OS Comm Server supported Link Aggregation it would be a moot point but
alas it does not.

Thanks for the response!

On Thu, Jun 29, 2023 at 9:17 AM Pommier, Rex 
wrote:

> Michael,
>
> Are you planning on eventually going to a full VIPA configuration as
> active/active?  If not, consider just removing the VIPA configuration,
> assign IP addresses to each card, start them both and point your client
> community to one of the cards.  That was the basic setup I had at a prior
> site - with the intention of setting up a full VIPA but never got around to
> it.  I had some FTPs specifically going thru the second card so I know they
> were both active.  Somebody kicked a cable and my primary OSA port went
> dark.  The second OSA did an ARP takeover without the users even knowing it
> had happened.  We happened to see the ARP takeover messages on the console
> is how we initially knew it had occurred.  Once the cable was
> repaired/reinstalled the primary card did an ARP takeover automatically so
> everything was back to original state.  I had to do nothing for the
> failover or failback.
>
> Needless to say I was pleasantly surprised.
>
> Rex
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Michael Babcock
> Sent: Thursday, June 29, 2023 8:37 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [EXTERNAL] Question for the List regarding OSA cards
>
> Hopefully there are some network gurus on IBM-MAIN.
>
> We have an LPAR that has two OSA Express6 cards (latest cards with a
> z15) defined.   Both interfaces are defined in the TCPIP Profile data
> set.  We also have a VIPA address defined.   The PRIMARYINTERFACE is set to
> the VIPA address.   The START for one of the cards is commented out. As
> such, the LPAR uses the card that was started at IPL time and the other one
> is inactive (CARD1 is active, CARD2 is inactive since there is no START for
> it).  All traffic goes through the single OSA at this point.   The IPCONFIG
> statement has NOMULTIPATH.
>
> We want to get to an ACTIVE/STANDBY configuration such that both cards are
> STARTED but all inbound and outbound traffic goes through CARD1 and
> CARD2 is doing nothing (so if CARD1 fails, CARD2 takes over).   We also
> use CISCO's ACI so we experience the "flapping" issue with both cards
> ACTIVE/ACTIVE and MULTIPATH active (hopefully ACI is going away soon).
>
> If we start the second card, we see traffic going through both cards
> (which causes ACI a little heartburn).
>
> How do we achieve our goal?  Keep in mind I'm not a network guy.
>
> Here's some of the config statements in the TCPIP profile if that helps.
>
> IPCONFIG
>  SEGMENTATIONOFFLOAD CHECKSUMOFFLOAD
>  QDIOACCELERATOR QDIOPRIORITY 1
>  PATHMTUDISCOVERY
>  IGNOREREDIRECT
>  NODATAGRAMFWD
> NOMULTIPATH
>  SOURCEVIPA
>  SYSPLEXROUTING
>  DYNAMICXCF ZZZ.ZZZ.ZZZ.ZZZ 255.255.255.0 1
>
> INTERFACE LINK0506
>DEFINE IPAQENET
>PORTNAME DEV0500
>INBPERF DYNAMIC WORKLOADQ
>IPADDR XX.XXX.XXX.XXX/24
>VLANID 108
>VMAC ROUTEALL
>MTU 1492
>SOURCEVIPAINT VIPAL06
>
> INTERFACE LINK0906
>DEFINE IPAQENET
>PORTNAME DEV0900
>INBPERF DYNAMIC WORKLOADQ
>IPADDR XX.XXX.XXX.YYY/24
>VLANID 108
>VMAC ROUTEALL
>MTU 1492
>SOURCEVIPAINT VIPAL06
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> The information contained in this message is confidential, protected from
> disclosure and may be legally privileged. If the reader of this message is
> not the intended recipient or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any disclosure, distribution, copying, or any action taken or action
> omitted in reliance on it, is strictly prohibited and may be unlawful. If
> you have received this communication in error, please notify us immediately
> by replying to this message and destroy the material in its entirety,
> whether in electronic or hard copy format. Thank you.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Question for the List regarding OSA cards

[Michael Babcock]

Hopefully there are some network gurus on IBM-MAIN.

We have an LPAR that has two OSA Express6 cards (latest cards with a 
z15) defined.   Both interfaces are defined in the TCPIP Profile data 
set.  We also have a VIPA address defined.   The PRIMARYINTERFACE is set 
to the VIPA address.   The START for one of the cards is commented out.  
As such, the LPAR uses the card that was started at IPL time and the 
other one is inactive (CARD1 is active, CARD2 is inactive since there is 
no START for it).  All traffic goes through the single OSA at this 
point.   The IPCONFIG statement has NOMULTIPATH.


We want to get to an ACTIVE/STANDBY configuration such that both cards 
are STARTED but all inbound and outbound traffic goes through CARD1 and 
CARD2 is doing nothing (so if CARD1 fails, CARD2 takes over).   We also 
use CISCO's ACI so we experience the "flapping" issue with both cards 
ACTIVE/ACTIVE and MULTIPATH active (hopefully ACI is going away soon).


If we start the second card, we see traffic going through both cards 
(which causes ACI a little heartburn).


How do we achieve our goal?  Keep in mind I'm not a network guy.

Here's some of the config statements in the TCPIP profile if that helps.

IPCONFIG
    SEGMENTATIONOFFLOAD CHECKSUMOFFLOAD
    QDIOACCELERATOR QDIOPRIORITY 1
    PATHMTUDISCOVERY
    IGNOREREDIRECT
    NODATAGRAMFWD
   NOMULTIPATH
    SOURCEVIPA
    SYSPLEXROUTING
    DYNAMICXCF ZZZ.ZZZ.ZZZ.ZZZ 255.255.255.0 1

INTERFACE LINK0506
  DEFINE IPAQENET
  PORTNAME DEV0500
  INBPERF DYNAMIC WORKLOADQ
  IPADDR XX.XXX.XXX.XXX/24
  VLANID 108
  VMAC ROUTEALL
  MTU 1492
  SOURCEVIPAINT VIPAL06

INTERFACE LINK0906
  DEFINE IPAQENET
  PORTNAME DEV0900
  INBPERF DYNAMIC WORKLOADQ
  IPADDR XX.XXX.XXX.YYY/24
  VLANID 108
  VMAC ROUTEALL
  MTU 1492
  SOURCEVIPAINT VIPAL06

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: The new requirement for Certificates to communicate with IBM -- A Journey

[Michael Babcock]

SMOE has a Debug parm too.

On Tue, Jun 20, 2023 at 11:22 AM Phil Smith III  wrote:

> Tom Longfellow wrote, in part:
>
> >GIM44336S ** AN UNUSUAL CONDITION OCCURRED. GIMJVREQ -
> java.net.SocketException: Write failed
>
>
>
> WRITE failed? That doesn't sound like a cert issue to me. Anyone know if
> gsktrace can be enabled for this? (Doubtful but it would sure help.)
>
>
>
> >As ugly as a Java stack trace is, I have not seen one.  Nor can I expect
> it to be helpful.  (has never been yet)
>
>
>
> They can be, honest!
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: GRS setup for MONOPLEX to SYSPLEX

[Michael Babcock]

That’s exactly what we do.   We share the SMS config though.

On Mon, Jun 19, 2023 at 11:04 AM Paul Gorlinsky 
wrote:

> I think I will do the same ... put in it the PLEX but run with a different
> master catalog, spool, etc.
>
> Thanks
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: GRS setup for MONOPLEX to SYSPLEX

[Michael Babcock]

Beware of PDSEs.  I’m not 100% sure but I think the sandbox needs to be in
the plex to share them.  Updating a PDSE outside of the plex can cause
corruption.

We have our sandbox in the plex just to avoid issues.

On Mon, Jun 19, 2023 at 9:25 AM Paul Gorlinsky  wrote:

> We have a sandbox system that references TSO user and ISV catalogs and
> datasets. The sandbox has a unique master catalog but shares virtually
> everything else.
>
> It does have access to the couple facility that the Sysplex is using ...
> But it is not a member of the Sysplex.
>
> Is it possible for a monoplex z/OS system to share DASD, user cats, etc.,
> with a SYSPLEX via GRS management and coupling facility?
>
> Thanks
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: The new requirement for Certificates to communicate with IBM -- A Journey

[Michael Babcock]

Here's the only cert I added for the RECEIVE ORDER process to continue 
working.  Be sure serial number matches yours.


Digital certificate information for CERTAUTH:

  Label: DigiCert Global G2 Root
  Start Date: 2013/08/01 07:00:00
  End Date:   2038/01/15 07:00:00
  Serial Number:
>033AF1E6A711A9A0BB2864B11D09FAE5<

  Issuer's Name:
   >CN=DigiCert Global Root G2.OU=www.digicert.com.O=DigiCert 
Inc.C=US<

  Subject's Name:
   >CN=DigiCert Global Root G2.OU=www.digicert.com.O=DigiCert 
Inc.C=US<



On 6/12/2023 12:09 AM, Tom Longfellow wrote:

Thanks Charles.

I have  come to the same conclusion that I am missing an "appropriate" 
certificate.

What I cannot find is the name or source of this unnamed thing.  And sometimes 
when I find appropriate certs I am presented with barriers to acquiring them.

I am not opposed to adding IT once I  am told what IT is.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RACF and Subject Alternate Name

[Michael Babcock]

Thanks all!   The gskkyman utility seems to do what I want.

On Fri, Jun 9, 2023 at 9:27 AM Matt Hogstrom  wrote:

> At Broadcom we’ve have customers that have experienced similar issues and
> we’ve suggested the same workaround that Charles describes with no issues.
> The CSR generation functionality is platform dependent (ie RACF’s
> restriction) but the process is the same for all certs regardless of where
> they are initiated.
>
> Matt Hogstrom
>
> “It may be cognitive, but, it ain’t intuitive."
> — Hogstrom
>
>
>
> > On Jun 8, 2023, at 11:29 AM, Charles Mills  wrote:
> >
> > Yes, you can generate a CSR, typically including multiple SANs, with
> OpenSSL (any platform), gskkyman, or even on a CA Web site (or in the case
> of an in-house CA, using their certificate management tools).
> >
> > Yes, you should be able to import that certificate when signed and its
> private key into RACF. Check out RACDCERT IMPORT.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

RACF and Subject Alternate Name

[Michael Babcock]

Our corporate certificate management folks are now mandating that all 
Subject Alternate Names be placed in the CSR.   That's a problem for 
RACF which cannot add more than one SAN (we are at z/OS 2.5). How do 
others generate the CSR?   If we generate a cert say in USS, using 
openssl or gskkyman, send that off to our local certificate folks, get 
back a certificate, then what?   I assume we will need to export that 
cert (along with it's private key) and import that cert into RACF.   The 
export/import process is what I'm unsure of.


I also use the z/OS Health Checker to see which RACF Certs are expiring 
in the next 60 days.  Will importing a certificate not created in RACF 
cause the cert to not show up in the HC?


And I simply don't see why RACF could not be made to generate more than 
one SAN.   Will that change with z/OS 3.1?


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Any one having issues accessing SERVICELINK

[Michael Babcock]

Nope, just tried.   Got an authorization error.

On Tue, Jun 6, 2023 at 9:07 AM Lopez, Sharon <
038467b8de97-dmarc-requ...@listserv.ua.edu> wrote:

> I'm reposting.  Can others check and see if you can get on to SERVICELINK?
>
> Thank you.
> Sharon Lopez
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Lopez, Sharon
> Sent: Monday, June 5, 2023 2:18 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Any one having issues accessing SERVICELINK
>
> Thank you.
>
>
>
> The information transmitted is intended solely for the individual or
> entity to which it is addressed and may contain confidential and/or
> privileged material. Any review, retransmission, dissemination or other use
> of or taking action in reliance upon this information by persons or
> entities other than the intended recipient is prohibited. If you have
> received this email in error please contact the sender and delete the
> material from any computer.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
>
> The information transmitted is intended solely for the individual or
> entity to which it is addressed and may contain confidential and/or
> privileged material. Any review, retransmission, dissemination or other use
> of or taking action in reliance upon this information by persons or
> entities other than the intended recipient is prohibited. If you have
> received this email in error please contact the sender and delete the
> material from any computer.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS Comm Server - LACP?

[Michael Babcock]

Unfortunately our network guys are not in a position to move to OSPF yet.

On Mon, Jun 5, 2023 at 9:07 AM Peter Vander Woude 
wrote:

> Mike,
>
> While z/OS doesn't support LACP, if your networking folks support OSPF
> areas, you can sort-of setup an environment where the OSPF is balancing the
> inbound traffic between the various OSA connections and your main IP
> address's are VIPA's.
>
> Long Long ago, when I was running ADSM on z/OS, I had to do that and it
> worked fairly well on the inbound balancing.  The outbound traffic was set
> to use perconnection (as was the OSPF area for inbound).  Yes it would have
> been simpler with LACP, as at the time, the networking group didn't use
> OSPF.
>
> Peter
>
> On Mon, 5 Jun 2023 05:06:01 -0500, Michael Babcock 
> wrote:
>
> >Thanks Timothy!  I suspected so, but wanted verification.   I don't know
> >why z/OS Comm Server can't support LACP but the OSA cards can (and
> >z/VM).  I'm not a networking guy though.
> >
> >On 6/4/2023 11:33 PM, Timothy Sipples wrote:
> >> Michael Babcock asked:
> >>> Does z/OS Communication Server support LACP?
> >> No, I don't think so.
> >>
> >> Anticipating the next question, you can often configure network
> switches to handle LACP on z/OS's behalf. This IBM technical article
> illustrates one such scenario:
> >>
> >>
> https://www.ibm.com/support/pages/increasing-available-network-bandwidth-leveraging-link-aggregation-and-multipath-routing
> >>
> >> This article specifically concerns the IBM Db2 Analytics Accelerator
> when it's running on a separate physical machine. However, the same basic
> approach should work for other applications.
> >>
> >> When z/OS runs as a z/VM guest it should benefit from z/VM's support
> for link aggregation, so that's another possible option.
> >>
> >> —
> >> Timothy Sipples
> >> Senior Architect
> >> Digital Assets, Industry Solutions, and Cybersecurity
> >> IBM zSystems/LinuxONE, Asia-Pacific
> >> sipp...@sg.ibm.com
> >>
> >>
> >> --
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> >--
> >For IBM-MAIN subscribe / signoff / archive access instructions,
> >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Best practice for /etc and /var when upgrading

[Michael Babcock]

Not the best practice.There are steps in the old ServerPac upgrade
process that basically says: copy ServerPac supplied etc, run diff against
the copy and your existing etc and copy your customized parms/settings to
the copy.   Mount the copy to use during the upgrade.   Or something like
that.

