Re: z/OS TCP/IP question: name resolution order/override

2016-09-21 Thread Rob Schramm
Easy. There is a directive to either do DNS first or Local first. Previous poster LOOKUP. Use local first if you want faster resolution for chatty DNS apps.. like Websphere. Convert to COMMONSEARCH to get unix, STC/TSO to resolve the same. Rob Schramm On Wed, Sep 21, 2016, 7:07 PM Paul

Re: z/OS TCP/IP question: name resolution order/override

2016-09-21 Thread Paul Gilmartin
On Wed, 21 Sep 2016 19:06:08 -0500, Paul Gilmartin wrote: >> >Someone once told me how to start a ssh client to work as >a NAT for AT/TLS. Tried it. Sort of worked. Didn't pursue >it because I didn't need it. And my ssh client was on a laptop >not subject to enterprise security. > Oops.

Re: z/OS TCP/IP question: name resolution order/override

2016-09-21 Thread Paul Gilmartin
On Wed, 21 Sep 2016 16:48:37 -0700, Phil Smith wrote: >Paul Gilmartin wrote: >> In the interim, could they just use the IP address? > >No, it's an SSL (TLS) connection. Need to address by hostname. > Someone once told me how to start a ssh client to work as a NAT for AT/TLS. Tried it. Sort of

Re: z/OS TCP/IP question: name resolution order/override

2016-09-21 Thread Phil Smith
Paul Gilmartin wrote: > In the interim, could they just use the IP address? No, it's an SSL (TLS) connection. Need to address by hostname. > Or choose a friendly nameserver in /etc/resolv.conf? Hm? The host isn't *in* DNS, or is in wrong. That's the problem.

Re: z/OS TCP/IP question: name resolution order/override

2016-09-21 Thread Tony Harminc
On 21 September 2016 at 18:40, Phil Smith wrote: > I had some vague idea that on z/OS, the Resolver can use some or all of: > > 1. DNS > > 2. Its own configuration data sets, via GLOBALIPNODES statements > > 3. /etc/hosts > > I just spent some time looking at IBM

Re: z/OS TCP/IP question: name resolution order/override

2016-09-21 Thread Paul Gilmartin
On Wed, 21 Sep 2016 15:40:24 -0700, Phil Smith wrote: > >What I'm really looking for is a way for a user-possibly a sysprog-to define >or override a hostname-to-IP mapping to test something. We keep coming across >customer systems that don't have a DNS entry for a server that uses SSL (TLS),

z/OS TCP/IP question: name resolution order/override

2016-09-21 Thread Phil Smith
I had some vague idea that on z/OS, the Resolver can use some or all of: 1. DNS 2. Its own configuration data sets, via GLOBALIPNODES statements 3. /etc/hosts I just spent some time looking at IBM doc, and what I found seems to support this. What I couldn't seem to grok was

Re: SYSZMCS Hang

2016-09-21 Thread Edward Finnell
EREP show anything on the offending LPAR? In a message dated 9/21/2016 7:27:03 A.M. Central Daylight Time, robert.richa...@opm.gov writes: An IPL of the true ENQ-owning system released the QNAME and other systems immediately responded.

Re: How do I see the end date for a certificate or key on z/OS 1.13 Tectia 6.4?

2016-09-21 Thread Charles Mills
I just looked at my code. There is no basic difference between the logic for a gskkyman key database name or RACF keyring name. If a product will accept one it should accept the other. You just need to be able to tell it "no stash file" -- and hopefully it is not doing something stupid like

Re: Progrematically discover ACS source library

2016-09-21 Thread Itschak Mugzach
Neil. No. This mail was never arrived mailbox. But I am happy you find it. I left this behind as I has to write many routines and this one put on ,y to do list. Will look at this one again later this week. Thanks. ITschak ITschak Mugzach Z/OS, ISV Products and Application Security & Risk

Re: Progrematically discover ACS source library

2016-09-21 Thread Neil Duffee
Itschak: found this lingering in my mailbox for a response and don't recall if you received an answer. For completeness, I'll repeat what was probably already provided by others. I believe you were looking for the information equivalent to ISMF option 7.5 "Source Data Set ACS Routine

Re: Corporate lawsuit exposure Was: k4t4949b (September 2016 refresh of the z/OS 2.2 manuals)

2016-09-21 Thread Jesse 1 Robinson
I detect a drift from Dilbert into the realm of Bat Man. If some poor soul chops off his own foot with an ax, we would not accuse him of inventing a new self-amputation tool. It's an unfortunate but unintended consequence of using an old tool improperly. Maybe we could find a cadre of available

Re: BPXAS sysout class

2016-09-21 Thread Lizette Koehler
Check out the $POJ or $PJ commands in JES2 You can also use Age|DAysdays Specifies the age of affected jobs in days. Only jobs more (with DAYS>nn) or less (with DAYS

Re: k4t4949b (September 2016 refresh of the z/OS 2.2 manuals)

2016-09-21 Thread Susan Shumway
Thanks for verifying! And no worries about the ado. We'd obviously rather know when things are broken so we can fix them quickly (if possible), and the tangential comments are always interesting. ;-) On 09/21/16 11:12 AM, John Laubenheimer wrote: I downloaded this morning. Looks great! Sorry

Re: BPXAS sysout class

2016-09-21 Thread Jesse 1 Robinson
I'm a bit wary of testing this change. A broken initiator process would be deadly. A less risky solution--I assume that the problem is a passel of STC output--might be to purge BPXAS on regular basis via, say, a JES automatic command. You could make a pretty small interval with A>1. As long

Re: k4t4949b (September 2016 refresh of the z/OS 2.2 manuals)

2016-09-21 Thread John Laubenheimer
I downloaded this morning. Looks great! Sorry for the much ado. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Strarting two instant of MQ in one LPAR

2016-09-21 Thread R.S.
W dniu 2016-09-21 o 07:19, Mohamed Juma pisze: Hi,Isit possible so start two MQ in one LPAR, each one of them has different IPAddress,andif is ok how to code the IP address Thanks, MohamedJumaMOI,Kuwait Yes, it is possible. You can use different addresses or just different ports (IMHO

Re: k4t4949b (September 2016 refresh of the z/OS 2.2 manuals)

2016-09-21 Thread Susan Shumway
I just received notice that the rebuilt kit is now available for download on IBM Pubs Center: https://www.ibm.com/e-business/linkweb/publications/servlet/pbi.wss?CTY=US=SRX=SK4t-4949 . One of us will post when the other, indexed PDF collection of 3Q16 drafts is posted, in case you prefer

Re: SYSZMCS Hang

2016-09-21 Thread Richards, Robert B.
An IPL of the true ENQ-owning system released the QNAME and other systems immediately responded. Bob -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Edward Finnell Sent: Tuesday, September 20, 2016 11:54 PM To:

Re: Strarting two instant of MQ in one LPAR

2016-09-21 Thread Ramiro Camposagrado
Yes, you can have multiple queue managers in a single LPAR. Below is an example on how you can code the I/P addresses, using dynamic virtual I/P addresses (DVIPA) VIPADYNAMIC VIPADEFINE 255.255.255.0