On Mon, 7 May 2018 09:00:37 -0500, Paul Edwards wrote:
>I just want z/OS to match MVS/380,
>and there is nothing technically preventing
>that from happening.
Nothing, except all the z/OS changes that you haven't considered, and all the
application changes they might imply for existing applicati
On Mon, 30 Apr 2018 16:54:22 -0700, Charles Mills wrote:
>Do you want to query AC(1) specifically or whether you are running
>authorized, which requires AC(1) plus an all-APF-authorized STEPLIB
>concatenation?
No, running authorized does not (necessarily) require AC(1).
Assuming consider only
On Mon, 30 Apr 2018 12:32:26 -0500, Paul Gilmartin wrote:
>There ought to be an RFE tnat when the lookup fails in B's catalog the search
>should
>be re-driven from A's catalog.
How could that possibly work?
I reference B.DATA.SET and so the system goes to the catalog that B directs it
to. In
On Wed, 4 Apr 2018 10:54:04 +1000, Andrew Rowley
wrote:
>On 4/04/2018 10:29 AM, Paul Gilmartin wrote:
>> So is a signature any more secure than an independently verifiable checksum,
>> or just more practical?
>If you get the checksum via a reliable channel I think it is as secure.
>The digital s
On Mon, 12 Mar 2018 02:19:40 -0500, Barbara Nitz wrote:
>We are in the process of migrating to z/OS 2.3, and I want to use the new
>IRRPRMxx parmlib member. The documentation in oa52560 is suspiciously silent
>on how to activate this in a sysplex data sharing environment, so I went
>through th
On Thu, 1 Mar 2018 12:46:43 -0600, David Magee wrote:
>Is is possible to add the &RACLNDE profile (with possibly a dummy MEMBER
>subentry) as WARNING to the RACFVARS Class? Then monitor for the >Temporary
>Access Allowed condition and use that information to build your ADDMEMs to the
>&RACLN
On Thu, 1 Mar 2018 03:14:36 +, Jesse 1 Robinson
wrote:
>Ouch. I never saw Walt's proviso mentioned in the doc. Yes, these nodes are
>all totally under our control. However each node (sysplex) constitutes a
>different business environment supported by a different RACF data base. A
>person
On Wed, 28 Feb 2018 18:21:03 -0500, Tom Conley
wrote:
>I ran these on 1/5/18 to fix this check:
>
>RDEFINE RACFVARS &RACLNDE UACC(NONE) OWNER()
>RALTER RACFVARS &RACLNDE ADDMEM() (add one for each
>node)
>SETROPTS CLASSACT(RACFVARS) RACLIST(RACFVARS)
You should be careful with that, Tom. &RAC
On Mon, 29 Jan 2018 20:03:11 +0200, ITschak Mugzach wrote:
>To summerise rob's and Walt's argument, the security applied to apf panel
>in sdsf was a mistake and i believe ibm will remove it in next release...
There are some possible distinction between SDSF and ISRDDN, though. First,
SDSF alrea
On Fri, 26 Jan 2018 01:43:25 -0600, Andrew Metcalfe
wrote:
>If you have a moment please review my RFE for ISPF's ISRDDN/DDLIST function
>below.
>
>In summary it asks for SAF protection for some of the sub-functions such as
>APF/DISASM etc.
>
>
>If you think it is a valid request please vote.
On Thu, 18 Jan 2018 16:30:02 +0100, Peter Hunkeler wrote:
>I'm trying to search IBM-Main's archive but am getting only matches from 2007
>and elder. Even searching for words I can see in current threads do not show
>up.
>
>Is anyone else having the same problem this?
First, just to be clear si
On Thu, 18 Jan 2018 11:38:28 +1100, Wayne Bickerdike wrote:
>Kirks example was *KIRK..FOO*.
>
>I don't even receive a message for that filter..
Thanks, Wayne.
Sorry, Kirk. I didn't read carefully enough.