On Mon, Jun 5, 2023 at 1:01 PM Pew, Curtis G 
wrote:

> How do people handle /SYSTEM/etc and /SYSTEM/var when upgrading z/OS? In
> the past we’ve had these filesystems on an auxiliary volume, so that they
> remained the same during any upgrades unless we deliberately changed
> something. For our last upgrade (this past weekend) our management
> outsourced the upgrade to a 3rd party service provider, and the sysprog
> doing it configured completely new filesystems for these that were the
> generic IBM-provided versions, without any of our customizations. He claims
> this is a best practice. What say ye?
>
>
> --
> Curtis Pew
> ITS Campus Solutions
> curtis@austin.utexas.edu
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS Comm Server - LACP?

[Michael Babcock]

Thanks Timothy!  I suspected so, but wanted verification.   I don't know 
why z/OS Comm Server can't support LACP but the OSA cards can (and 
z/VM).  I'm not a networking guy though.


On 6/4/2023 11:33 PM, Timothy Sipples wrote:

Michael Babcock asked:

Does z/OS Communication Server support LACP?

No, I don't think so.

Anticipating the next question, you can often configure network switches to 
handle LACP on z/OS's behalf. This IBM technical article illustrates one such 
scenario:

https://www.ibm.com/support/pages/increasing-available-network-bandwidth-leveraging-link-aggregation-and-multipath-routing

This article specifically concerns the IBM Db2 Analytics Accelerator when it's 
running on a separate physical machine. However, the same basic approach should 
work for other applications.

When z/OS runs as a z/VM guest it should benefit from z/VM's support for link 
aggregation, so that's another possible option.

—
Timothy Sipples
Senior Architect
Digital Assets, Industry Solutions, and Cybersecurity
IBM zSystems/LinuxONE, Asia-Pacific
sipp...@sg.ibm.com


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

z/OS Comm Server - LACP?

[Michael Babcock]

Does z/OS Communication Server support LACP?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SSHD terminates immediately with permission(?) problem

[Michael Babcock]

I think ours is set for port 22 with SSHD* but I’d have to check to be
sure.

On Tue, May 30, 2023 at 5:55 PM Wendell Lovewell <
01e9c0ee0673-dmarc-requ...@listserv.ua.edu> wrote:

> A big "Thank you" to all of you listers who chimed in on my "EDC5111I
> Permission denied. (errno2=0x744C7246)." message.
>
> Almost everyone was on the right track.  Changing to port  showed that
> it was just port 22.  Commenting out the RESTRICTLOWPORTS and the PORT
> reservation for "22  SSHD" showed it was one of those.  Restoring
> RESTRICTLOWPORTS showed it was the port reservation for "22 SSHD" that was
> the problem.
>
> (The proc that's started is SSHD, but it always starts SSHDx--usually 3,
> sometimes 4.)
>
> I didn't expect the TCPPROF entries--neither of those I mentioned have
> changed for years.  My suspicion is that there was some service applied
> that perhaps actually started enforcing the port reservation to just
> "SSHD".
>
> Thanks again,
> Wendell
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SSHD terminates immediately with permission(?) problem

[Michael Babcock]

Check your TCPIP config member.   Something else is listening on port 22.
Perhaps another SSHD.   Issue the netstat command to see the offender.

On Fri, May 26, 2023 at 6:49 PM Wendell Lovewell <
01e9c0ee0673-dmarc-requ...@listserv.ua.edu> wrote:

> I've done something wrong that I can't identify, and now SSHD terminates
> immediately after starting.
>
> I'm not getting anything helpful on the console or in the joblog.  But I
> am getting these msgs in syslog:
>
> OMVSKERN SSHD3sshd[67174408]: error: FOTS1442 Bind to port 22 on ::
> failed: EDC5111I Permission denied. (errno2=0x744C7246).
> OMVSKERN SSHD3sshd[67174408]: error: FOTS1442 Bind to port 22 on
> 0.0.0.0 failed: EDC5111I Permission denied. (errno2=0x744C7246).
> OMVSKERN SSHD3sshd[67174408]: fatal: FOTS1464 Cannot bind any
> address.
>
> I've looked up the 7246 code:
> JRPORTACCESSAUTH EQU 29254* User does not have authority to
> access this port.
>
> OMVSKERN's is UID(0).  Has ALTER access to BPX.DAEMON.  Port 22 is not in
> use, per D TCPIP,,N,SOCKETS
>
> None of the files in /etc/ssh had changed for 4 years, so I don't think
> it's there.  (I did set LogLevel to DEBUG3, which didn't help any.)
>
> The only things I can think of that I might have messed up something with
> keys.  I did try some weeks ago to set up a certificate to bypass entering
> my password when using "ssh user@zos" and didn't get that to work.   And
> I did install a new CERTAUTH this week for the new IBM service requirement
> ("DigiCert Global Root G2"), 'tho I can't imagine that would matter.
>
> Any suggestions would really be appreciated...I'm not much good with
> entering USS commands via a 3270 screen.
>
> TIA,
> Wendell
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Red Alert Test Email

[Michael Babcock]

+1

On Wed, May 24, 2023 at 5:07 PM Mark Jacobs <
0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:

> Did anyone else get one today? There's nothing new on the actual red alert
> landing page.
>
> Mark Jacobs
>
> Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted
> email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Replacing SSH Keys - best practices?

[Michael Babcock]

royed, arrive late or incomplete, or may contain
> > viruses in transmission. The e mail and its contents (with or without
> > referred errors) shall therefore not attach any liability on the
> originator
> > or HCL or its affiliates. Views or opinions, if any, presented in this
> email
> > are solely those of the author and may not necessarily reflect the views
> or
> > opinions of HCL or its affiliates. Any form of reproduction,
> dissemination,
> > copying, disclosure, modification, distribution and / or publication of
> this
> > message without the prior written consent of authorized representative of
> > HCL is strictly prohibited. If you have received this email in error
> please
> > delete it and notify the sender immediately. Before opening any email
> and/or
> > attachments, please check them for viruses and other defects.
> > 
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> email
> > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Are you serious about wanting a better IBM doc RCF-type process?

[Michael Babcock]

+1

On Tue, May 23, 2023 at 9:19 AM Gord Tomlin 
wrote:

> +1
>
> --
>
> Regards, Gord Tomlin
> Action Software International
> (a division of Mazda Computer Corporation)
> Tel: (905) 470-7113, Fax: (905) 470-6507
> Support: https://actionsoftware.com/support/
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Listing empty HLQs - LISTCAT?

[Michael Babcock]

In batch you can do:

LISTCAT ENT(alias-name) ALIAS
IF LASTCC = 0 THEN
   LISTCAT LEVEL(alias-name)

which should be doable from CSI.

On Fri, May 12, 2023 at 10:39 AM Steve Smith  wrote:

> For some reason LISTCAT LEVEL does not return what matches the level
> exactly.  Use LISTCAT ENT for that.  So you'll need both to get what you
> want.
>
> sas
>
> On Fri, May 12, 2023 at 11:24 AM Bob Bridges 
> wrote:
>
> > I'm looking at a profile in Top Secret with a bunch of permissions to
> user
> > HLQs that I suspect are no longer around, some of them at least.  I plan
> to
> > write a REXX that'll identify the ones for which there are no datasets,
> or
> > only a TSO alias.
> >
> > I thought to use LISTCAT for that, but I'm running into a problem.  I
> don't
> > use LISTCAT all that often, but I thought this would work:
> >
> >   LISTCAT LEVEL(XXX)
> >
> > That nets me the same message whether or not an alias is present:
> >
> >   ENTRY XXX. NOT FOUND+
> >   ** XXX NOT LISTED
> >   LASTCC=4
> >   ** VSAM CATALOG RETURN CODE IS 8
> >
> > But I want to distinguish whether or not there's an alias.  Ok, so I
> should
> > add the ALIAS argument, right?
> >
> >   LISTCAT LEVEL(XXX) ALIAS
> >
> > But that gets me the exact same response, whether or not an alias is
> > present.  What am I missing, here?
> >
> > And when I test that command on my own ID - I have both a TSO alias and
> > some
> > datasets - the screen blinks and comes back without giving me any
> response
> > at all!  Most strange.  Am I broken?  Is LISTCAT broken?  Surely it's
> > something basic I've misunderstood about LISTCAT.
> >
> > ---
> > Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313
> >
> > /* I know everyone thinks Republicans aren't funny. But if you get a
> bunch
> > of us together, we can be a real riot.  -Nancy Mace at Washington Press
> > Club
> > */
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Listing empty HLQs - LISTCAT?

[Michael Babcock]

Use LISTCAT ENT(alias-name) ALIAS

On Fri, May 12, 2023 at 10:24 AM Bob Bridges  wrote:

> I'm looking at a profile in Top Secret with a bunch of permissions to user
> HLQs that I suspect are no longer around, some of them at least.  I plan to
> write a REXX that'll identify the ones for which there are no datasets, or
> only a TSO alias.
>
> I thought to use LISTCAT for that, but I'm running into a problem.  I don't
> use LISTCAT all that often, but I thought this would work:
>
>   LISTCAT LEVEL(XXX)
>
> That nets me the same message whether or not an alias is present:
>
>   ENTRY XXX. NOT FOUND+
>   ** XXX NOT LISTED
>   LASTCC=4
>   ** VSAM CATALOG RETURN CODE IS 8
>
> But I want to distinguish whether or not there's an alias.  Ok, so I should
> add the ALIAS argument, right?
>
>   LISTCAT LEVEL(XXX) ALIAS
>
> But that gets me the exact same response, whether or not an alias is
> present.  What am I missing, here?
>
> And when I test that command on my own ID - I have both a TSO alias and
> some
> datasets - the screen blinks and comes back without giving me any response
> at all!  Most strange.  Am I broken?  Is LISTCAT broken?  Surely it's
> something basic I've misunderstood about LISTCAT.
>
> ---
> Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313
>
> /* I know everyone thinks Republicans aren't funny. But if you get a bunch
> of us together, we can be a real riot.  -Nancy Mace at Washington Press
> Club
> */
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Importing x.509 Certs in to RACF

[Michael Babcock]

And how are you copying it from USS to an MVS dataset?

On Fri, May 5, 2023 at 4:34 AM Michael Babcock 
wrote:

> Before trying to add it to RACF use the RACDCERT CHECKCERT command.   Off
> the top of my head, I think it’s RACDCERT CHECKCERT(‘dataset-name’).   I
> always use that before adding a cert to RACF.And if there is a password
> on the cert add PASSWORD(‘password’) to the command.  Mind the quotes on
> both parms.
>
> On Thu, May 4, 2023 at 10:26 PM Matt Hogstrom  wrote:
>
>> I’m at 240 VB but I’ll try pulling it in …
>>
>> I was hoping to find a roadmap that would help out.   Seems like there
>> are a number of variables in terms of how certs are delivered, how they get
>> uploaded, what encodings are used, etc.  At the end of the day I’d like to
>> get this documented to save the next guy a pile of work.
>>
>>
>> Matt Hogstrom
>> > On May 4, 2023, at 10:52 PM, Peter Vels  wrote:
>> >
>> > It could be that your data set attributes aren't quite right. Try
>> something
>> > like LRECL=84, RECFM=VB.
>> >
>> > On Fri, 5 May 2023 at 11:49, Matt Hogstrom  wrote:
>> >
>> >> I’m attempting to import an x.509 cert for TLS.  The certificate is
>> valid
>> >> and originates on a distributed system.  I have the cert and the
>> private
>> >> key.  I’m trying to import the cert into RACF.  I’ve tried creating a
>> pfx
>> >> file (pkcs12) as well as importing the text based certs individually.
>> Each
>> >> time I try I end up with an error.  The below was my attempt to import
>> the
>> >> DigiCertCA against which my certificate was created.  I admit this is
>> not
>> >> my area of speciality so I suspect I’m doing something stupid.  Here
>> is the
>> >> ADD command.
>> >>
>> >> RACDCERT ADD(IBMUSER.CERT.DIGICERT)   CERTAUTHTRUST
>> >> WITHLABEL('DigiCertCA’)
>> >>
>> >> IRRD103I An error was encountered processing the specified input data
>> >> set.
>> >>
>> >> The certificate is in ISO8859-1 on my Mac and I transfer it to USS as
>> >> binary and tag is as ISO8859-1.
>> >>
>> >> Anyone have a workflow for adding a TLS cert ?   The IBM documentation
>> is
>> >> accurate I’m sure  but not helpful.
>> >>
>> >>
>> >> Matt Hogstrom
>> >>
>> >> “It may be cognitive, but, it ain’t intuitive."
>> >> — Hogstrom
>> >>
>> >>
>> >> --
>> >> For IBM-MAIN subscribe / signoff / archive access instructions,
>> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>> >>
>> >
>> > --
>> > For IBM-MAIN subscribe / signoff / archive access instructions,
>> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>>
>>
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>>
> --
> Michael Babcock
> OneMain Financial
> z/OS Systems Programmer, Lead
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Importing x.509 Certs in to RACF

[Michael Babcock]

Before trying to add it to RACF use the RACDCERT CHECKCERT command.   Off
the top of my head, I think it’s RACDCERT CHECKCERT(‘dataset-name’).   I
always use that before adding a cert to RACF.And if there is a password
on the cert add PASSWORD(‘password’) to the command.  Mind the quotes on
both parms.

