Re: VTAMAPPL PGM

2012-07-16 Thread Brian Westerman
The SyzCMD/z program is also available because of an agreement we have with IBM 
to ADCD users at for only 5% of the retail price (which is already very low).  
It does everything that the CBT Commands program on file 19 does, plus adds 
more than twice the number of extra features.  One of them is the ability to 
wait for VTAM or to do things if VTAM is UP or DOWN.

Brian

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Timothy Sipples
Yahoo! Mail -- the Web version -- *still* does not use HTTPS for most
communications AFAIK. For example, if you're using a free wi-fi hotspot at
a coffee shop, and you access Yahoo! Mail via their Web interface,
practically everything except your login credentials flows in the clear. A
fairly unsophisticated attacker can intercept that traffic and spoof your
browser -- and access all your e-mail -- for up to 7 calendar days (the
default timeout).

Security professionals have been warning Yahoo! and criticizing them for a
decade. Google Mail and Microsoft Hotmail, among others, don't have the
problem. (Google has always encrypted its Web UI for e-mail.) Yes,
implementing HTTPS costs money. So do security breaches!

In short, don't access Yahoo! Mail over any network that you don't trust --
or, better yet, don't access Yahoo! Mail over the Web at all. Access via
IMAP -- iPhone or iPad, as examples -- using the built-in mail client is
encrypted. Access via the free Zimbra Desktop software is also encrypted,
to pick another example. Or don't use Yahoo! Mail at all.


Timothy Sipples
Resident Enterprise Architect (Based in Singapore)
E-Mail: timothy.sipp...@us.ibm.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


OT: I received a purported .doc file which appears to be a zip file full of XMLs

2012-07-16 Thread Binyamin Dissen
I do trust the sender and apparently they cannot (easily?) send me it as a
PDF.

Neither Word2002(XP) nor Wordpad properly open it.

I  unzipped it and tried sending the XMLs to IE and Firefox and they didn't do
anything.

Any ideas?

--
Binyamin Dissen bdis...@dissensoftware.com
http://www.dissensoftware.com

Director, Dissen Software, Bar  Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


IODF for new computer

2012-07-16 Thread גדי בן אבי
Hi,

We just ordered a new z114 that will replace our z10BC.

I have to create an IODF for the new computer.
All required maintenance has been applied.

Is there a way to do this without redefining all of the current definitions?

Thanks

Gadi


לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם 
החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו 
החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) 
המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון,
ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי.


Please note that in accordance with Malam's signatory rights, no offer, 
agreement, concession or representation is binding on the company,
unless accompanied by a duly signed separate document (or a scanned version 
thereof), affixed with the company's seal.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IODF for new computer

2012-07-16 Thread Walter Marguccio
 From: גדי בן אבי gad...@malam.com
 Subject: IODF for new computer

 We just ordered a new z114 that will replace our z10BC.
 I have to create an IODF for the new computer.


Gadi,

are you sure you mean IODF and not IOCDS ?
One of the first thing you need to do when you get a new HW is to feed him with
your IOCDS and make a POR. Afterwards, your z114 will be able to see
all yout attached HW.

Can you please clarify ?


Walter Marguccio
z/OS Systems Programmer
BELENUS LOB Informatic GmbH
Munich - Germany

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: OT: I received a purported .doc file which appears to be a zip file full of XMLs

2012-07-16 Thread Andrew Rowley

Word 2007 changed to a zipped, XML based file format (.docx).

There is an addin to older varions of Word to read 2007 files:
http://office.microsoft.com/en-us/word-help/open-a-word-2007-document-in-an-earlier-version-of-word-HA010044473.aspx

Alternatively, the sender might be able to use save as in Word and 
save it to a Word 2002 file format.


Regards

Andrew Rowley

--
Andrew Rowley
Black Hill Software Pty. Ltd.
Phone: +61 413 302 386


On 16/07/2012 6:21 PM, Binyamin Dissen wrote:

I do trust the sender and apparently they cannot (easily?) send me it as a
PDF.

Neither Word2002(XP) nor Wordpad properly open it.

I  unzipped it and tried sending the XMLs to IE and Firefox and they didn't do
anything.

Any ideas?

--
Binyamin Dissen bdis...@dissensoftware.com
http://www.dissensoftware.com

Director, Dissen Software, Bar  Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IODF for new computer

2012-07-16 Thread גדי בן אבי
Once I created the IODF, I can create input to IOCP that can be read by the new 
computer.
Gadi

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Walter Marguccio
Sent: Monday, July 16, 2012 1:46 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IODF for new computer

 From: גדי בן אבי gad...@malam.com
 Subject: IODF for new computer

 We just ordered a new z114 that will replace our z10BC.
 I have to create an IODF for the new computer.


Gadi,

are you sure you mean IODF and not IOCDS ?
One of the first thing you need to do when you get a new HW is to feed him with 
your IOCDS and make a POR. Afterwards, your z114 will be able to see
all yout attached HW.

Can you please clarify ?


Walter Marguccio
z/OS Systems Programmer
BELENUS LOB Informatic GmbH
Munich - Germany

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם 
החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו 
החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) 
המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון,
ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי.


Please note that in accordance with Malam's signatory rights, no offer, 
agreement, concession or representation is binding on the company,
unless accompanied by a duly signed separate document (or a scanned version 
thereof), affixed with the company's seal.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Reconfigurable Storage - What's going on here?

2012-07-16 Thread Mark Jacobs
We swapped out a z10 to a z196 processor last weekend and on one of the 
lpars we're seeing something that I don't understand.


The lpar in question has been defined with 6GB memory with 2GB in 
reserve, same as it was on the old z10. But when we IPL the zOS 1.12 
image on the new processor we're seeing this;


IEE174I 07.10.13 DISPLAY
REAL STORAGE STATUS
ONLINE-NOT RECONFIGURABLE
0M-3072M
ONLINE-RECONFIGURABLE
3072M-6144M
PENDING OFFLINE
NONE
 2048M IN OFFLINE STORAGE ELEMENT(S)
 0M UNASSIGNED STORAGE
STORAGE INCREMENT SIZE IS 256M

Can anyone explain why three of the initial six GB is coming up as 
ONLINE-RECONFIGURABLE?


--
Mark Jacobs
Time Customer Service
Tampa, FL


The Doctor: You know when grown-ups tell you everything's going to be
fine, and you think they're probably lying to make you feel better?
Young Amy: Yes.
The Doctor: Everything's going to be fine.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IODF for new computer

2012-07-16 Thread גדי בן אבי
For a while, but I'm not sure that the PCHIPID's will be the same.

Gadi

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Walter Marguccio
Sent: Monday, July 16, 2012 2:48 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IODF for new computer

 From: גדי בן אבי gad...@malam.com
 Subject: Re: IODF for new computer

 Once I created the IODF, I can create input to IOCP that can be read by the 
 new computer.