--
Walt
--
For IBM-M
On Wed, 17 Jan 2018 16:25:28 -0600, Kirk Wolf wrote:
>If I pass an invalid filter key to IGGCSI00, I get an 0C4 in IGGCSI00.
Invalid in what way?
--
Walt
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send
On Wed, 10 Jan 2018 15:26:04 -0600, Tom Marchant
wrote:
>On Wed, 10 Jan 2018 21:44:29 +0100, R.S. wrote:
>
>>BTW: It's worth to remember chances the vulnerability would really
>>compromise system security are really small. (IMHO)
>
>I agree. Especially since the method of exploiting it involves
On Fri, 29 Dec 2017 14:44:20 +0200, Binyamin Dissen
wrote:
>Everyone that I have tried does not give access to the SD card where the big
>files are.
>
>Any recommendations?
I don't have access to an FTP server right now to test it, but ES File Explorer
provides FTP support, and its other funct
On Sat, 2 Dec 2017 15:57:38 -0500, scott Ford wrote:
>Gil,
>
>Can you pass a type= memory file? I think it it has persistence..
>I have tried it in C ...and know you can create it..
>
From
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.cbcux01/filetype.htm
Memory
On Fri, 1 Dec 2017 15:09:07 -0600, John McKown
wrote:
>I didn't go into the really weird experimentation that I'm doing. I'm a
>just "messing around" with the BPX1EXM (execmvs) UNIX function. This is a
>real weirdie (to me). It basically terminates the current job step, then
>_inserts_ a new jo
On Wed, 1 Nov 2017 17:17:16 +0800, Timothy Sipples wrote:
>The b is lowercase, but the Z is now uppercase. Have a look:
>
>https://www.ibm.com/analytics/us/en/db2/db2-for-zos/
>
>https://www.ibm.com/systems/z/
The z is still lowercase in z/OS, though :)
--
Walt
---
On Tue, 31 Oct 2017 10:44:40 -0400, Gord Tomlin
wrote:
>On 2017-10-31 10:28, W Mainframe wrote:
>> What really matter the difference between Db2 and DB2? I see the same result
>> in my SQL SELET... Come on!
>Did you notice the ® associated with Db2®? That's a sure sign that IBM
>and its lawyers
On Fri, 27 Oct 2017 07:39:00 +, Baguley, Nicholas: Absa
wrote:
>When you use PARM andonot SYSTSIN it doesn’t seem to ECHO input/command. I
>tried it before posting so as not to incur wrath of LIST
After John also confirmed that, I thought some more and realized that it
probably works that
On Fri, 27 Oct 2017 14:48:32 +0800, Timothy Sipples wrote:
>Did we somehow arrive at a generalized requirement to be able to access
>particular TSO/ISPF features from *other* programming languages that are
>not REXX, in a discussion about JITs, because of the functional utility
>some z/OS system
On Thu, 26 Oct 2017 07:30:07 +, Baguley, Nicholas: Absa
wrote:
>We need to echo or trace the TSO commands processed in a batch TSO process...
>We are issuing an ADDUSER command under TSO and it returns a RC=8.
>In itself not a "biggie". We run TSO via an ATTACH of IKJEFTnn(1B in this
>case)
On Tue, 24 Oct 2017 14:51:13 -0400, Tony Harminc wrote:
>One can certainly write a Rexx interpreter (or compiler, for that matter),
>and run it under TSO and/or ISPF; in that sense it *tolerates* those
>environments. But for reasons known only to IBM, the interfaces needed to
>implement *integrat
On Mon, 23 Oct 2017 22:48:42 +0800, David Crayford wrote:
>On 23/10/2017 9:02 PM, Walt Farrell wrote:
>> On Mon, 23 Oct 2017 13:54:10 +0800, David Crayford
>> wrote:
>>
>>> IBM have a technology preview that adds a OMR JIT compiler to Ruby
>>> ht
On Mon, 23 Oct 2017 13:54:10 +0800, David Crayford wrote:
>IBM have a technology preview that adds a OMR JIT compiler to Ruby
>https://developer.ibm.com/open/2016/11/18/introducing-ruby-jit/. They're
>also working on versions of CPython, Smalltalk and PHP. So in theory we
>could have all of the l
On Mon, 2 Oct 2017 18:58:28 -0500, Steve Estle wrote:
>Thanks for the feedback - it appears that when I use the "Search Archives"
>option (via webpages) I always get 2005 posts first, but I can get around it
>by
>using the "Since:" option (such as since 1 Jan 2017) then I get more current
>h
On Fri, 22 Sep 2017 15:38:33 -0500, John McKown
wrote:
>Could someone tell me of some of the "real life" uses of this capability?