On Thu, May 4, 2023 at 10:26 PM Matt Hogstrom  wrote:

> I’m at 240 VB but I’ll try pulling it in …
>
> I was hoping to find a roadmap that would help out.   Seems like there are
> a number of variables in terms of how certs are delivered, how they get
> uploaded, what encodings are used, etc.  At the end of the day I’d like to
> get this documented to save the next guy a pile of work.
>
>
> Matt Hogstrom
> > On May 4, 2023, at 10:52 PM, Peter Vels  wrote:
> >
> > It could be that your data set attributes aren't quite right. Try
> something
> > like LRECL=84, RECFM=VB.
> >
> > On Fri, 5 May 2023 at 11:49, Matt Hogstrom  wrote:
> >
> >> I’m attempting to import an x.509 cert for TLS.  The certificate is
> valid
> >> and originates on a distributed system.  I have the cert and the private
> >> key.  I’m trying to import the cert into RACF.  I’ve tried creating a
> pfx
> >> file (pkcs12) as well as importing the text based certs individually.
> Each
> >> time I try I end up with an error.  The below was my attempt to import
> the
> >> DigiCertCA against which my certificate was created.  I admit this is
> not
> >> my area of speciality so I suspect I’m doing something stupid.  Here is
> the
> >> ADD command.
> >>
> >> RACDCERT ADD(IBMUSER.CERT.DIGICERT)   CERTAUTHTRUST
> >> WITHLABEL('DigiCertCA’)
> >>
> >> IRRD103I An error was encountered processing the specified input data
> >> set.
> >>
> >> The certificate is in ISO8859-1 on my Mac and I transfer it to USS as
> >> binary and tag is as ISO8859-1.
> >>
> >> Anyone have a workflow for adding a TLS cert ?   The IBM documentation
> is
> >> accurate I’m sure  but not helpful.
> >>
> >>
> >> Matt Hogstrom
> >>
> >> “It may be cognitive, but, it ain’t intuitive."
> >> — Hogstrom
> >>
> >>
> >> --
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >>
> >
> > ----------
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: TLS - and HTTP download

[Michael Babcock]

Here's our simple DB2 Secure port definition in AT-TLS:

TTLSRule DBRTSecureServer    # Secure DBRT
{
  LocalPortRange   4450    # DBRT Secure Port
  Direction    Inbound     # Inbound Only
  Priority 1   # Lowest 
priority rule
  TTLSGroupActionRef   grp_Production  # Uncomment once 
debugging

  TTLSEnvironmentActionRef DBRT_SecureServer_Action    # DBRT Env Action
}

TTLSEnvironmentAction DBRT_SecureServer_Action
{
  HandshakeRole   Server
  TTLSKeyRingParmsRef DBRT_Keyring_Parms
  TTLSCipherParmsRef  DB2_CipherParms
  TTLSEnvironmentAdvancedParms
  {
    ClientAuthType    PassThru
    SSLv2 Off
    SSLv3 Off
    TLSv1 Off
    TLSv1.1   Off
    TLSv1.2   On
  }
}

TTLSKeyRingParms  DBRT_Keyring_Parms
{
 Keyring  DBRT/DBRT.KEYRING
}

On 5/1/2023 2:12 PM, Kurt J. Quackenbush wrote:

My understand is that ATTLS allows you to encrypt network traffic for 
clients/servers which do not implement TLS themselves.  It sounds like your Db2 
traffic was formerly not encrypted with TLS, but your ATTLS rule now encrypts 
that Db2 traffic without the client or server being any wiser.  Unfortunately 
that rule is also negatively affecting SMP/E and probably any other 
applications that use HTTPS.  SMP/E implements TLS itself, so it doesn't need 
ATTLS to do so on its behalf.

I am absolutely NOT an expert in defining ATTLS rules, but my guess is you need 
to define the rule more specifically to impact only the Db2 traffic and not all 
HTTPS traffic.  Hopefully some kind soul with may more experience in ATTLS can 
offer suggestions, sorry.

Kurt Quackenbush
IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com

Chuck Norris never uses CHECK when he applies PTFs.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: CyberSecurity Risk

[Michael Babcock]

We also use Citrix and ours has been disabled for quite some time now.

On Mon, Apr 17, 2023 at 5:54 AM Jack Zukt  wrote:

> Hi all,
>
> This is  way off topic, sorry, but I am curious, so please be patient
> In one of the clients for which I have to work the Auditors found out that
> the Copy/Paste between the client Citrix session and our PCs is a risk and
> the client disabled the function.
> Has anyone else ever has such an issue?
> Regards,
> Jack
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Check my math?

[Michael Babcock]

Same here.

On Thu, Mar 23, 2023 at 10:00 AM Seymour J Metz  wrote:

> I get 4.75136 trillion, just under rather than over.
>
>
> --
> Shmuel (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
>
> 
> From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf
> of John McKown [john.archie.mck...@gmail.com]
> Sent: Thursday, March 23, 2023 10:34 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Check my math?
>
> I got curious about how many possible different values could exist in a
> dataset "node". A node can be 1 to 8 characters long. The first character
> must be A-Z @#$ or 29 characters. Subsequent characters are those 29 plus
> digits 0-9 and a dash (the dash was a surprise to me). Unless I goofed up,
> that means that a single node can have a bit over 4.8 trillion unique
> values.
>
> Did I do something wrong? This seems way too large a number.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: axway for ftp

[Michael Babcock]

We have an Axway server as well.  It’s basically a FTP client/server if I
understand correctly.We don’t use it for FTPing to IBM though.   At one
time, there was a 4GB (could have been 2GB) limit on file sizes it could
transfer.   Not sure if that limitation still exists.

On Tue, Mar 14, 2023 at 5:09 AM Bill Giannelli 
wrote:

> We have axway, and have been told to use it for FTP.
> I am trying to send doc to IBM and just need to FTP (or ftps).
> What does axway do exactly?
> thanks
> Bill
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Automatic assignment of Unix Identities.

[Michael Babcock]

If you want to prevent certain users from being able to access z/OS UNIX
services, define an OMVS segment with no UID for those users. This prevents
their user IDs from being automatically assigned a UID. When they attempt
to use a z/OS UNIX service, the dub will fail, and a daemon will be unable
to switch to these user IDs.
*Example*:
ALTUSER TSOADM1 OMVS(NOUID)


On Sat, Mar 11, 2023 at 12:09 PM Colin Paice  wrote:

> I'm looking into pthread_security_np to change my userid to become another
> id.
>
> During my tests, I had a userid without an OMVS segment - and could get the
> right return code.
> If I then logon the userid, I get an OMVS segment allocated  because my
> system is set up for this.
>
> Is there any way of saying do *not *allocate an OMVS segment for these
> (a,b,c,d) userids, but do so for every other userid?
>
> For my testing I think I'll just have to have some userids I never logon
> to.
> I can always delete the OMVS segment (and access to OMVSAPPL in APPL class)
> so it is not a big issue.
>
> Colin
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: WLM Couple dataset?

[Michael Babcock]

We re-INIT the CFRM, XCF, and LOGR at DR.   The only one we reuse is WLM.

On Thu, Mar 9, 2023 at 8:41 PM Gabriel Tully  wrote:

> Bill,
>
> IBM doesn't recommend mirroring the couple data sets [1]. There may not be
> serious ramifications for the WLM CDS, but it could be on the same volume
> with a more critical Sysplex CDS or CFRM CDS. The last time I asked IBM
> about mirroring CDSes a severe tone was employed to strongly suggest
> thinking twice about what was at risk.
>
> [1]
> https://www.ibm.com/docs/en/zos/2.5.0?topic=recovery-planning-disaster-actions
>
> --
> Gabe Tully
>
>
> On Thu, 9 Mar 2023 16:20:05 -0600, Bill Giannelli 
> wrote:
>
> >not that makes sense to me...
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: WLM Couple dataset?

[Michael Babcock]

We use Global Mirror to keep our WLM dataset in sync to our DR system.

On Thu, Mar 9, 2023 at 2:49 PM Bill Giannelli 
wrote:

> yes I understand that. but we had policy definitions in PROD that were not
> copied over to DR.
> We thought the WLM Couple dataset could be mirrored in our DR.
> We are being told they have to be manually kept in synch now.
> thanks
> Bill
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for Beta Clients

[Michael Babcock]

We use Rocket’s Terminal Emulation product (formerly Bluezone).  It uses
FTP for transfers with TLS via AT-TLS.   We have IND$FILE disabled in the
product.

On Thu, Mar 9, 2023 at 6:46 AM Tony Tancredi 
wrote:

> Hi Binyamin,
> The terminal emulator users are our main target. The FastSSR client can
> easily be launched from a user-defined button within all major emulators.
> Thanks,
> Tony
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for Beta Clients

[Michael Babcock]

How does that affect the OSA-ICC 1000Base-T adapters configured as OSC
types?

On Wed, Mar 8, 2023 at 11:45 PM P H <
04843e86df79-dmarc-requ...@listserv.ua.edu> wrote:

> Re: CHPID type OSE:
>
>
>IBM z16 will be the last IBM Z server to support OSE
> networkingchannels. IBM Z support for the Systems Network Architecture
> (SNA) protocol being transported natively out of the server using
> OSA-Express 1000BASE-T adapters configured as channel type OSE will be
> eliminated after IBM z16. Client applications that rely on the SNA protocol
> and use OSE networking channels as the transport, as opposed to FICON CTC,
> must either migrate to TCP/IP, or the networking configuration of the
> operating system image must be updated to make use of some form of SNA over
> IP technology, where possible, such as z/OS Enterprise Extender.
>
>
> Regards
>
> Parwez Hamid​
> 
> From: IBM Mainframe Discussion List  on behalf
> of Tom Brennan 
> Sent: 08 March 2023 23:19
> To: IBM-MAIN@LISTSERV.UA.EDU 
> Subject: Re: Looking for Beta Clients
>
> To do LU6.2 outside the machine don't you need an OSA card setup as
> OSA-E for SNA?  Unless I read it wrong, IBM has a statement of direction
> that z16 will be the last to support OSA-E.
>
> For IND$FILE, check the terminal emulator and see if there's an option
> to increase the I/O block size used for that processing.  I've found
> increasing it can make a big difference.
>
> On 3/8/2023 2:48 PM, rpinion865 wrote:
> > I know of a client that does not have a TCP/IP stack, and won't consider
> one (OS/390 2.10, yeah you read that right), that needs something more
> reliable than IND$FILE.  We have a need to transfer large binary datasets,
> and IND$FILE is way too slow, and it often dies in the middle of a large
> transfer.
> >
> > I remember LU 6.2 transfer programs.  But, I couldn't find anything
> > still available.
> >
> > Sorry for tagging on to another thread.
> >
> >
> >
> >
> > Sent with Proton Mail secure email.
> >
> > --- Original Message ---
> > On Wednesday, March 8th, 2023 at 5:19 PM, Tom Brennan <
> t...@tombrennansoftware.com> wrote:
> >
> >
> >> Looks interesting!
> >>
> >> Since you didn't mention things like SFTP/FTP/TSO/CICS as requirements,
> >> and the doc mentioned port 443, can I assume the product requires a
> >> started task listening on the mainframe side? Just asking because
> >> that's probably the way I would do it in order to bypass all the hassles
> >> of those other services.
> >>
> >> On 3/8/2023 1:36 PM, Tony Tancredi wrote:
> >>
> >>> Hi Everyone,
> >>>
> >>> I apologize if this isn't within group protocol, but I need help.
> >>>
> >>> I have created a TLS enabled, TCP/IP file transfer program that
> performs transfers 156 times faster than IND$FILE. It supports files, PDS,
> VSAM, SYSOUT, can submit jobs, print to mainframe printers, and be
> automated. As a beta client, I'm offering 1 free year if you choose to keep
> it. All I ask for is some of your time and feedback. I will provide
> constant support during your effort.
> >>>
> >>> The requirements are:
> >>> - z/OS 2.3 and above
> >>> - TCP/IP enabled
> >>> - AT-TLS (instructions to setup are in our documentation)
> >>> - Windows 10 or above for the client
> >>>
> >>> Please visit https://entegriasystems.com and https://fastssr.net
> (click the Documentation link on the left side) to view details of FastSSR.
> >>>
> >>> I greatly appreciate your consideration.
> >>>
> >>> Thanks,
> >>> Tony Tancredi
> >>> 856-316-0017
> >>>
> >>> --
> >>> For IBM-MAIN subscribe / signoff / archive access instructions,
> >>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >>
> >>
> >> --
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> > ------
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Time of last Power On Reset

[Michael Babcock]

Oops, sorry that may not be it.  I assumed it meant the CEC but I think it
was just the HMC.

On Mon, Mar 6, 2023 at 11:22 AM Michael Babcock 
wrote:

> I believe it’s in HMC Management, audit and log management,   First select
> the TASKS PERFORMED LOG, then select the limit date and time, go back to
> the year you installed the CEC.   Make sure you select a date in the
> calendar pop up, then select ok.   Once you see the date selected, then hit
> okay.   I believe it shows up as POWER OFF OR RESTART.   You can use CRTL-F
> to find power.   The last one you find should be it.
>
> On Mon, Mar 6, 2023 at 9:36 AM Jim Elliott  wrote:
>
>> Is there a way to find on the HMC (or SE) the date and time of the last
>> Power-On Reset of a system?
>>
>> Jim Elliott
>> Senior IT Consultant - GlassHouse Systems Inc.
>>
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>>
> --
> Michael Babcock
> OneMain Financial
> z/OS Systems Programmer, Lead
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Shopz

[Michael Babcock]

Same here

On Mon, Mar 6, 2023 at 8:23 AM Pommier, Rex  wrote:

> Barbara,
>
> Can you actually log onto ShopZ?  I get the "welcome to ShopZ" and am able
> to log in, but once logged in is when I get the page not found error.
>
> Rex
>
> From: IBM Mainframe Discussion List  On Behalf
> Of Barbara Nitz
> Sent: יום ב 06 מרץ 2023 10:19
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Shopz
>
> >Has anyone been able to access shopz since yesterday?
> >Has the address changed?
> I can get to ShopZ at this address
> https://urldefense.com/v3/__https://www.ibm.com/software/shopzseries/ShopzSeries_public.wss__;!!JT0xjr86ZxPthq8!tkINETa0RUlIkxQoWf8y3zQt3HJhZV1YmtRA6d-FLfMylWRm_xRHFBKW2oIMq07JxYOIjIqDRI1qFiOC$
> .
>
> Regards, Barbara
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
>
> The information transmitted is intended solely for the individual or
> entity to which it is addressed and may contain confidential and/or
> privileged material. Any review, retransmission, dissemination or other use
> of or taking action in reliance upon this information by persons or
> entities other than the intended recipient is prohibited. If you have
> received this email in error please contact the sender and delete the
> material from any computer.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> The information contained in this message is confidential, protected from
> disclosure and may be legally privileged. If the reader of this message is
> not the intended recipient or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any disclosure, distribution, copying, or any action taken or action
> omitted in reliance on it, is strictly prohibited and may be unlawful. If
> you have received this communication in error, please notify us immediately
> by replying to this message and destroy the material in its entirety,
> whether in electronic or hard copy format. Thank you.
>
>
> ----------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Time of last Power On Reset

[Michael Babcock]

I believe it’s in HMC Management, audit and log management,   First select
the TASKS PERFORMED LOG, then select the limit date and time, go back to
the year you installed the CEC.   Make sure you select a date in the
calendar pop up, then select ok.   Once you see the date selected, then hit
okay.   I believe it shows up as POWER OFF OR RESTART.   You can use CRTL-F
to find power.   The last one you find should be it.

On Mon, Mar 6, 2023 at 9:36 AM Jim Elliott  wrote:

> Is there a way to find on the HMC (or SE) the date and time of the last
> Power-On Reset of a system?
>
> Jim Elliott
> Senior IT Consultant - GlassHouse Systems Inc.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zOSMF

[Michael Babcock]

ntain confidential,
> proprietary or non-public information. The information is intended solely
> for the designated recipient(s). If an addressing or transmission error has
> misdirected this email, please notify the sender immediately and destroy
> this email. Any review, dissemination, use or reliance upon this
> information by unintended recipients is prohibited. Any opinions expressed
> in this email are those of the author personally.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ZFS File System Recall, Hanging OMVS

[Michael Babcock]

We use CA-DISK and I believe ours is set to not migrate.