I thought you could use your existing IODF, used by your existing z10, to 
create an IOCP input file. You then give the latter to the stand-alone IOCP of 
your z114 and make POR.
Aren't you going to share your HW (CUs, DASD, terminals, and so on) between
z10 and z114 for a while ?


Walter Marguccio
z/OS Systems Programmer
BELENUS LOB Informatic GmbH
Munich - Germany

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם 
החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו 
החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) 
המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון,
ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי.


Please note that in accordance with Malam's signatory rights, no offer, 
agreement, concession or representation is binding on the company,
unless accompanied by a duly signed separate document (or a scanned version 
thereof), affixed with the company's seal.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Defining OSA CHPid

2012-07-16 Thread Dana Mitchell
We have an OSA Express 2 trying to define it as an OSA-ICC.  We changed the 
channel type in HCD to be OSC,  defined the OSC control unit etc.  Activated it 
and now we see the following:

In the channels work area, it says that it is Reseerved - Definition error.  
According to Channel Problem Determination, it says 'The channel is defined as 
an OSA3270, but the hardware is not of the type that supports OSA3270'

Are not all OSA Express2's created equal and able to do ICC?  Is there 
something else we are missing?  We already have 4 other OSC's defined and 
working on other CECs and they are all defined identically.

thanks
Dana

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: OT: I received a purported .doc file which appears to be a zip file full of XMLs

2012-07-16 Thread Joel C. Ewing
Another alternative that may also be useful for this and other 
incompatibilities:  Download and install Free Apache OpenOffice Suite
at http://www.openoffice.org/ , or LibreOffice, a 2010 split-off from 
OpenOffice (when it was unclear whether OpenOffice development could 
continue after Oracle bought Sun).  This alternative can both load and 
save documents in its own formats, or in various MS Office as well as 
other formats.  Compatibility is not always 100% but it should be close 
enough.  Might even be able to use it to load an offending document and 
then save it in a format compatible with your ancient Word 2002, if you 
prefer to work with it there.


The user interfaces with OpenOffice and LibreOffice are of course 
somewhat different from MS Office, but have the advantage that they are 
less likely to change than those of MS Office, subject to the whims of a 
for-profit vendor, whose main goal is to encourage or force you to buy 
additional software at every hardware and Operating System upgrade.


  J. C. Ewing

On 07/16/2012 05:49 AM, Andrew Rowley wrote:

Word 2007 changed to a zipped, XML based file format (.docx).

There is an addin to older varions of Word to read 2007 files:
http://office.microsoft.com/en-us/word-help/open-a-word-2007-document-in-an-earlier-version-of-word-HA010044473.aspx


Alternatively, the sender might be able to use save as in Word and
save it to a Word 2002 file format.

Regards

Andrew Rowley




--
Joel C. Ewing,Bentonville, AR   jcew...@acm.org 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Defining OSA CHPid

2012-07-16 Thread R.S.
W dniu 2012-07-16 15:02, Dana Mitchell pisze:
 We have an OSA Express 2 trying to define it as an OSA-ICC.  We
 changed the channel type in HCD to be OSC,  defined the OSC control
 unit etc.  Activated it and now we see the following:
 
 In the channels work area, it says that it is Reseerved - Definition
 error.  According to Channel Problem Determination, it says 'The
 channel is defined as an OSA3270, but the hardware is not of the type
 that supports OSA3270'
 
 Are not all OSA Express2's created equal and able to do ICC?  Is
 there something else we are missing?  We already have 4 other OSC's
 defined and working on other CECs and they are all defined
 identically.


What is your card model? Provide CCIN and/or FC (feature code).
Not all OSA card can be ICC.

-- 
Radoslaw Skorupka
Lodz, Poland








--
Treść tej wiadomości może zawierać informacje prawnie chronione Banku 
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie 
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem 
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania 
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być 
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie 
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość 
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorised to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive. 

BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax 
+48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl
Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru 
Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. 
Według stanu na dzień 01.01.2012 r. kapitał zakładowy BRE Banku SA (w całości 
wpłacony) wynosi 168.410.984 złotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: HSM ODDITY - NOT RELEASING EMPTY ML2 TAPES

2012-07-16 Thread willie bunter
Hi Allan,
 
I issued the command  - HSEND RECYCLE ALL EXECUTE PERCENTVALID(0)  - but HSM 
didn't release the tapes.  In this LPAR these tapes belong to a  dedicated HSM 
pool.  Would you hazard a guess as to why the tapes still show when I issue the 
LIST TTOC SELECT(BOTH) 
 
 
020052   3590-1   ML2  0098302500 00 000    EMPTY   NO   *NONE*  *NONE* 
020053   3590-1   ML2  0098302500 00 000    EMPTY   NO   *NONE*  *NONE* 
020054   3590-1   ML2  0003932100 00 000    EMPTY   NO   *NONE*  *NONE* 
020055   3590-1   ML2  0098302500 00 000    EMPTY   NO   *NONE*  *NONE* 
020056   3590-1   ML2  0098302500 00 000    EMPTY   NO   *NONE*  *NONE* 
020057   3590-1   ML2  0098302500 00 000    EMPTY   NO   *NONE*  *NONE* 
020059   3590-1   ML2  0098302500 00 000    EMPTY   NO   *NONE*  *NONE* 
020065   3590-1   ML2  0098302500 00 000    EMPTY   NO   *NONE*  *NONE* 



From: Staller, Allan allan.stal...@kbmg.com
To: ibm-m...@bama.ua.edu 
Sent: Thursday, March 10, 2011 1:51:41 PM
Subject: Re: HSM ODDITY - NOT RELEASING EMPTY ML2 TAPES

HSEND RECYCLE ALL EXECUTE PERCENTVALID(0) will release empty backup/ml2 tapes 
from HSM control without a tape mount.
As long as the tape is marked full it will not be available for DF/HSM reuse.

You might also want to verify the settings for SETSYS TAPEDELETION.

A bit of history here:
In the early days, there was a concept of DF/HSM ownership of tape volumes.
The concept still exists, in the fact the you must take a specific action to 
release a backup or migration volume.
Dump tapes need no special action.

If you *are* using DF/HSM pooling, these tapes should be undefined/ignored,... 
by your tape management system.

Note: I am not advocating the DF/HSM pooling. I would much rather have the tape 
management system handle them via the EDM interface).

