Robert, here is my code:-
Report_TSO_Logon_Parameters:Procedure Expose gda_parm. ,
gda_parm_cnt
Address TSO
I would assume that a lot of that service predates the SECINT hold class, and a
source of SECINT was better than nothing.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf
There are many ERROR holds in the Enhanced Holddata against Function SYSMODs. I
believe that this is done when the error is in the function, as opposed to
being introduced by a PTF. Perhaps these days it is unusual for a SECINT error
to be introduced by a PTF, but if it was, I would expect the
The holddata for SECINT looks like below. Note the function SYSMOD, not PTF
SYSMOD ID:
++ HOLD(HSMA230) FMID(HSMA230) REASON(BHx) ERROR DATE(yyddd)
COMMENT(SMRTDATA(FIX(UIx) SYMP(B5.9,T5.7)
CHGDT(yyddd))) CLASS(SECINT).
++ HOLD(HSMA240) FMID(HSMA240) REASON(CHx) ERROR
Late to the party on this discussion... DFSMS recently shipped a new utility
named GDKUTIL. It converts z/OS data sets and UNIX files to cloud objects and
visa-versa. This enables utilizing cloud object storage as a method for z/OS
sharing data, such as SMF, as opposed to FTPing. Use GDKUTIL
I could be wrong, but I suspect that any information you get from the GUI will
simply tell you how much of the raw storage has been configured as volumes that
can be used by the operating systems connected to your DS8k. The GUI cannot
make sense of the data on the volumes. To the GUI, I think
?
The reason id for SECINT is the APAR number in the REASON parameter; SECINT is
not a reason id.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
Dave Jousma
On 1/19/2023 7:55 AM, Itschak Mugzach wrote:
Another issue is that IBM does disclose such information on IBM I (AS/400).
That's interesting!
I had (wrongly) assumed their methodology was the same across those two
platforms. What about P?
--
Phoenix Software International
Edward E. Jaffe
An ASSIGN statement assigns a source-id, not a class.
--
Tom Marchant
On Thu, 19 Jan 2023 11:22:44 -0600, Dave Jousma wrote:
>I'll correct myself. i normally just download the ASSIGN file and receive
>that. I took a peek at the HOLDDATA file on RL and the sample PTF is in
>there.
Is there a command or facility within DS8K to generate storage array
utilization report ?
On Thu, Jan 19, 2023, 5:51 PM Paul Gorlinsky wrote:
> This is the theoretical maximum… not realistic… the available usable space
> is 100% determined by the blksize and optional key size… zOS use at most
>
The CLASS is on the ++HOLD, not on the ++PTF. The reference that Shmuel
included had been updated relatively recently to include SECINT. It was not
there in the SMP/E V3R6 manual. Perhaps the other reference to hold classes was
not updated inadvertently. Or perhaps they don't intend that a user
On Thu, 19 Jan 2023 11:00:52 -0600, Dave Jousma wrote:
>
>Might be a SMPE doc problem? IBM is documenting a reason ID in the Class
>section. I see that here:
>https://www.ibm.com/docs/en/zos/2.5.0?topic=statements-hold-mcs which
>documents as your said:
>
>CLASS
>a 1- to 7-character
On Thu, 19 Jan 2023 16:37:28 +, Seymour J Metz wrote:
>"SECINT
> The reason ID SYSMOD identifies a fix for a security or integrity error.
> HOLDDATA for security
> or integrity fixes is available through the z Systems Security Portal.
> Information on registration
> and accessing the
"SECINT
The reason ID SYSMOD identifies a fix for a security or integrity error.
HOLDDATA for security
or integrity fixes is available through the z Systems Security Portal.
Information on registration
and accessing the z Systems Security Portal is available at Enterprise
security
On Thu, 19 Jan 2023 16:13:06 +, Seymour J Metz wrote:
>We may be talking at cross purposes here; I'm concerned about the hold class
>SECINT, not the source with the same name. The SECINT hold is on the PTF with
>the exposure, not the PTF correcting it.
>
> LIST HOLDDATA HOLDERROR.
>
>
We may be talking at cross purposes here; I'm concerned about the hold class
SECINT, not the source with the same name. The SECINT hold is on the PTF with
the exposure, not the PTF correcting it.
LIST HOLDDATA HOLDERROR.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
The funny thing is that IBM only hides the reason. I am able to identify
ptfs that are SECINT programmatically, but I would like to get the CVE
factors.
Another issue is that IBM does disclose such information on IBM I (AS/400).
ITschak
*| **Itschak Mugzach | Director | SecuriTeam Software **|**
On Thu, 19 Jan 2023 15:30:07 +, Seymour J Metz wrote:
>I'm concerned with the SMP side of things; as long as a PTF is correctly
>flagged as PE, I don't care about the APAR unless there is a reason to bypass.
>
>
>--
>Shmuel (Seymour J.) Metz
>http://mason.gmu.edu/~smetz3
>
I cannot say for
ideally there would be holds for both PE and SECINT classes, each with the APAR
number in the REASON. That way even if you don't have access to SECENT you can
tell that there is an error. My question was whether the public HOLDDATA
included PE for any PTF with SECINT.
--
Shmuel (Seymour J.)
On 2023-01-19 14:45, Walt Farrell wrote:
On Thu, 19 Jan 2023 15:02:06 +, Robert Prins
wrote:
And then you realise that the question should have been, "How do I get at
it (control-block chasing-wise) in REXX?".
At what time in the user's logon, and where is the REXX exec running?
The
Wouldn't a hold with CLASS(SECINT) be an ERROR hold?