On Mon, Mar 6, 2023 at 10:28 AM Mark Jacobs <
0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:

> This past weekend we experienced a somewhat unusual problem, with
> unexpected side effects. Wondering if anyone else has seen this before. We
> have an open case with IBM support too.
>
> - OMVS attempted to recall a migrated user zFS file system on a system
> where we're not running DFSMSHSM.
> - We didn't realize this for quite a while, 20-30 minutes or so.
> - OMVS services on other systems in the sysplex became severally degraded
> until we answered the outstanding WTOR to cancel the recall.
> - Several VTAM address spaces in the sysplex lost their connection to the
> ISTGENERIC coupling facility structure.
> - We didn't observe anything else going on other than the disconnection to
> ISTGENERIC and OMVS degradation elsewhere in the sysplex.
>
> Mark Jacobs
>
> Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted
> email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zOS 3.1 - zosmf

[Michael Babcock]

Correct, No.

On Sat, Mar 4, 2023 at 10:08 AM Mark Jacobs <
0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:

> I'm 99.99+% sure the answer is no.
>
> Mark Jacobs
>
> Sent from ProtonMail, Swiss-based encrypted email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>
>
> --- Original Message ---
> On Saturday, March 4th, 2023 at 9:33 AM, Peter 
> wrote:
>
>
> > Hi
> >
> > I know it's early to ask but just trying my best or I have no missed .
> Any
> > idea if zOS 3.1 can be installed without using zosmf ? Just using the
> > previous serverpac method ?
> >
> > Regards
> > Peter
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Can you connect to the PTF download site with z/OS FTP?

[Michael Babcock]

We have been using plain old FTP to IBM (downloading enhanced hold data)
for quite a while now and in the last week or so, we had to convert to
using FTPS (TLS 1.2).   So to me, it appears IBM made a change and now
requires a secure connection.   Yes, I know we can use SMPE RECEIVE ORDER,
and we do but we had a STEP in one of our jobs that used the old way.

On Mon, Feb 27, 2023 at 6:24 PM Charles Mills  wrote:

> FWIW what you show is in conflict with what Paul Gorlinsky wrote: that IBM
> did not support FTPS.
>
> (I'm not trying to pick a fight. I have reasons for wanting to get FTPS to
> work.)
>
> I see that you are using AT-TLS and that is goodness of course but it
> should not make a huge difference bottom line. I wonder why mine is failing.
>
> At least I know the problem is not V2R5. That's a help.
>
> Charles
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Ed Jaffe
> Sent: Monday, February 27, 2023 10:38 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Can you connect to the PTF download site with z/OS FTP?
>
> On 2/27/2023 9:32 AM, Charles Mills wrote:
> >
> > Starting I think with V2R5 you need AT-TLS for the FTP server, and for
> TLS 1.3 (only) on the client.
>
> Don't know about TLS 1.3 (we don't use that yet), but it clearly still
> supports TLS 1.2. See below:
>
> EZA1450I IBM FTP CS V2R5
> EZA1466I FTP: using TCPIP
> EZA1456I Connect to ?
> EZA1736I public.dhe.ibm.com
> EZYFT18I Using catalog '/usr/lib/nls/msg/C/ftpdmsg.cat' for FTP messages.
> EZA1554I Connecting to: public.southdata.ibm.com 170.225.126.18 port: 21.
> 220-**
>   **
>   *  IBM's internal systems must only be used for conducting IBM's *
>   *  business or for purposes authorized by IBM management.*
>   **
>   *  Use is subject to audit at any time by IBM management.*
>   **
>   *  Important  Please read*
>   **
>   *  Machine Code updates provided through this site are available *
>   *  only for IBM machines that are under warranty or an IBM hardware  *
>   *  maintenance service agreement Code for operating systems or other *
>   *  software products is available only where entitled under the  *
>   *  applicable software warranty or IBM software maintenance  *
>   *  agreement. All code (including Machine Code updates, samples, *
>   *  fixes or other software downloads)provided through this site  *
>   *  is subject to the terms of the license agreements which   *
>   *  govern the use of the associated code. Some exceptions may*
>   *  apply.IBM reserves the right to change, modify or withdraw its*
>   *  offerings,policies and practices at any time. *
>   **
> 220 ProFTPD Server (proftpd) [170.225.126.18]
> FC0296 ftpAuth: security values: mech=TLS, tlsmech=ATTLS, tlsreuse=N,
> sFTP=A, sCC=C, sDC=P
> FC2975 ftpAuthAttls: AT-TLS policy set as application controlled.
> FU2420 TTLSRule: PSI_FTP-Client~1
> FU2426 TTLSGroupAction: gAct1
> FU2432 TTLSEnvironmentAction: eAct1~FTP_Clients
> FU2439 TTLSConnectionACtion: cAct1~FTP_Clients EZA1701I >>> AUTH TLS
> 234 AUTH TLS successful
> FC3144 authServerAttls: Start Handshake
> FC3175 authServerAttls: FIPS140 not enabled
> FC3212 authServerAttls: Using TLSv1.2 protocol
> FC3230 authServerAttls: SSL cipher: 002F
> FU2135 getCtrlConnCertAttls: Request certificate, size 1751
> FU2755 getSessionIdAttls: Issuing SIOCTTLSCTL to get decoded AT-TLS
> Session ID EZA2895I Authentication negotiation succeeded
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Missing Values For The 'SDSF DA' Panels - z/OS 2.5

[Michael Babcock]

Rob, we didn’t have DADFLT coded for our group in ISFPRMxx member.   It
still worked under 2.4 so that hole must have been closed with 2.5.

Oddly enough, our test LPAR for the SYSPROG group was the only group DADFLT
wasn’t coded on.   It was coded on all other groups and all other LPARs.

Thanks!

On Mon, Feb 6, 2023 at 12:50 PM Rob Scott  wrote:

> Please check the DADFLT() keyword on the SDSF GROUP statement. This
> dictates the default address space types returned when the user omits any
> parameters on the DA command.
>
> If the SDSF group omits the DADFLT keyword, it defaults to NONE. I believe
> there are historical reasons for this  behaviour.
>
> Rob Scott
> Rocket Software
> 
> From: IBM Mainframe Discussion List  on behalf
> of Michael Babcock 
> Sent: Monday, February 6, 2023 6:05:54 PM
> To: IBM-MAIN@LISTSERV.UA.EDU 
> Subject: Re: Missing Values For The 'SDSF DA' Panels - z/OS 2.5
>
> EXTERNAL EMAIL
>
>
>
>
> Rob. We applied all available SDSF maintenance to our 2.5 system.
> We’ve found that DA ALL works. Has something changed with respect to the
> DA command/panel not defaulting to ALL?
>
>
> On Fri, Feb 3, 2023 at 2:55 AM Rob Scott 
> wrote:
>
> > Ross,
> >
> > First of all, I am glad you have opened a support case for this, our
> > support team should be able to gather further diagnostic information to
> > resolve the problem.
> >
> > A bit of background information for the archives :
> >
> > (o) In z/OS 2.4+, the SDSF "DA" information is gathered centrally by a
> > subtask in the SDSFAUX address space.
> > (o) This subtask uses the RMF programming service ERBSMFI (GRBSMFI) to
> > collect this information and any ISV product that replaces RMF supplies
> an
> > alias for this module.
> > (o) The SDSFAUX address space dumps the first 256 bytes of the ERBSMFI
> > load module in the HSFTRACE DD that is allocated to the SDSF started task
> > (o) When the RMF address space is not active, ERBSMFI still returns the
> > data we require (SMF 79-1 records), however in our experience other ISV
> > products do not return data when their STC is inactive and instead pass
> > back a non-zero return code. As a customer for an ISV that replaces RMF,
> > you might want to consider raising an RFE with them to address this.
> > (o) When we get a non-zero return code from ERBSMFI for 79-1 data, we
> > fallback to our own internal data collector (HSFSMFI) that builds pseudo
> > 79-1 records that reflect the columns that SDSF used to display prior to
> > using ERBSMFI (many years ago). The SDSF client code will detect this
> > condition and the number of columns shown on the DA panel will be greatly
> > reduced from "full-RMF" function.
> > (o) Error conditions calling ERBSMFI are normally reflected either by
> > WTO-style messages and/or messages written to the HSFLOG DD that is
> > allocated to the SDSF started task.
> > (o) Other SDSF panels that depend on ERBSMFI include DEV and PAG, however
> > they do not have internal fallback capability.
> >
> > Rob Scott
> > Rocket Software
> >
> > -Original Message-
> > From: IBM Mainframe Discussion List  On Behalf
> > Of Ross Vaughn
> > Sent: 03 February 2023 04:07
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Missing Values For The 'SDSF DA' Panels - z/OS 2.5
> >
> > EXTERNAL EMAIL
> >
> >
> >
> >
> >
> > We are currently in the process of rolling out z/OS 2.5 and have hit an
> > issue on a test LPAR that is not displaying any information in the SDSF
> DA
> > panels.
> > There are no messages in the syslog out of the IPL that would lead us in
> a
> > certain direction. We think we may have an issue with CMF but can’t
> > confirm. We are occasionally seeing error messages out of SDSFAUX as
> well.
> >
> > It looks like beginning with z/OS 2.4 the ’SDSF DA’ information is
> > obtained by the SDSFAUX address space calling the BMC AMI Ops Monitor for
> > CMF. We have verified we have the CX10GVID module in our linklist library
> > that CMF uses to obtain the SDSF DA values.
> > We have a ticket open with support as well, but curious if anyone has
> seen
> > similar issues when rolling out z/OS 2.5? Same LPAR on z/OS 2.4 does not
> > have the same issue.
> >
> > Thanks,
> > Ross
> >
> >
> >
> >
> >
> >
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> email
&g

Re: Missing Values For The 'SDSF DA' Panels - z/OS 2.5

[Michael Babcock]

Rob.   We applied all available SDSF maintenance to our 2.5 system.
 We’ve found that DA ALL works.  Has something changed with respect to the
DA command/panel not defaulting to ALL?


On Fri, Feb 3, 2023 at 2:55 AM Rob Scott  wrote:

> Ross,
>
> First of all, I am glad you have opened a support case for this, our
> support team should be able to gather further diagnostic information to
> resolve the problem.
>
> A bit of background information for the archives :
>
> (o) In z/OS 2.4+, the SDSF "DA" information is gathered centrally by a
> subtask in the SDSFAUX address space.
> (o) This subtask uses the RMF programming service ERBSMFI (GRBSMFI) to
> collect this information and any ISV product that replaces RMF supplies an
> alias for this module.
> (o) The SDSFAUX address space dumps the first 256 bytes of the ERBSMFI
> load module in the HSFTRACE DD that is allocated to the SDSF started task
> (o) When the RMF address space is not active, ERBSMFI still returns the
> data we require (SMF 79-1 records), however in our experience other ISV
> products do not return data when their STC is inactive and instead pass
> back a non-zero return code. As a customer for an ISV that replaces RMF,
> you might want to consider raising an RFE with them to address this.
> (o) When we get a non-zero return code from ERBSMFI for 79-1 data, we
> fallback to our own internal data collector (HSFSMFI) that builds pseudo
> 79-1 records that reflect the columns that SDSF used to display prior to
> using ERBSMFI (many years ago). The SDSF client code will detect this
> condition and the number of columns shown on the DA panel will be greatly
> reduced from "full-RMF" function.
> (o) Error conditions calling ERBSMFI are normally reflected either by
> WTO-style messages and/or messages written to the HSFLOG DD that is
> allocated to the SDSF started task.
> (o) Other SDSF panels that depend on ERBSMFI include DEV and PAG, however
> they do not have internal fallback capability.
>
> Rob Scott
> Rocket Software
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Ross Vaughn
> Sent: 03 February 2023 04:07
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Missing Values For The 'SDSF DA' Panels - z/OS 2.5
>
> EXTERNAL EMAIL
>
>
>
>
>
> We are currently in the process of rolling out z/OS 2.5 and have hit an
> issue on a test LPAR that is not displaying any information in the SDSF DA
> panels.
> There are no messages in the syslog out of the IPL that would lead us in a
> certain direction.  We think we may have an issue with CMF but can’t
> confirm.  We are occasionally seeing error messages out of SDSFAUX as well.
>
> It looks like beginning with z/OS 2.4 the ’SDSF DA’ information is
> obtained by the SDSFAUX address space calling the BMC AMI Ops Monitor for
> CMF.  We have verified we have the CX10GVID module in our linklist library
> that CMF uses to obtain the SDSF DA values.
> We have a ticket open with support as well, but curious if anyone has seen
> similar issues when rolling out z/OS 2.5?   Same LPAR on z/OS 2.4 does not
> have the same issue.
>
> Thanks,
> Ross
>
>
>
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> 
> Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA
> 02451
> <https://www.google.com/maps/search/77+Fourth+Avenue,+Waltham+MA+02451?entry=gmail=g>
> ■ Main Office Toll Free Number: +1 855.577.4323
> Contact Customer Support:
> https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
> Unsubscribe from Marketing Messages/Manage Your Subscription Preferences -
> http://www.rocketsoftware.com/manage-your-email-preferences
> Privacy Policy -
> http://www.rocketsoftware.com/company/legal/privacy-policy
> 
>
> This communication and any attachments may contain confidential
> information of Rocket Software, Inc. All unauthorized use, disclosure or
> distribution is prohibited. If you are not the intended recipient, please
> notify Rocket Software immediately and destroy all copies of this
> communication. Thank you.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF puzzle

[Michael Babcock]

Exit IEFU86 is called first.  Do you have a U86 exit doing something first?

