Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread R.S.
Don Williams pisze: [...] A fair number of years ago I submitted a DCR suggesting that customers should have an optional facility to control access to APF libraries. I don't remember the details I suggested. Well, what control did you suggest, at least in general? I ask, because there are CSVA

Console's behaviour when no paths available

2010-04-06 Thread Barbara Nitz
Last night (well, way into this morning) we had a severe WTO buffer shortage that nobody saw. Here's why: *IOS071I 0500,**,CONSOLE, START PENDING 378 *IOS002A 0500,NO PATHS AVAILABLE IOS2002I 0500 NO PATHS AVAILABLE 381 S

Re: "Hidden" APARs (Was: Heads Up: APAR IO11698...)

2010-04-06 Thread Barbara Nitz
>I have no idea how rare they are. I have personally reported two >"hidden" APARs in the last 10 years. If that's typical for an IBM-MAIN >contributor, then there are a lot of them. I suspect it's not typical >though. I would interested to hear from others about their experiences... Well, I have r

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread Don Williams
The possibility of disclosure may make some people reluctant. I'm not reluctant and I'm fairly sure there are other people smarter than me who are not reluctant. It is unlikely that an integrity hole is so obscure, that only one person will discover it. So it is race between the good guys and the

Re: Hercules Emulator on window vista

2010-04-06 Thread Stephen Y Odo
David Andrews wrote: >> wonder if I can get it running on my Droid? >> > > Don't think so - doesn't Android limit you to the Dalvik JVM? > hmmm ... yes, that's true ... and I don't want to hack my phone ... -- For IBM-MAI

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread Shmuel Metz (Seymour J.)
In <4bb8d145.6080...@ync.net>, on 04/04/2010 at 12:49 PM, Rick Fochtman said: >I'm not sure that I'd be quite as open about it, but I understand the >sentiment. I'd be more like to attack IBM's "inaction" or apparent lack >of concern by escalating the problem within the IBM corporate structu

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread Shmuel Metz (Seymour J.)
In <745658b07912254e8d4b05c7d8a53b111a597...@surfsd21.cnasurety.net>, on 04/05/2010 at 01:51 PM, "Pommier, Rex R." said: >The operations staff needs to run these via their own IDs to satisfy >auditing requirements. That sounds like you need new auditors. The operators should be using their id

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread Shmuel Metz (Seymour J.)
In , on 04/05/2010 at 10:54 PM, Don Williams said: >I agree that the discussion between the reporter and developer should be >secret, at least until the developer provides a solution or refuses. But >that's not the question I was trying to comment on. I was more interested >in the disclosure t

Re: Hercules Emulator on window vista

2010-04-06 Thread Shmuel Metz (Seymour J.)
In , on 04/05/2010 at 03:45 AM, Brian Westerman said: >Hercules, you want the Hercules-370 lists or the Hercules Turnkey list >for the all-in-one MVS 3.8 and Hercules combination all in one integrated >package. What about, e.g., DOS/VSE, OS/VS2 SVS, VMF/370? AFAIK there is no all-in-one turnk

Re: Hercules Emulator on window vista

2010-04-06 Thread Shmuel Metz (Seymour J.)
In <9f9a73e15ed24f26b29a666ecf4fd...@scotttharderpc>, on 04/05/2010 at 05:36 AM, "Scott T. Harder" said: >What is the highest version of MVS that one can legally run under >Hercules without a license? And, where can one obtain that version of >MVS for that OS/VS2 3.8, with various SU's on to

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread Paul Gilmartin
On Tue, 6 Apr 2010 10:39:22 -0500, Walt Farrell wrote: > >Sorry, Radoslaw, but while the implementation may have happened to provide a >functional enhancement that some of you will find useful, we would not have >released an APAR that -requires- those migration actions if it were merely >an enhance

Re: Overlap Error

2010-04-06 Thread Bill Fairchild
I doubt that anyone has ever written code that does a STOW, does not wait for the STOW to complete, and moves onto the next DD before the STOW completes. It's not impossible, but it would probably require another simultaneously running task and a clever and bold developer to pull it off. The t

Re: z/OS LDAP client to Windows LDAP server

2010-04-06 Thread Hal Merritt
What I learned from trying to get a Windows client running with the z/os server: IIRC, the "cn=xxx" are arbitrary strings that must exactly match those coded in the server. A 'user not defined' would be expected unless the ID you present is defined on the server as one with LPAD privileges. A

Re: Saturation Data Point (SDP)

2010-04-06 Thread George Henke
ty, Alan, your reference is right on point. It would still be nice to have the manual, of course, but I have just read the Redbook reference you gave and it does, indeed, give the gist of SDP as presented in the manual. Thank you On Tue, Apr 6, 2010 at 3:42 PM, Alan Schenck wrote: > George, >

ASM Paging and Hyperpav

2010-04-06 Thread Jim Mulder
Issues regarding ASM Paging to Hyperpav volumes have been discussed several times on IBM-MAIN over the past few years. APAR OA32453 has been opened to deal with these issues. Jim Mulder z/OS System Test IBM Corp. Poughkeepsie, NY

Re: Saturation Data Point (SDP)

2010-04-06 Thread zMan
On Tue, Apr 6, 2010 at 3:19 PM, Tony Harminc wrote: > It's quite legit with just the one G; the first character is the "use > key", and G just means it's available to anyone for a price. If it's > in print, of course... > Wow. I knew what the first letter meant, but had never thought of pub numb

Ipsec & NAT-T in z/OS

2010-04-06 Thread O'Mara, Kevin, ITD
I promised an update on using IPsec & NAT-T encryption with z/OS IP Printway. This is now all working simply & beautifully. There was some difficulty in making sure the environmental network pieces were all correct and in place for the testing, and also ensuring the device to be tested was, in

Re: Saturation Data Point (SDP)

2010-04-06 Thread Alan Schenck
George, If it's any help, this Parallel Sysplex Planning redbook discusses SDP (section 1.3.4): http://www.redbooks.ibm.com/redbooks/pdfs/sg244680.pdf Regards, Alan -- For IBM-MAIN subscribe / signoff / archive access instructi

Re: criteria during PRIMARY SPACE MANAGEMENT (PSM)

2010-04-06 Thread willie bunter
John,   Did you find the reason why this was happening? --- On Thu, 12/3/09, John Kelly wrote: From: John Kelly Subject: criteria during PRIMARY SPACE MANAGEMENT (PSM) To: IBM-MAIN@bama.ua.edu Received: Thursday, December 3, 2009, 9:05 AM This is a curiosity question. I noticed that I have o

Re: Saturation Data Point (SDP)

2010-04-06 Thread Tony Harminc
On 6 April 2010 14:53, George Henke wrote: > Yes, -4, and thank you for the lead.  You are right about GG, not G, sorry > for the typo. It's quite legit with just the one G; the first character is the "use key", and G just means it's available to anyone for a price. If it's in print, of course...

z/OS LDAP client to Windows LDAP server

2010-04-06 Thread Mark Hammack
I searched (maybe don't know what to ask) so if this has been discussed, please point me in the right direction. I am attempting to write an LDAP client on z/OS that will bind to AD running on Windows 2003 Server using the C API. The ldap_init() returns 0 and seems to connect OK (the only problem

Re: Saturation Data Point (SDP)

2010-04-06 Thread George Henke
Yes, -4, and thank you for the lead. You are right about GG, not G, sorry for the typo. On Tue, Apr 6, 2010 at 2:50 PM, zMan wrote: > Sorry, you did say it was up to a -4. > > -- > For IBM-MAIN subscribe / signoff / archive acc

Re: Saturation Data Point (SDP)

2010-04-06 Thread zMan
Sorry, you did say it was up to a -4. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm

Re: Saturation Data Point (SDP)

2010-04-06 Thread zMan
That's GG22-9299. There was a -4, so it was around a while. You might try putting a "want" out on Bibliofind if you can't find it thru someone here. On Tue, Apr 6, 2010 at 2:38 PM, George Henke wrote: > I am trying to track down a softcopy of an old IBM Publication: > > “Balanced Systems and Cap

Saturation Data Point (SDP)

2010-04-06 Thread George Henke
I am trying to track down a softcopy of an old IBM Publication: “Balanced Systems and Capacity Planning”, G22-9299, and was written by P.T. Borchetta and R.J. Wicks This manual appears to have been originally published in 1982 as one of the old Washington Systems Technical Bulletin series (sometim

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread Don Williams
It is obvious that SMP/E is in the business of "executing" SYSMOD installation instructions. SMP/E is an APF authorized/superuser program, therefore it is a tempting attack surface. Since SMP/E is privileged, it must be carefully designed and controlled in order to avoid arbitrary code execution. R

Re: Enable Security for CICS region..

2010-04-06 Thread Chase, John
Oops; sorry, I thought I sent the 3.2 link. -jc- > -Original Message- > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of John Mattson > Sent: Tuesday, April 06, 2010 11:27 AM > To: IBM-MAIN@bama.ua.edu > Subject: Re: Enable Security for CICS region.. > >

Looking for a good OS390 sys prog resource in the Toledo area

2010-04-06 Thread Marc Heimlich
Please send resumes to heiml...@streamfoundry.com if interested in part-time sys prog work with a requirement to be on-site once a week (most likely 20 hours a week in total). Marc Heimlich SFI, Inc. 781.272.4307 www.streamfoundry.com --

Re: Enable Security for CICS region..

2010-04-06 Thread John Mattson
More up to date ref... CICS RACF Security Guide ftp://ftp.software.ibm.com/software/cics/pdf/dfht500.pdf TS3.1 http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsp?topic=/com.ibm.cics.ts31.doc/dfht5/topics/dfht5_overview.htm TS 3.1 http://publib.boulder.ibm.com/infocenter/cicsts/v

Re: Overlap Error

2010-04-06 Thread Terry Sambrooks
Hi Lizette, With regard to you comment on Ravi's problem: "For instance, does this program wait for stow to complete before moving onto the next DD?" Judging by the JCL sample he that was supplied with the original query, the Program is not performing a STOW it is relying on the operating system

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread Walt Farrell
On Tue, 6 Apr 2010 13:28:11 +0200, R.S. wrote: >Of course in every case we should know the meaning of the profiles and I >believe that the GIM.** profiles will be documented. It does not >contradict with the APAR statement - the risk details can be still obscured. >BTW: I bet the case is very biz

My IPLHIST exec (and LASTIPL)

2010-04-06 Thread Mark Zelden
Hi, I don't usually post updates about my utilities, but since my IPLHIST program was discussed at SHARE in Denver (Fully Wired) and the recent SHARE in Seattle (Cheryl's Hot Flashes), I've had quite a few emails about it. The code is trivial and basically shown in the IPLINFO source, but I dec

Re: MIGRATING TO Z/OS V1R11

2010-04-06 Thread Crabtree, Anne D
I think I have RACF right now, but now our usermod for ISFPARMS(we still use the macro YIKES) needs CK added. I'm pretty sure my boss would kill me if I messed with that during the day on a production system. I'm just guessing lol Will try some stuff on the weekend and see if I can resolve.

Re: setsockopt problem

2010-04-06 Thread Chris Mason
One of Osman, Cinar or Eren presumably - none of which matches "BR" If you are using the flavour of C sockets described in Chapter 10 of the z/OS Communications Server IP Sockets Application Programming Interface Guide and Reference manual, you are trying to use an unsupported function. If you

Re: MIGRATING TO Z/OS V1R11

2010-04-06 Thread George Fogg
> Crabtree, Anne D pisze: >> I believe I do have the necessary PTFs for these checks. Unfortunately, I >> do NOT have the CK panel set up in SDSF :( > > Try the following: > > //HZSPRINT EXEC PGM=HZSPRNT, > //PARM=('CHECK(*,*)') > //SYSOUT DD SYSOUT=*,DCB=(LRECL=256) > > > BTW: How is it pos

Re: MIGRATING TO Z/OS V1R11

2010-04-06 Thread Williamson, James R
-Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of R.S. Sent: Tuesday, April 06, 2010 9:32 AM To: IBM-MAIN@bama.ua.edu Subject: Re: MIGRATING TO Z/OS V1R11 Crabtree, Anne D pisze: > I believe I do have the necessary PTFs for these checks. Un

Re: MIGRATING TO Z/OS V1R11

2010-04-06 Thread Crabtree, Anne D
I am at z/os v1r9. It appears that I did not have it set up in z/os v1r7, therefore, I believe that RACF is not set up correctly? At least, that's what I've surmised up to this point... I am familiar with the print job. I will try that. Thanks! Anne D. Crabtree System Programmer WV Office

Re: MIGRATING TO Z/OS V1R11

2010-04-06 Thread R.S.
Crabtree, Anne D pisze: I believe I do have the necessary PTFs for these checks. Unfortunately, I do NOT have the CK panel set up in SDSF :( Try the following: //HZSPRINT EXEC PGM=HZSPRNT, //PARM=('CHECK(*,*)') //SYSOUT DD SYSOUT=*,DCB=(LRECL=256) BTW: How is it possible to not have

Re: MIGRATING TO Z/OS V1R11

2010-04-06 Thread Crabtree, Anne D
I believe I do have the necessary PTFs for these checks. Unfortunately, I do NOT have the CK panel set up in SDSF :( Anne D. Crabtree System Programmer WV Office of Technology Data Center 1900 Kanawha Blvd East Charleston, WV 25305 (304)558-5914 ext 58292 (304)558-1441 fax -Original Messa

setsockopt problem

2010-04-06 Thread osman cinar eren
Hi, I work on a C program on our zOS 1.9 environment. I want to learn if we can set timeout values on sockets, i.e.: struct timeval r; r.tv_sec=0; r.tv_usec=10; ... /*socket yaratılıp servera connect olunuyor*/ optres=setsockopt(sockfd,SOL_SOCKET,SO_RCVTIMEO, &r,sizeof(struct timeval)

Re: Hercules Emulator on window vista

2010-04-06 Thread David Andrews
On Mon, 2010-04-05 at 20:08 -0400, Stephen Y Odo wrote: > kewl ... how'd you do it [run the Tur(n)key system on N900]? The N900 runs an embedded Linux ("Maemo") on an ARM processor, with specialized device drivers for a handful of radios (GSM, GPS, BT, WLAN, what-have-you). It is unpolished as cu

Re: MIGRATING TO Z/OS V1R11

2010-04-06 Thread R.S.
Crabtree, Anne D pisze: I am reviewing the migration manual and one of the first thing it discusses is Using the IBM Health Checker for z/OS for migration checking. It indicates that some new checks need to be added and shows syntax for the /F HZSPROC command.If I want these migration che

MIGRATING TO Z/OS V1R11

2010-04-06 Thread Crabtree, Anne D
I am reviewing the migration manual and one of the first thing it discusses is Using the IBM Health Checker for z/OS for migration checking. It indicates that some new checks need to be added and shows syntax for the /F HZSPROC command.If I want these migration checks to be permanent, I tho

Re: Overlap Error

2010-04-06 Thread Lizette Koehler
I am curious how the dataset is being update? Is it with a homegrown process or a vendor supplied utility? (IEBCOPY, IEBGENER, etc...) PDSMAN as others have pointed out is only reporting the issue, nothing else. I am not clear on how the file is updated. Could you provide more detail on the upda

Re: Read only vts in DR

2010-04-06 Thread Erik Janssen
Hello Mike, Thanks for your response. I've tested with PRTITION and OPENRULE and it seems to be exactly what we need. Regards, Erik Janssen. On Mon, 5 Apr 2010 08:06:32 -0500, Mike Wood wrote: >Erik, RMM includes function that enables you to partition your libraries >across multiple s

Re: REXX and VTAM command responses

2010-04-06 Thread Staller, Allan
SYSTEM REXX? Requires z/OS 1.9 and above. See the discusson about AXRCMD... Or a Chris responded, NETVIEW. HTH, Hello list, I have a rexx that issues console commands and writes the responses to a dd after using getmsg to retrieve the response. Everything is good for MVS commands and JES2 comma

Re: Overlap Error

2010-04-06 Thread Martin Kline
>Does somebody has thought on that..?? i still see option to breakdown step >into 3 separate steps to make sure STOW open and close data everytime >and we don't see overlap error.. You can resolve the problem via JCL and leave the program alone. Have the output be three or more separate temporary

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread R.S.
Binyamin Dissen pisze: [...] :>Won't prevent them from modifying the RECEIVEd code, though... That :>needs PADS. Of course there's also the code signing approach. You would need signing, as they can modify the code before the receive or receive completely bogus stuff. Unless he downloads the

Re: Heads Up: APAR IO11698 - New SAF FACILITY class definition required for any SMP/E use

2010-04-06 Thread R.S.
Paul Gilmartin pisze: [...] But note that there are no permissions peculiar to AMASPZAP; all needed security is provided by protecting data sets and VTOCs. What can you do with AMASPZAP? You can ...ZAP data. This is powerful utility, but quite limited in terms of functions. You modify data and

Re: Overlap Error

2010-04-06 Thread Terry Sambrooks
Hi Ravi, With regard to the use of DISP=MOD and partitioned data sets. In my experience, and I can only speak from that perspective, I believe the recommendation in the manual is incorrect. It also seems to conflict with the DFSMS Utilities manual, where PARM=MOD is used on IEBUPDTE to indicate

Re: Overlap Error

2010-04-06 Thread Ravi Kumar
Thanks All/Martin.. As suggested DISP=MOD should replace DISP=OLD ..it has raised question for me since Mod is going to keep adding data in the existing member and that's where it fall down.. Does somebody has thought on that..?? i still see option to breakdown step into 3 separate steps to ma

out of the office

2010-04-06 Thread Steve Schwaller
I will be out of the office starting 04/05/2010 and will not return until 04/12/2010. I will respond to emails after returning on 4/12. If you need more immediate response, please contact Ryan Evans. * This communication may contain privileged and/or confidential information. It is intended