--
Tom Marchant
On Thu, 19 Jan 2023 14:30:38 +, Seymour J Metz wrote:
>Doesn't the process for security/integrity violations include creating an
>APAR? If so, shouldn't any PTF with hold class SECINT also have an ERROR hold
>with the
I'm concerned with the SMP side of things; as long as a PTF is correctly
flagged as PE, I don't care about the APAR unless there is a reason to bypass.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List
Thank you for asking. Yes I did, tested and verified. We're going to migrate
all user HMC accounts to LDAP authentication next week.
Mark Jacobs
Sent from ProtonMail, Swiss-based encrypted email.
GPG Public Key -
https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
On Thu, 19 Jan 2023 14:30:38 +, Seymour J Metz wrote:
>Doesn't the process for security/integrity violations include creating an
>APAR? If so, shouldn't any PTF with hold class SECINT also have an ERROR hold
>with the relevant APAR number?
>
>
>--
>Shmuel (Seymour J.) Metz
On Fri, 13 Jan 2023 19:58:32 +, Mark Jacobs
wrote:
>Has anyone setup their HMC to authenticate users to an ldap server? I'm not
>having much luck constructing the search filter that selects the user's entry
>in the directory.
>
>Mark Jacobs
>
Mark,
did you get an answer to this? we've
On Thu, 19 Jan 2023 15:02:06 +, Robert Prins
wrote:
>And then you realise that the question should have been, "How do I get at
>it (control-block chasing-wise) in REXX?".
>
At what time in the user's logon, and where is the REXX exec running?
And why are you trying to do this from REXX?
Did you look at R1 on entry for the TMP?
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
Robert Prins [robert.ah.pr...@gmail.com]
Sent: Thursday, January 19, 2023 9:08
Doesn't the process for security/integrity violations include creating an APAR?
If so, shouldn't any PTF with hold class SECINT also have an ERROR hold with
the relevant APAR number?
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM
> Is it possible for a PTF to have no hold except the SECINT? That is to ask,
> is it likely that a PTF introducing a security issue could be applied because
> there is no HOLD(ERROR) or even a HOLD(ACTION) which could inform that there
> is a SECINT for the PFT?
In theory, yes. In practice,
This is the theoretical maximum… not realistic… the available usable space is
100% determined by the blksize and optional key size… zOS use at most 1/2 track
blocking … it you force a 32760 block size you will waste about 12k per track…
safe numbers are about 90% for estimating
> how can I determine if such holddata was receive or not?
Using just SMP/E I suppose the only way is to list all of the HOLDDATA in the
global zone and search for any with CLASS(SECINT). You can use LIST HOLDDATA
HOLDERROR then search the output. This won't show you when HOLDDATA was
See
https://www.ibm.com/docs/en/zvse/6.2?topic=SSB27H_6.2.0/fe6rf_optimizing_casize_disksizes.htm
A 3390 MOD-1 has 1,113 cylinders. Each 3390 cylinder has 15 tracks. Each 3390
track has 56,664 bytes.
1,113 x 15 x 56,664 = 946,005,480
There are 946,005,480 bytes in a 3390 MOD-1 disk drive. Or
And then you realise that the question should have been, "How do I get at
it (control-block chasing-wise) in REXX?".
Apologies
Robert
On Thu, 19 Jan 2023 at 12:14, John McKown
wrote:
> If you mean "where is this field stored", is is in the TSO segment in RACF.
> I don't know about other
Vanguard Racf was a tool I used long ago when Racf was not able to
provide easy reporting.
Carmen
On 1/19/2023 5:26 AM, saurabh khandelwal wrote:
Hello Group,
Hope you doing well.
We have requirement to find any activity detail related to racf user from
last 6 month.
For example, any
That would be in the SMF data. There are a number of jobs to do various
RACF reporting in SYS1.SAMPLIB(IRRICE).
Of course, there are likely things is products such a zSecure. About which
I know nothing.
On Thu, Jan 19, 2023, 05:27 saurabh khandelwal <
sourabhkhandelwal...@gmail.com> wrote:
>
If you mean "where is this field stored", is is in the TSO segment in RACF.
I don't know about other ESMs.
On Thu, Jan 19, 2023, 06:09 Robert Prins wrote:
> Userid===>
>
> Password ===>
>
> Procedure ===>
>
> Acct Nmbr ===>
>
> Size ===> 1048576
>
> Perform ===>
>
> Command ===>
Userid===>
Password ===>
Procedure ===>
Acct Nmbr ===>
Size ===> 1048576
Perform ===>
Command ===> ex 'prino.rahp.exec(prino)' <=== ***This one***
I used to know, and used it on the now defunct FanDeZhi system to allow
advanced users break out of the standard logon exec, but
Hello Group,
Hope you doing well.
We have requirement to find any activity detail related to racf user from
last 6 month.
For example, any addition , deletion of user or last access in user of all
users used system in last 6 month or if any user id revoked.
On Wed, 18 Jan 2023 22:35:36 +, Benik, John E
wrote:
>I saw several comments about HMC and LDAP, and I am curious is anybody using
>LDAP with their TS7700's or just using the management interface for
>authentication? I would also be curious if anybody has explored this option,
>or is
846,236,160 bytes * 1990 M1s is 1,684,009,958,400 bytes.
On Thu, Jan 19, 2023 at 3:53 AM Mike Schwab wrote:
>
> 3390-1 is 846,236,160 bytes. Divide by 1000 or 1024 three times for a
> Gigabyte factor, or four times for a Terabyte conversion factor.
>
> On Thu, Jan 19, 2023 at 1:29 AM Jake
3390-1 is 846,236,160 bytes. Divide by 1000 or 1024 three times for a
Gigabyte factor, or four times for a Terabyte conversion factor.
On Thu, Jan 19, 2023 at 1:29 AM Jake Anderson wrote:
>
> Hello
>
> I was going through the storage usage in DS8K Gui login And I can see the
> utilization of
41 matches
Mail list logo
