date:20140509

Re: Another C compiler shift bug?

2014-05-09 Thread retired mainframer

:: -Original Message-
:: From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
:: Behalf Of Paul Gilmartin
:: Sent: Thursday, May 08, 2014 3:36 PM
:: To: IBM-MAIN@LISTSERV.UA.EDU
:: Subject: Re: Another C compiler shift bug?
::
:: On Thu, 8 May 2014 15:16:26 -0700, Charles Mills wrote:
::
:: Am I missing something here? Consider the following C statement:
:: 
:: unsigned long long maxBit = 0x1  (arraySize-3);
:: 
:: When arraySize is 66, maxBit is ending up as zero (instead of what I
:: would
:: expect, X'8000'. Am I missing something?
:: 
:: Here is the LIST output. (No optimization.)
:: 
:: *  unsigned long long maxBit = 0x1  (arraySize-3);
::   EX   r0,HOOK..STMT
::   Lr1,arraySize(,r13,240)
::   AHI  r1,H'-3'
::   LA   r2,1
::   LR   r0,r2
::   SLL  r0,0(r1)
::   LR   r1,r0
::   SRA  r1,31
::   ST   r1,maxBit(,r13,248)
::   ST   r0,maxBit(,r13,252)
:: 
:: Won't SLL R0,0(R1) yield a zero for any shift values greater than 31?
:: 
:: Does it work better with a cast:
::
:: unsigned long long maxBit = (long long) 0x1  (arraySize-3);?
::
:: I might then expect:
::
::   SLDL  r0,0(r1)

As written it causes undefined behavior because long long is signed and you
are shifting a different value into the sign bit.  Changing the cast to
(unsigned long long) will work.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Just a Question On Texting

2014-05-09 Thread George Rodriguez

Thanks... I've already tested the and got working the email solution using
Sprint...


 *George Rodriguez*
*Specialist II - IT Solutions*
*IT Enterprise Applications*
*PX - 47652*
*(561) 357-7652 (office)*
*(561) 707-3496 (mobile)*
*School District of Palm Beach County*
*3348 Forest Hill Blvd.*
*Room B-251*
*West Palm Beach, FL. 33406-5869*
*Florida's Only A-Rated Urban District For Eight Consecutive Years*


On Fri, May 9, 2014 at 12:44 AM, Brian Westerman 
brian_wester...@syzygyinc.com wrote:

 We have two separate utilities that perform that function:

 SyzText/z (sends one line messages to email and SMS text)
 SyzMail/z (sends any number of messages to email or SMS text).

 Brian
 www.syzygyinc.com

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


-- 


*Congratulations** Class of 2014 
https://vodcast.palmbeachschools.org/player/8JWPB!  For Graduation dates, 
times and locations, click here 
http://www.palmbeachschools.org/academics/documents/2014PBCGraduationSchedulev304-17-14.pdf.
  Watch Graduations Live May 
14 - 23 on Comcast 235 and online http://www.palmbeachschools.org/**.*
  * Follow us on *   [image: 
Facebook]http://www.palmbeachschools.org/links/facebook.html  
  [image: Twitter] http://www.palmbeachschools.org/links/twitter.html
*Disclaimer: *Under Florida law, e-mail addresses are public records. If 
you do not want your e-mail address released in response to a public 
records request, do not send electronic mail to this entity. Instead, 
contact this office by phone or in writing.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re : Setting A SLIP For A Program Running Under CICS.

2014-05-09 Thread Peter Relson

I presume from the question that using SLIP's PVTMOD/PVTEP does not work. 
CICS must use either load with address or some other process to load your 
module.
You must find out from CICS how to determine the address of your module.

And then you would use the normal SLIP processing that lets you specify 
the address range of the instruction fetch range. The system does not know 
where the module is; there is no CDE for it.

Peter Relson
z/OS Core Technology Design

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread John McKown

This has been an interesting thread. I rather like the escrow idea. For
smaller ISVs, I wonder if it would be helpful to integrate something like
git or subversion into their processing, with a secure (are there any?)
off site backup master. When a change is pushed to production, it would
update the local and backup master repository. The problem, of course, is
security of the backup repository. But then, most companies are worried
about other companies stealing their source. Do many reputable companies
hire commercial espionage hackers? I do know of a case - actually _two_
cases, but I don't think it would be wise of me to shoot off my mouth.

===

Say! Here's a neat sleep-deprived idea: In the above scenario, keep the
offsite repository in the NSA ultra-center in Utah! This would require a
commercial aspect to the NSA. But they're going to intercept and store
the information any way if it is transmitted on the Internet. This way
companies can help pay for the ultra-center, in addition to the U.S.
taxpayer. And the companies would have a fairly secure backup. Well,
ignoring the healthcare.gov fiasco, that is. Also, the U.S. Congress could
pass yet another Federal law about interfering with software entrusted to
a U.S. government facility (similar to interfering with the U.S. Mail).
They like passing this sort of legislation.

So do we all agree that I need more sleep?

-- 
There is nothing more pleasant than traveling and meeting new people!
Genghis Khan

Maranatha! 
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re : Setting A SLIP For A Program Running Under CICS.

2014-05-09 Thread Martin Packer

I thought CICS switched to using standard Program Fetch 25 years ago. 
Old V3? Does knowing that change anything?

Cheers, Martin

Martin Packer,
zChampion, Principal Systems Investigator,
Worldwide Banking Center of Excellence, IBM

+44-7802-245-584

email: martin_pac...@uk.ibm.com

Twitter / Facebook IDs: MartinPacker
Blog: 
https://www.ibm.com/developerworks/mydeveloperworks/blogs/MartinPacker



From:   Peter Relson rel...@us.ibm.com
To: IBM-MAIN@listserv.ua.edu
Date:   09/05/2014 12:12
Subject:Re : Setting A SLIP For A Program Running Under CICS.
Sent by:IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu



I presume from the question that using SLIP's PVTMOD/PVTEP does not work. 
CICS must use either load with address or some other process to load your 
module.
You must find out from CICS how to determine the address of your module.

And then you would use the normal SLIP processing that lets you specify 
the address range of the instruction fetch range. The system does not know 

where the module is; there is no CDE for it.

Peter Relson
z/OS Core Technology Design

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Mark Pace

I was able to get the Trace to work - after removing the -r TLS, that
generated an error.
*EZA2892I Secure port 21 does not allow the -a or -r start parameter *

And from that trace it appears, to me, that the FTP server is not
responding correctly to the z/OS client handshake.

05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3 CLIENT-HELLO
message
05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3 CLIENT-HELLO
message
:  012b 0301536b ed23cf50 8d72c5f7
*...+..Sk.#.P.r..*
0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
.../...2(qw*
0020:  a3e6e150 a3c5 0400ff00 050100*...P...
*
05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling write routine
for 52 bytes
05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes
written
05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling read routine
for 5 bytes
05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes
received
05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content Type 50 is
not supported
05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record
header
:  3232302d 57  *220-W
*
05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3 client
handshake failed with 10.6.0.15[21]



On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu wrote:

 Add this to the FTP Client job parms:
 //  PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',
 //'/-r TLS (TRACE EXIT')

 There is a formatted documented with gsktrace. Should get you to the exact
 error when you format gskwix.trc

  -Original Message-
  From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
  On Behalf Of Mark Post
  Sent: Wednesday, May 07, 2014 12:55 PM
  To: IBM-MAIN@LISTSERV.UA.EDU
  Subject: Re: z/OS FTPS Client  Linux FTP server
 
  Mark,
 
  This may be yet another case where running strace or ltrace on the server
  side will give you some insight into what is going on.  If you don't
 want to go
  down that road, i would say it's time to open up a PMR with IBM.
 
 
  Mark Post
 
  --
  For IBM-MAIN subscribe / signoff / archive access instructions, send
 email to
  lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




-- 
The postings on this site are my own and don’t necessarily represent
Mainline’s positions or opinions

Mark D Pace
Senior Systems Engineer
Mainline Information Systems

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread Bob Shannon

 For smaller ISVs, I wonder if it would be helpful to integrate something like 
 git or subversion into their processing, with a secure (are there any?) 
 off site backup master.

Why do you think this is an original idea? All ISVs  deal with source code 
management.  Some use open source solutions; some use RYO methods. Most, if not 
all, escrow the source on release boundaries.  Our CVS repositories are 
replicated to three different locations daily. I'm sure we're not unique.

Bob Shannon
Rocket Software

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Rob Schramm

Sorry.. was doing my post via phone..

Here is the short version of GSKSRVR trace

Run a GSKSRVR for SSL trace.. the only gotcha is that it must come up
before the task you want to trace.

- S GSKSRVR
- Restart STC
- Update GSKWTR PROC to add a dataset to hold the trace.
- TRACE CT,WTRSTART=GSKWTR
- TRACE CT,ON,COMP=GSKSRVR
- R n,JOBNAME=(yyy),OPTIONS=(LEVEL=255),WTR=GSKWTR,END where yyy is the
name of STC.
- Recreate the problem.
- TRACE CT,OFF,COMP=GSKSRVR
- TRACE CT,WTRSTOP=GSKWTR
- get into IPCS
- update 0 DEFAULTS - Specify default dump and options with GSKWTR produced
trace data set
- 2 ANALYSIS - Analyze dump contents
- 7 TRACES - Trace formatting
- 1 CTRACE - Component trace
- D DISPLAY - Specify parameters to display CTRACE entries
- update Component with GSKSRVR, update Report type with full, and
issue S to start the analysis

GSKSRVR Commands#

- S GSKSRVR
- F GSKSRVR,DISPLAY CRYPTO
- F GSKSRVR,DISPLAY LEVEL
- F GSKSRVR,DISPLAY SIDCACHE
- F GSKSRVR,DISPLAY XCF
- F GSKSRVR,STOP

Rob Schramm

Rob Schramm
Senior Systems Consultant
Imperium Group



On Fri, May 9, 2014 at 8:46 AM, Mark Pace pacemainl...@gmail.com wrote:

 I was able to get the Trace to work - after removing the -r TLS, that
 generated an error.
 *EZA2892I Secure port 21 does not allow the -a or -r start parameter *

 And from that trace it appears, to me, that the FTP server is not
 responding correctly to the z/OS client handshake.

 05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3 CLIENT-HELLO
 message
 05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3 CLIENT-HELLO
 message
 :  012b 0301536b ed23cf50 8d72c5f7
 *...+..Sk.#.P.r..*
 0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
 .../...2(qw*
 0020:  a3e6e150 a3c5 0400ff00 050100*...P...
 *
 05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling write routine
 for 52 bytes
 05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes
 written
 05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling read routine
 for 5 bytes
 05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes
 received
 05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content Type 50 is
 not supported
 05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record
 header
 :  3232302d 57  *220-W
 *
 05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3 client
 handshake failed with 10.6.0.15[21]



 On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu wrote:

  Add this to the FTP Client job parms:
  //  PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',
  //'/-r TLS (TRACE EXIT')
 
  There is a formatted documented with gsktrace. Should get you to the
 exact
  error when you format gskwix.trc
 
   -Original Message-
   From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
   On Behalf Of Mark Post
   Sent: Wednesday, May 07, 2014 12:55 PM
   To: IBM-MAIN@LISTSERV.UA.EDU
   Subject: Re: z/OS FTPS Client  Linux FTP server
  
   Mark,
  
   This may be yet another case where running strace or ltrace on the
 server
   side will give you some insight into what is going on.  If you don't
  want to go
   down that road, i would say it's time to open up a PMR with IBM.
  