HTH,

snip
I have noticed this strange oddity about HSM, we have several tapes with 0 
files on them as shown by the TTOC.  :
VOLSER    UNIT    VOL  REUSE VALID  PCT  VOLRACF  PREV    
SUCC   
   NAME    TYPE   CAPACITY    BLKS    VALID  STATUS  
VOL VOL    
030103   3590-1   ML2  0005521900 00  000  FULL    NO   *NONE*  
*NONE* 

NUM  ONE   ALT LIB   STORAGE 
REC  FILE  VOL  GROUP  
001  ***   *NONE*  *NO LIB*  **NO SG*
* 
/snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Defining OSA CHPid

2012-07-16 Thread Dana Mitchell
 What is your card model? Provide CCIN and/or FC (feature code).
 Not all OSA card can be ICC.

 -- 
 Radoslaw Skorupka
 Lodz, Poland

Bingo.  After I hit send, I looked at the PCHID assignments,  the one that 
doesn't work is OSA Express2 GBe,  not ICC capable  :(
Silly me, I thought all of them that we had were all the same

Sorry for the trouble
Dana

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: MXI freeware?

2012-07-16 Thread Richards, Robert B.
That (G2) is the Cadillac paid-for version.

Get the freebie from the CBT site. I believe 4.3 GenLevel 050627 is the latest.

Bob


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Matan Cohen
Sent: Monday, July 16, 2012 10:06 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: MXI freeware?

Hi ,
does 'MXI' isn't a freeware anymore?
http://www.rocketsoftware.com/mainstar/products/mxi-g2
I can't seem to find any link for downloading it .



-- 
__
best regards,
matan cohen
MF System Administrator.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: MXI freeware?

2012-07-16 Thread John P Kalinich
It is on the CBT tape.

Regards,
John K

Matan Cohen of the IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu
wrote on 07/16/2012 09:05:34 AM:

 Hi ,
 does 'MXI' isn't a freeware anymore?
 http://www.rocketsoftware.com/mainstar/products/mxi-g2
 I can't seem to find any link for downloading it .

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: MXI freeware?

2012-07-16 Thread Matan Cohen
Ok ... thank you both .

On Mon, Jul 16, 2012 at 5:27 PM, Rob Scott rsc...@rocketsoftware.comwrote:

 The freeware MXI 4.3 is still on the www.cbttape.org site

 Note that it has not been updated for over 7 years and is getting evermore
 creaky as z/OS advances onwards (it very nearly broke completely for a
 recent release of z/OS and was rescued by an IBM PTF).

 It does not have support for EAV DASD or anything to do with 64-bit.

 Rocket Software supply the commercial replacement product for MXI 4.3
 (called 'MXI Generation II' or MXI G2) and this is fully supported on all
 recent releases of software and hardware. We have put a lot of effort into
 MXI G2 to ensure that it is worth the price and we have added plug-ins
 for it for CICS, DB2, MQ, TCP/IP and DCOLLECT.

 Feel free to contact me for more information.

 Rob Scott
 Lead Developer
 Rocket Software
 77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA
 Tel: +1.781.684.2305
 Email: rsc...@rs.com
 Web: www.rocketsoftware.com

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of Matan Cohen
 Sent: 16 July 2012 15:06
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: MXI freeware?

 Hi ,
 does 'MXI' isn't a freeware anymore?
 http://www.rocketsoftware.com/mainstar/products/mxi-g2
 I can't seem to find any link for downloading it .



 --
 __
 best regards,
 matan cohen
 MF System Administrator.

 --
 For IBM-MAIN subscribe / signoff / archive access instructions, send email
 to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




-- 
__
best regards,
matan cohen
MF System Administrator.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Urgent help needed - Message ISN000E

2012-07-16 Thread peter novack
Hi all,

I work as a consultant in a small installation in Eastern Europe.
 Their main business activity runs on a couple of Z900 machines (z/OS 1.6). 
 One is for production and the other for development.

 Like many organizations, they've been trying to get rid of the Mainframe for 
years now, so far with very little progress...
 A few hours ago, we got a very strange message on the development machine:
 ISN000E The service processor has failed. Some critical system functions are 
inoperative.
 An orderly shutdown of the entire system should be planned in order to 
minimize the possible impact of this failure.

 I thought I might be able to find something that might explain this in the 
syslog, but it showed nothing out of the ordinary.
 We tried IPLing but got the error message again.
 After a short (and rather panicked) discussion with the operations manager, 
and considering the documented instruction to shut down the system, we've 
decided to take down all LPARs.
 Naturally, they are very disturbed about this message, and the required system 
shutdown that followed.

 Any thoughts on what might be causing this?
 My client and I would highly appreciate any hints/tips on the root cause of 
this...

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Rob Scott
Call your IBM Hardware Support ASAP 

Rob Scott
Lead Developer
Rocket Software
77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA
Tel: +1.781.684.2305
Email: rsc...@rs.com
Web: www.rocketsoftware.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of peter novack
Sent: 16 July 2012 15:22
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Urgent help needed - Message ISN000E

Hi all,
 I work as a consultant in a small installation in Eastern Europe.
 Their main business activity runs on a couple of Z900 machines (z/OS 1.6). 
 One is for production and the other for development.

 Like many organizations, they've been trying to get rid of the Mainframe for 
years now, so far with very little progress...
 A few hours ago, we got a very strange message on the development machine:
 ISN000E The service processor has failed. Some critical system functions are 
inoperative.
 An orderly shutdown of the entire system should be planned in order to 
minimize the possible impact of this failure.

 I thought I might be able to find something that might explain this in the 
syslog, but it showed nothing out of the ordinary.
 We tried IPLing but got the error message again.
 After a short (and rather panicked) discussion with the operations manager, 
and considering the documented instruction to shut down the system, we've 
decided to take down all LPARs.
 Naturally, they are very disturbed about this message, and the required system 
shutdown that followed.

 Any thoughts on what might be causing this?
 My client and I would highly appreciate any hints/tips on the root cause of 
this...

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread John Mattson
Back to basics: My pet peeve(s) (serious security concerns) are: 
1) sites which do not allow use of the full set of special characters.  My 
banks, Google and Facebook do, so it is not that hard.  The more 
posibilities  for each character, the more secure the password. 
2) sites which limit length of userid and/or password.  That's just plain 
dumb. 
I avoid such sites figuring that if they are that lazy/stupid, my 
information is certainly at risk 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: HSM ODDITY - NOT RELEASING EMPTY ML2 TAPES

2012-07-16 Thread Lizette Koehler
Was anything else running in DFHSM when you issued the recycle?  I don't
think Recycle will work if PSM/SSM is running

Lizette

 
 Hi Allan,
 
 I issued the command  - HSEND RECYCLE ALL EXECUTE PERCENTVALID(0)  -
but HSM
 didn't release the tapes.  In this LPAR these tapes belong to a 
dedicated HSM
 pool.  Would you hazard a guess as to why the tapes still show when I
issue the LIST
 TTOC SELECT(BOTH)
 
 
 020052   3590-1   ML2  0098302500 00
 000    EMPTY   NO   *NONE*  *NONE*
 020053   3590-1   ML2  0098302500 00
 000    EMPTY   NO   *NONE*  *NONE*
 020054   3590-1   ML2  0003932100 00
 000    EMPTY   NO   *NONE*  *NONE*
 020055   3590-1   ML2  0098302500 00
 000    EMPTY   NO   *NONE*  *NONE*
 020056   3590-1   ML2  0098302500 00
 000    EMPTY   NO   *NONE*  *NONE*
 020057   3590-1   ML2  0098302500 00
 000    EMPTY   NO   *NONE*  *NONE*
 020059   3590-1   ML2  0098302500 00
 000    EMPTY   NO   *NONE*  *NONE*
 020065   3590-1   ML2  0098302500 00
 000    EMPTY   NO   *NONE*  *NONE*
 
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread John Gilmore
The acceptability of length limitations depends upon their values.

Passwords or userids that may be at most 8 characters in length are
unacceptable today.

 A limitation to at most  2^15 - 1 = 32767 characters is, in my view
at least, unobjectionable.  Larger limitations like this one are often
reflections of control-block overflow problems in some procedural
language.  These limitations can be circumvented, but the
concatenation schemes that do so are very tedious.

John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Rmm extended dataset

2012-07-16 Thread Victor Zhang
Thanks Mike, after checking master or user status volume, I created my own 
customized report.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


IGGCSI to retrieve tape volume serial

2012-07-16 Thread Victor Zhang
Hello,
Is it possible to retrieve a tape dataset's volser via iggcsi? what's the type 
of a tape data set? 

Regards
Victor

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Shmuel Metz (Seymour J.)
In
of481ed85f.720f607e-on48257a3d.00242269-48257a3d.0026c...@us.ibm.com,
on 07/16/2012
   at 03:03 PM, Timothy Sipples timothy.sipp...@us.ibm.com said:

Yahoo! Mail -- the Web version -- *still* does not use HTTPS for 
most communications AFAIK. For example, if you're using a free 
wi-fi hotspot at a coffee shop, and you access Yahoo! Mail via 
their Web interface, practically everything except your login 
credentials flows in the clear. A fairly unsophisticated attacker 
can intercept that traffic and spoof your browser -- and access 
all your e-mail -- for up to 7 calendar days (the default timeout).

Are you still using Wired Equivalent Privacy (WEP) or something more
modern, e.g., Wi-Fi Protected Access (WPA)?

-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 Atid/2http://patriot.net/~shmuel
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Anne Lynn Wheeler
john_matt...@ea.epson.com (John Mattson) writes:
 Back to basics: My pet peeve(s) (serious security concerns) are: 
 1) sites which do not allow use of the full set of special characters.  My 
 banks, Google and Facebook do, so it is not that hard.  The more 
 posibilities  for each character, the more secure the password. 
 2) sites which limit length of userid and/or password.  That's just plain 
 dumb. 

re:
http://www.garlic.com/~lynn/2012j.html#47 Yahoo Password Breach: 7 Lessons 
Learned - Security - Attacks/breaches - Informationweek
http://www.garlic.com/~lynn/2012j.html#53 Yahoo Password Breach: 7 Lessons 
Learned - Security - Attacks/breaches - Informationweek

somebody in POK sent me a copy of Corporate Directive on Passwords late
Friday and I redistributed. Over the weekend, somebody printed on 6670
(ibm copier3 with computer interface) on corporate letterhead paper on
placed it in all the building corporate bulletin boards. Monday morning
numerous people were caught ... even tho the date is clearly sunday and
no real corporate directives are dated sunday. Corporate password
rules from long ago and far away 
http://www.garlic.com/~lynn/2001d.html#52 OT Re: A beautiful morning in AFM.
http://www.garlic.com/~lynn/2001d.html#53 April Fools Day

static, shared secrets were somewhat acceptable for authentication 40yrs
ago when a person only had a few. corporate rules were put in place to
create impossible to guess (therefor impossible to remember) shared
secrets for authentication (with frequent changes) ... as if it was the
only authentication the person has to deal with. 

With the proliferation of static, shared secrets paradigm as
authentication mechanism (pins, passwords, etc) ... it isn't uncommon
for an individual to have large scores or hundreds (of impossible to
remember values). Furthermore, safe security practices require a
unique shared secret for every unique security domain (as countermeasure
to cross-domain attacks). misc. past posts discussing static
shared-secret authentication
http://www.garlic.com/~lynn/subintegrity.html#secrets

misc. past posts discussing internet/network based authentication
using non-static data (countermeasure to harvesting and reply attacks)
for kerberos
http://www.garlic.com/~lynn/subpubkey.html#kerberos

similar discussions for radius
http://www.garlic.com/~lynn/subpubkey.html#radius

... aka simple registration of public key in lieu of password ... w/o
the enormous complexity and points of failure introduced by digital
certificates and PKIs ... misc. past posts discussing non-certificate
based public key authentication
http://www.garlic.com/~lynn/subpubkey.html#certless

-- 
virtualization experience starting Jan1968, online at home since Mar1970

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread zMan
On Mon, Jul 16, 2012 at 12:00 PM, John Gilmore jwgli...@gmail.com wrote:

 The acceptability of length limitations depends upon their values.



 Passwords or userids that may be at most 8 characters in length are
 unacceptable today.


Passwords, yes; userids, meh -- I don't consider a userid to be a secure
data point.

 A limitation to at most  2^15 - 1 = 32767 characters is, in my view
 at least, unobjectionable.  Larger limitations like this one are often
 reflections of control-block overflow problems in some procedural
 language.  These limitations can be circumvented, but the
 concatenation schemes that do so are very tedious.


Seriously? You have 32K passwords? Or is that a Nah, nobody would ever
want anything CLOSE to this, so let's use this and forget about it value?
(I'm tempted to quote the 64K is enough thing, but this is clearly
different, since no human would ever use keys that large!) Or are you
thinking of machine-to-machine interactions, which might indeed use very
long keys (though I don't want to have to deal with them when they break)?
-- 
zMan -- I've got a mainframe and I'm not afraid to use it

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Finch, Steve (ES - Mainframe)
Perhaps 8 character passwords should be replaced with 255 characters passphases 
(password phases) ?

Steve Finch

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Paul Gilmartin
Sent: Monday, July 16, 2012 1:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Yahoo Password Breach: 7 Lessons Learned - Security - 
Attacks/breaches - Informationweek

On Mon, 16 Jul 2012 12:00:33 -0400, John Gilmore wrote:

Passwords or userids that may be at most 8 characters in length are 
unacceptable today.
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Reconfigurable Storage - What's going on here?

