Re: Batch SFTP without client keys or USS files?

2020-10-17 Thread Srivastava, Rajesh K
I think "COZBATCH" is part of free COZ SFTP product download. 

Regards,

Rajesh

-Original Message- 
From: IBM Mainframe Discussion List  On Behalf Of 
Wendell Lovewell
Sent: Friday, October 16, 2020 8:15 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Batch SFTP without client keys or USS files?

Thank you Rajesh, but the job will be running on z/OS systems.  I cannot 
require any additional software like COZBATCH to be installed.

Best Regards,
Wendell

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information contained in this e-mail, and any attachment, is confidential 
and is intended solely for the use of the intended recipient. Access, copying 
or re-use of the e-mail or any attachment, or any information contained 
therein, by any other person is not authorized. If you are not the intended 
recipient please return the e-mail to the sender and delete it from your 
computer. Although we attempt to sweep e-mail and attachments for viruses, we 
do not guarantee that either are virus-free and accept no liability for any 
damage sustained as a result of viruses. 

Please refer to https://disclaimer.bnymellon.com/eu.htm for certain disclosures 
relating to European legal entities. We take our data protection and privacy 
responsibilities seriously and our privacy notice explains how we collect, use 
and share personal information in the course of our business activities. It can 
be accessed at the privacy section of  www.bnymellon.com.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Batch SFTP without client keys or USS files?

2020-10-16 Thread Srivastava, Rajesh K
Dovetail work well for me.
A sample below:

//add jobcard
//SFTPPUT EXEC PROC=SFTPPROC
//SFTPIN DD *
host=sftp.ecurep.ibm.com
pwdsn="&SYSUID.SFTP.JCL(IBMPASS)"
user=""
. $script_dir/sftp_connect.sh < On Behalf Of 
Wendell Lovewell
Sent: Friday, October 16, 2020 5:10 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Batch SFTP without client keys or USS files?

Thanks Kurt!  I did see Ed's presentation, but at the time it was a solution 
for which I didn't have a problem, so it stayed in the bit bucket.

Unfortunately, even with your and Ed's expert help, I'm still stumped. I just 
don't seem to be able to get the "SSH_ASKPASS" to work, even after reading what 
literally seems to be everything on the Internet about it.  (My 2 hour job's 
gone 2 days now...)

Just a reminder: I'm going from a z/OS sftp client to a non-z/os ftp server 
where I can't store user keys.  StrictHostKeyChecking=no is saving the non-z/OS 
server's keys in ~/.ssh/known_hosts, but I need to specify a userid/pwd to 
access the server. 

What I have is:

// EXPORT SYMLIST=(*)
// SET FROM=USER.DFDSS.XMI
// SET TO=CUS12345.ESTFILE
//*
//SFTP EXEC PGM=BPXBATCH
//STDENV   DD *
SSH_ASKPASS=/tmp/sftp.pw.sh
DISPLAY=DISPLAY
//*
//STDPARM  DD *,SYMBOLS=JCLONLY
SH cd /tmp;
echo cp -Bv "//'&FROM'" /tmp/&TO;
cp -Bv "//'&FROM'" /tmp/&TO;

echo "echo 'ftppwd'"   > sftp.pw.sh;
chmod 700 sftp.pw.sh;

echo "cd /FTPDir"> sftp.cmds;
echo "put /tmp/&TO &TO"  >> sftp.cmds;
echo "quit"   >> sftp.cmds;
chmod 600 sftp.cmds;

echo '';
echo '-sftp.cmds contents:';
cat sftp.cmds;
echo '';
echo '-sftp.pw.sh contents:';
cat sftp.pw.sh;
echo '';

/bin/sftp -b sftp.cmds
-oBatchMode=no
-oPort=
-oPasswordAuthentication=yes
-oPreferredAuthentications=password
-oStrictHostKeyChecking=no
-oHostbasedAuthentication=no
-oCheckHostIP=no
-oPubkeyAuthentication=no
-oLogLevel=DEBUG2
-oUser=ftpuser
ftp.ftpserver.com;

rm sftp.pw.sh;
rm sftp.cmds;
rm &TO;
//*
//STDOUT   DD SYSOUT=M
//STDERR   DD SYSOUT=M
//*

Maybe my STDENV isn't getting read, but I can't prove it.  I'm getting:
FOTS1373 ftpu...@ftp.ftpserver.com: Permission denied 
(publickey,keyboard-interactive,password). 