  
   Mark Post
  
   --
   For IBM-MAIN subscribe / signoff / archive access instructions, send
  email to
   lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
  --
  For IBM-MAIN subscribe / signoff / archive access instructions,
  send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 



 --
 The postings on this site are my own and don’t necessarily represent
 Mainline’s positions or opinions

 Mark D Pace
 Senior Systems Engineer
 Mainline Information Systems

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z10 IPL from Utility Tape

2014-05-09 Thread Alan Altmark

On Thu, 8 May 2014 12:54:04 -0500, Alan Altmark alan_altm...@us.ibm.com wrote:
 If the IPLable utility tape was created on a labeled tape, then it isn't 
 going to work
 and you have no choice but to IPL the installation media.  (A power outage 
 isn't
 going to affect a tape that's not in a drive.)

A small lie.  If you keep IPLing from the same tape, the drive will move past 
the tape marks and the program can load.

Alan Altmark
IBM

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Rob Schramm

I did a quick search and the error seems like a TLS 1.0 only issue.

As I remember it, the FTP TLS on z/OS is restricted to TLS 1.0 with IBM
stating something like

my impression
please use AT-TLS... we are done putting work into task specific TLS
implementations
/my impression

AT-TLS provides support for a wider ranges of TLS levels.  It isn't too
much work to get operating for FTP.  Don't take the redbooks advice when
creating rules... the writer succeeded in making it more complicated.  Copy
an existing rule for FTP.

The key is setting up the client rule not the server rule
the SYSFTPD - FTPCDATA

TLSMECHANISM  ATTLS
secure_mechanism  tls
secure_ctrlconn   private
secure_dataconn   private
epsv4 true
TLSRFCLEVEL   RFC4217
secure_ftprequired
extensionsauth_tls
secure_pbsz   32768

You'll need PAGENT and

Obey this for TCPIP
TCPCONFIG TCPSENDBFRSIZE 32K TCPRCVBUFRSIZE 32K SENDGARBAGE FALSE TTLS

If you are after z/OS 1.13.. then the stand alone Config Assistant is not
available.. and the z/OSMF must be used.  I would not recommend hand coding
Policy Agent Rules.

Rob Schramm





Rob Schramm
Senior Systems Consultant
Imperium Group



On Fri, May 9, 2014 at 9:06 AM, Rob Schramm rob.schr...@gmail.com wrote:

 Sorry.. was doing my post via phone..

 Here is the short version of GSKSRVR trace

 Run a GSKSRVR for SSL trace.. the only gotcha is that it must come up
 before the task you want to trace.

 - S GSKSRVR
 - Restart STC
 - Update GSKWTR PROC to add a dataset to hold the trace.
 - TRACE CT,WTRSTART=GSKWTR
 - TRACE CT,ON,COMP=GSKSRVR
 - R n,JOBNAME=(yyy),OPTIONS=(LEVEL=255),WTR=GSKWTR,END where yyy is the
 name of STC.
 - Recreate the problem.
 - TRACE CT,OFF,COMP=GSKSRVR
 - TRACE CT,WTRSTOP=GSKWTR
 - get into IPCS
 - update 0 DEFAULTS - Specify default dump and options with GSKWTR
 produced trace data set
 - 2 ANALYSIS - Analyze dump contents
 - 7 TRACES - Trace formatting
 - 1 CTRACE - Component trace
 - D DISPLAY - Specify parameters to display CTRACE entries
 - update Component with GSKSRVR, update Report type with full, and
 issue S to start the analysis

 GSKSRVR Commands#

 - S GSKSRVR
 - F GSKSRVR,DISPLAY CRYPTO
 - F GSKSRVR,DISPLAY LEVEL
 - F GSKSRVR,DISPLAY SIDCACHE
 - F GSKSRVR,DISPLAY XCF
 - F GSKSRVR,STOP

 Rob Schramm

 Rob Schramm
 Senior Systems Consultant
 Imperium Group



 On Fri, May 9, 2014 at 8:46 AM, Mark Pace pacemainl...@gmail.com wrote:

 I was able to get the Trace to work - after removing the -r TLS, that
 generated an error.
 *EZA2892I Secure port 21 does not allow the -a or -r start parameter *

 And from that trace it appears, to me, that the FTP server is not
 responding correctly to the z/OS client handshake.

 05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3
 CLIENT-HELLO
 message
 05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3 CLIENT-HELLO
 message
 :  012b 0301536b ed23cf50 8d72c5f7
 *...+..Sk.#.P.r..*
 0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
 .../...2(qw*
 0020:  a3e6e150 a3c5 0400ff00 050100*...P...
 *
 05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling write
 routine
 for 52 bytes
 05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes
 written
 05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling read routine
 for 5 bytes
 05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes
 received
 05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content Type 50 is
 not supported
 05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record
 header
 :  3232302d 57  *220-W
 *
 05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3 client
 handshake failed with 10.6.0.15[21]



 On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu wrote:

  Add this to the FTP Client job parms:
  //  PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',
  //'/-r TLS (TRACE EXIT')
 
  There is a formatted documented with gsktrace. Should get you to the
 exact
  error when you format gskwix.trc
 
   -Original Message-
   From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
   On Behalf Of Mark Post
   Sent: Wednesday, May 07, 2014 12:55 PM
   To: IBM-MAIN@LISTSERV.UA.EDU
   Subject: Re: z/OS FTPS Client  Linux FTP server
  
   Mark,
  
   This may be yet another case where running strace or ltrace on the
 server
   side will give you some insight into what is going on.  If you don't
  want to go
   down that road, i would say it's time to open up a PMR with IBM.
  
  
   Mark Post
  
   --
   For IBM-MAIN subscribe / signoff / archive access instructions, send
  email to
   lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
  --
  For IBM-MAIN subscribe / signoff / archive access instructions,

Re: z10 IPL from Utility Tape

2014-05-09 Thread Chase, John

 -Original Message-
 From: IBM Mainframe Discussion List On Behalf Of Ed Jaffe
 
 On 5/8/2014 10:49 AM, Matthew Stitt wrote:
  You do not need a remote HMC.  You just need to have the local HMC 
  available through the Internet
 with remote access allowed.  I do this all the time.  Could save you some 
 time if that could happen.
 
 How do you reach through the Internet and insert the DVD?

Ver-r-r-y-y carefully.  :-)

   -jc-

**
Information contained in this e-mail message and in any attachments thereto is 
confidential. If you are not the intended recipient, please destroy this 
message, delete any copies held on your systems, notify the sender immediately, 
and refrain from using or disclosing all or any part of its content to any 
other person.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread R.S.

W dniu 2014-05-09 13:35, John McKown pisze:

This has been an interesting thread. I rather like the escrow idea.

I consider it as useless.
- Unclear reason to do it. Why source code in escrow would help the
customer?
- No warranty the code is complete, well documented and up to date.
Without it can be useless for someone outside of ISV.
- Skills. In order to use the code in any way some skills are required,
possibly not available at customer.
- Time. Any case when such code would be useful (assuming completness
and skills) a significant time is need to perform any useful action,
even simple first time recompilation could be long process. And the need
to do it can be quite urgent.
- Escrow trust. Both parties have to trust it. What about it the trust
was disapointed?
- Setlement of disputes. Who and WHEN should decide about customer's
access to the code? It can be clear or not. Quick or not.

BTW: There is quite another process - to buy the application with the
source code, just to develop it further using own skills. In this case
there is no escrow, and the code is actively used by custmer's
development team, it's alive.

My €0.02

--
Radoslaw Skorupka
Lodz, Poland

---
Treść tej wiadomości może zawierać informacje prawnie chronione Banku
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is
intended solely for business use of the addressee. This e-mail may only be
received by the addressee and may not be disclosed to any third parties. If you
are not the intended addressee of this e-mail or the employee authorized to
forward it to the addressee, be advised that any dissemination, copying,
distribution or any other similar activity is legally prohibited and may be
punishable. If you received this e-mail by mistake please advise the sender
immediately by using the reply facility in your e-mail software and delete
permanently this e-mail including any copies of it either printed or saved to
hard drive.

mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl
Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2014 r. kapitał zakładowy mBanku S.A. (w całości wpłacony) wynosi 168.696.052 złote.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Is it possible to have ADRDSSU dump/copy output files directly onto z/OS USS files ?

2014-05-09 Thread Tsai Laurence

Dears ,
bad luck , seems not working as following JCL RC=8 ,  with msg of  ADR374E
(001)-OPNCL(14), UNABLE TO OPEN DDNAME DASD, 10  .

//DUMP2HFS JOB  (LTSAI,81038),CLASS=A,MSGCLASS=A,MSGLEVEL=(1,1),
// NOTIFY=SYSUID
/*
//DUMP EXEC PGM=ADRDSSU,REGION=0M
//DASD DD PATH='/tmp/cub/dump2hfs',PATHDISP=KEEP,
//   PATHMODE=(SIRWXU,SIRWXG,SIROTH),PATHOPTS=(OWRONLY,OCREAT,OTRUNC)
//SYSPRINT DD SYSOUT=*
//SYSINDD *
  DUMP DATASET(INCLUDE(CAR.JCL.CNTL))-
   OUTDD(DASD) -
   SPHERE  -
   COMPRESS  -
   SHARE  -
   TOL(ENQF)
/*


2014-05-08 22:55 GMT+08:00 Staller, Allan allan.stal...@kbmg.com:

 Don't know if it is doable, but should be easy to test.

 .
 .
 .
 //OUTDD DD PATHOPS (and other appropriate parameters).
 //SYSIN DD * *
 Dump/copy ds() OUTDD(OUTDD)..
 /*

 Then attempt  to copy/restore from hfs/zfs/nfs archive for verification.

 HTH,

 snipSubject: Is it possible to have ADRDSSU dump/copy output files
 directly onto z/OS USS files ?

 Dears , as the subject , any resolution ?  need to have the output file
 placed onto z/OS USS environment . So that I can using z/OS NFS client to
 store those backup output files onto remote servers.
 /snip

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Is it possible to have ADRDSSU dump/copy output files directly onto z/OS USS files ?

2014-05-09 Thread Staller, Allan

Oh well, you will have to try something else...

snip
bad luck , seems not working as following JCL RC=8 ,  with msg of  ADR374E
(001)-OPNCL(14), UNABLE TO OPEN DDNAME DASD, 10  .

//DUMP2HFS JOB  (LTSAI,81038),CLASS=A,MSGCLASS=A,MSGLEVEL=(1,1),
// NOTIFY=SYSUID
/*
//DUMP EXEC PGM=ADRDSSU,REGION=0M
//DASD DD PATH='/tmp/cub/dump2hfs',PATHDISP=KEEP,
//   PATHMODE=(SIRWXU,SIRWXG,SIROTH),PATHOPTS=(OWRONLY,OCREAT,OTRUNC)
//SYSPRINT DD SYSOUT=*
//SYSINDD *
  DUMP DATASET(INCLUDE(CAR.JCL.CNTL))-
   OUTDD(DASD) -
   SPHERE  -
   COMPRESS  -
   SHARE  -
   TOL(ENQF)
/*


2014-05-08 22:55 GMT+08:00 Staller, Allan allan.stal...@kbmg.com:

 Don't know if it is doable, but should be easy to test.

 .
 .
 .
 //OUTDD DD PATHOPS (and other appropriate parameters).
 //SYSIN DD * *
 Dump/copy ds() OUTDD(OUTDD)..
 /*

 Then attempt  to copy/restore from hfs/zfs/nfs archive for verification.

 HTH,

 snipSubject: Is it possible to have ADRDSSU dump/copy output files 
 directly onto z/OS USS files ?