On Tue, Jan 31, 2023 at 12:30 PM Ituriel do Neto <
03427ec2837d-dmarc-requ...@listserv.ua.edu> wrote:

> I have done a small change, like below:
>
> USING SMFRCD0,R9
> DXSOTHR   CLI   SMF0RTY,128
>  BLDXSTYSU
>  WTO   'IEFU83 EXIT INVOKED'
> **  BAS   R8,DXMSG <=== TEMP
> DXSTYSUDS0H  *
>
> And when SMF 205 is generated, the WTO is issued, while when it is time
> for 206, nothing is WTOed, but the SMF is generated.
>
> Really, really strange.
>
> Best Regards
>
> Ituriel do Nascimento Neto
> z/OS System Programmer
>
>
>
>
>
>
> Em terça-feira, 31 de janeiro de 2023 13:03:09 BRT, Binyamin Dissen <
> bdis...@dissensoftware.com> escreveu:
>
>
>
>
>
> Are you checking the return code from WTO?
>
> Does the message show data from the SMF record or a boilerplate?
>
> The snippet looks fine.
>
> Show the code.
>
> On Tue, 31 Jan 2023 13:29:16 + Ituriel do Neto
> <03427ec2837d-dmarc-requ...@listserv.ua.edu> wrote:
>
> :>I'm facing a problem with SMF that is completely unusual, and maybe you
> can enlight me.
>
> :>I do have a program that generates SMF records and it is possible to
> specify the SMF number
> :>of any choice (bigger than 127). The SMF record is issued using SMFWTM
> macro.
>
> :>I also have an IEFU83 and IEFU84 SMF exits and since SMFWTM is being
> used, IEFU83 will
> :>be lunched to intercept the previously generated SMF record.
> :>Since it is in test, the first thing IEFU83 does is to WTO the SMF type
> and subtype it is processing,
> :>for debugging purposes.
>
> :>Now comes the strange part. if the SMF number is between 128 and 205
> (inclusive), the WTO is
> :>issued normaly, but if the SMF number is bigger than 205 it seems the
> exit is not invoked because
> :>no WTO is issued at all.
> :>The SMF is generated correctly because I can extract it from SYS1.MANx
> datasets.
>
> :>Here goes a piece of code of IEF83/4 to ilustrate.
>
> :>USING SMFRCD0,R9  * MAPS SMF RECORD
> HEADER
> :>DXSOTHR  CLI   SMF0RTY,128 * SMF SYSTEM RECORD (<128)?
> :>BLDXSTYSU * YES, CHECK
> TYPE/SUBTYPE/PROD
> :>BAS   R8,DXMSG <=== TEMP  * DISPLAY AND RETURN
>
> :>DXSTYSU   DS0H
>
> :>Are there any kind of restriction because it is completely crazy.
>
> --
> Binyamin Dissen 
> http://www.dissensoftware.com
>
> Director, Dissen Software, Bar & Grill - Israel
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMPE recreate a target library... Possible?

[Michael Babcock]

And start making backups!   I always make backups of target and dlibs, SMPE
libs, ZFSs, SYSRES, and DLIB volumes too.   All right before applying
maintenance.

On Wed, Jan 4, 2023 at 4:00 AM Lizette Koehler 
wrote:

> You might want to open a case with IBM SMP/e on this issue
>
> Not knowing the product or how it is packed, you might see if they can
> help.
>
> Some of the ZONE* commands may work.  But I am not sure.
>
>
> Lizette
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Rob Schramm
> Sent: Tuesday, January 3, 2023 2:07 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: SMPE recreate a target library... Possible?
>
> So I know all the information is in SMPE. I'm looking for if there's an
> easy way to do this..  The target library got smashed actually It's a ZFS
> file and none of the backups are available, but the distribution libraries
> are all intact..  I'm looking for an easy way to repopulate from the
> distribution libraries.  And then I suppose I would have to apply redo any
> PTFs that were not accepted.
>
> Any thoughts and comments would be welcome.
>
> Rob
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ZFS Address Space, shared ENQ but filesystem isn't mounted

[Michael Babcock]

Is this filesystem a shared filesystem?   Perhaps it’s mounted on another
LPAR in the plex.   Apologies if this has been asked before.  You could
always do RO *ALL,D OMVS,F,N=name to verify.

On Thu, Dec 29, 2022 at 6:04 AM Mark Jacobs <
0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:

> It came back with a file system not found message.
>
> Mark Jacobs
>
> Sent from ProtonMail, Swiss-based encrypted email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>
>
> --- Original Message ---
> On Wednesday, December 28th, 2022 at 11:46 PM, Lizette Koehler <
> stars...@mindspring.com> wrote:
>
>
> > I apologize if this has been asked and answered;
> >
> > what does a D OMVS,F,N= xN is the name of the MVS filesystem
> >
> > Sometimes it is not freed with a UNMOUNT FILESYS= because other mounts
> are still active
> >
> >
> >
> >
> > -Original Message-
> > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On Behalf
> Of Mark Jacobs
> >
> > Sent: Wednesday, December 28, 2022 2:43 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Re: ZFS Address Space, shared ENQ but filesystem isn't mounted
> >
> > I issued a D GRS,RES=(*,name.of.file.system) command and it showed me
> that ZFS had it allocated as shared on one system in the sysplex. No other
> address space had the enqueue.
> >
> > Mark Jacobs
> >
> >
> > Sent from ProtonMail, Swiss-based encrypted email.
> >
> > GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
> >
> >
> >
> >
> > --- Original Message ---
> > On Wednesday, December 28th, 2022 at 4:19 PM, Shelia Chalk
> 03d9384cc8f1-dmarc-requ...@listserv.ua.edu wrote:
> >
> >
> >
> > > Mark,
> > >
> > > Have you tried going to 3.4 put in the zfs address space dataset and
> > > in the command field type in whohas This will tell who has the dataset.
> > >
> > > Thanks
> > > Shelia C
> > >
> > > -Original Message-
> > > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On Behalf
> > > Of Mark Jacobs
> > >
> > > Sent: Wednesday, December 28, 2022 11:53 AM
> > > To: IBM-MAIN@LISTSERV.UA.EDU
> > > Subject: ZFS Address Space, shared ENQ but filesystem isn't mounted
> > >
> > > The ZFS address space has a shared enqueue on one of our ZFS file
> systems, but when I attempt to unmount it ZFS says it's not mounted. I
> attempted to manually mount it, failed with a filesystem is busy error. Any
> ideas on how to release the enqueue so I can delete the file system?
> > >
> > > Mark Jacobs
> > >
> > > Sent from ProtonMail, Swiss-based encrypted email.
> > >
> > > GPG Public Key -
> > > https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapi.
> > > protonmail.ch%2Fpks%2Flookup%3Fop%3Dget%26search%3Dmarkjacobs%40proton
> > > mail.com=05|01|SChalk%40TRUSTMARK.COM|080ecfd7b14e4ce75a5d08dae8f
> > > c6bc8|518d66eacb8948c8a7b903cba11cde91|1|0|638078468085536783|Unknown|
> > > TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVC
> > > I6Mn0%3D|3000|||=7Rmjq4ii%2BUkFkQ5IueOwDCLXif%2BJrA%2FnLWhKy5x%2
> > > F2zA%3D=0
> > >
> > > --
> > > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> > >
> > > --
> > > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> >
> > ----------
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RLSE - A question about releasing unused tracks in a DASD dataset

[Michael Babcock]

Not everyone licensed for DFSMSdss.

On Fri, Dec 23, 2022 at 10:55 AM David Cole  wrote:

> Hi Ituriel,
>
> That's exactly what I was looking for!
>
> Thank you,
> Dave Cole
>
>
>
>
> At 12/21/2022 07:43 AM, Ituriel do Neto wrote:
> >Hi,
> >ADRDSSU has a RELEASE primary command that can do it.
> >
> >>//S1   EXEC   PGM=ADRDSSU
> >>//*  PARM='TYPRUN=NORUN'
> >>//SYSPRINT DD SYSOUT=*
> >>//SYSIN  DD *
> >>RELEASE INCLUDE(HLQ.**)   -
> >>   STORGRP(SGSMALL) ADMIN  -
> >>   SELECTMULTI(ALL)  /* EVEN IF MULTIVOL*/
> >
> >
> >Best Regards
> >Ituriel do Nascimento Neto
> >z/OS System Programmer
> >Em quarta-feira, 21 de dezembro de 2022 07:59:39
> >BRT, David Cole  escreveu:
> >>Hi Seymour,
> >>WRT "OPEN/CLOSE", yeah. I don't either.
> >>WRT "I know of no reason", It's been a long time since I wrote a
> >>program to read a directory, but if I did that, then the reason would
> >>be "to release space", of course.
> >>In any case, writing a new program is not an option here. Also using
> >>any 3rd party tool is not an option either.
> >>H. I wonder if IEBGENER can be tricked into reading a directory...
> >>Dave Cole
> >>
> >>At 12/21/2022 04:55 AM, Seymour J Metz wrote:
> >>> >Every release tool that I am aware of does an OPEN/CLOSE. I know of
> >>> >no reason why a program would need to read the directory in order to
> >>> >release space.
> >>> >Does ISPF create and delete a dummy member? If so, why is that
> required?
> >>> >--
> >>> >Shmuel (Seymour J.) Metz
> >>> >http://mason.gmu.edu/~smetz3
> >>> >
> >>> >>From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on
> >>> >>behalf of David Cole [dbc...@colesoft.com]
> >>> >>Sent: Wednesday, December 21, 2022 4:20 AM
> >>> >>To: IBM-MAIN@LISTSERV.UA.EDU
> >>> >>Subject: RLSE - A question about releasing
> >>> unused tracks in a DASDÂ  dataset
> >>> >>Is there a way to release unused tracks in a classic z/OS PDS but
> >>> >>without having to open and close it?
> >>> >>Or if opening/closing is required, is there a way to do that for a
> >>> >>PDS without knowing (or discovering) what members are in it, and
> >>> >>without creating a new member?
> >>> >>Obviously, I could write something, but I don't want to.
> >>> >>And I cannot rely on the presence of any program or TSO command that
> >>> >>does not come standard on a z/OS system?
> >>> >>I don't think there is a way to do this, but I'd love for someone to
> >>> >>prove me wrong.
> >>> >>David Cole
> >>> >>dbc...@gmail.com (personal)
> >>> >>dbc...@colesoft.com (business)
> >>> >>540-456-6518 (cell)
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: XCF Policies, Best Practices

[Michael Babcock]

Right, definitely bad practice.  How do they fall back?   New name is 
the only way to go.


On 12/9/2022 9:16 AM, Mark Jacobs wrote:

At $currentjob whenever an XCF policy is changed and stored in the couple 
dataset their standard practice is to replace the current active policy using 
the same name, CFRMPOL as an example, then activate it. IMHO, this is a bad 
practice. I always wrote the updated policy with a new name, then activated 
that. What are y'all doing in this arena?

Mark Jacobs

Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted email.

GPG Public Key - 
https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Split JES2 MAS

[Michael Babcock]

On 12/8/2022 5:48 PM, Mark Jacobs wrote:

Looks like the answer is no to your question.
-
Although, FENCE=(ACTIVE=YES,VOLUMES=nnn) indicates that JES2 will fence to nnn volumes in 
most cases more than one nnn volume can be used in certain situations such as when spool 
volumes fill or if the job obtains spool space on different systems as it goes through 
different phases. JES2 will allocate space from a subsequent volume(s) when, and if, the 
"nnn" volumes become full. At that time, JES2 will allocate track groups from 
the next available volume based on any other criteria that you have defined.
-

Mark Jacobs

Sent from ProtonMail, Swiss-based encrypted email.

GPG Public Key - 
https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com


Yeah, that's for fencing which is why I think the SYSAFF *may* do the 
same sort of thing.




--- Original Message ---
On Thursday, December 8th, 2022 at 5:18 PM, Michael Babcock 
 wrote:



Has anyone used the SPOOL statement in JES2PARM to set affinity to a
particular LPAR for spool? Apparently, you set spool volumes A, B, C, D
to have affinity with PROD and set E, F, G, H to have affinity with
DEV. This seems to have the effect of "fencing" DEV to certain spool
volumes. I can issue $TSPOOL(A,B,C,D),SYSAFF=-DEV to remove DEV from
those 4 spool volumes and $TSPOOL(E,F,G,H),SYSAFF=-PROD. I can then add
the SPOOL statement to the JES2 INIT deck.

This would seem to have the effect of separating DEV's spool from PROD's
spool. I suspect though, that if DEV's spool volumes become full, JES2
will use space from PROD's volumes (I have no basis to back that up, but
it feels right to me, given how fencing works).

On 12/8/2022 1:53 PM, Carmen Vitullo wrote:


I've been there before with management on issues similar, but like any
child - they'll quickly move on, oh look a squirrel' and this will
give you time to get automation setup correctly and you can test with
a lower threshold and provide the results to them if they ask, IF THEY
ASK :)

JMHO

Carmen

On 12/8/2022 1:45 PM, Michael Babcock wrote:


We have CA-OPS and have put things in place but management isn’t
mainframe
literate and may be adamant about splitting. Up to me, I would
move on
to something more pressing.

Thanks for the responses.

On Thu, Dec 8, 2022 at 1:24 PM Allan Staller <
0387911dea17-dmarc-requ...@listserv.ua.edu> wrote:


Classification: Confidential

Rather than split the spool, (no cold start required IIRC, it might be
more prudent to limit the amount of output a job can create.

Look up $ESTLNCT(?) in the JES2 manual; Set an appropriate Count and
specify option 2.

When the job exceeds the defined limit (more or less), the job will
abend
w/S722.

HTH,

-Original Message-
From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On
Behalf
Of Michael Babcock
Sent: Thursday, December 8, 2022 1:16 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Split JES2 MAS

[CAUTION: This Email is from outside the Organization. Unless you trust
the sender, Don’t click links or open attachments as it may be a
Phishing
email, which can steal your Information and compromise your Computer.]

We have a 3 system plex, with two of those systems, DEV and PROD, in a
JES2 MAS. We had an incident recently where a development job got
into
a loop and used up all spool. This in turn, caused our PROD system to
come to, basically, a screeching halt.

Management wants to investigate removing PROD from the MAS.

Beyond the obvious cons below, what else am I missing? Will a cold
start
be required?

CONS:
1. No longer monitor production jobs from DEV 2. User's will need to
logon to production to check on production jobs 3. Significant
changes to
desk procedures 4. May require changes to production jobs and/or CA7
(convert from SYSAFF to ROUTE XEQ)

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email
to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
::DISCLAIMER::

The contents of this e-mail and any attachment(s) are confidential and
intended for the named recipient(s) only. E-mail transmission is not
guaranteed to be secure or error-free as information could be
intercepted,
corrupted, lost, destroyed, arrive late or incomplete, or may contain
viruses in transmission. The e mail and its contents (with or without
referred errors) shall therefore not attach any liability on the
originator
or HCL or its affiliates. Views or opinions, if any, presented in this
email are solely those of the author and may not necessarily reflect
the
views or opinions of HCL or its affiliates. Any form of reproduction,
dissemination, copying, disclosure, modification, distribution and / or
publication of this message without the prior written consent of
authorized
representative of HCL is strictly prohibited. If you have received this
email in error please delet

Re: Split JES2 MAS

[Michael Babcock]

Has anyone used the SPOOL statement in JES2PARM to set affinity to a 
particular LPAR for spool?  Apparently, you set spool volumes A, B, C, D 
to have affinity with PROD and set E, F, G, H to have affinity with 
DEV.  This seems to have the effect of "fencing" DEV to certain spool 
volumes.    I can issue $TSPOOL(A,B,C,D),SYSAFF=-DEV to remove DEV from 
those 4 spool volumes and $TSPOOL(E,F,G,H),SYSAFF=-PROD.  I can then add 
the SPOOL statement to the JES2 INIT deck.