2012-07-16 Thread Jim Mulder
 Dang, you hit it. In parmlib it's set to 5120M, but in the lpar it's at 
 2048M, which is incorrect.
 
 Thanks for your assistance.
 
 Mark Jacobs
 
 On 07/16/12 08:10, Vernooij, CP - SPLXM wrote:
  Did you check the value of RSU= in IEASYSxx?
 
  Kees.
 
  Mark Jacobsmark.jac...@custserv.com  wrote in message
  news:5003fbd2.6000...@custserv.com...
  
  We swapped out a z10 to a z196 processor last weekend and on one of
  
  the
  
  lpars we're seeing something that I don't understand.
 
  The lpar in question has been defined with 6GB memory with 2GB in
  reserve, same as it was on the old z10. But when we IPL the zOS 1.12
  image on the new processor we're seeing this;
 
  IEE174I 07.10.13 DISPLAY
  REAL STORAGE STATUS
  ONLINE-NOT RECONFIGURABLE
0M-3072M
  ONLINE-RECONFIGURABLE
3072M-6144M
  PENDING OFFLINE
NONE
 2048M IN OFFLINE STORAGE ELEMENT(S)
 0M UNASSIGNED STORAGE
  STORAGE INCREMENT SIZE IS 256M
 
  Can anyone explain why three of the initial six GB is coming up as
  ONLINE-RECONFIGURABLE?


  RSU=OFFLINE will probably do what you want, and not need
to be updated when you change LPAR storage definitions


Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread John Gilmore
The 32 kib bound has two rationales:  1) It is enough/overkill for
passwords used by people and 2) larger values are problematic, produce
control-block overflows, in some contexts.

The first of these two is the more important.  The practice of
Increasing the supported length of something from 8 to 16 to 32 to . .
.  is a preposterous one that needs to be avoided.

John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread peter novack
OK, here's the story so far:
 We've tried IPLing a few times, and later performed a power-on-reset, but 
still got the message a few hours later.
 Unfortunately, they do not have official IBM support (assuming they would even 
support such old machines), and I don't think that's about to change, given the 
ongoing migration to open systems.
 I still can't find anything interesting in the logs and I am running out of 
ideas.
 The only thing we could think about that might be related is a power failure 
we suffered a day before the message appeared for the first time.
- Original Message -
From: peter novack
Sent: 07/16/12 06:21 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Urgent help needed - Message ISN000E

 Hi all, I work as a consultant in a small installation in Eastern Europe. 
Their main business activity runs on a couple of Z900 machines (z/OS 1.6). One 
is for production and the other for development. Like many organizations, 
they've been trying to get rid of the Mainframe for years now, so far with very 
little progress... A few hours ago, we got a very strange message on the 
development machine: ISN000E The service processor has failed. Some critical 
system functions are inoperative. An orderly shutdown of the entire system 
should be planned in order to minimize the possible impact of this failure. I 
thought I might be able to find something that might explain this in the 
syslog, but it showed nothing out of the ordinary. We tried IPLing but got the 
error message again. After a short (and rather panicked) discussion with the 
operations manager, and considering the documented instruction to shut down the 
system, we've decided to take down all LPARs. Naturally, they are ve
 ry disturbed about this message, and the required system shutdown that 
followed. Any thoughts on what might be causing this? My client and I would 
highly appreciate any hints/tips on the root cause of this... 
-- For 
IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


REMINDER: Call for Session Chairs for EWCP at SHARE in Anaheim CA

2012-07-16 Thread Norman Hollander on DesertWiz
Hello SHARE and EWCP members -

 

The SHARE conference in Anaheim, CA is approaching quickly.  There are many
new sessions with a lot of good information

waiting to be shared. It will be held at the Marriott Hotel, August 5th
through August 10th, 2012.  

 

The Enterprise Wide Capacity and Performance (EWCP) Project has quite a
program of sessions to offer and we are currently looking 

for volunteers to be Session Chairs.  If you are interested in being an
active participant and would be willing to chair sessions for us, 

please contact Mary Astley at  mailto:ast...@us.ibm.com ast...@us.ibm.com
or me, at the address below.  See you in Anaheim! 

 

Norman Hollander, Project Manager 

EWCP 

Enterprise-Wide Capacity and Performance Project 

Office:   +1 760-992-5068  

eMail:znor...@desertwiz.biz 

 

Below are the currently scheduled Sessions for Anaheim:

 


Date

Time

Room

Speaker

#

Title

Chairperson


Mon March 12

8:00 AM

0001

Share General Session



9:30 AM

0002

System z Technical Keynote



11:00 AM

Salon J

Muench

11608

RMF: The Latest and Greatest 

 


12 noon

Lunch



1:30 PM

Plat 1

Walsh/Hollander

11463

EWCP Project Opening and ATS z/OS Performance Hot Topics



3:00 PM

Salon J

Sinram

11609

Workload Management Update for z/OS 1.13 and 1.12 



4:30 PM

Salon J

Muench

11613

Manage Your Workloads and Performance with z/OSMF 



6:00 PM

SHARE Technology Exchange (STE)




Tue March 13

8:00 AM

0003

Keynote



9:30 AM

Salon J

Burg

11599

zPCR Capacity Sizing Lab - Part 1, Introduction and Overview



11:00 AM

OC 2/3

Burg/Snyder

11497

zPCR Capacity Sizing Lab - Part 2, Hands-on Lab



11:00 AM

Salon J

Astley

11604

Introduction to SMF and RMF Data Collection 



12 noon

Lunch



1:30 PM

Plat 5

Watson

11309

The many CPU fields of SMF



3:00 PM

Salon J

Sinram

11612

Workload Management of Transactional Workloads



4:30 PM

Salon J

Snyder

11605

z/OS Workload Manager: What Are You Thinking?



6:00 PM

SHARE Technology Exchange (STE)




Wed March 14

8:00 AM

Salon J

Enrico

11500

Introduction to WLM Management of CICS and IMS Workloads



9:30 AM

Salon E/F

Temel

11491

Analyzing/Monitoring Performance of z/OS I/O Operations: DASD and Tape -
Performance View



11:00 AM

Salon E/F

Walsh

11598

System z Capacity Planning: Where the Mistakes Are  (Long Session)



11:30 AM

SHARE Technology Exchange (STE)



12 noon

Lunch



1:30 PM

Salon E/F

Woods

11479

Predictive Analytics and IT Service Management



3:00 PM

Salon J

Ukelson

11558

Behavioral Analysis  Predictive Analytics meet SLA's, Prevent Problems, and
Reduce Costs in a Mainframe Production Environment



 

4:30 PM

Salon J

Burg

11600

CPU MF - 2012 Update and WSC Experiences



6:00 PM

Salon J

Bonnett

11524

The IBM Tivoli Monitoring Infrastructure on System z and zEnterprise



7:15 PM

11468

EWCP Project Dinner




Thu March 15

8:00 AM

Salon J

Anderson

11601

zEnterprise eXposed! Part 1 of 2: Introduction to zEnterprise Performance
Management



9:30 AM

Salon J

Astley/Snyder

11603

zEnterprise eXposed! Part 2 of 2: Experiences with the zEnterprise Unified
Resource Manager



11:00 AM

Salon J

Temel

11365

Analyzing/Measuring/Monitoring Memory Usage and Understanding z/OS Memory
Management: Performance View



12 noon

Lunch



1:30 PM

Salon J

Mavashev

11979

Ensuring Business-Critical Apps are Performing in the Cloud



3:00 PM

Salon J

Johnson

11948

360 Degree Capacity Management: Get All the Angles Covered



4:30 PM

Salon J

Bonnett

11523

Forecasting Performance Metrics using the IBM Tivoli Performance Analyzer



6:00 PM

 

MVS Program Closing and Ask the Experts




Fri March 16

8:00 AM

11465

EWCP Project Closing



8:00 AM

Salon J

Quinn

11544

CA SYSVIEW r13.5 Update



12 noon

End of Conference



 

 

.


--
For 

Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Jim Mulder
 I work as a consultant in a small installation in Eastern Europe.
  Their main business activity runs on a couple of Z900 machines (z/OS 
1.6). 
  One is for production and the other for development.
 
  Like many organizations, they've been trying to get rid of the 
 Mainframe for years now, so far with very little progress...
  A few hours ago, we got a very strange message on the development 
machine:
  ISN000E The service processor has failed. Some critical system 
 functions are inoperative.
  An orderly shutdown of the entire system should be planned in order
 to minimize the possible impact of this failure.
 
  I thought I might be able to find something that might explain this
 in the syslog, but it showed nothing out of the ordinary.
  We tried IPLing but got the error message again.
  After a short (and rather panicked) discussion with the operations 
 manager, and considering the documented instruction to shut down the
 system, we've decided to take down all LPARs.
  Naturally, they are very disturbed about this message, and the 
 required system shutdown that followed.
 
  Any thoughts on what might be causing this?
  My client and I would highly appreciate any hints/tips on the root 
 cause of this...

  z/OS issues this message in 2 cases:

1.  The machine has presented a Service Processor Damage
machine check.

2. The machine has presented a state change event which
   indicates an unrecoverable Service Processor failure.

 Service Processor is also known as the SE or Support Element. 
 Further investigation would need to be done by your hardware support 
team. 
 
Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Bob Shannon
IBM will come out and perform service for time and the cost of parts even 
without a service contract. You have two choices: 1) Pay IBM or 2) accelerate 
your migration you that you're off the z900 before it totally craps out. This 
may sound harsh but those are your choices.

Bob Shannon

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Mike Schwab
There are companies out there that sell and service used mainframes.

If you can't get the part replaced, then a used mainframe could be
purchased.  With a new minimum z114 starting at $75,000, z9 or z10
should be a bit cheaper.

On Mon, Jul 16, 2012 at 1:42 PM, peter novack peter.nov...@gmx.com wrote:
 OK, here's the story so far:
  We've tried IPLing a few times, and later performed a power-on-reset, but 
 still got the message a few hours later.
  Unfortunately, they do not have official IBM support (assuming they would 
 even support such old machines), and I don't think that's about to change, 
 given the ongoing migration to open systems.
  I still can't find anything interesting in the logs and I am running out of 
 ideas.
  The only thing we could think about that might be related is a power failure 
 we suffered a day before the message appeared for the first time.
 - Original Message -
 From: peter novack
 Sent: 07/16/12 06:21 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Urgent help needed - Message ISN000E

  Hi all, I work as a consultant in a small installation in Eastern Europe. 
 Their main business activity runs on a couple of Z900 machines (z/OS 1.6). 
 One is for production and the other for development. Like many organizations, 
 they've been trying to get rid of the Mainframe for years now, so far with 
 very little progress... A few hours ago, we got a very strange message on the 
 development machine: ISN000E The service processor has failed. Some critical 
 system functions are inoperative. An orderly shutdown of the entire system 
 should be planned in order to minimize the possible impact of this failure. 
 I thought I might be able to find something that might explain this in the 
 syslog, but it showed nothing out of the ordinary. We tried IPLing but got 
 the error message again. After a short (and rather panicked) discussion with 
 the operations manager, and considering the documented instruction to shut 
 down the system, we've decided to take down all LPARs. Naturally, they are ve
  ry disturbed about this message, and the required system shutdown that 
 followed. Any thoughts on what might be causing this? My client and I would 
 highly appreciate any hints/tips on the root cause of this... 
 -- For 
 IBM-MAIN subscribe / signoff / archive access instructions, send email to 
 lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



-- 
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread August Carideo
this is exactly why I did not respond
another shop getting off MF but in mean time stopped paying for HW SW
support etc
I guess its time and materials



From:   Mark Jacobs mark.jac...@custserv.com
To: IBM-MAIN@LISTSERV.UA.EDU,
Date:   07/16/2012 02:46 PM
Subject:Re: Urgent help needed - Message ISN000E
Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU



Sounds like their management has a problem then.

Mark Jacobs

On 07/16/12 14:42, peter novack wrote:
 OK, here's the story so far:
   We've tried IPLing a few times, and later performed a power-on-reset,
but still got the message a few hours later.
   Unfortunately, they do not have official IBM support (assuming they
would even support such old machines), and I don't think that's about to
change, given the ongoing migration to open systems.
   I still can't find anything interesting in the logs and I am running
out of ideas.
   The only thing we could think about that might be related is a power
failure we suffered a day before the message appeared for the first time.
 - Original Message -
 From: peter novack
 Sent: 07/16/12 06:21 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Urgent help needed - Message ISN000E

   Hi all, I work as a consultant in a small installation in Eastern
Europe. Their main business activity runs on a couple of Z900 machines
(z/OS 1.6). One is for production and the other for development. Like many
organizations, they've been trying to get rid of the Mainframe for years
now, so far with very little progress... A few hours ago, we got a very
strange message on the development machine: ISN000E The service processor
has failed. Some critical system functions are inoperative. An orderly
shutdown of the entire system should be planned in order to minimize the
possible impact of this failure. I thought I might be able to find
something that might explain this in the syslog, but it showed nothing out
of the ordinary. We tried IPLing but got the error message again. After a
short (and rather panicked) discussion with the operations manager, and
considering the documented instruction to shut down the system, we've
decided to take down all LPARs. Naturally, they are ve
   ry disturbed about this message, and the required system shutdown that
followed. Any thoughts on what might be causing this? My client and I would
highly appreciate any hints/tips on the root cause of this...
-- For
IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
Mark Jacobs
Time Customer Service
Tampa, FL


The Doctor: You know when grown-ups tell you everything's going to be
fine, and you think they're probably lying to make you feel better?
Young Amy: Yes.
The Doctor: Everything's going to be fine.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Ed Finnell
Explanation: The Service Processor has malfunctioned and  MVS cannot 
communicate with it. Certain MVS functions are inoperative, including  CONFIG, 
some D M, and some operator-communication facilities. Hardware error  logging 
is also inoperative.  
MVS might remain functional for an indeterminate period of time, but an  
attempt to use any of the above functions or any other functions that use the  
Service Processor can result in a system hang or outage.  
System Action: The operating system continues running in  degraded mode to 
allow for an orderly shutdown.  
System Programmer Response: If MVS is still responding  to commands, plan 
an orderly shutdown of the system in accordance with the  procedures of your 
installation. Contact hardware support.  
Which part of 'Contact hardware support' is not clear? Sev-CRIT  
grasshopper...
 
 
In a message dated 7/16/2012 1:48:42 P.M. Central Daylight Time,  
mark.jac...@custserv.com writes:

Sounds  like their management has a problem  then.



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Clifford McNeill
  ISN000E The service processor has failed. Some critical system 
  functions are inoperative.
 
 Service Processor is also known as the SE or Support Element. 
 Further investigation would need to be done by your hardware support 
 team. 

Have you tried to reboot the support Element?  There should be a spare/backup 
SE also.  Maybe they just didn't get rebooted after your power outage.
Cliff McNeill 
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Clifford McNeill
Forgot to mention that the Service Elements are the laptop computers inside the 
covers of the z900.
Cliff McNeill
 

 Date: Mon, 16 Jul 2012 14:07:50 -0500
 From: sy...@hotmail.com
 Subject: Re: Urgent help needed - Message ISN000E
 To: IBM-MAIN@LISTSERV.UA.EDU
 
   ISN000E The service processor has failed. Some critical system 
   functions are inoperative.
  
  Service Processor is also known as the SE or Support Element. 
  Further investigation would need to be done by your hardware support 
  team. 
 
 Have you tried to reboot the support Element? There should be a spare/backup 
 SE also. Maybe they just didn't get rebooted after your power outage.
 Cliff McNeill 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IGGCSI to retrieve tape volume serial

2012-07-16 Thread Jonathan Goossen
Victor,
Yes, you can retrieve a tape dataset's volser(s) using IGGCSI. I am not 
positive that I know what you mean by the type of the tape dataset. If it 
is the entry type, that would be NON-VSAM.

A good place to start is the provided samples. I started with IGGCSIRX, 
the REXX one. It lists the entry type and the first 3 volsers for each DSN 
found that matches the DNS pattern provided.

Thank you and have a Terrific day!

Jonathan Goossen, DTM
ACT Mainframe Storage Group
Personal: 651-361-4541
Department Support Line: 651-361-
For help with communication and leadership skills checkout Woodwinds 
Toastmasters.



IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU wrote on 
07/16/2012 11:20:46 AM:

 From: Victor Zhang victor_wor...@yahoo.com.cn
 To: IBM-MAIN@LISTSERV.UA.EDU
 Date: 07/16/2012 11:21 AM
 Subject: IGGCSI to retrieve tape volume serial
 Sent by: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU
 
 Hello,
 Is it possible to retrieve a tape dataset's volser via iggcsi? 
 what's the type of a tape data set? 
 
 Regards
 Victor
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


This e-mail message and all attachments transmitted with it may
contain legally privileged and/or confidential information intended
solely for the use of the addressee(s). If the reader of this
message is not the intended recipient, you are hereby notified that
any reading, dissemination, distribution, copying, forwarding or
other use of this message or its attachments is strictly
prohibited. If you have received this message in error, please
notify the sender immediately and delete this message and all
copies and backups thereof. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Scott Ford
You mandate any policy you want, try enforcing password rules

Scott ford
www.identityforge.com

On Jul 16, 2012, at 1:39 PM, Finch, Steve (ES - Mainframe) 
steve.fi...@hp.com wrote:

 Perhaps 8 character passwords should be replaced with 255 characters 
 passphases (password phases) ?
 
 Steve Finch
 
 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On 
 Behalf Of Paul Gilmartin
 Sent: Monday, July 16, 2012 1:14 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: Yahoo Password Breach: 7 Lessons Learned - Security - 
 Attacks/breaches - Informationweek
 
 On Mon, 16 Jul 2012 12:00:33 -0400, John Gilmore wrote:
 
 Passwords or userids that may be at most 8 characters in length are 
 unacceptable today.
 
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread zMan
On Mon, Jul 16, 2012 at 4:15 PM, John Gilmore jwgli...@gmail.com wrote:

 We have begun to see fallout.   Fortunately, it's amateurish so far.

 This moring my wife received an email, a long litany of woe and
 injuries, allegedly from an old friend and college classmate.  She
 wanted us to send money to her in Spain.

 Called, it turned out that she was in good health at home in
 Wellesley.  She thanked Kate for her concern, and I emailed her with
 some advice on how to recover from having her email accounts hacked.


I've heard of folks who've fallen for this. What I can't imagine is the
confluence of someone who I know well enough to blindly send money to AND
think I'd be high enough on their list of folks to email AND wouldn't know
that they were overseas already AND don't have someone I'd call immediately
to ask Have you heard from Joe?. Who has people in that category?!

Mind you, if someone got hacked through browser spoofing in an Internet
cafe *while overseas*, it would be a lot more plausible. The fact that this
isn't the normal MO suggests that the much-vaunted browser spoofing isn't
nearly as easy as folks make it sound...
-- 
zMan -- I've got a mainframe and I'm not afraid to use it

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Ed Finnell
Yep. Could be a bad power supply in Laptop, bad cable between Laptop and  
z900, hard drive failure. No indication that there's anything wrong with z900 
at  all(as of yet)..
 
 
In a message dated 7/16/2012 3:53:24 P.M. Central Daylight Time,  
sy...@hotmail.com writes:

Service  Elements are the laptop computers inside the covers of the  z900

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Anne Lynn Wheeler
zedgarhoo...@gmail.com (zMan) writes:
 I've heard of folks who've fallen for this. What I can't imagine is the
 confluence of someone who I know well enough to blindly send money to AND
 think I'd be high enough on their list of folks to email AND wouldn't know
 that they were overseas already AND don't have someone I'd call immediately
 to ask Have you heard from Joe?. Who has people in that category?!