Here's the tail of my output w/DEBUG1:
debug1: Host '[ftp.ftpserver.com]:' is known and matches the RSA host key.
debug1: Found key in /.ssh/known_hosts:2
debug1: cipher_init: aes128-ctr from source CPACF, used in non-FIPS mode
debug1: rekey after 4294967296 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: cipher_init: aes128-ctr from source CPACF, used in non-FIPS mode
debug1: rekey after 4294967296 blocks
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: 
publickey,keyboard-interactive,password
debug1: No more authentication methods to try.
FOTS1373 ftpu...@ftp.ftpserver.com: Permission denied 
(publickey,keyboard-interactive,password).
debug1: zsshSmfSetConnSmfStatus: SMF status is 0 Connection closed.
FOTS0841 Connection closed

Here's the head, showing the contents of my sftp.pw.sh and sftp.cmds files:

cp -Bv //'USER.DFDSS.XMI' /tmp/CUS12345.ESTFILE USER.DFDSS.XMI -> 
/tmp/CUS12345.ESTFILE: binary

-sftp.cmds contents:
cd /FTPDir
put /tmp/CUS12345.ESTFILE CUS12345.ESTFILE quit

-sftp.pw.sh contents:
echo 'ftppwd'

FSUM1012 The initial working directory was not specified.
FSUM1006 A shell was not specified. Processing continues using the default 
shell name.
stty: !FSUMB045 failed to get termios attributes: EDC5134I Function not 
implemented.
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: zsshSmfSetConnSmfStatus: SMF status is 0
debug2: resolving "ftp.ftpserver.com" port 
debug2: ssh_connect_direct: needpriv 0
debug1: Connecting to ftp.ftpserver.com [192.208.58.102] port .
debug1: Connection established.
...

My /etc/ssh/ssh_config only has an entry for Ciphers and MACS - I think that's 
what IBM ships.  I don't have my own ~/.ssh/ssh_config.

Anyone have any ideas?  

Thanks again,
Wendell

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information contained in this e-mail, and any attachment, is confidential 
and is intended solely for the use of the intended recipient. Access, copying 
or re-use of the e-mail or any attachment, or any information contained 
therein, by any other person is not authorized. If you are not the intended 
recipient please return the e-mail to the sender and delete it from your 
computer. Although we attemp

Re: Where did IBM hide TASID?

2018-08-02 Thread Srivastava, Rajesh K
http://www-01.ibm.com/support/docview.wss?uid=swg24009131


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Pinnacle
Sent: Thursday, August 02, 2018 11:42 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Where did IBM hide TASID?

While IBM supposably restored all their web links, the ones to TASID are 
still broken.  Anybody know where IBM hid TASID?

Regards,
Tom Conley

-- 
  


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information contained in this e-mail, and any attachment, is confidential 
and is intended solely for the use of the intended recipient. Access, copying 
or re-use of the e-mail or any attachment, or any information contained 
therein, by any other person is not authorized. If you are not the intended 
recipient please return the e-mail to the sender and delete it from your 
computer. Although we attempt to sweep e-mail and attachments for viruses, we 
do not guarantee that either are virus-free and accept no liability for any 
damage sustained as a result of viruses. 

Please refer to https://disclaimer.bnymellon.com/eu.htm for certain disclosures 
relating to European legal entities. We take our data protection and privacy 
responsibilities seriously and our privacy notice explains how we collect, use 
and share personal information in the course of our business activities. It can 
be accessed at the privacy section of  www.bnymellon.com.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Catalogs in a SYSPLEX

2016-11-21 Thread Srivastava, Rajesh K
You can do either  and will some associated issues. Here are some:

If you have a MCAT for each LPAR you will have so many MCAT's + its backup to 
maintain and garbage in it piles up with time.

If you have a shared MCAT, you need to maintain one MCAT/SYSPLEX and one 
backup.At the time of z/OS upgrade create a new SYSPLEX MCAT (you may have one 
character in MCAT specific to z/OS versrion/release in MCAT name)  ( gives you 
opportunity to cleanup / gives you opportunity to test z/OS upgrade in DR ahead 
of time). One will need to keep two MCAT SYNCed up during the upgrade.

Regards,

Rajesh

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Travis
Sent: Monday, November 21, 2016 4:56 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalogs in a SYSPLEX

I was doing some research and I cannot seem to find any specific mention of 
using a single shared master catalog in the manuals. It doesn't mean I was 
looking in the correct manuals it just means that what I had been told may not 
be 100% accurate. The manuls do seem to IMPLY that a shared master catalog is 
the way to go but there is nothing recommending one over the other that I can 
see.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information contained in this e-mail, and any attachment, is confidential 
and is intended solely for the use of the intended recipient. Access, copying 
or re-use of the e-mail or any attachment, or any information contained 
therein, by any other person is not authorized. If you are not the intended 
recipient please return the e-mail to the sender and delete it from your 
computer. Although we attempt to sweep e-mail and attachments for viruses, we 
do not guarantee that either are virus-free and accept no liability for any 
damage sustained as a result of viruses. 

Please refer to http://disclaimer.bnymellon.com/eu.htm for certain disclosures 
relating to European legal entities.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


unsubscribe

2016-03-10 Thread Srivastava, Rajesh
Please visit our website at
http://financialservicesinc.ubs.com/wealth/E-maildisclaimer.html
for important disclosures and information about our e-mail
policies. For your protection, please do not transmit orders
or instructions by e-mail or include account numbers, Social
Security numbers, credit card numbers, passwords, or other
personal information.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IXC364I POLICY CHANGE(S) PENDING

2014-06-03 Thread Srivastava, Rajesh
Try issuing SETXCF START,REBUILD,LOGREC,loc=other   


Kind Regards,

Rajesh


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Fred Kaptein
Sent: Tuesday, June 03, 2014 11:40 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IXC364I POLICY CHANGE(S) PENDING

Thanks for the Information.