This would seem to have the effect of separating DEV's spool from PROD's 
spool.   I suspect though, that if DEV's spool volumes become full, JES2 
will use space from PROD's volumes (I have no basis to back that up, but 
it feels right to me, given how fencing works).


On 12/8/2022 1:53 PM, Carmen Vitullo wrote:
I've been there before with management on issues similar, but like any 
child - they'll quickly move on, oh look a squirrel' and this will 
give you time to get automation setup correctly and you can test with 
a lower threshold and provide the results to them if they ask, IF THEY 
ASK :)


JMHO

Carmen

On 12/8/2022 1:45 PM, Michael Babcock wrote:
We have CA-OPS and have put things in place but management isn’t 
mainframe
literate and may be adamant about splitting.    Up to me, I would 
move on

to something more pressing.

Thanks for the responses.

On Thu, Dec 8, 2022 at 1:24 PM Allan Staller <
0387911dea17-dmarc-requ...@listserv.ua.edu> wrote:


Classification: Confidential

Rather than split the spool, (no cold start required IIRC, it might  be
more prudent to limit the amount of output a job can create.

Look up $ESTLNCT(?) in the JES2 manual; Set an appropriate Count and
specify option 2.

When the job exceeds the defined limit (more or less), the job will 
abend

w/S722.

HTH,

-Original Message-
From: IBM Mainframe Discussion List  On 
Behalf

Of Michael Babcock
Sent: Thursday, December 8, 2022 1:16 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Split JES2 MAS

[CAUTION: This Email is from outside the Organization. Unless you trust
the sender, Don’t click links or open attachments as it may be a 
Phishing

email, which can steal your Information and compromise your Computer.]

We have a 3 system plex, with two of those systems, DEV and PROD, in a
JES2 MAS.   We had an incident recently where a development job got 
into

a loop and used up all spool.  This in turn, caused our PROD system to
come to, basically, a screeching halt.

Management wants to investigate removing PROD from the MAS.

Beyond the obvious cons below, what else am I missing?  Will a cold 
start

be required?

CONS:
1.  No longer monitor production jobs from DEV 2.  User's will need to
logon to production to check on production jobs 3. Significant 
changes to

desk procedures 4.  May require changes to production jobs and/or CA7
(convert from SYSAFF to ROUTE XEQ)

--
For IBM-MAIN subscribe / signoff / archive access instructions, send 
email

to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
::DISCLAIMER::

The contents of this e-mail and any attachment(s) are confidential and
intended for the named recipient(s) only. E-mail transmission is not
guaranteed to be secure or error-free as information could be 
intercepted,

corrupted, lost, destroyed, arrive late or incomplete, or may contain
viruses in transmission. The e mail and its contents (with or without
referred errors) shall therefore not attach any liability on the 
originator

or HCL or its affiliates. Views or opinions, if any, presented in this
email are solely those of the author and may not necessarily reflect 
the

views or opinions of HCL or its affiliates. Any form of reproduction,
dissemination, copying, disclosure, modification, distribution and / or
publication of this message without the prior written consent of 
authorized

representative of HCL is strictly prohibited. If you have received this
email in error please delete it and notify the sender immediately. 
Before

opening any email and/or attachments, please check them for viruses and
other defects.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Split JES2 MAS

[Michael Babcock]

We have CA-OPS and have put things in place but management isn’t mainframe
literate and may be adamant about splitting.Up to me, I would move on
to something more pressing.

Thanks for the responses.

On Thu, Dec 8, 2022 at 1:24 PM Allan Staller <
0387911dea17-dmarc-requ...@listserv.ua.edu> wrote:

> Classification: Confidential
>
> Rather than split the spool, (no cold start required IIRC, it might  be
> more prudent to limit the amount of output a job can create.
>
> Look up $ESTLNCT(?) in the JES2 manual; Set an appropriate Count and
> specify option 2.
>
> When the job exceeds the defined limit (more or less), the job will abend
> w/S722.
>
> HTH,
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Michael Babcock
> Sent: Thursday, December 8, 2022 1:16 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Split JES2 MAS
>
> [CAUTION: This Email is from outside the Organization. Unless you trust
> the sender, Don’t click links or open attachments as it may be a Phishing
> email, which can steal your Information and compromise your Computer.]
>
> We have a 3 system plex, with two of those systems, DEV and PROD, in a
> JES2 MAS.   We had an incident recently where a development job got into
> a loop and used up all spool.  This in turn, caused our PROD system to
> come to, basically, a screeching halt.
>
> Management wants to investigate removing PROD from the MAS.
>
> Beyond the obvious cons below, what else am I missing?  Will a cold start
> be required?
>
> CONS:
> 1.  No longer monitor production jobs from DEV 2.  User's will need to
> logon to production to check on production jobs 3.  Significant changes to
> desk procedures 4.  May require changes to production jobs and/or CA7
> (convert from SYSAFF to ROUTE XEQ)
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> ::DISCLAIMER::
> 
> The contents of this e-mail and any attachment(s) are confidential and
> intended for the named recipient(s) only. E-mail transmission is not
> guaranteed to be secure or error-free as information could be intercepted,
> corrupted, lost, destroyed, arrive late or incomplete, or may contain
> viruses in transmission. The e mail and its contents (with or without
> referred errors) shall therefore not attach any liability on the originator
> or HCL or its affiliates. Views or opinions, if any, presented in this
> email are solely those of the author and may not necessarily reflect the
> views or opinions of HCL or its affiliates. Any form of reproduction,
> dissemination, copying, disclosure, modification, distribution and / or
> publication of this message without the prior written consent of authorized
> representative of HCL is strictly prohibited. If you have received this
> email in error please delete it and notify the sender immediately. Before
> opening any email and/or attachments, please check them for viruses and
> other defects.
> 
>
> ----------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Split JES2 MAS

[Michael Babcock]

We have a 3 system plex, with two of those systems, DEV and PROD, in a 
JES2 MAS.   We had an incident recently where a development job got into 
a loop and used up all spool.  This in turn, caused our PROD system to 
come to, basically, a screeching halt.


Management wants to investigate removing PROD from the MAS.

Beyond the obvious cons below, what else am I missing?  Will a cold 
start be required?


CONS:
1.  No longer monitor production jobs from DEV
2.  User's will need to logon to production to check on production jobs
3.  Significant changes to desk procedures
4.  May require changes to production jobs and/or CA7 (convert from 
SYSAFF to ROUTE XEQ)


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF

[Michael Babcock]

I could never get a single instance with multiple LPARs connecting to the
same server because we do not share our ZFS datasets, specifically, the one
mounted at /global.

Hopefully I was just doing something incorrectly.  I use 1 server per LPAR
and each has its own autostart group.

On Fri, Dec 2, 2022 at 7:46 AM Carmen Vitullo  wrote:

> I've only tried this once on my test LPAR when I'm installing a new OS
> release or maint, not much success, I've followed the guide but I must
> be missing something.
>
> in the started task there's 2 start up options
>
> SERVER=STANDALONE <- I use to test
>
> and
>
> SERVER=AUTOSTART <- i use from prod
>
> there's some IZUPRMxx changes, I can provide some examples of what I've
> used for my second LPAR
>
> Carmen
>
> On 12/1/2022 5:49 PM, Steely.Mark wrote:
> > We have z/OSMF active on one of ours LPAR's. Now we would like to add
> another LPAR.
> >
> > I know their were instructions on how to perform this - I am unable to
> find the instructions.
> >
> > If you have done this and would provide the documentation it would be
> appreciated.
> >
> > We are z/OS v2.4
> >
> > Thank You
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> --
> Carmen
>
> ------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Subdirectory and associated file(s) to actual ZFS File system inquiry

[Michael Babcock]

In ISPF 3.17 or 3.4, next to the file or directory put an FS.   It will
list the filesystem.

On Sun, Nov 13, 2022 at 2:38 AM Kenneth J. Kripke <
046fa3a8ef80-dmarc-requ...@listserv.ua.edu> wrote:

> Is there a way to list the associated File System that houses the directory
> and an associated file(s)?
>
> I can get the best guess by doing a D OMVS,F which will display the mount
> points for each file system, but,
>
> Wondered if there might be something available that given a specific file
> of
> interest, it would be able to display
>
> The actual File System?
>
>
>
> Kenneth J. Kripke
>
>
>
> :
>
> k.kri...@comcast.net <mailto:k.kri...@comcast.net>
>
>
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF PSWI

[Michael Babcock]

There is a PTF for that.  I can’t remember off the top of my head what it
is though.   I had opened a problem on that very thing and IBM did create
the fix for it.

On Fri, Oct 21, 2022 at 8:18 AM Carmen Vitullo  wrote:

> Friday rant
>
> I've been having problems with JES2EDS on 2 other systems in my PLEX,
> once I install maint, or IPL JES2EDS gets the 'JES2EDS cannot locate the
> zosmf server, what ? it was working fine before, so why can't I IPL a
> system and JES2EDS locate the server again?
>
>   I'm so tired of opening up cases, and researching something for days,
> sometimes weeks, I usually just let it fail or ignore these messages any
> more, yesterday, I re cycled zosmf on my production LPAR, once back up,
> JES2EDS connected, well not by itself, but I had to cancel JES2EDS on
> that system, a $SEDS did nothing. who builds stuff like this ?
>
> Rant off
>
> Carmen
>
> On 10/19/2022 7:27 AM, Michael Babcock wrote:
>
> > Another issue.  PSWI uses GIMUNZIP which invokes DFSMSDSS via API. We
> > make all of our ZFS data sets VSAM Extended (EA and REQUIRED). Yes,
> > this isn't necessary I know but we do have a few that are larger than
> > the 4GB limit.  Anyway, DFSMSDSS does not invoke the DATACLASS, so
> > there is no way to assign a DATACLASS.So how in the world do we
> > make our ZFS data sets VSAM Extended?   What's going to happen when
> > the root filesystem grows beyond the 4 GB limit in the future?
> >
> > So far z/OSMF PSWI is not helping.  First, I couldn't select a Target
> > system but tell it to use a different, existing master cat (like we
> > could with ServerPac), now this?
> >
> > On 10/6/2022 10:15 AM, Kurt J. Quackenbush wrote:
> >> As I understand your scenario, you have two z/OS systems, a driving
> >> system (call it A) where the z/OSMF server is running and a target
> >> system (call it B), and you want to install z/OS 2.5 into the
> >> existing master catalog for system B.  Currently you have selected A
> >> as the target system for the deployment.  Unfortunately Software
> >> Management does not have support for installing into an existing
> >> alternate master catalog.  Yes it can install into the driving
> >> system's master catalog, or create and install into a brand new
> >> master catalog, but it does not install into an existing master
> >> catalog that is not the driving system's active master catalog.  As a
> >> circumvention, is B IPL’d?  Is a z/OSMF server running on B?  If so,
> >> then define system B in the z/OSMF Systems task and select it as the
> >> target system for the deployment instead of selecting A.
> >>
> >> Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management
> >>
> >> Chuck Norris never uses CHECK when he applies PTFs.
> >>
> >> -Original Message-
> >> From: IBM Mainframe Discussion List  On
> >> Behalf Of Michael Babcock
> >> Sent: Wednesday, September 28, 2022 3:40 PM
> >> To: IBM-MAIN@LISTSERV.UA.EDU
> >> Subject: [EXTERNAL] Re: z/OSMF PSWI
> >>
> >> Okay, more issues.  As I stated, we use a permanent maintenance
> >> volume/system.  With ServerPac, we could define an SSA and have the
> >> SYSRES datasets cataloged in our maintenance systems master cat then
> >> ServerPac would allocate the dataset using an SSA. later it would
> >> generate jobs to remove the SSA.
> >>
> >> Unless I’m missing something, this doesn’t seem possible with z/OSMF
> >> because the Modify Catalog section doesn’t let us change the master cat
> >> (even though it says it will).   The only way I see around that is to
> >> rename the SYSRES dataset with the SSA.  Of course we would then need to
> >> create our own rename job to remove the SSA.   Jeez, COME ON PEOPLE!
> >>
> >> We were told z/OSMF would provide the same functionality as ServerPac
> >> but I guess not.
> >>
> >> On Wed, Sep 21, 2022 at 3:28 PM Michael Babcock 
> >> wrote:
> >>
> >>> We are installing z/OS 2.5 via z/OSMF and are using the Modify
> >>> Deployment screens.  We can easily change the volumes, HLQs, etc, but
> >>> wanted to modify the Primary and/or secondary allocation and don’t
> >>> see a way to do that.
> >>>
> >>> We have a case opened with IBM and have been told there is no way to do
> >>> that and no plans for it in the future.   What?We could do that
> >>> with
> &g

Re: z/OSMF PSWI

[Michael Babcock]

Another issue.  PSWI uses GIMUNZIP which invokes DFSMSDSS via API. We 
make all of our ZFS data sets VSAM Extended (EA and REQUIRED). Yes, this 
isn't necessary I know but we do have a few that are larger than the 4GB 
limit.  Anyway, DFSMSDSS does not invoke the DATACLASS, so there is no 
way to assign a DATACLASS.    So how in the world do we make our ZFS 
data sets VSAM Extended?   What's going to happen when the root 
filesystem grows beyond the 4 GB limit in the future?


So far z/OSMF PSWI is not helping.  First, I couldn't select a Target 
system but tell it to use a different, existing master cat (like we 
could with ServerPac), now this?


On 10/6/2022 10:15 AM, Kurt J. Quackenbush wrote:

As I understand your scenario, you have two z/OS systems, a driving system 
(call it A) where the z/OSMF server is running and a target system (call it B), 
and you want to install z/OS 2.5 into the existing master catalog for system B. 
 Currently you have selected A as the target system for the deployment.  
Unfortunately Software Management does not have support for installing into an 
existing alternate master catalog.  Yes it can install into the driving 
system's master catalog, or create and install into a brand new master catalog, 
but it does not install into an existing master catalog that is not the driving 
system's active master catalog.  As a circumvention, is B IPL’d?  Is a z/OSMF 
server running on B?  If so, then define system B in the z/OSMF Systems task 
and select it as the target system for the deployment instead of selecting A.

Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management

Chuck Norris never uses CHECK when he applies PTFs.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Michael Babcock
Sent: Wednesday, September 28, 2022 3:40 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: z/OSMF PSWI

Okay, more issues.  As I stated, we use a permanent maintenance volume/system.  
With ServerPac, we could define an SSA and have the SYSRES datasets cataloged 
in our maintenance systems master cat then ServerPac would allocate the dataset 
using an SSA. later it would generate jobs to remove the SSA.

