Re: Mainframe Multi factor authentication possibilities

2020-08-26 Thread Timothy Sipples
The first factor doesn't seem like it'd help distinguish between users since you're sharing it. What type of second factor(s) do you plan to use? - - - - - - - - - - Timothy Sipples I.T. Architect Executive Digital Asset & Other Industry Solutions IBM Z & LinuxONE - - - - - - - - - - E-Mail:

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
Your question is unclear. By capture, do you mean log to a dataset or suppress? In neither case would IEFBR14 have any relevance. Exactly what are you trying to do and exactly what did you attempt? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3

Re: MVS modify command capture

2020-08-26 Thread Peter
I have a command F STARTEDTASK, STATUS it gives the output in SYSLOG but I would like to write it's output to a Dataset On Wed, 26 Aug, 2020, 1:38 pm Seymour J Metz, wrote: > Your question is unclear. By capture, do you mean log to a dataset or > suppress? In neither case would IEFBR14 have

Re: MVS modify command capture

2020-08-26 Thread David Spiegel
Hi Peter, If you have SDSF, you can write a Rexx program to scan the SYSLOG (either active or offloaded) for messages output by your modify command. Regards, David On 2020-08-26 05:39, Peter wrote: I have a command F STARTEDTASK, STATUS it gives the output in SYSLOG but I would like to

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
If you have a normal privilege level then you'll need to read the messages from the log or from the started task. Under SDSF you can display the started task, capture the messages with XDC and edit the output to remove extraneous messages. -- Shmuel (Seymour J.) Metz

ZCX task monitoring, anyone?

2020-08-26 Thread Sean Gleann
Can anyone offer advice, please, with regard to monitoring the system resource consumption of a zcx Container task? I've got a zcx Container task running on a 'sandbox' system where - as yet - I'm not collecting any RMF/SMF data. Because of that, my only source of system usage is the SDSF DA

MVS modify command capture

2020-08-26 Thread Peter
Hello I am trying to capture Modify command of a product which is running as started task. I tried issuing the command using IEFBR14 but it did not capture to a Dataset. Is there a way to capture a MODIFY command ? Peter --

Re: ZCX task monitoring, anyone?

2020-08-26 Thread Allan Staller
II can't speak too much to the excp counts, but re: CPU usage. Unix systems "count the beans" very differently than z/OS. The "system overhead" (uncaptured CPU time) for z/OS averages about 10%. The Unix systems I have encountered routinely exceed 40%. Perhaps looking at a unix process through a

Re: MVS modify command capture

2020-08-26 Thread Roger Lowe
On Wed, 26 Aug 2020 12:55:53 +0400, Peter wrote: >Hello > >I am trying to capture Modify command of a product which is running as >started task. > >I tried issuing the command using IEFBR14 but it did not capture to a >Dataset. > >Is there a way to capture a MODIFY command ? > You could try this

Re: ZCX task monitoring, anyone?

2020-08-26 Thread Michael Babcock
I can’t check my zCX out right now since my internet is down. You are running these on zIIP engines correct? Must be nice to have 5 zIIPs! And have the WLM parts in place? Although it probably wouldn’t make much difference during startup/shutdown. On Wed, Aug 26, 2020 at 3:40 AM Sean Gleann

Re: (yet another) problem with zcx container

2020-08-26 Thread Mauri Kanter
Hi: BTW, speaking of running zCX under z/OS under z/VM ... Does anyone know whether (or not) the DAT translation is kept in the TLBs (CAM memory)? I don't know why, but I think there was a limit on the levels of hardware-assisted DAT translation ... I want to know whether running zCX on a

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
The OP does not need the response to the modify, but rather the output from the task when it processes the text in the CIB. That might be difficult if the task doesn't use the CART. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM

Re: (yet another) problem with zcx container

2020-08-26 Thread R.S.
W dniu 26.08.2020 o 18:15, Mauri Kanter pisze: Hi Mike: Thanks for the answer My question tried to clarify whether (or not) when a zCX Linux image uses DAT and z/OS is running under z/VM, if it can be a TLB-hit or it always be a TLB-miss because the so many levels of SIE-virtualization My

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
I guess that it's time for an RCF; invoking SDSF in https://www-01.ibm.com/servers/resourcelink/svc00100.nsf/pages/zOSV2R4sc279028/$file/isfa600_v2r4.pdf only mentions the first two. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM

Re: (yet another) problem with zcx container

2020-08-26 Thread Mike Schwab
Well, you can get a 90 day trial without it, so the software must be checking for license and not using an actual hardware feature. https://ibmsystemsmag.com/IBM-Z/07/2020/z-os-container-extensions-trial On Wed, Aug 26, 2020 at 1:37 PM Mauri Kanter wrote: > > I guess the same than you and for

Re: (yet another) problem with zcx container

2020-08-26 Thread R.S.
No, this FC is kind of license. There is no hardware behind and definitely no change in integrated circuits like CPU. And it would be wise to enable such "deep DAT" for z/VM world as well. But there is no such feature. BTW: there are several FC features which are enablements of some

Re: MVS modify command capture

2020-08-26 Thread Barkow, Eileen
If you could issue the modify command under System Automation you would be able to trap the entire command and response and write them out To a dataset. I have clists that do this which I send you examples of. -Original Message- From: IBM Mainframe Discussion List On Behalf Of

Re: (yet another) problem with zcx container

2020-08-26 Thread Mike Schwab
The key to running MVS efficiently under VM was to specify a small region for MVS within VM. This would result with all the VM pages for MVS being in and MVS would page in and out. A large region for MVS would result in MVS and VM both paging in and out, working against each other. So look at

Re: MVS modify command capture

2020-08-26 Thread Paul Gilmartin
On Wed, 26 Aug 2020 15:06:08 +, Rob Scott wrote: >SDSF has distinct environments that it natively supports on z/OS : > > > 1. ISPF > 2. TSO CPPL > 3. Batch (and AFD) > 4. REXX > >The SDSF REXX interface will run where there is a valid REXX environment. > I.e. Provided that Rexx is

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
Why would you expect REXX to be started with SDSF in the table? SDSF is a TSO command and establishes an ISF environment; if it can run under IRXJCL and System REXX then it can run REXX scripts there.. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3

Re: (yet another) problem with zcx container

2020-08-26 Thread Mauri Kanter
I guess the same than you and for the same reasons, but I have no proof of it ... The only thing why I doubt about it is that I do not know why zCX needs FC-0104 ? Does FC-0104 changes something hardware-wise? > >My guess is NO. >Reason: the same as with z/VM. Multi-level z/VM causes DAT to

Re: (yet another) problem with zcx container

2020-08-26 Thread Gord Tomlin
On 2020-08-26 14:37, Mauri Kanter wrote: I do not know why zCX needs FC-0104 ? Does FC-0104 changes something hardware-wise? AFAICT the sole reason for the (paid) hardware feature is to provide entitlement. My guess as to why they require this feature is that you can run a lot of FOSS

Re: MVS modify command capture

2020-08-26 Thread Paul Gilmartin
On Wed, 26 Aug 2020 14:50:41 +, Seymour J Metz wrote: >That code has to run under SDSF, which is a TSO command. I don't know whether >SDSF will run under a TSO subset environment. No. It is not using the TSO command SDSF but the Rexx command environment SDSF. I have done that directly

Re: (yet another) problem with zcx container

2020-08-26 Thread Mauri Kanter
Hi Mike: Thanks for the answer My question tried to clarify whether (or not) when a zCX Linux image uses DAT and z/OS is running under z/VM, if it can be a TLB-hit or it always be a TLB-miss because the so many levels of SIE-virtualization Mauri.

Re: MVS modify command capture

2020-08-26 Thread Charles Mills
You know, I would think it would be possible -- nearly trivial -- to write a generic Rexx script that would issue any arbitrary console command, collect the results, and do "something" with those results -- where "something" was any of the things Rexx can do, such as writing it to a file. Would

Re: (yet another) problem with zcx container

2020-08-26 Thread R.S.
IMHO the key to running system efficiently is to assure enough physical memory. Enough mean paging rate close to zero during normal operation. Paging is still good, but only clean out inactive pages (looong time). However DAT is in use even with no paging - just to translate virtual storage

Re: MVS modify command capture

2020-08-26 Thread Paul Gilmartin
On Wed, 26 Aug 2020 18:30:54 +, Seymour J Metz wrote: >Where is that documented? >https://www-01.ibm.com/servers/resourcelink/svc00100.nsf/pages/zOSV2R4sc279028/$file/isfa600_v2r4.pdf > only lists invoking SDSF from ISPF and directly from TSO. > That's reminiscent of the HLASM Tier 1 who was

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
That code has to run under SDSF, which is a TSO command. I don't know whether SDSF will run under a TSO subset environment. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Paul Gilmartin

Re: MVS modify command capture

2020-08-26 Thread Rob Scott
SDSF has distinct environments that it natively supports on z/OS : 1. ISPF 2. TSO CPPL 3. Batch (and AFD) 4. REXX The SDSF REXX interface will run where there is a valid REXX environment. Note that the batch SDSF interface has been stabilised and we now encourage users to convert

Re: MVS modify command capture

2020-08-26 Thread Dana Mitchell
You could use a System REXX to issue the command and process the output, example: /* REXX */ CmdResult=AXRCMD('F STARTEDTASK,STATUS','OUTPUTVAR.',40); Do I = 1 to OUTPUTVAR.0 Parse var OUTPUTVAR.I p1 p2 . /* do someting here */ End Return Dana On Wed, 26 Aug 2020 13:39:36

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
Where is that documented? https://www-01.ibm.com/servers/resourcelink/svc00100.nsf/pages/zOSV2R4sc279028/$file/isfa600_v2r4.pdf only lists invoking SDSF from ISPF and directly from TSO. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From:

Re: MVS modify command capture

2020-08-26 Thread Charles Mills
Yeah, I meant "response to the MODIFY" in the loose sense to include any resulting STC output, not in the formal sense of "MVS command response." With regard to not using the CART, it's like A. A. Milne said in Disobedience: if people are going to do that "well, what can anyone do?" I'm not sure

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
Shouldn't you have a delay in there to giv the started task time to process he CIB? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Ed Jaffe Sent: Wednesday, August 26, 2020 5:56 PM To:

Re: MVS modify command capture

2020-08-26 Thread Charles Mills
That 10 at the end of GETMSG is a wait time (ten seconds). GETMSG gets all or none (in my experience) of a multi-line message, so if that is what you are getting then the initial delay is all you need. I started out with 1 and then went to 5 in my application, and both worked great when the

Re: MVS modify command capture

2020-08-26 Thread Jesse 1 Robinson
I understood Gil to be asking how I'm sure that I have all the data. DS QD,ONLINE is going after a large but finite amount of data. There are only so many online DASD volumes at any moment, and the number does not fluctuate from one run to the next. I can repeatedly issue DS QD,ONLINE and

Re: MVS modify command capture

2020-08-26 Thread Ed Jaffe
On 8/26/2020 2:39 AM, Peter wrote: I have a command F STARTEDTASK, STATUS it gives the output in SYSLOG but I would like to write it's output to a Dataset What you want do is trivial using built-in facilities in REXX. This example writes a stem to the end user. I assume you know how to

Re: MVS modify command capture

2020-08-26 Thread Seymour J Metz
Well, here there's nothing to escalate; I've generally gotten good responses from RCFs. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Paul Gilmartin

Re: MVS modify command capture

2020-08-26 Thread Jesse 1 Robinson
I've never seen the need to code any delay beyond what Ed has written. I have a CONSOLE routine that does a DS QD for all the DASD volumes in the shop. It just keeps cranking until all results are in. . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE

Re: MVS modify command capture

2020-08-26 Thread Steve Beaver
The only reason I can think of a case where the syslog is way behind. Sent from my iPhone I promise you I can’t type or Spell on any smartphone > On Aug 26, 2020, at 18:51, Jesse 1 Robinson wrote: > > I've never seen the need to code any delay beyond what Ed has written. I > have a CONSOLE

Re: MVS modify command capture

2020-08-26 Thread Paul Gilmartin
On Wed, 26 Aug 2020 19:03:10 -0500, Steve Beaver wrote: >The only reason I can think of a case where the syslog is way behind. > This is a symptom of IBM's indolent design. Simply: o Such a command shouldn't return to caller until it's complete and all its output is available. o Or it should

Re: ZCX task monitoring, anyone?

2020-08-26 Thread Attila Fogarasi
Check your values for housekeeping interval and scrape_interval. Recommended is 15s and 30s (which makes for a 60 second rate window). Small value for housekeeping interval will cause cAdvisor cpu usage to be high, while scrape_interval affects Prometheus cpu usage. It is entirely possible to

SDSF RCF (was: MVS modify command capture)

2020-08-26 Thread Paul Gilmartin
On Wed, 26 Aug 2020 20:27:10 +, Seymour J Metz wrote: >Well, here there's nothing to escalate; I've generally gotten good responses >from RCFs. > Submitted as below. Has anyone suggestions for additions? Hello, MHVRCFs, Neither z/OS Version 2 Release 4 TSO/E REXX Reference IBM

Re: MVS modify command capture

2020-08-26 Thread Bill Johnson
Got it.c Sent from Yahoo Mail for iPhone On Wednesday, August 26, 2020, 5:56 PM, Ed Jaffe wrote: On 8/26/2020 2:39 AM, Peter wrote: > I have a command > > F STARTEDTASK, STATUS > > it gives the output in SYSLOG but I would like to write it's output to a > Dataset What you want do is trivial

Re: (yet another) problem with zcx container

2020-08-26 Thread Mauri Kanter
Thank you all for the answers ... They make a lot of sense ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: MVS modify command capture

2020-08-26 Thread Paul Gilmartin
On Wed, 26 Aug 2020 20:27:10 +, Seymour J Metz wrote: >Well, here there's nothing to escalate; I've generally gotten good responses >from RCFs. > True. I was just reminiscing. So: ( ) TSO Rexx? ( ) UNIX Rexx? ( ) SDSF? Check all that apply. All 3 and let them work it out. The

Re: Mainframe Multi factor authentication possibilities

2020-08-26 Thread Timothy Sipples
Jared Hunter wrote: >The goal of multi-factor authentication is to strengthen the link >between a human being and the actions taken by a logical account >(because a logical account is what the SAF-implementing ESM is >capable of authorizing and auditing). Sharing a single (or few) >logical

Re: MVS modify command capture

2020-08-26 Thread Ed Jaffe
On 8/26/2020 5:03 PM, Steve Beaver wrote: The only reason I can think of a case where the syslog is way behind. Syslog is not relevant here. This is an EMCS console. -- Phoenix Software International Edward E. Jaffe 831 Parkview Drive North El Segundo, CA 90245

Re: (yet another) problem with zcx container

2020-08-26 Thread Timothy Sipples
Gord Tomlin wrote: >AFAICT the sole reason for the (paid) hardware feature is to provide >entitlement. >My guess as to why they require this feature is that you can run a lot >of FOSS products in zCX that offer similar function to IBM products. >Unfettered free use of zCX could be very costly to

Re: SDSF RCF (was: MVS modify command capture)

2020-08-26 Thread Seymour J Metz
What about System REXX? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Paul Gilmartin <000433f07816-dmarc-requ...@listserv.ua.edu> Sent: Wednesday, August 26, 2020 7:58 PM To:

Re: MVS modify command capture

2020-08-26 Thread Paul Gilmartin
On Wed, 26 Aug 2020 07:40:47 -0500, Roger Lowe wrote: >> >>Is there a way to capture a MODIFY command ? >> >You could try this bit of REXX and then invoke it via IKJEFT01 batch jcl - > Does that require TSO or would IRXJCL (or even UNIX mutatis mutandis) sufffice? > /*REXX*/

Re: Mainframe Multi factor authentication possibilities

2020-08-26 Thread Jared Hunter
Hi Jake, Disclosure: I'm one of the architects of IBM MFA for z/OS. The goal of multi-factor authentication is to strengthen the link between a human being and the actions taken by a logical account (because a logical account is what the SAF-implementing ESM is capable of authorizing and

Re: ZCX task monitoring, anyone?

2020-08-26 Thread Sean Gleann
Allan - "...count the beans differently...' Yes, I'm beginning to get used to that concept. For instance, with the CPU Utilisation data that I *have* been able to retrieve, the metric given is not 'CPU%', but 'Number of cores'. I'm having to do some rapid re-orienting to my way of thinking. As for