We tried a few things but are still having a problem.
The following is the output from the D XCF,STR command

D XCF,STR   
IXC359I  11.23.12  DISPLAY XCF 023  
STRNAMEALLOCATION TIME   STATUS  TYPE   
IEFAUTOS  --   --NOT ALLOCATED  
ISGLOCK   --   --NOT ALLOCATED  
IXC_LIST01   06/02/2014 12:37:50 ALLOCATED   LIST   
 CFNAME: CFTST05
IXC_LIST02   06/02/2014 12:37:50 ALLOCATED   LIST   
 CFNAME: CFTST05
IXC_LIST03   06/02/2014 12:37:50 ALLOCATED   LIST   
 CFNAME: CFTST05
IXC_LIST04   06/02/2014 12:37:54 ALLOCATED   LIST   
 CFNAME: CFTST05
LOGREC   06/03/2014 11:11:37 ALLOCATED   LIST   
 CFNAME: CFTST05
   CONNECTIVITY 
LOGREC   01/05/2014 01:33:46 DEALLOCATION PENDING:  
 CFNAME: CFTST22
   DEALLOCATING SYSTEM LOST 
   CONNECTIVITY 
SYS1_HASPCKP101/05/2014 01:34:43 ALLOCATED   SLIST  
 CFNAME: CFTST22
SYS1_HASPCKP2 --   --NOT ALLOCATED  
SYS1_HASPCKP3 --   --NOT ALLOCATED  
SYS1_HASPCKP4 --   --NOT ALLOCATED  

EVENT MANAGEMENT: POLICY-BASED 



It seems that LOGREC on CFTST22 is having a problem.


The following is  the output from the SETXCF START,REBUILD,LOGREC  command  
   

SETXCF START,REBUILD,LOGREC   
IXC318I SETXCF SYNTAX ERROR, COULD NOT RECOGNIZE: LOGREC. 411 
ONE OF THE FOLLOWING WAS EXPECTED:
  STRNAME CFNAME LOCATION LESSCONN
  DUPLEX POPULATECF   
SETXCF START,REBUILD,STRNAME=LOGREC   
IXC521I REBUILD FOR STRUCTURE LOGREC 413  
HAS BEEN STARTED  
IXC367I THE SETXCF START REBUILD REQUEST FOR STRUCTURE 414
LOGREC WAS ACCEPTED.  
OPS1000O DOM.WTOID is 
IXG117I STRUCTURE REBUILD STARTED FOR STRUCTURE LOGREC 416
 1 OF 1 LOGSTREAMS CONNECTED TO STRUCTURE:
 SYSPLEX.LOGREC.ALLRECS   
IXC526I STRUCTURE LOGREC IS REBUILDING FROM 417   
COUPLING FACILITY CFTST05 TO COUPLING FACILITY CFTST05.   
REBUILD START REASON: OPERATOR INITIATED  
INFO108: 0001 0001.   
IXC582I STRUCTURE LOGREC ALLOCATED BY COUNTS. 418 
  PHYSICAL STRUCTURE VERSION: CD400365 EB905506
  STRUCTURE TYPE: LIST 
  CFNAME: CFTST05  
  ALLOCATION SIZE:  5 M
  POLICY SIZE:  4 M
  POLICY INITSIZE:  4 M
  POLICY MINSIZE:   0 K
  IXLCONN STRSIZE:  0 K
  ENTRY COUNT:924  
  ELEMENT COUNT: 6890  
  ENTRY:ELEMENT RATIO:   1 : 12
ALLOCATION SIZE EXCEEDS CFRM POLICY DEFINITIONS
IXL014I IXLCONN REBUILD REQUEST FOR STRUCTURE LOGREC 419   
WAS SUCCESSFUL.  JOBNAME: IXGLOGR ASID: 0015   
CONNECTOR NAME: IXGLOGR_BOCT CFNAME: CFTST05   
IXL015I REBU

Re: determine sysplex name in use

2013-08-08 Thread Srivastava, Rajesh
Issue "D xcf" from SDSF. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Tim Brown
Sent: Thursday, August 08, 2013 12:24 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: determine sysplex name in use

What command displays the sysplex name in use ?

Thanks,

Tim Brown
Supervisor Computer Operations
Central Hudson Gas & Electric
284 South Ave
Poughkeepsie, NY 12601
Email: tbr...@cenhud.com
<>
Phone: 845-486-5643
Fax: 845-486-5921
Cell: 845-235-4255


"This message contains confidential information and is only for the
intended recipient. If the reader of this message is not the intended
recipient, or an employee or agent responsible for delivering this
message to the intended recipient, please notify the sender immediately
by replying to this note and deleting all copies and attachments."

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Please visit our website at
http://financialservicesinc.ubs.com/wealth/E-maildisclaimer.html
for important disclosures and information about our e-mail
policies. For your protection, please do not transmit orders
or instructions by e-mail or include account numbers, Social
Security numbers, credit card numbers, passwords, or other
personal information.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN