Re: Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread retired mainframer
Were you careful to follow you system's standard regarding discrete vs generic fully qualified dataset profiles? > -Original Message- > From: IBM Mainframe Discussion List On > Behalf Of Frank Swarbrick > Sent: Friday, November 06, 2020 4:25 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject:

Re: How best to copy all UNIX files one z/OS to another

2020-11-06 Thread kekronbekron
A fellow wombat fan! - KB ‐‐‐ Original Message ‐‐‐ On Saturday, November 7, 2020 3:54 AM, Paul Gilmartin <000433f07816-dmarc-requ...@listserv.ua.edu> wrote: > On Fri, 6 Nov 2020 13:44:08 -0800, Charles Mills wrote: > > > > Why use "*" (which caused you problems previously) rather

Re: Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread Arthur
Frank Swarbrick said: I was successfully able to use the Security System (RACF) panels to add a dataset profile for a dataset with my HLQ, with UACC(NONE). I had another developer who would normally have access try to view it and he was blocked. You might want to tell your security people

Re: JES2 Policies

2020-11-06 Thread G. Tom Russell
We 'purchased' a system from another site. The jobs that came with the system do not have a CLASS parameter specified. They do have specific values in the accounting fields that are supposed to assign the job to specific classes. I assume they had an exit that did all of this. This sounds like

Re: Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread Lennie Dymoke-Bradshaw
Frank, By default a RACF userid can modify RACF dataset profiles which have a high-level qualifier of that userid. Also by default the RACF userid can create new data set profiles with the userid as the high level qualifier. There are numerous way to alter this behaviour including use of GLOBAL

Re: Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread Frank Swarbrick
Thanks! I was successfully able to use the Security System (RACF) panels to add a dataset profile for a dataset with my HLQ, with UACC(NONE). I had another developer who would normally have access try to view it and he was blocked. Didn't really expect for this to work, but glad it did.

Re: Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread Jesse 1 Robinson
If your shop does not already do this, consider a global rule that allows the *owner* of a data set full access control. The following 'rule' allows just that. CLASS NAME - GLOBAL DATASET MEMBER CLASS NAME -- -

Re: Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread Mike Hochee
You might make a case to your security admins for UACC(NONE) for data set(s) involving your profile or add a profile for a specific data set with universal access none, yet providing you with whatever is needed; read, update, or alter. (this assumes you are using RACF, not sure of the TSS or

Re: Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread Paul Gilmartin
On Fri, 6 Nov 2020 14:58:13 -0700, Lizette Koehler wrote: >If you own the dataset and RACF Admins permit it, > What does "own" mean to MVS? I believe from the beginning it meant, "The sysop consents to enter your data set password when prompted." >You should be able to alter your Datasets in

Re: How best to copy all UNIX files one z/OS to another

2020-11-06 Thread Paul Gilmartin
On Fri, 6 Nov 2020 13:44:08 -0800, Charles Mills wrote: >> Why use "*" (which caused you problems previously) rather than "." > >Not clear on the difference. See "not a UNIX professional." Did * cause me >problems? I thought it was a file named -x that caused the problems. Deleting >the file

Re: Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread Lizette Koehler
If you own the dataset and RACF Admins permit it, You should be able to alter your Datasets in MVS using the RACF Commands or Panels. Will not work if you are not the owner of the file. For Example I own all datasets that begin with my TSO ID. I do not own SYS1 datasets. SO it just depends

Re: How best to copy all UNIX files one z/OS to another

2020-11-06 Thread Charles Mills
> Why use "*" (which caused you problems previously) rather than "." Not clear on the difference. See "not a UNIX professional." Did * cause me problems? I thought it was a file named -x that caused the problems. Deleting the file named -x sure solved the problem! I took care to put the

Can a non-admin restrict others from viewing one of their own MVS data sets?

2020-11-06 Thread Frank Swarbrick
In the Unix world one can use chmod (change mode) on their own files to make it so non-superusers cannot view a particular file. Is there anything similar for MVS data sets? -- For IBM-MAIN subscribe / signoff / archive access

Re: How best to copy all UNIX files one z/OS to another

2020-11-06 Thread Paul Gilmartin
On Fri, 6 Nov 2020 10:58:46 -0800, Charles Mills wrote: >To close the loop on this, I ended up using >pax -wvzf /u/directory/myarchive.pax -x os390 * > Why use "*" (which caused you problems previously) rather than "." One hazard might be that the archive file lies within the hierarchy being

Re: How best to copy all UNIX files one z/OS to another

2020-11-06 Thread Charles Mills
To close the loop on this, I ended up using pax -wvzf /u/directory/myarchive.pax -x os390 * on the sending end, FTP STREAM/IMAGE, and pax -rvf myarchive.pax and CHOWN in some cases on the receiving end. Seems to have worked like a champ. As I had guessed, FTP was super fast. I did not write

Re: VUE - how to find it?

2020-11-06 Thread Al Sherkow
This is correct, the VUEs are usually in the product announcement letters. Though there have been a few over the years that did not include the VUE. I've been tracking these since 2004 for my LCS tool. Mine is the only single list of all the SW VUEs I'm aware of (though this might be in some

Re: Offsets SMF17

2020-11-06 Thread Sri h Kolusu
> I want to make a list of the files that have been deleted, from SMF > record 17, and it must be offsets but nothing comes out. > can you help me? Jordi, As others mentioned, your offsets are off. SMF17 layout is pretty straight forward. So you can code DFSORT symbols and use them instead of

Re: Display PSW on HMC

2020-11-06 Thread Mark Jacobs
Thanks. I needed to go into the support element to find it. Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key - https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com ‐‐‐ Original Message ‐‐‐ On Friday, November 6th, 2020 at 7:49 AM, Tom Mathias wrote:

Re: Display PSW on HMC

2020-11-06 Thread Tom Mathias
To display the PSW, you need to use the "display / alter" task; there is a selection in that task to display the PSW. Tom -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to

Display PSW on HMC

2020-11-06 Thread Mark Jacobs
I'm trying to IPL standalone FDR on a z15-T02 processor. It loads successfully, but I can't get the integrated HMC console to display anything. Reading the manual it advises me to display the PSW to see what's going on. I stopped the processors on that lpar, but can't find a way to display PSW

GSE UK Virtual Conference - Week 2 coming up - you can still register

2020-11-06 Thread Keith Banham
Hi Everyone Week 1 just completed, week 2 of the conference is starting on Monday 9th November and you can still register! You may already be aware that the GSE UK Virtual Conference for 2020 is taking place between 2nd and 12th November - this is in place of the annual physical conference

Re: Offsets SMF17

2020-11-06 Thread Jordi Bornay
grande Max. grazie mille -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Offsets SMF17

2020-11-06 Thread Massimo Biancucci
Jordi, I ran you job updating all the columns to the right values: //TOOLIN DD * COPY FROM(RAWSMF) TO(SMF) USING(SMFI) DISPLAY FROM(SMF) LIST(SMFREP) - TITLE('SMF-17 : WHO DELETED DATASETS') DATE TIME PAGE - HEADER('SMF') ON(6,1,BI) - HEADER('SYS') ON(15,4,CH) -

Re: Offsets SMF17

2020-11-06 Thread Jordi Bornay
hi, modified... DISPLAY FROM(SMF) LIST(SMFREP) - TITLE('SMF-17 : WHO DELETED DATASETS') DATE TIME PAGE - HEADER('SMF') ON(6,1,BI) - HEADER('SYS') ON(14,4,CH) -SMF17SID HEADER('DATE') ON(10,4,DT1,E'/99/99') -

Re: Offsets SMF17

2020-11-06 Thread Jordi Bornay
thank's I will review the INCLUDE to see if it is what you say. (My background is not that ...) OPTION STOPAFT=1000 INCLUDE COND=(6,1,BI,EQ,X'11',AND,45,4,CH,EQ,C'UCAT') 0021000 SORT

Re: Offsets SMF17

2020-11-06 Thread Martin Packer
To debug this I would do the following: 1) Code OPTION STOPAFT=1000 2) Code something that displays the values in the fields you're doing the INCLUDE on. That way you can see if you're actually processing the INCLUDE fields properly. In my experience there are two reasons for "no records

Re: Offsets SMF17

2020-11-06 Thread Massimo Biancucci
Jordi, I don't know your dataset naming convention, anyway dsname start at offset 44 but it's byte 45 for ICETOOL (like 6 is the position of record type). Offsets Name Length Format Description 5 5 SMF17RTY 1 binary Record type 17 (X'11') ... 44 2C SMF17DSN 44 EBCDIC Data set name. Hope this

Offsets SMF17

2020-11-06 Thread Jordi Bornay
hi, It may be a small detail, but sometimes when you think about it a lot, you don't see it. I want to make a list of the files that have been deleted, from SMF record 17, and it must be offsets but nothing comes out. can you help me? Thank's jcl: //SYMBOLS INCLUDE MEMBER=SYMBOLS