Try
http://ev11.evenue.net/manual/ibm/9atikeyu.htm
There are various indicators that CLASSPATH must be set properly in order
for it to work.
-Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send
Tim,
I haven't looked this up... but is the license for the IBM Metal C more
attractive to the customers that may have balked at the IBM C/C++
compiler?
-Rob Schramm
And to answer the other half of Magen Nargalit's question:
If a c/c++ connector s required and I don't have c/c++ compiler
Sam,
I am curious about the unintended affect of OA20749. Do you know if it
in general remove the restriction of non-SMS VSAM being limited to 4GB?
Regards,
Rob Schramm
Senior Systems Engineer
Sirius Computer Solutions
snip
Haven't they updated to support newer versions of the JRE? 1.6 is being
rolled out now. 1.5 is pretty much mainstream. 1.4.2 is on the way out.
Regards,
Rob Schramm
snip
--
For IBM-MAIN subscribe / signoff / archive access
systems. I think when we got up to 6 systems the ring started
getting a little more sluggish.. at which time GRS-STAR solved the issue.
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email
Ok Tom, then let me rephrase as a topic drift.
Does anyone know if the license for the IBM Metal C is more attractive to
the customers that may have balked at the IBM C/C++ compiler?
-Rob Schramm
--
For IBM-MAIN subscribe
Huh.. well.. I guess I am off to the manual/announcements. I was under
the impression that it was separately ordered... not just a part of the
existing C/C++ offering. I must have been engaging in wishful thinking.
-Rob Schramm
Sirius Computer Solutions
AFAIK, METAL is an option
or some people with some better
specifics. I have used the all of the above with the exception of the
TCP/IP tunnel.
-Rob Schramm
Sirius Computer Solution
snip
--
For IBM-MAIN subscribe / signoff / archive access instructions
straight is
helpful when trying to solve these types of problems.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM
The last place I worked used MQ to get faxes from the mainframe to a
RightFax server. Worked pretty well... although every so often RightFax
would decide not to take a liking to certain messages/sizes and respond
a bit petulantly.
Rob Schramm
Sirius Computer Solutions
Franco,
I am pretty sure that you can use the JZOS that comes with the 1.5 JDK.
Please see
http://dovetail.com/forum/viewtopic.php?p=1506
Kirk and Steve at Dovetail might chime in.. but it looks like running
Geronimo has been covered in the Dovetail forum.
Rob Schramm
Sirius Computer
technologies that cross platforms and include Z.
Thanks for reading,
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search
of people
on wintel than on the mainframe. We should entice the masses.
If our platform cannot stand the heat, we should exit the kitchen.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive
out there can come up with a scenario
that would justify it.
The simpler you keep the configuration the better off you'll be. There
are lots of fairly complicated items for encryption services and no need
to make it any harder on yourself than it has to be.
Rob Schramm
Sirius Computer
)
Rob Schramm
Sirius Computer Solutions
snip
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives
.
Additionally, if you are using a DR provider, you'll need to ensure that
the domain is cleared or set multiple times to a fake key. Probably a
bit paranoid... but then again it is more about the weakest link in
security/cryptography ... people.
Rob Schramm
.
And of course a plug for WebSphere Application Server when you want to
step into running with the big boys of application servers.
Of course I am only plugging for open-source and IBM solutions. There are
others out there.
Did I miss anyone? Don't want anyone to feel left out.
-Rob Schramm
Sirius
as a STC. The wrapper that Steve and Kirk came up with can be
written as evidenced by the only other z/Wiki advocate Harry Metske. But
Jzos works so well as to preclude the effort unless there is some
overriding technical explorative need.
Rob Schramm
Sirius Computer Solutions
is specifically
useful when using a TKE (although I am sure that there are other possible
uses). Control Domain becomes important if you are running Test and
Production TKE's with Test and Production LPARs in the same physical box.
Rob Schramm
Sirius Computer Solutions
snip
.
But if you take simple steps like keeping people from read access to your
database.. seems like such an easy prevention step.. oh and things like
keep APF authorization down to a controlled level.
We do exist on a platform with good controls.. however it does require
that we use them.
Rob
IBM HTTP Server based on Apache is indeed available for z/OS without
WebSphere Application Server. It is a fairly recent change.
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/WP101170
Rob Schramm
Sirius Computer Solutions
snip
final clarification. I will update the
list when I get a response.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM
by Apache for z/OS is a $$$ item.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives
experience with doing it in a
test/production environment.
Thanks,
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives
://www.felgall.com/cics2.htm
http://cicswiki.org
or hit google
http://www.google.com/search?q=%22exec+cics+start%22rls=com.microsoft:en-us:IE-SearchBoxie=UTF-8oe=UTF-8sourceid=ie7rlz=1I7GGIH
-Rob Schramm
snip
--
For IBM-MAIN subscribe
that are helpful instead of having some other
unix/windows group suggest a solution that is 1) non-mainframe 2) going to
cost $$$ in people and software.
I went to a 2 day free class on LDAP/Firewall stuff more than a few years
ago.. I found it very helpful at the time.
Rob Schramm
Sirius Computer
http://www.tucows.com/preview/361716 Seagull free version of the FTP
client.
also.. I think a PDSE would allow for greater than 8 character names.. or
ftp it into hfs which will allow for any suffixes.
-Rob
snip
--
For
Convert the reserve to enqueue via GRS parms might help some. Hardware
reserves are great when performing device tricks between non-grs'd
systems... but I am guessing that you have a multiple systems and the
reserve becomes progressively more of a pain-causing entity as more and
more systems
.
Additionally, if you want to house the wiki database in Db2 there is some
documentation on how to do it.
If you have questions regarding getting started, feel free to contact me
directly.
Cheers,
Rob Schramm
Sirius Computer Solutions
rob dot schramm at siriuscom dot com
There is a pretty nice redbook for the implementation that give a decent
step-by-step to get policy agent up and running. Much easier than what
you find in the regular manuals.
Communications Server for z/OS v1r8 TCP/IP Implemenation Volume 4:
Policy-Based Network Security.
Cheers,
Rob
.
The CEX2C cards are $$ but then also enable the full range of ICSF API's
and allow for secure key.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
on the programmers
invoking the services.
I am sure IBM has some reference customers... but I don't think you'll see
a list of all customers using it. Companies get very funny about this
stuff.
Cheers,
Rob Schramm
Sirius Computer Solutions
the ALIAS to the REAL name.
There is always much more than what I have described. You can hit the
DFSMS bookshelf for IDCAMS and CATALOG for additional information.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe
it. Unless they got rid of
all the folks that used to be there, I know they are more capable than
that answer. Have you performed a SECTRACE for CA support or the OMVS
trace?
Cheers,
Rob Schramm
Sirius Computer Solutions
Not that this is much more than a slightly silly suggestion.. but you
could use FTP to get the output.
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu
if cooled to absolute zero... still moving thru
space.
Cheers,
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives
creation. Just add the UID/GID assignment to
it. You'll be better off in the long run.
There is also the idea of auto-UID assignment in user ID creation as well
as a auto-UID assignment that is more generic.
Just my 2 cents,
Rob Schramm
Sirius Computer Solution
Did you try from the PC to the LINUX server to eliminate the LINUX server
or the portion of the network that the LINUX server is on as the issue?
I suppose that performing a tracerout to see the hops might reveal the
possible culprit.
Rob Schramm
Sirius Computer Solutions
that can
happen on a network.
I think the packet trace is a good idea as well.
Just another thought.. are you transmitting the same file in each of the
tests? (just making sure)
Rob Schramm
Sirius Computer Solutions
--
For IBM
François,
Honestly, I am not sure what to make of the problem. But for general
problem solving, I would ensure that files being transferred are all the
same. That the direction is the same.
I am always suspicious of files, ftp options, network paths (thru routers,
cables and firewalls) and
John,
I am curious about your intended use for the cards. Usually the intended
use plus any regulatory requirements gives quite a bit of information
about the final configuration for ICSF/CEX2C setup. If there is a TKE
involved, then there is a good SHARE presentation on the setup.
Rob
Ed,
Thanks for the link. Interesting stuff there.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
that is supplied by CPACF (millions of operations v.s.
thousands per second)
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM
/2140bdb5b560c10f86257322005feb47/$FILE/zAAP_White_Paper_V1_6.pdf
ftp://ftp.software.ibm.com/software/mktsupport/techdocs/every_zaap_v4.pdf
(watch the wrap)
Rob Schramm
Sirius Computer Solutions
snip
--
For IBM-MAIN subscribe / signoff
supply a plex name to allow them to co-exist. That way I could have one
for tech systems, one for development and one for production. In the face
of something unexpectedly bad happening.. then the scope of impact is
contained.
Just my 2 cents.
Rob Schramm
Sirius Computer Solutions
... there
is always something different.
Know that the platform and OS are set to do amazing things, however a bit
of
prudent operational planning can always assist when Murphy knocks at the
door.
Rob Schramm
Sirius Computer Solutions
asym-mk (TKE)
3) re-encipher pkds (TSO panels)
4) activate new pkds (TSO panels)
It doesn't matter that the PKDS is empty or not.
Regards,
Rob Schramm
Sirius Computer Solutions
snip
--
For IBM-MAIN subscribe / signoff
to
DB2 which might make it easier to find. Then you can go about making the
proper GRANT in DB2 or associating the proper GROUP with the right User
ID. Or if feeling more adventurous, converting all DB2 security into the
security product.
Hopefully that helps some,
Rob Schramm
Sirius Computer
it for the OPERCMDS MVS.UNKNOWN .. which will
tell him what User ID is being used. Then the appropriate GRANT or GROUP
can be setup.
Cheers,
Rob Schramm
1 crow pie lane
--
For IBM-MAIN subscribe / signoff / archive access instructions
Of course you can always centralize your internal certificate process
using the PKIServ. Which will help you remember via notification before a
certificate is going to be revoked.
Rob Schramm
Sirius Computer Solutions
.
Additionally, there is a bunch of CPACF/ICSF information located on the
techdocs
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/Web/Techdocs
Just search for crypto.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN
I am looking for the simplest way to intercept/modify an i/o for a VSAM
data set without impacting the application.
All suggestions are welcome.
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions
Ulrich,
I want to modify it before the original caller sees it. Additionally, if
they update or write a new record.. I am looking to modify what gets
written.
I had considered the VSAM special processing exit, but I don't think it
will do what I want.
I had haven't contacted IBM yet. I
Greetings IBM-MAINers
After leaving my position at Fifth Third Bank, I am settled in with my new
job at Sirius Computer Solutions.
I will now resume my opinionated list lurking. vbg
At any rate, I can now be contacted for my favorite subjects:
- ICSF, Crypto TKE
- TOMCAT and JSPWiki
Rob
Hi Eileen,
I am sure that you got the same response from Steve and Kirk... huh?!?
vbg
That is a bit weird. The place I had it setup, was running z/OS 1.8 with
ICSF implemented and locked down on the CSFSERV resource. If I had to
guess, I would say it was a mount point/file system permission
Eileen,
I am glad it is working. I am more than a bit skeptical that ICSF was
somehow interfering with the startup.
If you come across something like it in the future, the other thing I can
suggest is turning on some of the debugging for the JVM.
If JZOS had ceded control over to the JVM,
..
attempting to address all the issues with ICSF, can mean additional and
unexpected coding requirements.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
clear pin
* then off to how do I print it securely
DKMS
* IBM has a product to help with all the various key management stuff
including pins and mailing.
* http://www.ibm.com/security/products/prod_dkms.shtml
Regards,
Rob Schramm
Sirius Computer Solutions
Or you could head down the path of using a vendor zip. I did a quick
check.. PKZIP supports compression of files over 9 exebytes in size. I am
sure that there are others as well.
Rob Schramm
Sirius Computer Solutions
I agree with all the others about doing QoS. Additionally, I am curious
if you are doing OSPF?
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu wrote on 06/25/2009
12:45:24 PM:
//SEARCH EXEC PGM=ISRSUPC,PARM=(SRCHCMP,'ANYC') //NEWDD DD
DSN=SOME.DATA.SET,DISP=SHR//OUTDD DD
SYSOUT=*//SYSIN DD *
activated for defense of application coders
Cheers,
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http
to handle a data issue seems overkill. Granted if all the
data is exception... but then I go back to not really testing it.
On 15 Sep 2009 07:55:25 -0700, rob.schr...@siriuscom.com (Rob Schramm)
wrote:
I always thought that abending a cobol program was a lame duck method.
Bringing that practice
exception to be remediated and continue. While I did cede
that abends may be useful, some actual programming logic would be more
useful. Basics are documented in DB2 SQL manuals.
Abend processing may have been popular.. but does it still need to be as a
normal course of action?
Rob Schramm
... get back to stone age
living.
I thought this thread started out more as a batch issue.
Oh well..
I guess it comes down to the difference of good programming and poor
programming.
Cheers,
Rob Schramm
--
For IBM-MAIN
they handled 3 digit to 4 digit UCB..
didn't really retrofit.. just made something new.
Cheers from the cheap seats,
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
My 2 cent,
http://www.redbooks.ibm.com/abstracts/sg247699.html?Open
Chapter 7. IP Filtering
Regards,
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu
I agree.. binary / ascii transmission issue? aka went thru conversion and
didn't need to? Tag on file is wrong and autoconvert is on?
-Rob
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to
Steve,
Just for the sake of elimination and general distrust..
What happens if you do
/u/Java6_31/J6.0/bin/java /u/Java6_31/J6.0/HelloWorld.class
java /u/Java6_31/J6.0/HelloWorld.class
Personally, I try to always start at the lowest point and work my way up.
When it is weird, trust
*Ouch*
-Rob
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Munif,
Session level encryption requires the crypto processor.
Regards,
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu
are truncated after column
71,which is
even uglier. :-(
--
Edward E Jaffe
-Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
a PCI Qualified Security Assessor .. they should be
able to point to everything the PCI folks care about.
-Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email
I second this motion. The USS acronym debate has been debated ad nauseam,
please let it go the way of the dodo bird.
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
I know that there are a few shops running JSPWiki under Tomcat on z/OS.
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search
One nice thing about JSPWiki, is that one of the guys helping with
development is a mainframer.
http://www.jspwiki.org/wiki/HarryMetske
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email
NSINTERADDR to include your DNS server in the list of available DNS IP
addresses.
NSINTERADDR 14.13.12.11 9.9.9.9 6.7.8.9
Hopefully this helps,
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access
are a few examples of vendors that put the version
information out in an accessible format.
Please put your support/latest version information for your products on
the web in a way that EVERYONE can get to it
/end vendor rant
Rob Schramm
If the EKM is on z/OS, then the whole thing is under sysprog control. An
external DNS becomes somewhat superfluous.
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
Radoslaw,
I can think of 5 very good reasons.. the same five given to musicians for
not practicing:
1) there
2) is
3) no
4) good
5) reason
I agree with you as well about the documentation. But if the doc were
available, I could glean the version information from it. Version
information is
typewriters. But s many things get done in an organic
fashion.. why not e-mail?
Cheers,
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
Is anyone else having problems with the z/OS library center? None of the
bookshelves appear for me. I have tried Chromium, Firefox and IE.
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive
I am curious... what did CA say?
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at
it wrong, in my
experience.
--
Walt Farrell, CISSP
IBM STSM, z/OS Security Design
Walt,
Do you have some guidance for the most people?
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access
Richard,
Where are the certs being stored?
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search
a bit of picking nits)
Rob Schramm
Sirius Computer Solutions
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http
Bill,
I am unsure why this would be surprising. If the security is setup,
properly.. you can deny pretty much anything.
TSS PER(control-o's acid) OPERCMDS(MVS.REPLY) ACC(READ)
TSSUTIL security report should show the reason for the denial.
writing tapes without encryption.
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives
to run
a cmd line from the directory in question and run a rename * *.txt
BTW, mput has the same set of restrictions.
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
I have a client that uses Simplist ... it is pretty cool... especially
driving everything from ISPF.
-Rob
snippage
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with
Barry,
I couldn't find it. I didn't find it in any RFC either. Nmap must be an
extension that isn't always supported. I don't see it as part of the
windows client. The only references I see are for unix.
Rob Schramm
Wired ran a story on a way to convert old books.
http://www.wired.com/gadgetlab/2009/12/diy-book-scanner/
It allows for 2 pages at a time.
Not sure if this helps
Rob Schramm
Senior System Consultant
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN
Just make sure you don't have any keys in the PKDS.
Rob Schramm
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf
Of Francis van Zutphen
Sent: Tuesday, January 18, 2011 7:59 PM
To: IBM-MAIN@bama.ua.edu
Subject: Is a Master Key mandatory
Tracy,
If that is the display for /tmp then it is ZFS, I would go with one of the
prior posters suggestion about zfsadm grow.
Rob Schramm
On Fri, Jan 21, 2011 at 12:11 PM, Adams, Tracy tad...@cvps.com wrote:
I do not have a mount of /tmp in my active BPXPRMxx member. Actually
.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
--
Rob Schramm
. Every time the block tried to cross the river it got an I/O
error.
The fix was a patch to the ASIC code.
Hopefully this helps,
Rob Schramm
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists
I thought I heard that Greg was going to work on multi-tasking for DB2.
I agree. Greg was a wonderful contributor for IBM-Main.
Rob
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to
Alan,
Have your reviewed the RACF/ACF2/TSS security and permission for
/var/CEAServer
http://www-01.ibm.com/support/docview.wss?uid=isg1OA23747
Rob
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email
You forgot the unallocate to remove the enque.
SETPROG LNKLST,UNALLOCATE
SETPROG LNKLST,ALLOCATE
And set it back to being safe...
Rob
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf
Of Mark Pace
Sent: Thursday, February 03, 2011 1:32 PM
...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
--
Rob Schramm
Senior Systems Engineer
w: 513.305.6224
--
For IBM-MAIN subscribe / signoff / archive access
1 - 100 of 261 matches
Mail list logo