>Why can't I just do a DYNALLOC on the libraries, OPEN them, then
>LINKX/ATTACHX DCB= whatever it is I need? The only thing that I can think
>of where this would be a
On Fri, 22 Sep 2017 16:43:43 -0400, Tom Conley
wrote:
>Dynamic STEPLIB is designed to run under TSO. It provides the ability
>to satisfy CALL/LINK/ATTACH modules in ISPF for testing, multiple
>releases, etc. Some ill-behaved ISPF apps don't use SELECT PGM, so they
>have to be available in the
On Fri, 22 Sep 2017 20:53:10 +0100, David W Noon
wrote:
>It is up to the site's programmers to ensure that the load libraries in
>use in a job step are mutually compatible.
Unfortunately, the site's programmers are not in control of the libraries used
in a jobstep. The creator of the JCL has t
On Fri, 22 Sep 2017 10:40:59 -0500, Paul Gilmartin wrote:
>Dynamic STEPLIB has been discussed in these fora so often that I suspect
>it's the subject of numerous RFEs. I suspect there are technical reasons
>that IBM has not rushed to provide the function. Is the design of OS/360
>such that any
On Sun, 17 Sep 2017 22:35:23 +, scott Ford wrote:
>We are using all functions, since we function as what is now being called a
>central site administrator.
If you are indeed using _all_ the functions of r_admin (which I suppose is
possible, though it seems unlikely to me) then you will need
On Sun, 17 Sep 2017 15:04:49 +, scott Ford wrote:
>Thank you for your reply, I just wanted to make sure I did the pgm call
>correctly before I stuck my neck out.
You haven't described the r_admin functions you're using. At least as of the
z/OS V1.13 documentation no r_admin function require
On Wed, 13 Sep 2017 11:02:25 +0200, Charles Mills wrote:
>> Note that it says the store into the first operand will appear to occur
>> before the store into
>> the second operand, but it does NOT say that an observing CPU will see both
>> stores or neither.
>
>Again, not arguing, just trying t
On Tue, 12 Sep 2017 16:36:44 +0200, Charles Mills wrote:
>Disabling for interruptions is not sufficient in a multi-processor world,
>right?
>
>I don't pretend to be the world's biggest machine instruction expert. Am I
>reading the PoOp correctly that a task wishing another task's
>CSST to effe
On Tue, 5 Sep 2017 10:19:45 -0500, Paul Gilmartin wrote:
>What language(s) cleanly handle vertical alignment of formatted text output
>when
>the text contains UTF-16 supplemental/surrogate (not in the BMP) characters?
>Here's an example of /bin/printf's failure for similar input with UTF-8 on
>
Have you considered transferring it to z/OS in binary, rather than converting
to EBCDIC. Then just process it in its UNICODE format, which either Java or
Enterprise COBOL should be able to handle (Java by default, COBOL with
appropriate UNICODE specifications).
--
Walt
---
On Sat, 26 Aug 2017 15:27:21 +, Jesse 1 Robinson
wrote:
>OK, this is a weird one. We have an old CLIST that runs as an ISPF edit macro.
>On one sysplex only, this CLIST fails with a *Rexx* error message:
>...snipped...
>
>What might cause a CLIST to be misinterpreted as Rexx?