Unless I’m missing something, this doesn’t seem possible with z/OSMF because 
the Modify Catalog section doesn’t let us change the master cat
(even though it says it will).   The only way I see around that is to
rename the SYSRES dataset with the SSA.  Of course we would then need to
create our own rename job to remove the SSA.   Jeez, COME ON PEOPLE!

We were told z/OSMF would provide the same functionality as ServerPac but I 
guess not.

On Wed, Sep 21, 2022 at 3:28 PM Michael Babcock 
wrote:


We are installing z/OS 2.5 via z/OSMF and are using the Modify
Deployment screens.  We can easily change the volumes, HLQs, etc, but
wanted to modify the Primary and/or secondary allocation and don’t see a way to 
do that.

We have a case opened with IBM and have been told there is no way to do
that and no plans for it in the future.   What?We could do that with
the ServerPac, why not with z/OSMF?   I was under the impression that
z/OSMF would provide most functions that ServerPac provided.

So, is that capability not going to be provided?


--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead


--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF PSWI

[Michael Babcock]

Unfortunately, that system is not up and z/OSMF is set to "connect" to 
our sandbox.   I IPL'd that system but the IZU* tasks do not start (no 
RACF Started class profile defined either).


On 10/6/2022 10:15 AM, Kurt J. Quackenbush wrote:

As I understand your scenario, you have two z/OS systems, a driving system 
(call it A) where the z/OSMF server is running and a target system (call it B), 
and you want to install z/OS 2.5 into the existing master catalog for system B. 
 Currently you have selected A as the target system for the deployment.  
Unfortunately Software Management does not have support for installing into an 
existing alternate master catalog.  Yes it can install into the driving 
system's master catalog, or create and install into a brand new master catalog, 
but it does not install into an existing master catalog that is not the driving 
system's active master catalog.  As a circumvention, is B IPL’d?  Is a z/OSMF 
server running on B?  If so, then define system B in the z/OSMF Systems task 
and select it as the target system for the deployment instead of selecting A.

Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management

Chuck Norris never uses CHECK when he applies PTFs.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Michael Babcock
Sent: Wednesday, September 28, 2022 3:40 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: z/OSMF PSWI

Okay, more issues.  As I stated, we use a permanent maintenance volume/system.  
With ServerPac, we could define an SSA and have the SYSRES datasets cataloged 
in our maintenance systems master cat then ServerPac would allocate the dataset 
using an SSA. later it would generate jobs to remove the SSA.

Unless I’m missing something, this doesn’t seem possible with z/OSMF because 
the Modify Catalog section doesn’t let us change the master cat
(even though it says it will).   The only way I see around that is to
rename the SYSRES dataset with the SSA.  Of course we would then need to
create our own rename job to remove the SSA.   Jeez, COME ON PEOPLE!

We were told z/OSMF would provide the same functionality as ServerPac but I 
guess not.

On Wed, Sep 21, 2022 at 3:28 PM Michael Babcock 
wrote:


We are installing z/OS 2.5 via z/OSMF and are using the Modify
Deployment screens.  We can easily change the volumes, HLQs, etc, but
wanted to modify the Primary and/or secondary allocation and don’t see a way to 
do that.

We have a case opened with IBM and have been told there is no way to do
that and no plans for it in the future.   What?We could do that with
the ServerPac, why not with z/OSMF?   I was under the impression that
z/OSMF would provide most functions that ServerPac provided.

So, is that capability not going to be provided?


--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead


--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF PSWI

[Michael Babcock]

I have applied the two missing PTFs and will IPL them in.  But do we 
need to restart our PSWI of z/OS 2.5 to pick up the changes?  The hold 
data says it's just a restart to pick up the changes but doesn't mention 
restarting the installation process for z/OS 2.5 PSWI.


On 9/29/2022 7:44 AM, Marna WALLE wrote:

Michael,
Have you verified that you have all the correct Driving System PTFs installed, 
as indicated with FIXCAT IBM.DrivingSystem-RequiredService ?.

Check out slide 33 onwards in this presentation that KurtQ did for the Z 
Exchange, https://www.newera-info.com/KQ1.html.  It explains how a new master 
catalog can be used, including how the SSA (now called Temporary Catalog Alias) 
is to be specified and used.

-Marna WALLE
z/OS System Install and Upgrade
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF PSWI

[Michael Babcock]

We are missing two, PH45201 and PH46392.  After reading them, they don’t
really seem to match our situation unless there are things fixed that are
not doc’d.

On Thu, Sep 29, 2022 at 7:44 AM Marna WALLE  wrote:

> Michael,
> Have you verified that you have all the correct Driving System PTFs
> installed, as indicated with FIXCAT IBM.DrivingSystem-RequiredService ?.
>
> Check out slide 33 onwards in this presentation that KurtQ did for the Z
> Exchange, https://www.newera-info.com/KQ1.html.  It explains how a new
> master catalog can be used, including how the SSA (now called Temporary
> Catalog Alias) is to be specified and used.
>
> -Marna WALLE
> z/OS System Install and Upgrade
> IBM Poughkeepsie
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF PSWI

[Michael Babcock]

I’m not using a new master cat.   We use our sandbox as the driving system
and our target is our maintenance system.  We do IPL the maintenance system
just to ensure it comes up cleanly.

On Thu, Sep 29, 2022 at 7:44 AM Marna WALLE  wrote:

> Michael,
> Have you verified that you have all the correct Driving System PTFs
> installed, as indicated with FIXCAT IBM.DrivingSystem-RequiredService ?.
>
> Check out slide 33 onwards in this presentation that KurtQ did for the Z
> Exchange, https://www.newera-info.com/KQ1.html.  It explains how a new
> master catalog can be used, including how the SSA (now called Temporary
> Catalog Alias) is to be specified and used.
>
> -Marna WALLE
> z/OS System Install and Upgrade
> IBM Poughkeepsie
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF PSWI

[Michael Babcock]

Okay, more issues.  As I stated, we use a permanent maintenance
volume/system.  With ServerPac, we could define an SSA and have the SYSRES
datasets cataloged in our maintenance systems master cat then ServerPac
would allocate the dataset using an SSA. later it would generate jobs to
remove the SSA.

Unless I’m missing something, this doesn’t seem possible with z/OSMF
because the Modify Catalog section doesn’t let us change the master cat
(even though it says it will).   The only way I see around that is to
rename the SYSRES dataset with the SSA.  Of course we would then need to
create our own rename job to remove the SSA.   Jeez, COME ON PEOPLE!

We were told z/OSMF would provide the same functionality as ServerPac but I
guess not.

On Wed, Sep 21, 2022 at 3:28 PM Michael Babcock 
wrote:

> We are installing z/OS 2.5 via z/OSMF and are using the Modify Deployment
> screens.  We can easily change the volumes, HLQs, etc, but wanted to modify
> the Primary and/or secondary allocation and don’t see a way to do that.
>
> We have a case opened with IBM and have been told there is no way to do
> that and no plans for it in the future.   What?We could do that with
> the ServerPac, why not with z/OSMF?   I was under the impression that
> z/OSMF would provide most functions that ServerPac provided.
>
> So, is that capability not going to be provided?
>
>
> --
> Michael Babcock
> OneMain Financial
> z/OS Systems Programmer, Lead
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Minor disaster

[Michael Babcock]

Do you have an HSM backup of the PDSE?  Or a volume backup?  Otherwise I
don’t know.  BTW, I always have prompting turned on so that if I
accidentally hit D, I get a prompt verifying I really want to delete it.

On Wed, Sep 28, 2022 at 7:02 AM Lennie Dymoke-Bradshaw <
032fff1be9b4-dmarc-requ...@listserv.ua.edu> wrote:

> Aaargghhh!
>
> I just pressed "D" next to a PDSe member I was editing, instead of "S".
>
> I have generations set up for this PDSe, but I cannot see how to get to the
> member I just accidentally deleted.
>
> Is there a way to recover the member?
>
>
>
>
>
> Lennie Dymoke-Bradshaw
>
>  <https://rsclweb.com/> https://rsclweb.com
>
>
> 'Dance like no one is watching. Encrypt like everyone is.'
>
>
>
>
>
>
>
>
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF PSWI

[Michael Babcock]

Yes.   And I vaguely remember IBM saying something about providing the same
functionality that ServerPac provided.  Of course, at my age, the parity
errors occur at an increasing rate!

On Thu, Sep 22, 2022 at 11:11 PM Brian Westerman <
brian_wester...@syzygyinc.com> wrote:

> I have maintained for quite a while now that z/OSMF is not ready to exist
> as the sole installation method. I have complained here, and directly to
> IBM and directly to the z/OSMF advocates at IBM about the myriad of
> problems that need to be resolved, but IBM's view seems to be damn the
> torpedoes, and full speed ahead, even if it's not exactly the right
> direction.  It's very sad, and it will elongate my install from a trivial
> couple hours to several times longer just to make up for the parts that
> need to be addressed to make the system ready for use at a "real" site and
> not someones euphemistic idea of what a site "should" be.
>
> That said, I had absolutely no problem with making it an "option" to
> select it as the install method, but I was told that given the choice, that
> very few people would use z/OSMF for installation, and that's not where
> they wanted to find themselves.  At the time, I mentioned that there might
> be a reason why systems programmers might want ServerPac instead of z/OSMF,
> but I kept being reminded of what it's like to talk to a very young child
> who wants their Umpa Lumpa now.
>
> Brian
>
>  On Thu, 22 Sep 2022 13:49:50 -0500, Carmen Vitullo 
> wrote:
>
> >I've been doing this on my ServerPac for a while, I've even called out
> >the ServerPac folks about the issue of, why deliver linklist lpalist
> >datasets with secondary allocation if the linkist does not support it,
> >why are they so under allocated, it wasn't until I started to work for
> >IBM GS that I realized, even the global services folks do not know what
> >the customer issues are, if GS is building a system for a client we do
> >not use a ServerPac, most older, seasoned IBM GS folks don't know what a
> >ServerPac is, or the one's I worked with did not.
> >
> >my main issue, ongoing with z/OSMF is these incoherent error messages,
> >and help is no help, when a field is required there's not help prompt
> >telling me the format or syntax, or what's expected, just, it's not valid.
> >
> >so many cases open with support I really didn't need to if the help
> >dialog was actually helpful.
> >
> >I hate to keep bashing IBM but we, as customers are forced to use a tool
> >that's not really ready for prime time IMHO
> >
> >Carmen
> >
> >
> >
> >On 9/22/2022 1:13 PM, Michael Babcock wrote:
> >
> >> Yes, agree, I typically over allocate the Linklisted data sets and have
> >> zero secondary and increase DIR BLKS as well (if it’s a PDS).   I can do
> >> this when the jobs are built but would be MUCH easier in the MODIFY
> >> screens.
> >>
> >> On Thu, Sep 22, 2022 at 6:25 AM Seymour J Metz  wrote:
> >>
> >>> What about modifying directory blocks for whatever is still PDS?
> >>>
> >>>
> >>> --
> >>> Shmuel (Seymour J.) Metz
> >>> http://mason.gmu.edu/~smetz3
> >>>
> >>> 
> >>> From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on
> behalf
> >>> of Michael Babcock [bigironp...@gmail.com]
> >>> Sent: Wednesday, September 21, 2022 4:28 PM
> >>> To: IBM-MAIN@LISTSERV.UA.EDU
> >>> Subject: z/OSMF PSWI
> >>>
> >>> We are installing z/OS 2.5 via z/OSMF and are using the Modify
> Deployment
> >>> screens.  We can easily change the volumes, HLQs, etc, but wanted to
> modify
> >>> the Primary and/or secondary allocation and don’t see a way to do that.
> >>>
> >>> We have a case opened with IBM and have been told there is no way to do
> >>> that and no plans for it in the future.   What?We could do that
> with
> >>> the ServerPac, why not with z/OSMF?   I was under the impression that
> >>> z/OSMF would provide most functions that ServerPac provided.
> >>>
> >>> So, is that capability not going to be provided?
> >>>
> >>>
> >>> --
> >>> Michael Babcock
> >>> OneMain Financial
> >>> z/OS Systems Programmer, Lead
> >>>
> >>> --
> >>> For IBM-MAIN subscribe / signoff / archive access instructions,
> >>> s

Re: z/OSMF PSWI

[Michael Babcock]

We use a permanent maintenance volume that isn’t generally IPL’d from.  I
triple the space and increase dirblks and use no secondaries.   We use mod
27s and could use mod 54s if needed.  So space isn’t an issue for me.  That
res is copied to the other systems during rollout.

On Thu, Sep 22, 2022 at 3:13 PM Mark Zelden  wrote:

> On Thu, 22 Sep 2022 13:49:50 -0500, Carmen Vitullo 
> wrote:
>
> >I've been doing this on my ServerPac for a while, I've even called out
> >the ServerPac folks about the issue of, why deliver linklist lpalist
> >datasets with secondary allocation if the linkist does not support it,
>
> Secondary extents are certainly supported in the LNKLST.  What you can't
> do is
> take a secondary to the "live" LNKLST for a PDS, but you can for PDSE and
> pick up the change with an LLA REFRESH or UPDATE.  For LPA libs it doesn't
> matter ever since that is only read in at IPL time.
>
> The number of extents in the LNKLST used to be a problem for some systems,
> but when
> the rules changed in DFSMS/MVS 1.3 to be "255 total extents or less" with
> PDSE always
> counting as 1 extent, that helped a lot.   I personally want secondary
> extents, at
> least for some data sets to support applying maintenance.   I always run
> SMP/E apply
> with COMPRESS(ALL) anyway so it's not going to continually increase and
> I'd rather
> get a secondary on a few libraries than have the apply blow up, have
> allocate a new
> larger DSN, copy old to new, rename and restart my apply.  I'm pretty sure
> this is
> why ServerPac allocations came with secondary extents going back in
> history.
>
> Due to 3390-9s geometry being my main sysres volume still, over allocation
> from ServerPac (or now z/OSMF) has been more of a problem for me than
> under allocation, so when building my local maintenance sysres after
> install I have
> had to free space on some larger PDS or PDSE files to get everything to
> fit and
> have spare space on the sysres for maintenance.  Then if something takes a
> secondary during apply, I don't care.  The prod LNKLSTs have secondaries on
> some data sets on the sysres, but again I don't care.  No one better be
> updating
> the live sysres anyway except under extreme circumstances.
>
> As usual YMMV and if you are in a shop with 220 LNKLST data sets you
> probably
> have a very good reason for never wanting any secondary extents even in
> your
> maintenance environment.
>
>
> Best Regards,
>
> Mark
> --
> Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS
> ITIL v3 Foundation Certified
> mailto:m...@mzelden.com
> Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html
>
> ----------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF PSWI

[Michael Babcock]

Yes, agree, I typically over allocate the Linklisted data sets and have
zero secondary and increase DIR BLKS as well (if it’s a PDS).   I can do
this when the jobs are built but would be MUCH easier in the MODIFY
screens.