 Dears , as the subject , any resolution ?  need to have the output 
 file placed onto z/OS USS environment . So that I can using z/OS NFS 
 client to store those backup output files onto remote servers.
 /snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Is it possible to have ADRDSSU dump/copy output files directly onto z/OS USS files ?

2014-05-09 Thread R.S.

W dniu 2014-05-09 16:00, Tsai Laurence pisze:

Dears ,
bad luck , seems not working as following JCL RC=8 , with msg of ADR374E
(001)-OPNCL(14), UNABLE TO OPEN DDNAME DASD, 10 .

//DUMP2HFS JOB (LTSAI,81038),CLASS=A,MSGCLASS=A,MSGLEVEL=(1,1),
// NOTIFY=SYSUID
/*
//DUMP EXEC PGM=ADRDSSU,REGION=0M
//DASD DD PATH='/tmp/cub/dump2hfs',PATHDISP=KEEP,
// PATHMODE=(SIRWXU,SIRWXG,SIROTH),PATHOPTS=(OWRONLY,OCREAT,OTRUNC)
//SYSPRINT DD SYSOUT=*
//SYSINDD *
DUMP DATASET(INCLUDE(CAR.JCL.CNTL))-
OUTDD(DASD) -
SPHERE -
COMPRESS -
SHARE -
TOL(ENQF)
/*

Try the following:
STEP1: ADRDSSU to MVS dataset
STEP2: copy the dataset to hfs file.

--
Radoslaw Skorupka
Lodz, Poland

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread John Gilmore

Radoslaw Skorupka is right to emphasize that an escrow agreement is
not a panacea.

Such an agreement may be all but useless, but an able lawyer who
understands the software-development process can write one that is
useful in extremis.

Moreover, the availability of such agreements sometimes makes it
possible for initially small, startup ISVs to sell their new products
to organizations that would otherwise be wary of buying them.

They can certainly be problematic; but it is possible, even easy, to
make long lists of potential inadequacies for just about any
undertaking.  (There are even some boilerplate lists of this sort
available.)


John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread John McKown

On Fri, May 9, 2014 at 7:54 AM, Bob Shannon bshan...@rocketsoftware.comwrote:

  For smaller ISVs, I wonder if it would be helpful to integrate something
 like git or subversion into their processing, with a secure (are there
 any?) off site backup master.

 Why do you think this is an original idea? All ISVs  deal with source code
 management.  Some use open source solutions; some use RYO methods. Most, if
 not all, escrow the source on release boundaries.  Our CVS repositories are
 replicated to three different locations daily. I'm sure we're not unique.


I didn't mean for it to come across as being an original thought (there is
nothing new under the Sun). It was just to toss out an idea which I hadn't
seen discussed on this thread before. Kind of along with the idea of the
software escrow and how some said that the software in escrow becomes out
of date, sometimes quite quickly. So perhaps a software escrow company
could be the host for the off site repository  backup system. This should
keep the software in the escrow account up to date. And, with an SCM, make
it possible for a company or client (if the vendor goes out of business) to
get a specific level of the software. This would be much easier if the
build process included the SCM level (git commit or whatever for other
SCMs - I think subversion has some special indicator which is replaced on
checkout by the level) was used to generate the executable. It would also
be helpful if the build process itself created some sort of object (don't
know what) which detailed how the build was actually done (make file,
scripts, JCL, other). And this may be what your company, and others, are
already doing. I'm am not all that knowledgeable about such, unless they
are brought up here.



 Bob Shannon
 Rocket Software


-- 
There is nothing more pleasant than traveling and meeting new people!
Genghis Khan

Maranatha! 
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread Scott Ford

John,


I like that idea.  I don't know how the ‘business side’ would work. i.e.; the 
money …unfortunately we all have to earn a living unless your rich, then I say 
god bless you..We use SVN and I can test you for IBM Mainframe source its kinda 
ok ..I don't think its SVN.





From: john.archie.mck...@gmail.com
Sent: ‎Friday‎, ‎May‎ ‎9‎, ‎2014 ‎10‎:‎37‎ ‎AM
To: IBM Mainframe Discussion List





On Fri, May 9, 2014 at 7:54 AM, Bob Shannon bshan...@rocketsoftware.comwrote:

  For smaller ISVs, I wonder if it would be helpful to integrate something
 like git or subversion into their processing, with a secure (are there
 any?) off site backup master.

 Why do you think this is an original idea? All ISVs  deal with source code
 management.  Some use open source solutions; some use RYO methods. Most, if
 not all, escrow the source on release boundaries.  Our CVS repositories are
 replicated to three different locations daily. I'm sure we're not unique.


I didn't mean for it to come across as being an original thought (there is
nothing new under the Sun). It was just to toss out an idea which I hadn't
seen discussed on this thread before. Kind of along with the idea of the
software escrow and how some said that the software in escrow becomes out
of date, sometimes quite quickly. So perhaps a software escrow company
could be the host for the off site repository  backup system. This should
keep the software in the escrow account up to date. And, with an SCM, make
it possible for a company or client (if the vendor goes out of business) to
get a specific level of the software. This would be much easier if the
build process included the SCM level (git commit or whatever for other
SCMs - I think subversion has some special indicator which is replaced on
checkout by the level) was used to generate the executable. It would also
be helpful if the build process itself created some sort of object (don't
know what) which detailed how the build was actually done (make file,
scripts, JCL, other). And this may be what your company, and others, are
already doing. I'm am not all that knowledgeable about such, unless they
are brought up here.



 Bob Shannon
 Rocket Software


-- 
There is nothing more pleasant than traveling and meeting new people!
Genghis Khan

Maranatha! 
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread Skip Robinson

I first encountered the notion of source-in-escrow in the 80's when 
negotiating purchase of a well known product. History sadly saw demise of 
the customer while the vendor still thrives. But I'm acutely curious: 
after all this discussion over the pros and cons of seeking an escrow 
clause, does anyone know of a case where one was actually executed? Has 
any customer in practice ever taken possession of escrowed source code? To 
what end? With what ultimate outcome? 

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com



From:   John McKown john.archie.mck...@gmail.com
To: IBM-MAIN@LISTSERV.UA.EDU, 
Date:   05/09/2014 07:37 AM
Subject:Re: Vendor Source Code
Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU



On Fri, May 9, 2014 at 7:54 AM, Bob Shannon 
bshan...@rocketsoftware.comwrote:

  For smaller ISVs, I wonder if it would be helpful to integrate 
something
 like git or subversion into their processing, with a secure (are 
there
 any?) off site backup master.

 Why do you think this is an original idea? All ISVs  deal with source 
code
 management.  Some use open source solutions; some use RYO methods. Most, 
if
 not all, escrow the source on release boundaries.  Our CVS repositories 
are
 replicated to three different locations daily. I'm sure we're not 
unique.


I didn't mean for it to come across as being an original thought (there is
nothing new under the Sun). It was just to toss out an idea which I hadn't
seen discussed on this thread before. Kind of along with the idea of the
software escrow and how some said that the software in escrow becomes out
of date, sometimes quite quickly. So perhaps a software escrow company
could be the host for the off site repository  backup system. This should
keep the software in the escrow account up to date. And, with an SCM, make
it possible for a company or client (if the vendor goes out of business) 
to
get a specific level of the software. This would be much easier if the
build process included the SCM level (git commit or whatever for other
SCMs - I think subversion has some special indicator which is replaced 
on
checkout by the level) was used to generate the executable. It would 
also
be helpful if the build process itself created some sort of object 
(don't
know what) which detailed how the build was actually done (make file,
scripts, JCL, other). And this may be what your company, and others, are
already doing. I'm am not all that knowledgeable about such, unless they
are brought up here.



 Bob Shannon
 Rocket Software



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM C and Cobol Threading question

2014-05-09 Thread Scott Ford

All:


I am not trying to pour cold water on any ideas or dis-credit anyone, that's 
not me . I have a weird kinda legacy issue I am trying to solve.

Basically, COBOL STC calling Assembler subroutines. The STC(s), are single 
threaded or single TCB and the real issue is we need them to run multi-threaded 
(in C terminology ) or multi-tasking . The both use Sockets ..So I was 
exploring , trying to figure out what the easiest and most supportable way to 
do this. There is only me doing this …and money is short…same ole same old 
story. This is why I asked the question.




Regards,

Scott





From: John Gilmore
Sent: ‎Thursday‎, ‎May‎ ‎8‎, ‎2014 ‎11‎:‎59‎ ‎AM
To: IBM Mainframe Discussion List





The distinction between COBOL's distinction of WORKING-STORAGE and
LOCAL-STORAGE is essentially the same as the PL/I and then C
distinction of static and automatic storage.

As far as I can judge from earlier posts in this thread the shared
facility is not a dynamic shared control block; it is a  read-only
table; and the serialization of accesses to such a table is required
only if it is replaced from time to time DURING the execution of the
multithreaded application.

Serialization is possible from, although not within, COBOL.  One
writes a pair of simple COBOL-callable assembly-language to do it; and
it is also possible and useful to write such a pair of subroutines to
LOAD and DELETE [load module or program object] tables.

In general, then, Mr. Perryman and I disagree, as we often have.  His
generic strictures, which would interdict all mixed-language
applications, are simplistic.


John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Mark Pace

Thanks, rob -
I am working on this now.  One issue, I don't have z/OSMF on my systems.
Guess I'll be stuck with trying to create policies by hand.  I seem to
recall there was a stand-alone version of the policy tool, but it appears
that can not be used with a z/OS 2.1 system.

Starting wonder how many tools/functions are going to moved to OSMF and if
I should be considering implementing OSMF.


On Fri, May 9, 2014 at 9:37 AM, Rob Schramm rob.schr...@gmail.com wrote:

 I did a quick search and the error seems like a TLS 1.0 only issue.

 As I remember it, the FTP TLS on z/OS is restricted to TLS 1.0 with IBM
 stating something like

 my impression
 please use AT-TLS... we are done putting work into task specific TLS
 implementations
 /my impression

 AT-TLS provides support for a wider ranges of TLS levels.  It isn't too
 much work to get operating for FTP.  Don't take the redbooks advice when
 creating rules... the writer succeeded in making it more complicated.  Copy
 an existing rule for FTP.

 The key is setting up the client rule not the server rule
 the SYSFTPD - FTPCDATA

 TLSMECHANISM  ATTLS
 secure_mechanism  tls
 secure_ctrlconn   private
 secure_dataconn   private
 epsv4 true
 TLSRFCLEVEL   RFC4217
 secure_ftprequired
 extensionsauth_tls
 secure_pbsz   32768

 You'll need PAGENT and

 Obey this for TCPIP
 TCPCONFIG TCPSENDBFRSIZE 32K TCPRCVBUFRSIZE 32K SENDGARBAGE FALSE TTLS

 If you are after z/OS 1.13.. then the stand alone Config Assistant is not
 available.. and the z/OSMF must be used.  I would not recommend hand coding
 Policy Agent Rules.

 Rob Schramm





 Rob Schramm
 Senior Systems Consultant
 Imperium Group



 On Fri, May 9, 2014 at 9:06 AM, Rob Schramm rob.schr...@gmail.com wrote:

  Sorry.. was doing my post via phone..
 
  Here is the short version of GSKSRVR trace
 
  Run a GSKSRVR for SSL trace.. the only gotcha is that it must come up
  before the task you want to trace.
 
  - S GSKSRVR
  - Restart STC
  - Update GSKWTR PROC to add a dataset to hold the trace.
  - TRACE CT,WTRSTART=GSKWTR
  - TRACE CT,ON,COMP=GSKSRVR
  - R n,JOBNAME=(yyy),OPTIONS=(LEVEL=255),WTR=GSKWTR,END where yyy is the
  name of STC.
  - Recreate the problem.
  - TRACE CT,OFF,COMP=GSKSRVR
  - TRACE CT,WTRSTOP=GSKWTR
  - get into IPCS
  - update 0 DEFAULTS - Specify default dump and options with GSKWTR
  produced trace data set
  - 2 ANALYSIS - Analyze dump contents
  - 7 TRACES - Trace formatting
  - 1 CTRACE - Component trace
  - D DISPLAY - Specify parameters to display CTRACE entries
  - update Component with GSKSRVR, update Report type with full,
 and
  issue S to start the analysis
 
  GSKSRVR Commands#
 
  - S GSKSRVR
  - F GSKSRVR,DISPLAY CRYPTO
  - F GSKSRVR,DISPLAY LEVEL
  - F GSKSRVR,DISPLAY SIDCACHE
  - F GSKSRVR,DISPLAY XCF
  - F GSKSRVR,STOP
 
  Rob Schramm
 
  Rob Schramm
  Senior Systems Consultant
  Imperium Group
 
 
 
  On Fri, May 9, 2014 at 8:46 AM, Mark Pace pacemainl...@gmail.com
 wrote:
 
  I was able to get the Trace to work - after removing the -r TLS, that
  generated an error.
  *EZA2892I Secure port 21 does not allow the -a or -r start parameter *
 
  And from that trace it appears, to me, that the FTP server is not
  responding correctly to the z/OS client handshake.
 
  05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3
  CLIENT-HELLO
  message
  05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3 CLIENT-HELLO
  message
  :  012b 0301536b ed23cf50 8d72c5f7
  *...+..Sk.#.P.r..*
  0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
  .../...2(qw*
  0020:  a3e6e150 a3c5 0400ff00 050100*...P...
  *
  05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling write
  routine
  for 52 bytes
  05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes
  written
  05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling read
 routine
  for 5 bytes
  05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes
  received
  05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content Type 50 is
  not supported
  05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record
  header
  :  3232302d 57  *220-W
  *
  05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3 client
  handshake failed with 10.6.0.15[21]
 
 
 
  On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu wrote:
 
   Add this to the FTP Client job parms:
   //
  PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',
   //'/-r TLS (TRACE EXIT')
  
   There is a formatted documented with gsktrace. Should get you to the
  exact
   error when you format gskwix.trc
  
-Original Message-
From: IBM Mainframe Discussion List [mailto:
 IBM-MAIN@LISTSERV.UA.EDU]
On Behalf Of Mark Post
Sent: Wednesday, May 07, 2014 12:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS FTPS Client  Linux FTP server
   
Mark,

Loadlib compare utility

2014-05-09 Thread Ward, Mike S

Hello everyone, do any of you know of a utility that can compare 2 loadlibs 
with supposedly the same members and report if there is a discrepancy in the 
modules, I.E. size of module, date of linking, that type of thing?

Thanks

==
This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to which it is addressed. If you 
have received this email in error, please notify the system manager. This 
message contains confidential information and is intended only for the 
individual named. If you are not the named addressee, you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this message by mistake and delete 
this e-mail from your system. If you are not the intended recipient, you are 
notified that disclosing, copying, distributing or taking any action in 
reliance on the contents of this information is strictly prohibited.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Loadlib compare utility

2014-05-09 Thread Staller, Allan

SUPERC (ISRUPC) will do fine.  For the compare. It will easily identify any 
member mis-matches as well as missing members. 
It won't be very good at telling you what the differences are.

HTH,

Al Staller | Z Systems Programmer | KBM Group | (Tel) 972 664-3565 | 
allan.stal...@kbmg.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Ward, Mike S
Sent: Friday, May 09, 2014 10:18 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Loadlib compare utility

Hello everyone, do any of you know of a utility that can compare 2 loadlibs 
with supposedly the same members and report if there is a discrepancy in the 
modules, I.E. size of module, date of linking, that type of thing?

Thanks

==
This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to which it is addressed. If you 
have received this email in error, please notify the system manager. This 
message contains confidential information and is intended only for the 
individual named. If you are not the named addressee, you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this message by mistake and delete 
this e-mail from your system. If you are not the intended recipient, you are 
notified that disclosing, copying, distributing or taking any action in 
reliance on the contents of this information is strictly prohibited.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM C and Cobol Threading question

2014-05-09 Thread John Gilmore

Scott,

Is this message table in fact a static one than you change only
infrequently, e.g., when you also make changes in the routines that
use it?

If so, you should consider making it into a load module or,
preferably, a program object.
It can then be brought into storage using a LOAD or LOADX.  You can
then, of course, store-protect it, make it unmodifiable while
resident.

John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

FW: FW: FW: z10 IPL from Utility Tape

2014-05-09 Thread August Carideo/RYE/US

Thanks

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Ed Finnell
Sent: Thursday, May 08, 2014 5:39 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: FW: FW: z10 IPL from Utility Tape

The OP was the z/OS Lpar wouldn't activate after power outage with apparent  
configuration issues. All the backups are DDF images. The support structure  
recommends reloading the  DS6800. They've been down for weeks at this site  and 
is 1300 miles from mother ship.

In a message dated 5/8/2014 4:22:45 P.M. Central Daylight Time, 
august.cari...@avon.com writes:

The part  that’s confusing me , I guess I missed something, but where does a 
working  z/os image come in play here ?
Please let me know where I missed that
I  thought he was just talking about a z/10 in a remote location running VM I  
did not follow all of it  either

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Loadlib compare utility

2014-05-09 Thread Paul Gilmartin

On Fri, 9 May 2014 15:25:18 +, Staller, Allan wrote:

SUPERC (ISRUPC) will do fine.  For the compare. It will easily identify any 
member mis-matches as well as missing members. 
It won't be very good at telling you what the differences are.
 
Faced with such a problem once, we compared as text AMBLIST output
of two load modules.  This showed a few displacements were different;
one had been assembled with a downlevel MACLIB.  We were lucky;
usually it wouldn't be so easy.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Gibney, Dave

I haven't used SSL client verification by certificate, so you are past my 
knowledge. As an experiment, can you get a working connection using 
userid/password authentication.

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
 On Behalf Of Mark Pace
 Sent: Friday, May 09, 2014 5:47 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: z/OS FTPS Client  Linux FTP server
 
 I was able to get the Trace to work - after removing the -r TLS, that
 generated an error.
 *EZA2892I Secure port 21 does not allow the -a or -r start parameter *
 
 And from that trace it appears, to me, that the FTP server is not
 responding correctly to the z/OS client handshake.
 
 05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3 CLIENT-
 HELLO message
 05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3 CLIENT-HELLO
 message
 :  012b 0301536b ed23cf50 8d72c5f7
 *...+..Sk.#.P.r..*
 0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
 .../...2(qw*
 0020:  a3e6e150 a3c5 0400ff00 050100
 *...P...
 *
 05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling write
 routine for 52 bytes
 05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes written
 05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling read
 routine for 5 bytes
 05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes received
 05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content Type 50
 is not supported
 05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record header
 :  3232302d 57  *220-W
 *
 05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3 client
 handshake failed with 10.6.0.15[21]
 
 
 
 On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu wrote:
 
  Add this to the FTP Client job parms:
  //
 PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',
  //'/-r TLS (TRACE EXIT')
 
  There is a formatted documented with gsktrace. Should get you to the
  exact error when you format gskwix.trc
 
   -Original Message-
   From: IBM Mainframe Discussion List
   [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Post
   Sent: Wednesday, May 07, 2014 12:55 PM
   To: IBM-MAIN@LISTSERV.UA.EDU
   Subject: Re: z/OS FTPS Client  Linux FTP server
  
   Mark,
  
   This may be yet another case where running strace or ltrace on the
   server side will give you some insight into what is going on.  If
   you don't
  want to go
   down that road, i would say it's time to open up a PMR with IBM.
  
  
   Mark Post
  
   ---
 -
   -- For IBM-MAIN subscribe / signoff / archive access instructions,
   send
  email to
   lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
  -
 -
  For IBM-MAIN subscribe / signoff / archive access instructions, send
  email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
 
 
 
 --
 The postings on this site are my own and don’t necessarily represent
 Mainline’s positions or opinions
 
 Mark D Pace
 Senior Systems Engineer
 Mainline Information Systems
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions, send
 email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Loadlib compare utility

2014-05-09 Thread Farley, Peter x23353

A number of the commercial compare utilities can perform that function.  I know 
for a fact that Compuware's Comparex and Macro4's InSync can do this, and CA 
FileMaster may have that capability as well, not sure about that one.

You can also get CBT file 321, COBANALZ, which will analyze a load library to 
determine the language and linkage information about load members.  You can 
compare the print output from COBANAL using SUPERC to see if there are 
different dates and/or members, but not detailed member contents.

HTH

Peter

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
 On Behalf Of Ward, Mike S
 Sent: Friday, May 09, 2014 11:18 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Loadlib compare utility
 
 Hello everyone, do any of you know of a utility that can compare 2
 loadlibs with supposedly the same members and report if there is a
 discrepancy in the modules, I.E. size of module, date of linking, that
 type of thing?
 
 Thanks
--

This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z10 IPL from Utility Tape

2014-05-09 Thread Shmuel Metz (Seymour J.)

In 7981579224536763.wa.alanaltmarkus.ibm@listserv.ua.edu, on
05/08/2014
   at 12:54 PM, Alan Altmark alan_altm...@us.ibm.com said:

If the IPLable utility tape was created on a labeled tape, then it
isn't going to work and you have no choice but to IPL the
installation media. 

Why? You used to be able to IPL from a labelled tape, hitting LOAD 4
times.

BTDT,GTTS
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread Shmuel Metz (Seymour J.)

In 00c101cf6b20$a7f2b3a0$f7d81ae0$@mcn.org, on 05/08/2014
   at 05:50 PM, Charles Mills charl...@mcn.org said:

Many moons ago I wrote, as a contractor, a product for an 
application software company and they ended up losing the source 
code for the product (which they were selling as part of a very 
large application system). They were unable to fix it for Y2K and 
had to replace the whole product in their large application 
system. Why didn't I have source code?

Does it matter? Had you retained a copy, it would have quickly gotten
out of synchronization with their copy, as they made changes. Even had
they made no changes, there would still have been a risk that
something would happen to you. There is no substitute for good
backups.

Now, there are cases where a company gives a former employee source
updates for something he worked on, but that's rare, and still doesn't
help if something happens to the former employee.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM C and Cobol Threading question

2014-05-09 Thread Scott Ford

John,


Yes sir it is static …I like the idea of a load module ..easier for sure..and I 
can protect it..

A big thanks..


Hey do you know if a Heap can be passed in a C thread ?


Regards,

Scott





From: John Gilmore
Sent: ‎Friday‎, ‎May‎ ‎9‎, ‎2014 ‎11‎:‎26‎ ‎AM
To: IBM Mainframe Discussion List





Scott,

Is this message table in fact a static one than you change only
infrequently, e.g., when you also make changes in the routines that
use it?

If so, you should consider making it into a load module or,
preferably, a program object.
It can then be brought into storage using a LOAD or LOADX.  You can
then, of course, store-protect it, make it unmodifiable while
resident.

John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Re : Setting A SLIP For A Program Running Under CICS.

2014-05-09 Thread Ed Jaffe


On 5/9/2014 5:17 AM, Martin Packer wrote:

I thought CICS switched to using standard Program Fetch 25 years ago.
Old V3? Does knowing that change anything?


CICS uses directed LOADs for modules found in the DFHRPL concatenation.

--
Edward E Jaffe
Phoenix Software International, Inc
831 Parkview Drive North
El Segundo, CA 90245
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Mark Pace

Oh yes.  We've been doing it that way for years.

Trying to add the ability to secure the log in process.


On Fri, May 9, 2014 at 11:42 AM, Gibney, Dave gib...@wsu.edu wrote:

 I haven't used SSL client verification by certificate, so you are past my
 knowledge. As an experiment, can you get a working connection using
 userid/password authentication.

  -Original Message-
  From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
  On Behalf Of Mark Pace
  Sent: Friday, May 09, 2014 5:47 AM
  To: IBM-MAIN@LISTSERV.UA.EDU
  Subject: Re: z/OS FTPS Client  Linux FTP server
 
  I was able to get the Trace to work - after removing the -r TLS, that
  generated an error.
  *EZA2892I Secure port 21 does not allow the -a or -r start parameter *
 
  And from that trace it appears, to me, that the FTP server is not
  responding correctly to the z/OS client handshake.
 
  05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3 CLIENT-
  HELLO message
  05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3 CLIENT-HELLO
  message
  :  012b 0301536b ed23cf50 8d72c5f7
  *...+..Sk.#.P.r..*
  0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
  .../...2(qw*
  0020:  a3e6e150 a3c5 0400ff00 050100
  *...P...
  *
  05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling write
  routine for 52 bytes
  05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes written
  05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling read
  routine for 5 bytes
  05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes received
  05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content Type 50
  is not supported
  05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record header
  :  3232302d 57  *220-W
  *
  05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3 client
  handshake failed with 10.6.0.15[21]
 
 
 
  On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu wrote:
 
   Add this to the FTP Client job parms:
   //
  PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',
   //'/-r TLS (TRACE EXIT')
  
   There is a formatted documented with gsktrace. Should get you to the
   exact error when you format gskwix.trc
  
-Original Message-
From: IBM Mainframe Discussion List
[mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Post
Sent: Wednesday, May 07, 2014 12:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS FTPS Client  Linux FTP server
   
Mark,
   
This may be yet another case where running strace or ltrace on the
server side will give you some insight into what is going on.  If
you don't
   want to go
down that road, i would say it's time to open up a PMR with IBM.
   
   
Mark Post
   
---
  -
-- For IBM-MAIN subscribe / signoff / archive access instructions,
send
   email to
lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  
   -
  -
   For IBM-MAIN subscribe / signoff / archive access instructions, send
   email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  
 
 
 
  --
  The postings on this site are my own and don’t necessarily represent
  Mainline’s positions or opinions
 
  Mark D Pace
  Senior Systems Engineer
  Mainline Information Systems
 
  --
  For IBM-MAIN subscribe / signoff / archive access instructions, send
  email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




-- 
The postings on this site are my own and don’t necessarily represent
Mainline’s positions or opinions

Mark D Pace
Senior Systems Engineer
Mainline Information Systems

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: REXX EDIT of Source Code

2014-05-09 Thread Jon Butler

Thanks to all for their suggestions.   I have tried every permutation I can 
think of, but to no avail.  Yes, I understand some permutations are ignored but 
I tried them anywayeven IBM software has been reported to have a bug or two 
from time to time.. ;-))  I'm using z/OS 1.12 and ISPF 6.1.

The dataset in question is myid.ispf.pli, so the low-level qualifier is for 
PL/I.  In fact, I have set the HILIGHT to PLI.  In the ISPF editor everything 
works as it should.  There are no line numbers in columns 1-6 becuase there are 
PL/I or *PROCESS statements there.  There are also no line numbers in 73-80.  I 
run a Mod 5 terminal, so there are no hidden columns.  WYSIWIG in ISPF.

The data set has the ISPF PROFILE attributes PLI (FIXED -80), NUMBER OFF, 
AUTONUM OFF, IMACRO NONE, MARGINS(2,80).  I still get the first six columns 
blanked outset to x'40' not x'00'.

As suggested, I will try the ISPF-L list.  

Cheers,

Jon Butler.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Is it possible to have ADRDSSU dump/copy output files directly onto z/OS USS files ?

2014-05-09 Thread Paul Gilmartin

On 2014-05-09, at 08:04, R.S. wrote:
 
 Try the following:
 STEP1: ADRDSSU to MVS dataset
 STEP2: copy the dataset to hfs file.
   
This is almost certain to work, but it falls well short of the
OP's desire for directly.  PoC JCL appended.

I used IEBCOPY rather than ADRDSSU because of my familiarity
with the former.  This should work alike with archives from
AMATERSE, ADRDSSU, IEBCOPY, etc.

GIMZIP (according to Kurt Q; thanks!) does something like this
for its unloaded RELFILEs.  It has no need for FILEDATA=RECORD
because the BDWs in the RECFM=VBS archive suffice to reconstruct
the original block boundaries.

It's a pity that the IEBGENER filters I used aren't available
within DFSMS, avoiding the need for two job steps and two
temporary data sets.  That would impose a constraint of purely
sequential I/O, apparently violated by AMATERSE, which
(sometimes) can't write its archives directly to tape.

And the output could be a POSIX pipe which coud be fed directly
to SSL to a remote site; no large local storage required.

Imagine the value of //SYSUT2 DD SUBSYS=AWSTAPE for data
interchange!

131$ cat hfsarch
//
//HOBBITJOB  505303JOB,'Paul Gilmartin',
// MSGLEVEL=(1,1),REGION=16385K
//*
//USERCOUTPUT JESDS=ALL,DEFAULT=YES,
//  CLASS=R,PAGEDEF=V0648Z,CHARS=GT12
//*
//UNLOAD  EXEC  PGM=IEBCOPY
//SYSPRINT DD   SYSOUT=(,)
//SYSUT1   DD   DISP=SHR,DSN=SYS1.PARMLIB
//SYSUT2   DD   DISP=(,PASS),SPACE=(,500),UNIT=SYSALLDA,DSORG=PS
//*
//STEPX   EXEC  PGM=IEBGENER
//SYSPRINT DD   SYSOUT=(,)
//SYSINDD   *
//*
//* Overriding to RECFM=U causes blocks to be treated as records.
//SYSUT1   DD   RECFM=U,DISP=(OLD,PASS),DSN=*.UNLOAD.SYSUT2
//*
//*  FILEDATA=RECORD preserves those record boundaries in HFS.
//SYSUT2   DD   PATHOPTS=(OCREAT,OTRUNC,OWRONLY),FILEDATA=RECORD,
//  PATHMODE=(SIWUSR,SIRUSR),PATH='/tmp/SYSUID/hobbit'
//*
//* Undo the chicanery of STEPX.
//STEPY   EXEC  PGM=IEBGENER
//SYSPRINT DD   SYSOUT=(,)
//SYSINDD   *
//SYSUT2   DD   DISP=(,PASS),SPACE=(,500),UNIT=SYSALLDA
//SYSUT1   DD   RECFM=U,BLKSIZE=32760,PATHOPTS=(ORDONLY),
//  FILEDATA=RECORD,PATH='/tmp/SYSUID/hobbit'
//*
//RELOAD  EXEC  PGM=IEBCOPY
//SYSPRINT DD   SYSOUT=(,)
//SYSUT1   DD   DISP=(OLD,PASS),DSN=*.STEPY.SYSUT2
//SYSUT2   DD   SPACE=(,500),UNIT=SYSALLDA,DSORG=PO,
//  DSNTYPE=LIBRARY
//
 :w ! submit $MVS_HOST

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z10 IPL from Utility Tape

2014-05-09 Thread Karl Severson

Thanks for all of the replies everyone! Yes, there are several reasons that 
prohibit accessing the HMC via the internet the biggest being that the z10 is 
on a closed network. Having said that, since we do have a link, I might be able 
to remote into the HMC from my location. Anyway, I just got an email from the 
customer and it was a dirty tape drive that kept the system from IPLing from 
the tape cartridge. Usually the tape drive displays a *CLEAN* when it wants to 
be cleaned. I've done many IPL's of systems from a utility tape so I know it 
works. I guess at this point the decision has been made to restore the OS 
volumes and then see if the system will IPL. Stay tuned.
Karl

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Gibney, Dave

Well, if your are doing the SSL server stuff, then the password is not flowing 
in the clear. On the other hand, my interpretation of the vsftp parm I sent a 
few days ago is to NOT do certificate based client authentication.

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
 On Behalf Of Mark Pace
 Sent: Friday, May 09, 2014 9:19 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: z/OS FTPS Client  Linux FTP server
 
 Oh yes.  We've been doing it that way for years.
 
 Trying to add the ability to secure the log in process.
 
 
 On Fri, May 9, 2014 at 11:42 AM, Gibney, Dave gib...@wsu.edu wrote:
 
  I haven't used SSL client verification by certificate, so you are past
  my knowledge. As an experiment, can you get a working connection using
  userid/password authentication.
 
   -Original Message-
   From: IBM Mainframe Discussion List
   [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
   Sent: Friday, May 09, 2014 5:47 AM
   To: IBM-MAIN@LISTSERV.UA.EDU
   Subject: Re: z/OS FTPS Client  Linux FTP server
  
   I was able to get the Trace to work - after removing the -r TLS,
   that generated an error.
   *EZA2892I Secure port 21 does not allow the -a or -r start parameter
   *
  
   And from that trace it appears, to me, that the FTP server is not
   responding correctly to the z/OS client handshake.
  
   05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3
   CLIENT- HELLO message
   05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3
   CLIENT-HELLO message
   :  012b 0301536b ed23cf50 8d72c5f7
   *...+..Sk.#.P.r..*
   0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
   .../...2(qw*
   0020:  a3e6e150 a3c5 0400ff00 050100
   *...P...
   *
   05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling write
   routine for 52 bytes
   05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes
   written
   05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling read
   routine for 5 bytes
   05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes
   received
   05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content Type
   50 is not supported
   05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record
 header
   :  3232302d 57  *220-W
   *
   05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3
   client handshake failed with 10.6.0.15[21]
  
  
  
   On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu
 wrote:
  
Add this to the FTP Client job parms:
//
  
 PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',
//'/-r TLS (TRACE EXIT')
   
There is a formatted documented with gsktrace. Should get you to
the exact error when you format gskwix.trc
   
 -Original Message-
 From: IBM Mainframe Discussion List
 [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Post
 Sent: Wednesday, May 07, 2014 12:55 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: z/OS FTPS Client  Linux FTP server

 Mark,

 This may be yet another case where running strace or ltrace on
 the server side will give you some insight into what is going
 on.  If you don't
want to go
 down that road, i would say it's time to open up a PMR with IBM.


 Mark Post

 
 ---
   -
 -- For IBM-MAIN subscribe / signoff / archive access
 instructions, send
email to
 lists...@listserv.ua.edu with the message: INFO IBM-MAIN
   
--
---
   -
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO
IBM-MAIN
   
  
  
  
   --
   The postings on this site are my own and don’t necessarily represent
   Mainline’s positions or opinions
  
   Mark D Pace
   Senior Systems Engineer
   Mainline Information Systems
  
   
   -- For IBM-MAIN subscribe / signoff / archive access instructions,
   send email to lists...@listserv.ua.edu with the message: INFO
   IBM-MAIN
 
  --
  For IBM-MAIN subscribe / signoff / archive access instructions, send
  email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
 
 
 
 --
 The postings on this site are my own and don’t necessarily represent
 Mainline’s positions or opinions
 
 Mark D Pace
 Senior Systems Engineer
 Mainline Information Systems
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions, send email to
 lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Mark Pace

Sorry, confused, again.

We currently do userid/password authentication - without SSL.


On Fri, May 9, 2014 at 1:42 PM, Gibney, Dave gib...@wsu.edu wrote:

 Well, if your are doing the SSL server stuff, then the password is not
 flowing in the clear. On the other hand, my interpretation of the vsftp
 parm I sent a few days ago is to NOT do certificate based client
 authentication.

  -Original Message-
  From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
  On Behalf Of Mark Pace
  Sent: Friday, May 09, 2014 9:19 AM
  To: IBM-MAIN@LISTSERV.UA.EDU
  Subject: Re: z/OS FTPS Client  Linux FTP server
 
  Oh yes.  We've been doing it that way for years.
 
  Trying to add the ability to secure the log in process.
 
 
  On Fri, May 9, 2014 at 11:42 AM, Gibney, Dave gib...@wsu.edu wrote:
 
   I haven't used SSL client verification by certificate, so you are past
   my knowledge. As an experiment, can you get a working connection using
   userid/password authentication.
  
-Original Message-
From: IBM Mainframe Discussion List
[mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
Sent: Friday, May 09, 2014 5:47 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS FTPS Client  Linux FTP server
   
I was able to get the Trace to work - after removing the -r TLS,
that generated an error.
*EZA2892I Secure port 21 does not allow the -a or -r start parameter
*
   
And from that trace it appears, to me, that the FTP server is not
responding correctly to the z/OS client handshake.
   
05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3
CLIENT- HELLO message
05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3
CLIENT-HELLO message
:  012b 0301536b ed23cf50 8d72c5f7
*...+..Sk.#.P.r..*
0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
.../...2(qw*
0020:  a3e6e150 a3c5 0400ff00 050100
*...P...
*
05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling write
routine for 52 bytes
05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes
written
05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling read
routine for 5 bytes
05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes
received
05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content Type
50 is not supported
05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record
  header
:  3232302d 57  *220-W
*
05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3
client handshake failed with 10.6.0.15[21]
   
   
   
On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu
  wrote:
   
 Add this to the FTP Client job parms:
 //
   
  PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',
 //'/-r TLS (TRACE EXIT')

 There is a formatted documented with gsktrace. Should get you to
 the exact error when you format gskwix.trc

  -Original Message-
  From: IBM Mainframe Discussion List
  [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Post
  Sent: Wednesday, May 07, 2014 12:55 PM
  To: IBM-MAIN@LISTSERV.UA.EDU
  Subject: Re: z/OS FTPS Client  Linux FTP server
 
  Mark,
 
  This may be yet another case where running strace or ltrace on
  the server side will give you some insight into what is going
  on.  If you don't
 want to go
  down that road, i would say it's time to open up a PMR with IBM.
 
 
  Mark Post
 
  
  ---
-
  -- For IBM-MAIN subscribe / signoff / archive access
  instructions, send
 email to
  lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 ---
-
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO
 IBM-MAIN

   
   
   
--
The postings on this site are my own and don’t necessarily represent
Mainline’s positions or opinions
   
Mark D Pace
Senior Systems Engineer
Mainline Information Systems
   

-- For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO
IBM-MAIN
  
   --
   For IBM-MAIN subscribe / signoff / archive access instructions, send
   email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  
 
 
 
  --
  The postings on this site are my own and don’t necessarily represent
  Mainline’s positions or opinions
 
  Mark D Pace
  Senior Systems Engineer
  Mainline

RMF APIs

2014-05-09 Thread ITURIEL DO NASCIMENTO NETO


Hi all,

I'm doing an assembler program that needs to know actual CPU consumption of 
every Lpar in the Sysplex.
To address it my program is calling a Rexx that invokes SDSF environment to get 
this information.

It works but the design is poor. Are there any other solution, maybe RMF APIs ?

Thanks in advance.


Ituriel do Nascimento Neto
Banco Bradesco S/A
4254 / DPCD - Engenharia de Software
910 / Sistemas Operacionais Mainframe
Tel. :  55 11 3684-2177


Agora é BRA. BRA de Brasil. BRA de Bradesco.
Patrocinador oficial dos Jogos Olímpicos e Paralímpicos Rio 2016.


AVISO LEGAL br...Esta mensagem é destinada exclusivamente para a(s) pessoa(s) 
a quem é dirigida, podendo conter informação confidencial e/ou legalmente 
privilegiada. Se você não for destinatário desta mensagem, desde já fica 
notificado de abster-se a divulgar, copiar, distribuir, examinar ou, de 
qualquer forma, utilizar a informação contida nesta mensagem, por ser ilegal. 
Caso você tenha recebido esta mensagem por engano, pedimos que nos retorne este 
E-Mail, promovendo, desde logo, a eliminação do seu conteúdo em sua base de 
dados, registros ou sistema de controle. Fica desprovida de eficácia e validade 
a mensagem que contiver vínculos obrigacionais, expedida por quem não detenha 
poderes de representação. 
LEGAL ADVICEbr...This message is exclusively destined for the people to whom 
it is directed, and it can bear private and/or legally exceptional information. 
If you are not addressee of this message, since now you are advised to not 
release, copy, distribute, check or, otherwise, use the information contained 
in this message, because it is illegal. If you received this message by 
mistake, we ask you to return this email, making possible, as soon as possible, 
the elimination of its contents of your database, registrations or controls 
system. The message that bears any mandatory links, issued by someone who has 
no representation powers, shall be null or void.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RMF APIs

2014-05-09 Thread Ed Jaffe


On 5/9/2014 11:13 AM, ITURIEL DO NASCIMENTO NETO wrote:

I'm doing an assembler program that needs to know actual CPU consumption of 
every Lpar in the Sysplex.
To address it my program is calling a Rexx that invokes SDSF environment to get 
this information.

It works but the design is poor. Are there any other solution, maybe RMF APIs ?


Check out ERB2XDGS: RMF Monitor II sysplex data gathering service.

--
Edward E Jaffe
Phoenix Software International, Inc
831 Parkview Drive North
El Segundo, CA 90245
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RMF APIs

2014-05-09 Thread Staller, Allan

BCPII?

snip
On 5/9/2014 11:13 AM, ITURIEL DO NASCIMENTO NETO wrote:
 I'm doing an assembler program that needs to know actual CPU consumption of 
 every Lpar in the Sysplex.
 To address it my program is calling a Rexx that invokes SDSF environment to 
 get this information.

 It works but the design is poor. Are there any other solution, maybe RMF APIs 
 ?

Check out ERB2XDGS: RMF Monitor II sysplex data gathering service.
/snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Gibney, Dave

Well, for what it is worth, I use the following in my userid.FTP.DATA and 
successfully talk to vsftp with SSL Encryption:
TLSRFCLEVEL   CCCNONOTIFY ; 
EPSV4 TRUE  
TLSMECHANISM  FTP   
SECURE_MECHANISM TLS   
SECURE_FTP REQUIRED 
SECURE_CTRLCONN   CLEAR  
SECURE_DATACONN PRIVATE
CIPHERSUITE   SSL_NULL_MD5  ; 01  
CIPHERSUITE   SSL_NULL_SHA  ; 02  
CIPHERSUITE   SSL_RC4_MD5_EX; 03  
CIPHERSUITE   SSL_RC4_MD5   ; 04  
CIPHERSUITE   SSL_RC4_SHA   ; 05  
CIPHERSUITE   SSL_RC2_MD5_EX; 06  
CIPHERSUITE   SSL_DES_SHA   ; 09  
CIPHERSUITE   SSL_3DES_SHA  ; 0A  
  
KEYRING FTPClientRing 

My RACF keyring has:
Ring:   
 FTPClientRing
Certificate Label Name Cert Owner USAGE  DEFAULT
         ---

Thawte Premium Server CA   CERTAUTH   CERTAUTH NO   

thawte Primary Root CA CERTAUTH   CERTAUTH NO   

Thawte Server CA   CERTAUTH   CERTAUTH NO   

Thawte DV SSL CA   CERTAUTH   CERTAUTH NO

I did find it necessary to have the full chain in my keyring.

I just use //MVSFTP   EXEC PGM=FTP,

I don't maintain the Linux server, so I can't quickly get the full vsftp parm 
deck. I can ask for it.   

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
 On Behalf Of Mark Pace
 Sent: Friday, May 09, 2014 10:58 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: z/OS FTPS Client  Linux FTP server
 
 Sorry, confused, again.
 
 We currently do userid/password authentication - without SSL.
 
 
 On Fri, May 9, 2014 at 1:42 PM, Gibney, Dave gib...@wsu.edu wrote:
 
  Well, if your are doing the SSL server stuff, then the password is not
  flowing in the clear. On the other hand, my interpretation of the
  vsftp parm I sent a few days ago is to NOT do certificate based client
  authentication.
 
   -Original Message-
   From: IBM Mainframe Discussion List
   [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
   Sent: Friday, May 09, 2014 9:19 AM
   To: IBM-MAIN@LISTSERV.UA.EDU
   Subject: Re: z/OS FTPS Client  Linux FTP server
  
   Oh yes.  We've been doing it that way for years.
  
   Trying to add the ability to secure the log in process.
  
  
   On Fri, May 9, 2014 at 11:42 AM, Gibney, Dave gib...@wsu.edu wrote:
  
I haven't used SSL client verification by certificate, so you are
past my knowledge. As an experiment, can you get a working
connection using userid/password authentication.
   
 -Original Message-
 From: IBM Mainframe Discussion List
 [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
 Sent: Friday, May 09, 2014 5:47 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: z/OS FTPS Client  Linux FTP server

 I was able to get the Trace to work - after removing the -r TLS,
 that generated an error.
 *EZA2892I Secure port 21 does not allow the -a or -r start
 parameter
 *

 And from that trace it appears, to me, that the FTP server is
 not responding correctly to the z/OS client handshake.

 05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3
 CLIENT- HELLO message
 05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3
 CLIENT-HELLO message
 :  012b 0301536b ed23cf50 8d72c5f7
 *...+..Sk.#.P.r..*
 0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
 .../...2(qw*
 0020:  a3e6e150 a3c5 0400ff00 050100
 *...P...
 *
 05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling
 write routine for 52 bytes
 05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes
 written
 05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling
 read routine for 5 bytes
 05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes
 received
 05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content
 Type
 50 is not supported
 05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record
   header
 :  3232302d 57  *220-W
 *
 05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3
 client handshake failed with 10.6.0.15[21]



 On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu
   wrote:

  Add this to the FTP Client job parms:
  //

Re: EZZ9308E UNRESPONSIVE NAME SERVER

2014-05-09 Thread Eric Chevalier

We had a somewhat similar problem a few years ago. In our csse it turned 
out to be a firewall issue. An internal name server or resolver was 
trying to resolve a host name using an outside name server. The internal 
system was sending out EDNS queries, but our Cisco firewall/VPN 
appliance had an older version of firmware which couldn't support that 
format.


Standard DNS queries must fit into a 512-byte UDP packet. EDNS queries 
can be encapsulated in much larger packets. Because of the limitation in 
our Cisco's firmware, those EDNS queries were silently being dropped. 
The internal system never received a reply and started issuing those 
timeout messages.


On 5/8/14, 6:14 AM, גדי בן אבי wrote:

Hi,
Once in a while we receive this series of messages:
14128 13:58:52.67 STC17917 0090 *EZZ9308E UNRESPONSIVE NAME SERVER DETECTED 
AT IP ADDRESS x.x.x.x
14128 13:58:52.67 STC17917 0090  EZZ9310I NAME SERVER x.x.x.x 409
409 0090   TOTAL NUMBER OF QUERIES SENT 2
409 0090   TOTAL NUMBER OF FAILURES 1
409 0090   PERCENTAGE   50%

14128 14:03:52.68 STC17917 0090  EZZ9309I NAME SERVER IS NOW RESPONSIVE AT 
IP ADDRESS x.x.x.x
14128 14:03:52.68 STC17917 0090  EZZ9310I NAME SERVER x.x.x.x 257
257 0090   TOTAL NUMBER OF QUERIES SENT 2
257 0090   TOTAL NUMBER OF FAILURES 0
257 0090   PERCENTAGE   0%

The messages are issued by the resolver address space.
Is there a way to find out what is causing these messages?
It looks like some kind of DNS query.
Can I find out what the query was?

We are using z/OS 1.13

Thanks

Gadi


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread zMan

You could guess, but I'd recommend you don't. I don't believe it to be
true, no matter what they claim.


On Thu, May 8, 2014 at 10:09 PM, Mitch mitc...@aol.com wrote:

 Mark:

 I absolutely agree.  And for the likes of the larger ISVs, I would guess
 all of their product source code is in escrow and kept up to date.  Maybe
 not so much for the mom and pop software companies, but the big ones, yes.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Mark Pace

WOAH, WOAH, WOAH,  what the hell?   I copied and pasted your FTP.DATA file
into my FTP.DATA file  and now it works.

Now I just have to determine what was different on yours than every
iteration that I have been through so far.

THANKS,  I think.   ;)


On Fri, May 9, 2014 at 2:28 PM, Gibney, Dave gib...@wsu.edu wrote:

 Well, for what it is worth, I use the following in my userid.FTP.DATA and
 successfully talk to vsftp with SSL Encryption:
 TLSRFCLEVEL   CCCNONOTIFY ;
 EPSV4 TRUE
 TLSMECHANISM  FTP
 SECURE_MECHANISM TLS
 SECURE_FTP REQUIRED
 SECURE_CTRLCONN   CLEAR
 SECURE_DATACONN PRIVATE
 CIPHERSUITE   SSL_NULL_MD5  ; 01
 CIPHERSUITE   SSL_NULL_SHA  ; 02
 CIPHERSUITE   SSL_RC4_MD5_EX; 03
 CIPHERSUITE   SSL_RC4_MD5   ; 04
 CIPHERSUITE   SSL_RC4_SHA   ; 05
 CIPHERSUITE   SSL_RC2_MD5_EX; 06
 CIPHERSUITE   SSL_DES_SHA   ; 09
 CIPHERSUITE   SSL_3DES_SHA  ; 0A

 KEYRING FTPClientRing

 My RACF keyring has:
 Ring:
  FTPClientRing
 Certificate Label Name Cert Owner USAGE  DEFAULT
          ---
 Thawte Premium Server CA   CERTAUTH   CERTAUTH NO

 thawte Primary Root CA CERTAUTH   CERTAUTH NO

 Thawte Server CA   CERTAUTH   CERTAUTH NO

 Thawte DV SSL CA   CERTAUTH   CERTAUTH NO

 I did find it necessary to have the full chain in my keyring.

 I just use //MVSFTP   EXEC PGM=FTP,

 I don't maintain the Linux server, so I can't quickly get the full vsftp
 parm deck. I can ask for it.

  -Original Message-
  From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
  On Behalf Of Mark Pace
  Sent: Friday, May 09, 2014 10:58 AM
  To: IBM-MAIN@LISTSERV.UA.EDU
  Subject: Re: z/OS FTPS Client  Linux FTP server
 
  Sorry, confused, again.
 
  We currently do userid/password authentication - without SSL.
 
 
  On Fri, May 9, 2014 at 1:42 PM, Gibney, Dave gib...@wsu.edu wrote:
 
   Well, if your are doing the SSL server stuff, then the password is not
   flowing in the clear. On the other hand, my interpretation of the
   vsftp parm I sent a few days ago is to NOT do certificate based client
   authentication.
  
-Original Message-
From: IBM Mainframe Discussion List
[mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
Sent: Friday, May 09, 2014 9:19 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS FTPS Client  Linux FTP server
   
Oh yes.  We've been doing it that way for years.
   
Trying to add the ability to secure the log in process.
   
   
On Fri, May 9, 2014 at 11:42 AM, Gibney, Dave gib...@wsu.edu
 wrote:
   
 I haven't used SSL client verification by certificate, so you are
 past my knowledge. As an experiment, can you get a working
 connection using userid/password authentication.

  -Original Message-
  From: IBM Mainframe Discussion List
  [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
  Sent: Friday, May 09, 2014 5:47 AM
  To: IBM-MAIN@LISTSERV.UA.EDU
  Subject: Re: z/OS FTPS Client  Linux FTP server
 
  I was able to get the Trace to work - after removing the -r TLS,
  that generated an error.
  *EZA2892I Secure port 21 does not allow the -a or -r start
  parameter
  *
 
  And from that trace it appears, to me, that the FTP server is
  not responding correctly to the z/OS client handshake.
 
  05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent V3
  CLIENT- HELLO message
  05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3
  CLIENT-HELLO message
  :  012b 0301536b ed23cf50 8d72c5f7
  *...+..Sk.#.P.r..*
  0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
  .../...2(qw*
  0020:  a3e6e150 a3c5 0400ff00 050100
  *...P...
  *
  05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): Calling
  write routine for 52 bytes
  05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52 bytes
  written
  05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling
  read routine for 5 bytes
  05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes
  received
  05/08/2014-16:46:27 Thd-0 ERROR gsk_read_v3_record(): Content
  Type
  50 is not supported
  05/08/2014-16:46:27 Thd-0 ASCII gsk_read_v3_record(): SSL record
header
  :  3232302d 57  *220-W
  *
  05/08/2014-16:46:27 Thd-0 ERROR gsk_secure_socket_init(): SSL V3
  client handshake failed with 10.6.0.15[21]
 
 
 
  On Wed, May 7, 2014 at 4:03 PM, Gibney, Dave gib...@wsu.edu
wrote:
 
   Add this to the FTP Client job parms:
   //
 
   
  PARM=('ENVAR(GSK_TRACE=0X,GSK_TRACE_FILE=/tmp/gskwix.trc)',

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Gibney, Dave

On looking at it, I think the 
 TLSRFCLEVEL   CCCNONOTIFY ;
And/or the
 EPSV4 TRUE
Are newish (in that they were what I had to put in to make it work the last 
time it broke :) It tends to break when maintenance is put on Linux or vsftp :)

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
 On Behalf Of Mark Pace
 Sent: Friday, May 09, 2014 1:00 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: z/OS FTPS Client  Linux FTP server
 
 WOAH, WOAH, WOAH,  what the hell?   I copied and pasted your FTP.DATA
 file
 into my FTP.DATA file  and now it works.
 
 Now I just have to determine what was different on yours than every iteration
 that I have been through so far.
 
 THANKS,  I think.   ;)
 
 
 On Fri, May 9, 2014 at 2:28 PM, Gibney, Dave gib...@wsu.edu wrote:
 
  Well, for what it is worth, I use the following in my userid.FTP.DATA
  and successfully talk to vsftp with SSL Encryption:
  TLSRFCLEVEL   CCCNONOTIFY ;
  EPSV4 TRUE
  TLSMECHANISM  FTP
  SECURE_MECHANISM TLS
  SECURE_FTP REQUIRED
  SECURE_CTRLCONN   CLEAR
  SECURE_DATACONN PRIVATE
  CIPHERSUITE   SSL_NULL_MD5  ; 01
  CIPHERSUITE   SSL_NULL_SHA  ; 02
  CIPHERSUITE   SSL_RC4_MD5_EX; 03
  CIPHERSUITE   SSL_RC4_MD5   ; 04
  CIPHERSUITE   SSL_RC4_SHA   ; 05
  CIPHERSUITE   SSL_RC2_MD5_EX; 06
  CIPHERSUITE   SSL_DES_SHA   ; 09
  CIPHERSUITE   SSL_3DES_SHA  ; 0A
 
  KEYRING FTPClientRing
 
  My RACF keyring has:
  Ring:
   FTPClientRing
  Certificate Label Name Cert Owner USAGE  DEFAULT
           ---
  Thawte Premium Server CA   CERTAUTH   CERTAUTH NO
 
  thawte Primary Root CA CERTAUTH   CERTAUTH NO
 
  Thawte Server CA   CERTAUTH   CERTAUTH NO
 
  Thawte DV SSL CA   CERTAUTH   CERTAUTH NO
 
  I did find it necessary to have the full chain in my keyring.
 
  I just use //MVSFTP   EXEC PGM=FTP,
 
  I don't maintain the Linux server, so I can't quickly get the full
  vsftp parm deck. I can ask for it.
 
   -Original Message-
   From: IBM Mainframe Discussion List
   [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
   Sent: Friday, May 09, 2014 10:58 AM
   To: IBM-MAIN@LISTSERV.UA.EDU
   Subject: Re: z/OS FTPS Client  Linux FTP server
  
   Sorry, confused, again.
  
   We currently do userid/password authentication - without SSL.
  
  
   On Fri, May 9, 2014 at 1:42 PM, Gibney, Dave gib...@wsu.edu wrote:
  
Well, if your are doing the SSL server stuff, then the password is
not flowing in the clear. On the other hand, my interpretation of
the vsftp parm I sent a few days ago is to NOT do certificate
based client authentication.
   
 -Original Message-
 From: IBM Mainframe Discussion List
 [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
 Sent: Friday, May 09, 2014 9:19 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: z/OS FTPS Client  Linux FTP server

 Oh yes.  We've been doing it that way for years.

 Trying to add the ability to secure the log in process.


 On Fri, May 9, 2014 at 11:42 AM, Gibney, Dave gib...@wsu.edu
  wrote:

  I haven't used SSL client verification by certificate, so you
  are past my knowledge. As an experiment, can you get a working
  connection using userid/password authentication.
 
   -Original Message-
   From: IBM Mainframe Discussion List
   [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
   Sent: Friday, May 09, 2014 5:47 AM
   To: IBM-MAIN@LISTSERV.UA.EDU
   Subject: Re: z/OS FTPS Client  Linux FTP server
  
   I was able to get the Trace to work - after removing the -r
   TLS, that generated an error.
   *EZA2892I Secure port 21 does not allow the -a or -r start
   parameter
   *
  
   And from that trace it appears, to me, that the FTP server
   is not responding correctly to the z/OS client handshake.
  
   05/08/2014-16:46:27 Thd-0 INFO send_v3_client_hello(): Sent
   V3
   CLIENT- HELLO message
   05/08/2014-16:46:27 Thd-0 ASCII send_v3_client_hello(): V3
   CLIENT-HELLO message
   :  012b 0301536b ed23cf50 8d72c5f7
   *...+..Sk.#.P.r..*
   0010:  201c1c84 2fef8ce6 3228c3b3 8de37177  *
   .../...2(qw*
   0020:  a3e6e150 a3c5 0400ff00 050100
   *...P...
   *
   05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record():
   Calling write routine for 52 bytes
   05/08/2014-16:46:27 Thd-0 INFO gsk_write_v3_record(): 52
   bytes written
   05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): Calling
   read routine for 5 bytes
   05/08/2014-16:46:27 Thd-0 INFO gsk_read_v3_record(): 5 bytes

Re: Vendor Source Code

2014-05-09 Thread Wayne Bickerdike

Just to add to Mitch's comments.
I was one of the developers of the said software that was given to our
competitor.
We held the software in Escrow with Iron Mountain, The software was mainly
z/OS assembler source/macros with the SMPE build code, SMPE APAR/PTF code.
We would also package the Install and User Guides (PDF) as a binary in XMIT
form.
We would send out a quarterly maintenance pack to customers and this
maintenance pack would also be transferred to a unique vault ID at Iron
Mountain.

When I had to bundle it up to deliver to our competitor, it was a simple
process to retrieve the Escrow and burn to DVD.

Our source control was SCLM, the  project definition and build source was
part of the Escrow bundle.


On Sat, May 10, 2014 at 5:11 AM, zMan zedgarhoo...@gmail.com wrote:

 You could guess, but I'd recommend you don't. I don't believe it to be
 true, no matter what they claim.


 On Thu, May 8, 2014 at 10:09 PM, Mitch mitc...@aol.com wrote:

  Mark:
 
  I absolutely agree.  And for the likes of the larger ISVs, I would guess
  all of their product source code is in escrow and kept up to date.  Maybe
  not so much for the mom and pop software companies, but the big ones,
 yes.

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




-- 
Wayne V. Bickerdike

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

2014-05-09 Thread Mark Pace

One thing I just noticed as I was documenting this.
I had changed my ftp server from using the GoDaddy assigned certificate to
a self-signed certificate.  I had send a copy of the .pem file to z/OS and
added it to my keyring as Site certificate. - That is what worked.

So I went back to the GoDaddy certificate on the server,  and I still have,
what I thought was a good Certauth from GoDaddy on my key ring and now my
error is - FC1003 authServer: secure_socket_init failed with rc = 417
(Self-signed certificate cannot be validated)

So now I need to figure out how to get the Certauth working as I don't
really want to have to send my self-signed out.

Something to ponder next week.


On Fri, May 9, 2014 at 4:09 PM, Gibney, Dave gib...@wsu.edu wrote:

 On looking at it, I think the
  TLSRFCLEVEL   CCCNONOTIFY ;
 And/or the
  EPSV4 TRUE
 Are newish (in that they were what I had to put in to make it work the
 last time it broke :) It tends to break when maintenance is put on Linux or
 vsftp :)

  -Original Message-
  From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
  On Behalf Of Mark Pace
  Sent: Friday, May 09, 2014 1:00 PM
  To: IBM-MAIN@LISTSERV.UA.EDU
  Subject: Re: z/OS FTPS Client  Linux FTP server
 
  WOAH, WOAH, WOAH,  what the hell?   I copied and pasted your FTP.DATA
  file
  into my FTP.DATA file  and now it works.
 
  Now I just have to determine what was different on yours than every
 iteration
  that I have been through so far.
 
  THANKS,  I think.   ;)
 
 
  On Fri, May 9, 2014 at 2:28 PM, Gibney, Dave gib...@wsu.edu wrote:
 
   Well, for what it is worth, I use the following in my userid.FTP.DATA
   and successfully talk to vsftp with SSL Encryption:
   TLSRFCLEVEL   CCCNONOTIFY ;
   EPSV4 TRUE
   TLSMECHANISM  FTP
   SECURE_MECHANISM TLS
   SECURE_FTP REQUIRED
   SECURE_CTRLCONN   CLEAR
   SECURE_DATACONN PRIVATE
   CIPHERSUITE   SSL_NULL_MD5  ; 01
   CIPHERSUITE   SSL_NULL_SHA  ; 02
   CIPHERSUITE   SSL_RC4_MD5_EX; 03
   CIPHERSUITE   SSL_RC4_MD5   ; 04
   CIPHERSUITE   SSL_RC4_SHA   ; 05
   CIPHERSUITE   SSL_RC2_MD5_EX; 06
   CIPHERSUITE   SSL_DES_SHA   ; 09
   CIPHERSUITE   SSL_3DES_SHA  ; 0A
  
   KEYRING FTPClientRing
  
   My RACF keyring has:
   Ring:
FTPClientRing
   Certificate Label Name Cert Owner USAGE  DEFAULT
            ---
   Thawte Premium Server CA   CERTAUTH   CERTAUTH NO
  
   thawte Primary Root CA CERTAUTH   CERTAUTH NO
  
   Thawte Server CA   CERTAUTH   CERTAUTH NO
  
   Thawte DV SSL CA   CERTAUTH   CERTAUTH NO
  
   I did find it necessary to have the full chain in my keyring.
  
   I just use //MVSFTP   EXEC PGM=FTP,
  
   I don't maintain the Linux server, so I can't quickly get the full
   vsftp parm deck. I can ask for it.
  
-Original Message-
From: IBM Mainframe Discussion List
[mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
Sent: Friday, May 09, 2014 10:58 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS FTPS Client  Linux FTP server
   
Sorry, confused, again.
   
We currently do userid/password authentication - without SSL.
   
   
On Fri, May 9, 2014 at 1:42 PM, Gibney, Dave gib...@wsu.edu wrote:
   
 Well, if your are doing the SSL server stuff, then the password is
 not flowing in the clear. On the other hand, my interpretation of
 the vsftp parm I sent a few days ago is to NOT do certificate
 based client authentication.

  -Original Message-
  From: IBM Mainframe Discussion List
  [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
  Sent: Friday, May 09, 2014 9:19 AM
  To: IBM-MAIN@LISTSERV.UA.EDU
  Subject: Re: z/OS FTPS Client  Linux FTP server
 
  Oh yes.  We've been doing it that way for years.
 
  Trying to add the ability to secure the log in process.
 
 
  On Fri, May 9, 2014 at 11:42 AM, Gibney, Dave gib...@wsu.edu
   wrote:
 
   I haven't used SSL client verification by certificate, so you
   are past my knowledge. As an experiment, can you get a working
   connection using userid/password authentication.
  
-Original Message-
From: IBM Mainframe Discussion List
[mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
Sent: Friday, May 09, 2014 5:47 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS FTPS Client  Linux FTP server
   
I was able to get the Trace to work - after removing the -r
TLS, that generated an error.
*EZA2892I Secure port 21 does not allow the -a or -r start
parameter
*
   
And from that trace it appears, to me, that the FTP server
is not responding correctly

REXX Symposia 2014 2015

2014-05-09 Thread Hobart Spitz

Posted to multiple lists.

The 2014 REXX Symposium, in Memphis TN, has just concluded.  While most
were from the U.S.A., some attendees connected remotely from the U.K. and
Australia and others attended in person from as far away as Holland and
Austria.  It was a great learning experience for REXX users: The schedule
can be seen at http://rexxla.org/events/2014/schedule.html.

The 2015 Symposium is scheduled for March 30 to April 3, 2015, in Vienna
Austria.

List members may want to pay particular attention as OOREXX for z/OS is
getting attention again.  You may want to follow developments and/or to
share your organization's requirements.

You can keep informed and/or participate in one or more of these ways:

   - Check www.rexxla.org from time to time.
   - Put a reminder in your calendar to check
   http://rexxla.org/events/symposium.html starting Feb. 1 2015.
   - Subscribe to the REXXLA list via NABBLE.
   - Get involved as a contributing developer.
   - Join REXXLA at www.rexxla.org.  Membership is $24 (students $12).

OOREXX is an object oriented super-set of REXX.

-- 
OREXXMan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RMF APIs

2014-05-09 Thread Roger Lowe

On Fri, 9 May 2014 18:13:05 +, ITURIEL DO NASCIMENTO NETO 
4254.itur...@bradesco.com.br wrote:

I'm doing an assembler program that needs to know actual CPU consumption of 
every Lpar in the Sysplex. 
To address it my program is calling a Rexx that invokes SDSF environment to 
get this information. 
 It works but the design is poor. Are there any other solution, maybe RMF APIs 
 ? 

We make use of the RMF Monitor III Batch Address Space Reporter and produce 
wto's to show us our Group Capacity usage. An example:
 +RMF300I 3B: Processing CPC Report... 
 +MVS1 - RMF301I: 4H Average: 2
 +MVS1 - RMF302I: 4H Max: 3
 +MVS1 - RMF303I: WLM Capping %:  0.0  
 +MVS1 - RMF304I: Group Name: GRPDEVT  
 +MVS1 - RMF305I: Group Limit: 9   
 +MVS1 - RMF306I: Time until Capping: 195 minutes   
.
Have a look in your *.SERBCLS dataset (members ERBM3B and ERBR3CPC) and that 
will give you a good starting point to set something up to fit your requirements

Roger

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread Dno

Thank you John

Sent from my iPhone

 On May 9, 2014, at 10:15 AM, John Gilmore jwgli...@gmail.com wrote:
 
 Radoslaw Skorupka is right to emphasize that an escrow agreement is
 not a panacea.
 
 Such an agreement may be all but useless, but an able lawyer who
 understands the software-development process can write one that is
 useful in extremis.
 
 Moreover, the availability of such agreements sometimes makes it
 possible for initially small, startup ISVs to sell their new products
 to organizations that would otherwise be wary of buying them.
 
 They can certainly be problematic; but it is possible, even easy, to
 make long lists of potential inadequacies for just about any
 undertaking.  (There are even some boilerplate lists of this sort
 available.)
 
 
 John Gilmore, Ashland, MA 01721 - USA
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Vendor Source Code

2014-05-09 Thread CM Poncelet

Yes ... but there is a problem of the third kind where having the 
source code would have been useful, as follows:


  1. An ISV supplies 'calculating' software (running in a separate
 address space) to which CICS online 4GL transactions pass
 parameters using cross-memory services. The ISV's code then
 processes these parms and returns the results of its calculations
 to caller. The ISV also supplies weekly updates of its code, but
 only as replacement LMODs.
  2. The ISV's latest update has a bug that makes it loop when a
 combination of parms is passed to it. All the CICS systems then
 freeze as they wait  for a response. So we take system dumps of
 the CICS regions and ISV's address space, and send them to the ISV.
  3.  The ISV cannot determine what the problem is because the parms
 are passed from 4GL 'code' in the dumps, but will not release the
 source code either. The customer then has to restore the ISV's
 previous LMODs in order to continue functioning, but at a cost
 because the ISV's previous LMODs' calculations are no longer valid.

My resolution was to put a GTF trace on all ASIDs, look for a recurring 
pattern of CPU instruction addresses within a same ASID, identify the 
begin/end addresses of the loop (and thus its offsets in the code), call 
the ISV and tell them to bring their source code, recompile it with 
whatever the Fortran assembler listing option was, check its assembly 
offsets against those in the system trace, and tell the ISV which part 
of their code needed to be fixed and why. (BTW This was in 1992.)


So there is a third kind of problem when an ISV cannot fix yet will 
not release its code and the ISV has not 'gone bust', because its source 
code in escrow cannot then be accessed either.


My ha'pennyworth.

Chris Poncelet
IBM Systems Programming Consultant (retired)
Logic Integration Limited


R.S. wrote:


W dniu 2014-05-09 13:35, John McKown pisze:


This has been an interesting thread. I rather like the escrow idea.


I consider it as useless.
- Unclear reason to do it. Why source code in escrow would help the 
customer?
- No warranty the code is complete, well documented and up to date. 
Without it can be useless for someone outside of ISV.
- Skills. In order to use the code in any way some skills are 
required, possibly not available at customer.
- Time. Any case when such code would be useful (assuming completness 
and skills) a significant time is need to perform any useful action, 
even simple first time recompilation could be long process. And the 
need to do it can be quite urgent.
- Escrow trust. Both parties have to trust it. What about it the trust 
was disapointed?
- Setlement of disputes. Who and WHEN should decide about customer's 
access to the code? It can be clear or not. Quick or not.




BTW: There is quite another process - to buy the application with the 
source code, just to develop it further using own skills. In this case 
there is no escrow, and the code is actively used by custmer's 
development team, it's alive.




My €0.02



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

52 matches

Mail list logo