What DDNAME d
On Thu, 24 Aug 2017 16:06:26 -0500, Paul Gilmartin wrote:
>On Thu, 24 Aug 2017 15:22:30 -0500, Walt Farrell wrote:
>
>>On Thu, 24 Aug 2017 11:30:26 -0500, Paul Gilmartin wrote:
>>
>>>Is AMASPZAP linked AC=1? It would seem that there's no need for that
>>
On Thu, 24 Aug 2017 11:30:26 -0500, Paul Gilmartin wrote:
>On Thu, 24 Aug 2017 12:17:29 -0400, Tony Harminc wrote:
>>
>>No - never. AMASPZAP (IMASPZAP before MVS, i.e. before 1972, and before the
>>notion of APF authorization) was always subject to dataset protection (via
>>passwords, long before
On Tue, 8 Aug 2017 10:35:08 -0600, Paul Gilmartin wrote:
>(Interesting: another base64 body I can't quote on the Web interface.)
If you use Firefox you might consider installing the LeetKey extension, which
will allow such quoting with relative ease. Just select the encoded text,
right-click,
On Fri, 28 Jul 2017 23:18:27 +0300, ITschak Mugzach wrote:
A racf third party check
>will be performed with the dsname & actual volser.
>this function is intended to serve security administrators and product
>developers that are not familiar with RACF and required to define the
>security requirem
On Thu, 27 Jul 2017 10:56:06 +0300, ITschak Mugzach wrote:
>I know. This is a function i'll add if no product that doea that.
It is not possible to completely duplicate the checking that RACF will perform
except by actually submitting the job and seeing what happens. For one, as
others have me
On Sat, 15 Jul 2017 22:52:47 -0500, Edward Gould
wrote:
>> On Jul 15, 2017, at 10:39 PM, Sri h Kolusu wrote:
>>
>> Edward,
>>
>> Here is a DFSORT JCL which will give you the desired results. I assumed
>> that your input file is FB and 80 bytes in length. I also assumed that
>> your name a
On Mon, 10 Jul 2017 00:49:13 -0500, Barbara Nitz wrote:
>That's what I mean by 'used as evidence'. And I wondered if it is just my
>ignorance or if there really is no way (as I suspected) to
>prevent unauthorized changing of the statistics.
There is no way to do that without installing an add
On Sat, 8 Jul 2017 09:50:00 -0500, Donald Likens wrote:
>Walt... Thanks for asking questions. I will answer you questions as best as I
>can.
>
>Does that duplication include number of CPs and processor speed? I have seen
>test environments that were setup as single CP, which
> does little to
On Fri, 7 Jul 2017 16:56:09 +0200, R.S. wrote:
>W dniu 2017-07-07 o 15:29, Lizette Koehler pisze:
>> As far as I know, the statistics have always worked that way. That as long
>> as you had the ability to edit (change/alter/del/create) the PDS you could
>> use 3.5 to change the ID field to any
On Fri, 7 Jul 2017 09:59:01 -0500, Donald Likens wrote:
>We run our product on somewhere around 15 client site. We have had this
>problem on one client site (multiple LPARs) since we started running there. We
>have only seen this problem on one other system during a trial (they did not
>keep t
The
>syntax is typically the same for any of the classes (dataset, opercmds,
>etc)/
>
>But if Walt Farrell says otherwise, believe him, not me! Even though he's
>retired.
Good point about terminology, Peter. Thanks. I
On Fri, 30 Jun 2017 00:53:29 GMT, esst...@juno.com wrote:
>I am not a RACF Security Administrator by any means, after reading several
>documents
>I need some help setting up a RACF Facility Class and Permitting Access To a
>Started Task Userid (STCUSRID) and My Userid (PAULD01).
>
>Do the follow
On Sun, 11 Jun 2017 20:52:10 -0400, Steve Thompson wrote:
>Question: Wasn't REFR for a program where, say a double-bit
>parity error could occur, and it would then get loaded to a new page?