On Thu, Sep 22, 2022 at 6:25 AM Seymour J Metz  wrote:

> What about modifying directory blocks for whatever is still PDS?
>
>
> --
> Shmuel (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
>
> 
> From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf
> of Michael Babcock [bigironp...@gmail.com]
> Sent: Wednesday, September 21, 2022 4:28 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: z/OSMF PSWI
>
> We are installing z/OS 2.5 via z/OSMF and are using the Modify Deployment
> screens.  We can easily change the volumes, HLQs, etc, but wanted to modify
> the Primary and/or secondary allocation and don’t see a way to do that.
>
> We have a case opened with IBM and have been told there is no way to do
> that and no plans for it in the future.   What?We could do that with
> the ServerPac, why not with z/OSMF?   I was under the impression that
> z/OSMF would provide most functions that ServerPac provided.
>
> So, is that capability not going to be provided?
>
>
> --
> Michael Babcock
> OneMain Financial
> z/OS Systems Programmer, Lead
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

z/OSMF PSWI

[Michael Babcock]

We are installing z/OS 2.5 via z/OSMF and are using the Modify Deployment
screens.  We can easily change the volumes, HLQs, etc, but wanted to modify
the Primary and/or secondary allocation and don’t see a way to do that.

We have a case opened with IBM and have been told there is no way to do
that and no plans for it in the future.   What?We could do that with
the ServerPac, why not with z/OSMF?   I was under the impression that
z/OSMF would provide most functions that ServerPac provided.

So, is that capability not going to be provided?


-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PSP for Crypto Express 8s

[Michael Babcock]

I use this as input:

REPORT MISSINGFIX ZONES(MVST100)

FIXCAT(IBM.*)

.



And it will report something like this (edited for length):

MISSING FIXCAT SYSMOD REPORT FOR ZONE
MVST100



  HOLD MISSING  HELD RESOLVING
SYSMOD_

FIX CATEGORY FMID CLASSAPAR SYSMOD   NAME STATUS
RECEIVED

___  ___  ___  ___  ___  ___  __


IBM.Device.Disk.DS8000-2107

 HDZ2240   CA56267  HDZ2240  UJ08763  GOOD
YES

   CA57768  HDZ2240  UJ08744  GOOD
YES

   CA61492  HDZ2240  UJ07885  HELD
YES

   CA61494  HDZ2240  UJ07877  HELD
YES

   CA62423  HDZ2240  UJ08550  GOOD
YES

   CA62506  HDZ2240  UJ07862  GOOD
YES

   CA62651  HDZ2240  UJ08973  GOOD
YES

   CA63552  HDZ2240  UJ09056  GOODYES


IBM.Device.Server.zBC12-2828.zHighPerformanceFICON

 HSM1P00   CH42336  HSM1P00  UI80637  GOOD
YES

IBM.Device.Server.zEC12-2827.zHighPerformanceFICON


 HSM1P00   CH42336  HSM1P00  UI80637  GOOD
YES

IBM.Device.Server.z10-BC-2098.zHighPerformanceFICON

 HSM1P00   CH42336  HSM1P00  UI80637  GOOD
YES

IBM.Function.zEDC

 HBB77C0   CA62239  HBB77C0  UJ08657  GOODYES

   CA62721  HBB77C0  UJ08708  GOODYES

IBM.Function.zHighPerformanceFICON

 HSM1P00   CH42336  HSM1P00  UI80637  GOODYES

IBM.Function.zHyperLink

 HDZ2240   CA61737  HDZ2240  UJ08978  GOODYES

   CA62068  HDZ2240  UJ08922  GOODYES



On Wed, Sep 21, 2022 at 1:09 PM Lennie Dymoke-Bradshaw <
032fff1be9b4-dmarc-requ...@listserv.ua.edu> wrote:

> I may have been able to do that. My SMPE skills are a little old and I
> don't recall that.
> Yes, I think HOLDDATA is available freely from IBM.
> https://www.ibm.com/support/pages/enhanced-holddata-zos
>
> So if you need new device support (for example) how does the MISSINGFIX
> work? What does the report tell you?
> Do I have to have all the PTFs received? One of my problems was the disk
> space needed for the SMPPTS spill files.
>
> Lennie Dymoke-Bradshaw
> https://rsclweb.com
> ‘Dance like no one is watching. Encrypt like everyone is.’
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Michael Babcock
> Sent: 21 September 2022 16:31
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: PSP for Crypto Express 8s
>
> I don’t use PSP buckets anymore.  I download the latest holddata and run
> SMPE MISSINGFIX.   Do you have access to download the holddata?
>
> On Wed, Sep 21, 2022 at 6:26 AM Eric D Rossman 
> wrote:
>
> > That's unfortunate (that you don't get any access to the IBM support
> > center). That sounds like a hole in our zPDT support to me.
> >
> > -Original Message-
> > From: IBM Mainframe Discussion List  On
> > Behalf Of Lennie Dymoke-Bradshaw
> > Sent: Monday, September 19, 2022 6:42 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: [EXTERNAL] Re: PSP for Crypto Express 8s
> >
> > Eric,
> > Many thanks for taking the trouble to post this.
> > I was hoping there was a PSP for the Crypto Express 8 itself (or
> > possibly for 4769Device), but I cannot find that.
> > I have an ADCD system running on a zPDT machine. As such I am not
> > allowed access to the IBM support centre, so I have to research things
> elsewhere.
> > ADCD does give me access to PTFs but I only have those up to PUT2207.
> > The ADCD is at level ZOS25B but this does not include support for the
> > Crypto Express 8 (although it does include FMID HCR77D2). I was hoping
> > the PSP would guide me to the necessary maintenance. However, I
> > discovered that the latest ICSF manuals include details I need. I need
> > the PTF for APAR OA61609.
> > So I have used that as a base and installed fixes to allow Crypto
> > Express
> > 8 to be installed. At the moment my ICSF is working with the Crypto
> > devices recognised as CEX8s devices.
> > There is a PSP for "Upgrade ZOSV2R5, Subset ICSF77D2" but this does
> > not tell me what I need.
> > Regards
> >
> > Lennie Dymoke-Bradshaw
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > email to lists...@listserv.ua.edu with the messa

Re: PSP for Crypto Express 8s

[Michael Babcock]

I don’t use PSP buckets anymore.  I download the latest holddata and run
SMPE MISSINGFIX.   Do you have access to download the holddata?

On Wed, Sep 21, 2022 at 6:26 AM Eric D Rossman  wrote:

> That's unfortunate (that you don't get any access to the IBM support
> center). That sounds like a hole in our zPDT support to me.
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Lennie Dymoke-Bradshaw
> Sent: Monday, September 19, 2022 6:42 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [EXTERNAL] Re: PSP for Crypto Express 8s
>
> Eric,
> Many thanks for taking the trouble to post this.
> I was hoping there was a PSP for the Crypto Express 8 itself (or possibly
> for 4769Device), but I cannot find that.
> I have an ADCD system running on a zPDT machine. As such I am not allowed
> access to the IBM support centre, so I have to research things elsewhere.
> ADCD does give me access to PTFs but I only have those up to PUT2207.
> The ADCD is at level ZOS25B but this does not include support for the
> Crypto Express 8 (although it does include FMID HCR77D2). I was hoping the
> PSP would guide me to the necessary maintenance. However, I discovered that
> the latest ICSF manuals include details I need. I need the PTF for APAR
> OA61609.
> So I have used that as a base and installed fixes to allow Crypto Express
> 8 to be installed. At the moment my ICSF is working with the Crypto devices
> recognised as CEX8s devices.
> There is a PSP for "Upgrade ZOSV2R5, Subset ICSF77D2" but this does not
> tell me what I need.
> Regards
>
> Lennie Dymoke-Bradshaw
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: What is the preferred way of starting PAGENT

[Michael Babcock]

I’m not in front of my computer right now but I believe our automation
product starts and stops PAGENT.

On Mon, Sep 19, 2022 at 4:10 AM Jantje. <
033acf17e42f-dmarc-requ...@listserv.ua.edu> wrote:

> On Fri, 16 Sep 2022 13:04:26 -0500, Michael Babcock 
> wrote:
>
> >I was under the impression that if PAGENT isn't running, then no new
> >connections can start.
> >
> Well, in our set-up, with PAGENT stopped after the TCIP stack has come up
> (and PAGENT having had the chance to install the policy), we can still
> start new TN3270 connections.
>
> We did specify NOPURGE NOFLUSH...
>
> Still we would have a far more warm and comfy feeling if PAGENT would
> remain up, being restarted whenever it stops unscheduled...
>
> Any recommendations?
>
> Cheers,
>
> Jantje.
>
>
>
> >>
> >> Thanks and very best regards,
> >>
> >> Jantje.
> >>
> >> --
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> >--
> >For IBM-MAIN subscribe / signoff / archive access instructions,
> >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> ----------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Strange FTP behavior

[Michael Babcock]

Jake, did you add TRACE to the PARM on the EXEC PGM=FTP statement?

On Sat, Sep 17, 2022 at 6:27 AM Jake Anderson 
wrote:

> Hello
>
> Cross posted
>
> I was able to create the user with RESTRICTED attribute
>
> I have given a surrogate access to a STC owner is to the ID which I created
> with RESTRICTED attribute
>
> Here when we submit job with USER=EXTBATCH
> It internally does a FTP to a Linux server. For connecting the Linux using
> FTP we are using ID created in Linux which is wmMF01
>
> The FTP logon is successful but when it tries to do a get operation on an
> existing file in Linux to mainframe then it doesn't transfer instead it
> gives zero bytes transferred
>
> To isolate the issue I tried to run the same batch using my own Mainframe
> ID and wmMF01 but I was able to transfer the ID fron Linux to mainframe
> without any problem.
>
> Unfortunately this is not even throwing any error message to debug and I
> know that this is due to the RESTRICTED ATTRIBUTE
>
> There were some more case studies I did
>
> 1 ) When I submit the JCL with USER=EXTBATCH the transfer works
> perfectly fine
>
> I did enable FTP DEBUG ALL but no message is displayed about zero bytes
> getting transferred
>
> I hope I am missing some BPX racf profile for which the started task owner
> is supposed to be permitted and I am not sure what BPX profile will allow
> the FTP to take place
>
> EXTBATCH has OMVS segment, Started task owner too has OMVS segment and it's
> default groups too have GID
>
> Could someone please point to a right direction on troubleshooting this in
> detail
>
> Jake
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: What is the preferred way of starting PAGENT

[Michael Babcock]

I was under the impression that if PAGENT isn't running, then no new 
connections can start.


On 9/16/2022 10:44 AM, Jantje. wrote:

On Fri, 16 Sep 2022 09:03:23 -0500, Matthew Stitt  
wrote:


Here are my AUTOLOG statements from the TCP/IP profile:

AUTOLOG 5
   PAGENT   ; AT-TLS Policy server
   GPMSERVE DELAYSTART TTLS ; RMF Server
   ...

Dear Matthew,

This is very similar to what we now have in our sandbox set-up. And it does 
indeed start the PAGENT when the stack is started. The DELAYSTART servers only 
fire up when the AT-TLS is readily configured and available with all policies 
installed. So, the happy-days scenario is covered well.

What is worrying us is that with this set-up is that when, for whatever reason 
the PAGENT stops, it is not restarted automatically.

As I said before: that does not seem to hamper neither the ongoing, nor the new 
TN3270 connections. But then why the Redpaper says that the PAGENT should 
remain up?

Any comments welcome.

Thanks and very best regards,

Jantje.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: omvs man pages

[Michael Babcock]

I was thinking that EPH datasets are no longer shipped with z/OS.  They are
not on my z/OS 2.4 system.

On Fri, Sep 16, 2022 at 6:24 AM Lionel B. Dyck  wrote:

> The issue isn't with MANPATH - when you issue the command:  man -k .
>
> It reports a summary of 'all available' man pages.
>
> And when you issue:  man -k xxx
>
> It will report 'all' the man pages that have xxx
>
> The OMVS man command does *not* search the MANPATH but the information in
> the EPH.SEPHTAB dataset.
>
> Thus Rocket, Co:Z, etc. man pages will never be found.
>
> Using the command man xxx apparently does use the MANPATH as it will
> display other man pages (e.g. curl).
>
> What I'd like is the ability to update the EPH.SEPHTAB, or .?
>
>
> Lionel B. Dyck <><
> Website: https://www.lbdsoftware.com
> Github: https://github.com/lbdyck
>
> “Worry more about your character than your reputation. Character is what
> you are, reputation merely what others think you are.”   - - - John Wooden
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Paul Gilmartin
> Sent: Thursday, September 15, 2022 2:19 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: omvs man pages
>
> On Thu, 15 Sep 2022 13:56:38 -0500, Lionel B. Dyck wrote:
>
> >This explains how to enable the man pages in omvs
> >https://www.ibm.com/docs/en/zos/2.1.0?topic=utilities-enabling-man-page
> >s
> >
> A more recent edition: <
> https://www.ibm.com/docs/en/zos/2.3.0?topic=utilities-enabling-man-pages>
>
> >BUT - is there a way to update this with additional man pages - say
> >some from Rocket (i.e. curl) ?
> >
> Alas, I see: <
> https://pubs.opengroup.org/onlinepubs/9699919799.2008edition/utilities/man.html
> >:
> ...
> The historical MANPATH variable is not included in POSIX because no
> attempt is
> made to specify naming conventions for reference page files, nor even
> to mandate
> that they are files at all.
>
> Bummer.  I would have hoped for something such as
> MANPATH=/usr/man/%L:/usr/lpp/com.rocketsoftward/man
>
> Are the Bookie pages formatted on-the-fly or are formatted versions cached?
>
> >Lionel B. Dyck <><
> >Website: https://www.lbdsoftware.com
> >Github: https://github.com/lbdyck
>
> --
> gil
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: omvs man pages

[Michael Babcock]

Yes exactly what I did.  I added the rocket paths to the MANPATH in
/etc/profile.

On Thu, Sep 15, 2022 at 3:10 PM Peter Sylvester 
wrote:

> Yes, the rocket anaconda stuff has man files that you can add to MANPATH.
>
> in OMVS /etc/profile
>
> # ==
> #MANPATH environment variable
> #
> # Specifies the list of directories that the system searches for man
> # pages (help files). The %L represents the language currently set by
> # the LANG environment variable.
> # ==
> MANPATH=/usr/man/%L
> export MANPATH
>
>
> And you can activate you current conda environment, or well, assuming you
> have the rocket software in a file system in $RSOFT and your current
> conda environment is xyz, then add
>
> $RSOFT/envs/xyz/share/man into MANPATH wherever you may want it.
>
> There are other man for IBM products.
>
> Peter
>
>
>
> //
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN