I tried "Let's Encrypt" https://letsencrypt.org/ once for some web site
names I have on a Linux server under my desk. I can't remember why I
didn't like it, but I ended up making my own CA cert to sign my https
certificates, and then got the few people using the sites to import my
CA into
I believe that's the idea.
Now with zERT being available, more encrypted workload types will get surfaced;
will probably lead to adding more application/transport types being added under
AT-TLS's capability.
Just speculation anyway..
What'll be interesting is if AT-TLS evolves to support mTLS
Thanks KB... I think I got my basic question answered, which is that
one thing AT-TLS was designed for is to encrypt data for TCP/IP programs
that weren't originally written with encryption. In addition, it sounds
like even programs that can do their own encryption (i.e. TN3270) can
also use
Tom, check this out - https://www.youtube.com/watch?v=YKEzX70moOQ
I also got 200 hits for 'AT-TLS' after logging in to share.org; you might want
to do the same to see which of those are the most useful to you.
- KB
‐‐‐ Original Message ‐‐‐
On Tuesday, June 30, 2020 10:27 PM, Tom
IBM announced that certain IBM z14 (Machine Type 3906) and IBM LinuxONE
Emperor II features will no longer be available effective June 30, 2021:
https://www.ibm.com/downloads/cas/US-ENUS920-113-CA/name/US-ENUS920-113-CA.PDF
Note that's 2021, i.e. next year as I write this. This future
I draw your attention to this Statement of Direction that IBM published on
June 23, 2020:
https://www.ibm.com/downloads/cas/US-ENUS220-033-CA/name/US-ENUS220-033-CA.PDF
Please also refer to IBM Announcement Letter 219-233 (mostly already
fulfilled).
- - - - - - - - - -
Timothy Sipples
I.T.
> IEC143I 213-B8 - An OPEN was attempted against an extended-format data set
> with a DCB that specified EXCP. EXCP is not supported for extended-format
> data sets.
That message text is in error. EXCP is supported, but you must have an
appropriate DCBE.
--
Shmuel (Seymour J.) Metz
AT-TLS Operates at the transport layer of the OSI model.
SFTP (open SSH,...) operates at the session layer of the OSI model.
BTW, TLS has been supported "forever" by FTP, etc. The problem is, with TLS,
the application needs to be modified to make TLS calls in the session layer.
With AT-TLS,
Thanks Allan. In TCP/IP programs I've written in C (both mainframe and
non-mainframe), I've used connect(), send(), recv() and similar C
functions for clear-text communication. So I think that would be called
the "logical layer".
And I'm assuming the "physical layer" would be at the point
Our initial login is two factor to NCPASS, then to TPX. All of our
TN3270 connections use PAGENT.
On 6/30/2020 5:09 PM, Steve Beaver wrote:
Is anyone using CA-TPX, CL/SuperSession, Etc and enabled PAGENT?
--
For IBM-MAIN
Is anyone using CA-TPX, CL/SuperSession, Etc and enabled PAGENT?
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Hopefully this will provide the clarity needed.
AT-TLS works at the physical layer.
FTPS and SFTP work at the logical layer
Although not mutually exclusive, If you are doing one, the other is unnecessary.
Start the flame wars! Shields up. Condition Red! AT-TLS vs. SFTP!
-Original
AT-TLS is required for TN3270 (and others
The above is incorrect. AT-TLS is *NEVER* a requirement.
It is up to the installation to determine whether or not AT-TLS will be used.
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Jackson, Rob
Sent: Tuesday, June 30,
AT-TLS has been around for a while. What is causing problems for tools like
CL/Supersession, CA-TPX
And such is PAGENT.
Once PAGENT is turned on all bets are off
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Tom Brennan
Sent:
> During the time of the 370s, I knew of a company which kept
> a 360 because it could do 1401 emulation in order to run a
> critical program.
So could any S/370 smaller than a 165.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM
I don't have a need to re-invent the Bible, so Sam's word (has always been) is
good for me...
zN
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of Tom
Conley
Sent: Tuesday, June 30, 2020 12:39 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: GRSRNL Example
On
We are attempting, on our QA LPAR, to use the SMS DC attributes,
Data Set Name Type . . . . . : EXTENDED
If Extended . . . . . . . . : PREFERRED
Extended Addressability . . : YES
for all of our sequential data sets. Of several hundred/thousands of dataset
allocations, during the test
On 30 Jun 2020 12:18:01 -0700, in bit.listserv.ibm-main
(Message-ID:)
frank.swarbr...@outlook.com (Frank Swarbrick) wrote:
Some time ago I noticed that z/OS Language Environment has
support for both "FORTRAN IV" and "VS FORTRAN" (FORTRAN 77
standard), even though the latest Fortran compiler
On 6/30/2020 1:52 PM, Knutson, Samuel wrote:
GRS User Experiences Converting all Reserves Plus Best Practice Tips and Tricks
https://www.share.org/p/do/sd/topic=50=3961
Circa 2008 but mostly still relevant.
Thanks, Sam
Sam's session is THE BIBLE on converting GRS reserves. I used it in all
Everything old is new again... Hope y’all are well! Thanks Sam.
Sent from my iPad. I take no responsibility for autocorrect...
On Jun 30, 2020, at 10:52 AM, Knutson, Samuel
wrote:
GRS User Experiences Converting all Reserves Plus Best Practice Tips and Tricks
I'm just the messenger...
Forwarded Message
Subject:IBM Alumni Directory
Date: Tue, 30 Jun 2020 15:59:22 + (UTC)
From: Bob McGrath
To: i...@agentsadvanceinc.com
Spending time updating the online IBM Alumni Directory while trying to
shelter in place.
Some time ago I noticed that z/OS Language Environment has support for both
"FORTRAN IV" and "VS FORTRAN" (FORTRAN 77 standard), even though the latest
Fortran compiler hasn't been enhanced since 1993 (??). I've been learning
modern Fortran (standards Fortran 90, 95, 03 and 08) using GNU
GRS User Experiences Converting all Reserves Plus Best Practice Tips and Tricks
https://www.share.org/p/do/sd/topic=50=3961
Circa 2008 but mostly still relevant.
Thanks, Sam
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Norman Hollander
Sent: Monday, June 29,
Some years ago this publication helped me come to a basic understanding of
AT-TLS (apologies if already shared)...
https://www.ibm.com/support/pages/leveraging-zos-communications-server-application-transparent-transport-layer-security-tls-lower-cost-and-more-rapid-tls-deployment
HTH
Mike
In article you
wrote:
> I've tried to skim some of the AT-TLS doc, and even attended an IBM
> webinar last week, but I'm still missing what I imagine are important
> background points. Maybe someone here can explain things, but don't
> worry too much about it.
> Client and server programs
Ah, maybe he was going on this or something similar, and it got garbled in
translation:
https://www.ibm.com/support/pages/zos-communications-server-tls-needed-implement-tls-v12
First Horizon Bank
Mainframe Technical Support
-Original Message-
From: IBM Mainframe Discussion List On
On Tue, 30 Jun 2020 09:57:48 -0700, Tom Brennan wrote:
>...
>Then if so, what happens on the FTP client side? I certainly can't use
>the Windows FTP command, for example, because it's not setup for any
>kind of encryption. That's kind of my big question here.
>
I believe that (sometimes)
My turn to say interesting! I didn't look it up; just going on what the Comm
guy assured me. We're still on 2.2 (shortly on to 2.4), so maybe that makes a
difference.
First Horizon Bank
Mainframe Technical Support
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Anything SFTP on Open/SSH will never use AT-TLS
FTPS - Is IBM's FTP program not using PORT 21 and running in secured mode,
setup to force authentication and use AT/TLS for encryption
MS
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of Tom
Brennan
Sent: Tuesday, June
Do you know if either of those require AT-TLS? When I installed and
configured SSHD last (a couple of years ago) it did its own encryption.
I never worked with anything called FTPS.
On 6/30/2020 10:12 AM, Marshall Stone wrote:
There are 2 types of FTP in use today on most mainframes.
SFTP
I have TLS 1.2 working in my TN3270 server without AT-TLS.
This is on z/OS 2.3
Lennie Dymoke-Bradshaw
Consultant working on contract for
BMC Mainframe Services by RSM Partners
‘Dance like no one is watching. Encrypt like everyone is.’
-Original Message-
From: IBM Mainframe Discussion
Interesting! I've set up the TN3270 parms on the mainframe for SSL/TLS
but that was before TLS1.2
On 6/30/2020 10:09 AM, Jackson, Rob wrote:
A note, without addressing your entire post (certainly not my area of
expertise): AT-TLS is required for TN3270 (and others) if you want to use TLS
There are 2 types of FTP in use today on most mainframes.
SFTP - which uses Open/SSH (SSHAGNT as client and SSHD as a server) and the
encryption/authentication is generally provided by the use of RSA/DSA
public/private key pairs. The public keys are exchanged and stored in
known_hosts files
A note, without addressing your entire post (certainly not my area of
expertise): AT-TLS is required for TN3270 (and others) if you want to use TLS
1.2 and higher. In your TELNETPARMS for the port, instead of using SECUREPORT,
you use TTLSPORT, referencing a port specified in a TTLSRule in
I've tried to skim some of the AT-TLS doc, and even attended an IBM
webinar last week, but I'm still missing what I imagine are important
background points. Maybe someone here can explain things, but don't
worry too much about it.
Client and server programs like SSH/SSHD call programs such
Hi Mike and Joe,
This is to inform you that they have it working now and we suspect that it
might have been the process in transmitting DASD volume to Hercules that was
causing issues but the good thing is that is working.
Your continous support and responses are very much appreciated,
What version of Hercules? Only a few latest versions support a volume that big.
On Tue, Jun 30, 2020 at 2:41 PM Jasi Grewal wrote:
>
> Hi Mike and Joe,
>
> Sorry about not providing model but is Model 27 rescue volume and I created 1
> Rescue z/OS v2r3 System.
> I will get my IBM friends to
Hi Mike and Joe,
Sorry about not providing model but is Model 27 rescue volume and I created 1
Rescue z/OS v2r3 System.
I will get my IBM friends to look for tapeconv.jcl on z/OS IBM System and then
use that instead of using IBM zVM DDR+Terse.
Your continous support and responses are very much
what model DASD?
Joe
On Tue, Jun 30, 2020 at 9:00 AM Jasi Grewal wrote:
> Thank You Mike for response and am an IBM Retiree and continues to work
> with IBMers.
> I am requesting IBMers to verify the Licensing and the message we are
> getting is that it cannot find PLPA dataset and yet the
Can you download a rescue IPL volume to define the dataset? Or
download an idled Paging pack with this on it and add to
configuration? Being in use may have made the copy bad.
On Tue, Jun 30, 2020 at 2:00 PM Jasi Grewal wrote:
>
> Thank You Mike for response and am an IBM Retiree and continues
Thank You Mike for response and am an IBM Retiree and continues to work with
IBMers.
I am requesting IBMers to verify the Licensing and the message we are getting
is that it cannot find PLPA dataset and yet the same IPL v2r3 volser was able
to IPL v2r3 System successfully under the IBM
Call from the IBM Lawyers in 3... 2... 1...
Joe
On Tue, Jun 30, 2020 at 5:35 AM Jasi Grewal wrote:
> Hi,
>
> I am sorry I am just learning Hercules Systems and trying to migrate one
> of my z/OS DASD Systems from Mainframe to Hercules Environment.
> I have z/VM running on Hercules but when I
Are you using CKD or CCKD64 volumes? CCKD has a 4GB limit and CKD has
to have a multi file setup.
On Tue, Jun 30, 2020 at 9:29 AM Michael Knigge wrote:
>
> All,
>
> have you ever came accross something like that?
>
> I can change into an directory, „ls“ works but „pwd“ returns…. Nothing?!?
>
If you are only testing on Hercules and will continue to run
production on IBM z series hardware, I believe IBM doesn't care. But
the SOFTWARE does check the hardware levels and you have to include a
particular configuration statement for a recent Z operating system to
run on Hercules. But if
Each ptf of JAVA is a full replacement. You only need the "last" PTF.
Next time you order maintenance or code, specify "eliminate supersedes" when
placing you order.
BTW, this means any modifications to the java source provided will need to be
reinstalled each time JAVA is updated.
BTDTGTS
There is currently no legal way. Now if IBM ever offers a z/OS license for use
under Hercules, ...
Meanwhile, can you IPL OS/VS2 R3.8?
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List
You are creating a 10,000 cylinder data set. Is it defined as extended
format?I also seem to recall that you had to define something in z/VM
for a volume when running z/PDT.
On Tue, Jun 30, 2020 at 4:29 AM Michael Knigge
wrote:
> All,
>
> have you ever came accross something like that?
>
>
In TSS/360, VPAM datasets can have both sequential and index sequential
members; you can read and write withing a member either sequentially or by key,
including inserting a new record between existing members. VIPAM is a
colloquial term for a VPAM dataset containing VIS members. From the
Have you complied with the licensing requirements?
On Tue, 30 Jun 2020 05:25:23 -0500 Jasi Grewal wrote:
:>I am sorry I am just learning Hercules Systems and trying to migrate one of
my z/OS DASD Systems from Mainframe to Hercules Environment.
:>I have z/VM running on Hercules but when I tries
Hi,
I am sorry I am just learning Hercules Systems and trying to migrate one of my
z/OS DASD Systems from Mainframe to Hercules Environment.
I have z/VM running on Hercules but when I tries to IPL z/OS it seems that
there is a corruption and that is most probably cause of wrong process.
I
If the Java service is packaged correctly then SMP will only install the most
recent PTF that you request. However, it will also install the FUNCTION. That
will not cause duplicate elements.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
It's impossible to tell from the information you've given. Pleas cut and paste
the entire transaction, from the prompt through the response. There is an error
code in the message that you need to look up.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
All,
have you ever came accross something like that?
I can change into an directory, „ls“ works but „pwd“ returns…. Nothing?!?
When I’m in this particular directory a „cd ..“ returns „EDC5122I Input/output
error.“
I’m pretty new to this „USS administration“ (I’m administering a z/OS
Hi Gadi AMV"SH,
If later PTFs are truly replacements, the hierarchy of PTFs should be
that every new PTF should SUPersede any old one.
This means that only the last one actually gets installed.
Regards,
David
On 2020-06-30 03:14, Gadi Ben-Avi wrote:
Hi,
When I ordered z/OS v2.4, I only
Sweet - thank you
Lionel B. Dyck <
Website: https://www.lbdsoftware.com
"Worry more about your character than your reputation. Character is what you
are, reputation merely what others think you are." - John Wooden
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
hi Gadi,
Perhaps the hold data will allow the APPLY job to figure out that only the
latest ones in the chain actually need to be applied.
Ones in the chain may be superseded, so it's always worth an APPLY CHECK to see
what's going on.
When downloading, the packaging system may be blindly
Hi LBD!,
Check these out-
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/PRS5416
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/PRS5415
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/PRS5414
- KB
‐‐‐ Original Message ‐‐‐
On Monday, June 29,
Hi,
When I ordered z/OS v2.4, I only ordered the 64 bit version of Java.
When we tried to start PFA, it failed. A quick search showed that PFA requires
the 31 bit version of java.
I ordered it using shopzseries.
The resulting package was over 13GB.
It looks like I have the base version and over
58 matches
Mail list logo