I can't comment on the double-bit parity error, but I think that someone
(Peter, Jim?) mentioned earlier
On Mon, 12 Jun 2017 02:24:30 +, Jesse 1 Robinson
wrote:
>I got tired of guessing. I wrote a little program that saves registers into
>itself via STM. I linked it with AC(1) and RENT. Did not specify >either REUS
>or REFR. The result according to StarTool is
>-- ATTRIBUTES - APF
>RE
On Sun, 11 Jun 2017 15:40:49 -0500, Paul Gilmartin wrote:
>In the Program Management UG and Ref, I see:
>RENT
>... A reenterable module is ordinarily expected not to modify
>its own code. In some cases, MVS protects the reentrant module's
>virtual storage so that it cannot be modified
On Sat, 10 Jun 2017 16:41:16 -0700, Charles Mills wrote:
>A refreshable program may modify itself, right? REFR does not say "I don't
>modify myself" it says "you can reload me if you want." Almost >the same
>thing, but not quite.
The key, I think, is that the system may reload the program at _
On Sun, 28 May 2017 14:53:34 -0500, Paul Gilmartin wrote:
>On Sun, 28 May 2017 11:31:41 -0700, Lizette Koehler wrote:
>
>>Note: Once you turn on the SMF collection, you will only get data from that
>>point in time forward. So if you have something that connects only once a
>>month, you will n
On Fri, 26 May 2017 16:25:57 -0700, Lizette Koehler
wrote:
>Okay, I yield - this time as I did not read the SDSF panel closely enough.
>
>So the COMMAND section on the PS panel shows only so much of the command
>(which is what I was really after this whole time).
>
>I know when I do the D OMVS,
On Fri, 26 May 2017 09:02:14 -0500, John McKown
wrote:
>This question related back to the thread "ATTACH with RSAPF=YES" in which
>the OP apparently wants a way to invoke a module from a non-APF authorized
>library from a program which is running APF authorized. In today's
>environment, the "sim
On Thu, 25 May 2017 19:33:22 -0500, John McKown
wrote:
>Thanks. I may put in an RFC on the BPX1FRK documentation to ask that it
>explicitly state that the APF status is maintained. Granted, in the Usage
>Notes, there is the sentence: "In other respects, for z/OS UNIX the child
>is identical t
On Thu, 25 May 2017 14:24:05 -0500, John McKown
wrote:
>Well, from what I vaguely gather, this entire thread started off with the
>question of "how does an APF authorized program run a non-APF authorized
>program from a library not on the APF list?". Apparently the OP was trying
>this and got a
On Thu, 25 May 2017 12:14:46 -0400, scott Ford wrote:
>In reading through the RACF manual I have a question about STC definitions.
>We have a STC that is doing RACF provisioning. The question is if I change
>the below RDEFINE from TRUSTED(YES) to TRUSTED(NO) will still be able to
>issue RACF com
On Thu, 25 May 2017 11:46:20 -0500, John McKown
wrote:
>On Thu, May 25, 2017 at 10:44 AM, Walt Farrell
>wrote:
>> execmvs() would be better than LINKX or ATTACHX for this scenario, in
>> general, as it handles all the environmental cleanup and handles any
>> necess
On Thu, 25 May 2017 08:11:31 -0500, John McKown
wrote:
>On Wed, May 24, 2017 at 2:28 PM, Peter Hunkeler wrote:
>
>> > The above is why I really "push" the UNIX fork() alternative.
>> [snip]
>>
>> >If a "steplib" is needed, the initial child program can simply DYNALLOC
>> the DSNs and then use a
On Sun, 21 May 2017 14:19:39 -0500, Paul Gilmartin wrote:
>On Sun, 21 May 2017 05:12:00 -0500, Elardus Engelbrecht wrote:
>>
>>>RACF (I'm less sure) is VSAM.
>>
>>No, it is PSU (PS and Unmovable). Other attributes are mandated by IBM.
>>
>"Unmovable" would seem to imply uncopyable; the copy wou
On Fri, 19 May 2017 20:05:43 +0700, Robin Atwood wrote:
>(2) is interesting. Actually my first thought was to use ASCRE to spawn a new
>ASID to execute the command but
>I have heard that address space creation/destruction is a major overhead and
>so focused on ATTACH.
My first question would b
On Fri, 19 May 2017 14:32:27 +0700, Robin Atwood wrote:
>The situation would be that the client routes a command to the server on the
>host which routes it to a dependent ASID. The DA gets the ACEE of the user and
>executes the command via IJKEFTSR. The command is one of a suite of
>Rexx execs
On Tue, 16 May 2017 09:57:16 -0400, Sam Golob wrote:
> That having been said, the system doctor sometimes has to deal with
>things that go wrong. It's nice when the system is working as
>designed. But sometimes, the NON-CANCELABLE job or STC goes awry, and
>it has to be restarted. In such
On Tue, 16 May 2017 20:42:42 +0700, Robin Atwood wrote:
>>However, as you're running work on behalf of various end-users, I hope you're
>>authenticating those users and >running the work under the proper end-user
>>identity in each case. And that would probably require authorization >of the
>>
On Tue, 16 May 2017 14:09:49 +0700, Robin Atwood wrote:
>Thanks to everyone for replying, I would never realised you had to flip
>JSCBAUTH from the macro documentation.
>The actual business requirement is that we run Rexx execs that call ISPF
>services on behalf of workstation users
>running an I
On Mon, 15 May 2017 15:18:38 +0700, Robin Atwood wrote:
>We have a requirement to attach user modules from an unauthorised library
>and execute them from an STC which
>
>runs APF authorised. Calling ATTACH with RSAPF=YES seems to do exactly what
>I want ...
It _can_ do what you want, Robin, but
On Wed, 26 Apr 2017 09:32:35 -0700, Charles Mills wrote:
>In our documentation we say datasets or legacy MVS datasets; and files or zFS
>files.
>
"zFS files" is, in my opinion, incorrect terminology and risks confusion.
First, zFS is but one kind of file system that can contain UNIX files. Bef
On Mon, 24 Apr 2017 21:30:28 -0500, Paul Gilmartin wrote:
>... so I tried:
>
>548 $ sudo cat ~wombat/.ssh/rc
>/bin/id
>/bin/uname
>/bin/date
>
>... I see no evidence that the commands in ~wombat/.ssh/rc were executed.
>I can't tell exactly what happened. Nor does the man page tell what processor
On Mon, 24 Apr 2017 08:17:55 -0500, Ron Thomas wrote:
>i executed the below script from Linux VM and the below is what it says.
>Looks like site command is not supported . So any idea on how this could be
>resolved or is there any work around ?
>
>Script
>---
>sftp to1c...@cray.cps.se.
On Fri, 21 Apr 2017 11:12:25 +, Vernooij, Kees (ITOPT1) - KLM
wrote:
>You don't mention what you want to use it for, but with SMS managed datasets
>part of the problem was eliminated, because SMS
>managed datasets automatically get an EOF. You can't anymore simply allocate a
>dataset and
On Tue, 18 Apr 2017 08:19:05 -0500, Elardus Engelbrecht
wrote:
>Steve Horein wrote:
>
>>I find the following at: http://listserv.vt.edu/cgi-bin/wa?A0=JES2-L
>
>Close, but no cigar for me... oh well. But thanks for telling us.
>
>After going all the trouble to logon, enter psw, receiving a confir
On Fri, 14 Apr 2017 20:19:08 +, Nims,Alva John (Al) wrote:
>A slightly different answer might be found at CBTTAPE.ORG, file 248. It does
>not lock the screen, but disconnects and then cancels if
>not reconnected within a follow-on time period. File 325 from Wells Fargo
>does something si
On Tue, 11 Apr 2017 13:40:32 +, william janulin wrote:
>To answer the question about what sort of portal, I would say all of the
>above. I thought this was a somewhat general question as to
>whether or not z/OS will support both non-ascii and ascii at the same time.
It's not really a z/OS
On Sun, 19 Mar 2017 07:00:27 +, Mark Wilson wrote:
>Just following up on your comment re your curiosity re IEFOPZxx debate on the
>GSE UK LSG Agenda.
>
>We will debate IEFOPZ from two perspectives:
>
>The first being how, why and when to use it, as its one of those topics that
>can potentia
On Tue, 14 Feb 2017 13:30:49 +, scott Ford wrote:
>The STC is runnIng in a MVS address space, pretty standard. I am looking
>for a performance boost.
>We currently issue a call and the HLASM code performs the extract and
>creates a file that the STC reads.
>My question is what gives us the be
On Tue, 7 Feb 2017 12:35:10 -0800, Ed Jaffe wrote:
>Any notion of extending to 32 characters would be sheer folly. That
>would require changes to the three major security products, z/OS
>subsystems, ISV products, customer code, etc. It would never get done.
>Never, ever...
RACF (and presumably t
On Tue, 31 Jan 2017 16:51:21 +, Leonardo Vaz wrote:
>Really curious now, what exactly changing TOKSTYP to TOKCONS will achieve?
It would enable use of WHEN(CONSOLE(...)) on a RACF PERMIT command.
--
Walt
--
For IBM-MAIN s
On Tue, 31 Jan 2017 16:11:42 +, Leonardo Vaz wrote:
>I am attempting to create a program to issue specific system commands (modify)
>that users aren't usually allowed to in the OPERCMDS
>class; basically, I'm attempting to do the same thing SDSF does on, for
>example, cancelling jobs, wher
On Thu, 19 Jan 2017 15:31:57 -0600, Greg Dyck wrote:
>On 1/19/2017 9:24 AM, Greg Dyck wrote:
>> Many, many, moons ago type 2 SVCs were managed differently from type 4
>> SVCs. It's a fuzzy memory, but I believe they had to be 2K or less in
>> size and were loaded from SVCLIB transiently into a c
On Thu, 19 Jan 2017 17:20:44 +, Blake, Daniel J [CTR]
wrote:
>No, but if you search IBM using z/OS V2R3 you will see multiple references to
>something currently called z/OS V2R3.
>
No. You find references to "System Automation for z/OS" V2R3, not "System
Automation for" z/OS V2R3.
Sever
On Mon, 16 Jan 2017 03:45:08 +, scott Ford wrote:
>To check authorization we use a RACROUTE call..
>
>To pass commands r_radmin...
>
>
>Both are in the same code..
Thanks, Scott. Just be aware that for the RACROUTE calls you are responsible
for properly upper-casing the user ID (and, if mix
On Sun, 15 Jan 2017 15:16:14 -0500, scott Ford wrote:
>Charles:
>
>My friend, perfect. My issue is we are passing Security Sub System commands
>( RACF, etc. ) thru r_radmin service call
>and we just started supporting mixed-case passwords, etc. The other thing
>that hit me was what 'setropts' was
On Sat, 7 Jan 2017 23:19:13 +0200, Binyamin Dissen
wrote:
>On Sat, 7 Jan 2017 16:57:05 + "Blaicher, Christopher Y."
> wrote:
>
>:>Generally speaking, a page sized request will return a zeroed page, but
>there is no guarantee for that unless you specify that on the GETMAIN.
>
>What is the ca
On Thu, 5 Jan 2017 21:13:48 +0700, Robin Atwood wrote:
>The JCL is not relevant, both applications are servers that use dynamic
>allocation. They are using SAPI to read the JES spool. The >message is
>
>IEC141I 013-A8,IGG0199G,TAURISP3,TAURISP3,SYS2
>
>The spool data set is allocated to SYS0
On Mon, 2 Jan 2017 16:22:16 -0600, Paul Gilmartin wrote:
>On Sun, 1 Jan 2017 22:02:30 -0700, Jack J. Woehr wrote:
>>
>>> We have empirical proof of that at one of my clients . Took down a
>>> monitoring system this evening.
>>
>>And we were not alone:
>>https://blog.cloudflare.com/how-and-why-t
On Sat, 31 Dec 2016 16:39:17 -0600, Paul Gilmartin wrote:
>On Sat, 31 Dec 2016 16:32:04 -0600, Walt Farrell wrote:
>>>>
>>>ITYM 23:59:60.
>>
>>It should happen at 00:00:00 in each time-zone. In one timezone that will be
>>1 second later than in all t
On Sat, 31 Dec 2016 16:11:48 -0600, Paul Gilmartin wrote:
>On Sat, 31 Dec 2016 11:53:41 -0800, Charles Mills wrote:
>
>>11:59:60?
>>
>ITYM 23:59:60.
It should happen at 00:00:00 in each time-zone. In one timezone that will be 1
second later than in all the others, but still at 00:00:00 :)
--
On Thu, 8 Dec 2016 09:52:09 -0500, Steve wrote:
>When a system is IPL'g, several SYSTEM level tasks are started before the ACP.
>
>The auditors are pushing to give CONSOLE, CATALOG, SMS, their own STCID's.
Yes, there are address spaces that start before security services are
available. They c
On Wed, 7 Dec 2016 21:01:08 -0500, Phil Smith III wrote:
>It's not a specific application: we have an API that any random application
>can use. So yes, today there are applications that are being happily called
>from wherever. They want to add calls to our API, so they do so. Sometimes
>they need
On Wed, 7 Dec 2016 18:29:38 -0600, Paul Gilmartin wrote:
>On Wed, 7 Dec 2016 17:28:04 -0500, Tony Harminc wrote:
>>
>>I meant it in the same sense that Kernel Don use to say it: there is no
>>difference from a program's point of view. Obviously there are differences
>>in and gross omissions from
On Wed, 7 Dec 2016 12:29:33 -0500, Phil Smith III wrote:
>I have a program that normally runs from batch, but which I'd like to invoke
>from USS. I can invoke it fine: the catch is that I need another DD defined.
>Is there a way in a shell script or equivalent to do so?
More details of your prog
On Fri, 2 Dec 2016 13:58:40 +, Styles, Andy (SD EP zPlatform)
wrote:
>We're trying to put some security in place around JES2 NJE nodes, using the
>SIGNON=SECURE option (on the NODE statement). We've got it working RACF to
>RACF, but are having difficulty with a couple of other security man
On Sun, 20 Nov 2016 22:42:16 +0200, Binyamin Dissen
wrote:
>I am receiving
>
>ASMA033I Storage alignment for @DDNTXTU.S99TUPAR unfavorable
>
>where the value of S99TUPAR is 6, but it is a dependent using and the actual
>offset is at a doubleword boundary.
>
>Working as designed??
Seems like a q
On Sun, 20 Nov 2016 11:04:16 +0530, venkat kulkarni
wrote:
>Yes, I think my requirement was not clear to all. Basically LDAP server is
>running on some Windows or Linux box and we want to integrate mainframe
>with that as LDAP client for any sort of login to mainframe can be tso,
>cics,db2 etc
On Sat, 19 Nov 2016 19:30:28 -0600, Donald Likens
wrote:
>Has anyone come up with a way for a REXX program to determine the library it
>resides in?
Have you looked at the REXX parse source instruction?
--
Walt
--
For IBM-MA
On Fri, 18 Nov 2016 10:17:31 -0600, Paul Gilmartin wrote:
>On Fri, 18 Nov 2016 07:21:20 -0600, Walt Farrell wrote:
>>
>>AC(1) is a setting in the directory entry for the load module, so all you
>>would have to do is a BLDL and then look at the bit setting. However, unless
On Fri, 18 Nov 2016 13:24:01 +, Vernooij, Kees (ITOPT1) - KLM
wrote:
>Even so: the fact that AC(1) is on still does not mean that the library is APF
>authorized and that the module will run authorized.
Right. That's why I said I didn't think he could draw any conclusions unless
the bit i
On Fri, 18 Nov 2016 12:26:41 +0100, Charles Mills wrote:
>Even simpler question: is it possible for a program to check (only) its own
>AC(1) bit?"
I'm not sure I understand what you mean by "its own AC(1) bit".
AC(1) is a setting in the directory entry for the load module, so all you would
ha
101 - 200 of 482 matches
Mail list logo
