Re: SR

2012-06-08 Thread Tom Ambros
I'm not feeling the hate, except for the one item just mentioned. The second sign on amounts to 9 keystrokes, one click and one enter - first character of userid, accept Chrome's prompt, enter password and hit enter. Once a day? No big deal. Leave the browser window open. Being able to

Re: IBM(r) z/OS(r) Management Facility (z/OSMF)

2012-05-24 Thread Tom Ambros
Do it. If you do any policy based networking you'll be happy you did. Incident packaging is nice, we don't use it a ton because we haven't seemed to have had too many incidents for a while but it does make it simpler to get all the diagnostics wrapped up with a bow. It looks like there's a

Re: Servicelink, ETR and SR

2012-05-17 Thread Tom Ambros
Did I miss this in the discussion? I got this from srdonotreply this morning: 'We would like to inform you of an important change in opening and managing service requests with IBM for Passport Advantage and Passport Advantage Express products. Details of the change can be found at ... HTTP

Re: It's feeding time in Jurassic Park . . .

2012-05-07 Thread Tom Ambros
-MAIN@bama.ua.edu Thomas, This is very helpful. When you say You can couple up to eight nodes, do you mean 8 CECs to a zBx, that 8 CECs can share a zBx? If so, does zManager serialize the I/O? On Fri, May 4, 2012 at 4:18 PM, Tom Ambros thomas_amb...@keybank.comwrote: To be pedantic You

Re: It's feeding time in Jurassic Park . . .

2012-05-04 Thread Tom Ambros
To be pedantic You have a zEnterprise node, which is a z196/z114 with zero or one attached zBX. A zBX may have one to four frames. You can couple up to eight nodes. This comprises the domain of a single zManager. I suppose you could get clever and set up some sort of recovery and

DMD and FILESYSTYPE(INET) stack name resolution question

2012-04-27 Thread Tom Ambros
I noticed that the ipsec -F add commands were appearing to work correctly, retcode 0 and the files in /var/dm/filters updated appropriately, but oddly no packet filtering took place. An ipsec -F display command showed no filters in the stack and defensive mode inactive. Specifying the stack

Re: What are these facility classes

2012-02-23 Thread Tom Ambros
Compuware Xpediter, according to my pals at Google. Thomas Ambros Operating Systems and Connectivity Engineering 518-436-6433 From: Lizette Koehler stars...@mindspring.com To: IBM-MAIN@bama.ua.edu Date: 02/23/2012 15:37 Subject:What are these facility classes Sent by:

Re: TLS, AT-TLS, Encryption Requirements

2012-02-07 Thread Tom Ambros
Make sure you understand the SERVAUTH EZB.INITSTACK.** requirements for things like OMPROUTE and use DELAYSTART if you're autologging things. We're considering whether it is worth changing up parent-child relationships in SA because it can be disconcerting to see lots of ICH408I messages

RACF Passticket: password required on userid?

2012-02-07 Thread Tom Ambros
Forgive me for posting this here, it belongs on the RACF list I am sure but I do not have that address handy to register. It may be a simple enough question that it can be answered here. I am attempting to use the passticket authentication method for the IKE client to NSS. If I define a

Re: RACF Passticket: password required on userid?

2012-02-07 Thread Tom Ambros
the password itself is being used for successful authentication, not the PassTicket. Well, you say that's not so. I don't know. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Tom Ambros Sent: Tuesday, February 07, 2012 1:50 PM

Re: TCPIP question - on the subject of more than one stack per zOS image

2011-12-21 Thread Tom Ambros
There's no compelling reason, as far as I know, to run more than one stack with the progress that has been made. IBM recommends that you do not. There's a set of four very good redbooks on TCP/IIP Implementation, SG24-7798-00 through SG24-7801-00. I have leaned on them heavily recently,

Re: SMF 119 report

2011-11-10 Thread Tom Ambros
Do you have MXG? If you do I may have something already coded. Thomas Ambros Operating Systems and Connectivity Engineering 518-436-6433 From: Andy White awh...@metlife.com To: IBM-MAIN@bama.ua.edu Date: 11/10/2011 08:21 Subject:SMF 119 report Sent by:IBM Mainframe

Naive BCPii questions

2011-08-16 Thread Tom Ambros
- I have the zSeries API documentation and the BCPii specific zOS docs but I am not able to find items related to returned values, for example HWIQUERY of HWI_OPERSTAT. I can probe and knowing the state of what I'm seeing can infer what I am getting but I'd like to find wherever these flags

Re: Naive BCPii questions

2011-08-16 Thread Tom Ambros
@bama.ua.edu 08/16/2011 10:07 Please respond to IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu To IBM-MAIN@bama.ua.edu cc Subject Re: Naive BCPii questions On Tue, 16 Aug 2011 08:50:38 -0400, Tom Ambros thomas_amb...@keybank.com wrote: - I have the zSeries API documentation and the BCPii

Anyone running cascaded Metro/Global Mirror?

2011-08-05 Thread Tom Ambros
We're being told that we are not going to see consistency groups formed on the GM side while we run MM until we suspend MM at which point we get one consistency group formed and can flash to our recovery volumes at the remote site. This is inconsistent with the DS8000 Copy Services

ITEM NAME(MSGBASED) - any considerations?

2011-05-06 Thread Tom Ambros
For various reasons I'm going back through and reading some stuf I haven't looked at in a long time... like before zOS 1.8, in this case. I see the CFRM couple dataset format parm MSGBASED. Is this a no-brainer or are there considerations sites have experienced that are not necessarily

zOSMF: Site customizable user roles

2011-04-25 Thread Tom Ambros
As zOSMF includes more functions, it is more likely that an installation will want to add user roles beyond the few available today. For instance, I'd like to set it up so my Capacity Planning group can see Links and WLM admin, but not Comm Server Configuration. Certainly I can protect all

zOS Media Manager and encryption - practical?

2011-04-25 Thread Tom Ambros
Would it be practical to implement encryption at the Media Manager layer, key label and access rule definitions maintained in the SMS dataclass, similar to the way it's done in the distributed environment by the IBM Encryption Expert product. Basically, that product installs a shim in the

Re: zOSMF: Site customizable user roles

2011-04-25 Thread Tom Ambros
at http://www.redbooks.ibm.com/redpieces/abstracts/sg247851.html?Open http://www.ibm.com/vrm/newsletter_10300_8855_192978_email_DYN_1IN/GDiPillo126694429 Regards, Gary DiPillo Axios Products On 04/25/2011 8:52 AM, Tom Ambros wrote: As zOSMF includes more functions, it is more likely

z/OS Management Facility - Drift. Batch method to clean up Incident Log?

2011-04-12 Thread Tom Ambros
How do we clean up unreasonably large numbers of duplicate Incident Log entries? Is there a good programmatic way to do it? Aside from assigning the virtual equivalent of making somebody write on the chalkboard I will not leave MATCHLIM undefined 65535 times, telling them to clean up each