 Mind you, if someone got hacked through browser spoofing in an Internet
 cafe *while overseas*, it would be a lot more plausible. The fact that this
 isn't the normal MO suggests that the much-vaunted browser spoofing isn't
 nearly as easy as folks make it sound...

re:
http://www.garlic.com/~lynn/2012j.html#47 Yahoo Password Breach: 7 Lessons 
Learned - Security - Attacks/breaches - Informationweek
http://www.garlic.com/~lynn/2012j.html#53 Yahoo Password Breach: 7 Lessons 
Learned - Security - Attacks/breaches - Informationweek
http://www.garlic.com/~lynn/2012j.html#54 Yahoo Password Breach: 7 Lessons 
Learned - Security - Attacks/breaches - Informationweek

one of the issues is whether there is better low-hanging fruit

95-96 time-period ... there were industry presentations by dial-up
consumer online banking regarding motivation for moving to the internet
(top of the list was enormous consumer support costs for serial-port
dial-up modems ... being able to offload to ISPs). At the same time, the
dial-up commerical/cash-management online banking operations were saying
that they would *NEVER* move to the internet because of a long list of
security vulnerabilities (nearly all of which have since been seen).

the commercial operations eventually started moving to the internet
(anyway ... possibly loss of institutional knowledge in the industry)
and started seeing all the vulnerabilities that had been predicted. some
of this has shown up recently in court cases where business operations
have lost hundreds of thousands or millions from their accounts in such
attacks ... and they are suing the financial institutions for the loss
on the grounds of providing inadequate security.

recent posts in (linkedin) Financial Crime Risk, Fraud and Security
discussions:
http://www.garlic.com/~lynn/2012i.html#18 Zeus/SpyEye 'Automatic Transfer' 
Module Masks Online Banking Theft
http://www.garlic.com/~lynn/2012i.html#32 Zeus/SpyEye 'Automatic Transfer' 
Module Masks Online Banking Theft
http://www.garlic.com/~lynn/2012j.html#0 Federal appeal court raps bank over 
shoddy online security
http://www.garlic.com/~lynn/2012j.html#8 Federal appeal court raps bank over 
shoddy online security

related news URL references:

Zeus/SpyEye 'Automatic Transfer' Module Masks Online Banking Theft;
Automated attack bypasses two-factor authentication
http://www.darkreading.com/authentication/167901072/security/attacks-breaches/240002267/zeus-spyeye-automatic-transfer-module-masks-online-banking-theft
Cyber crooks evading advanced bank security to transfer funds
http://www.scmagazine.com/cyber-crooks-evading-advanced-bank-security-to-transfer-funds/article/246227/
Exclusive: Online bank-theft software grows more sophisticated
http://news.yahoo.com/exclusive-online-bank-theft-software-grows-more-sophisticated-080445057--sector.html
Online bank-theft software grows more sophisticated
http://www.chicagotribune.com/business/breaking/chi-online-banktheft-software-grows-more-sophisticated-20120618,0,278609.story
Fake Android antivirus app likely linked to Zeus banking Trojan,
researchers say; Cybercriminals are distributing a mobile component of
the Zeus banking Trojan as an Android security application, Kaspersky
experts said
http://www.networkworld.com/news/2012/061912-fake-android-antivirus-app-likely-260331.html
Federal appeal court raps bank over shoddy online security
http://www.networkworld.com/news/2012/070512-federal-appeal-court-raps-bank-260672.html
ENISA Warns Banks: Assume All PCs Are Infected
http://news.softpedia.com/news/ENISA-Warns-Banks-Assume-All-PCs-Are-Infected-279470.shtml
Court Slams Bank For Ignoring Zeus Attack
http://www.informationweek.com/news/security/attacks/240003172
Zeus: How to Fight Back; Sophisticated Trojan Demands New Game Plan
http://www.bankinfosecurity.com/interviews/zeus-how-to-fight-back-i-1592?rf=2012-07-06-eb
Cybercrooks preying on small businesses
http://nakedsecurity.sophos.com/2012/07/06/cybercrooks-preying-on-small-businesses/


-- 
virtualization experience starting Jan1968, online at home since Mar1970

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Urgent help needed - Message ISN000E

2012-07-16 Thread Pommier, Rex R.
Yep,

One big concern I see in this at this point is if they shut the LPARs down and 
the SE isn't talking to the CEC, how do they bring them back up?  Hopefully it 
is something simple like a bad power supply on one of the 2 laptops and they 
can either fairly quickly fix it or use the alternate.

Rex

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Ed Finnell
Sent: Monday, July 16, 2012 4:09 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Urgent help needed - Message ISN000E

Yep. Could be a bad power supply in Laptop, bad cable between Laptop and z900, 
hard drive failure. No indication that there's anything wrong with z900 at  
all(as of yet)..


In a message dated 7/16/2012 3:53:24 P.M. Central Daylight Time, 
sy...@hotmail.com writes:

Service  Elements are the laptop computers inside the covers of the  z900

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information contained in this e-mail may contain confidential and/or 
privileged information and is intended for the sole use of the intended 
recipient. If you are not the intended recipient, you are hereby notified that 
any unauthorized use, disclosure, distribution or copying of this communication 
is strictly prohibited and that you will be held responsible for any such 
unauthorized activity, including liability for any resulting damages. As 
appropriate, such incident(s) may also be reported to law enforcement. If you 
received this e-mail in error, please reply to sender and destroy or delete the 
message and any attachments. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


How call from C++ thru function pointer to assembler?

2012-07-16 Thread Charles Mills
Does anyone know the answer to this?

I have an assembler function whose address I know at run-time in C++. I
define and store it like this

void __cdecl (*entryPoint)(const char *);
entryPoint = (void (__cdecl *)(const char *))(myVoidStar);
printf(entryPoint is %p\n, entryPoint);

Printf prints the correct address (DFFD058, FWIW) so I am good so far.

I then call it with
(entryPoint)(record);

and I end up S0C6ing out in the weeds at 27F5023B.

Here is the pseudo-assembler from the C++ compiler.

4400  C1AC000114 | EX   r0,HOOK..STMT  
5870  D0C0000114 | Lr7,record(,r13,192)
5810  D0C8000114 | Lr1,#CEECAACRENT_2(,
5880  35DA000114 | Lr8,=Q(entryPoint)(,
4118  1000000114 | LA   r1,=Q(entryPoint)(r
5810  1000000114 | Lr1,entryPoint(,r1,0
58F0  1008000114 | Lr15,EPA_WSA(,r1,8
5800  100C000114 | Lr0,EPA_WSA(,r1,12
5000  C1F4000114 | ST   r0,_CEECAA_(,r12,50
4110  D098000114 | LA   r1,#MX_TEMP2(,r13,1
5070  D098000114 | ST   r7,#MX_TEMP2(,r13,1
4400  C1C0000114 | EX   r0,HOOK..CALLBGN   
0DEF  000114 | BASR r14,r15
4400  C1C4000114 | EX   r0,HOOK..CALLRET   

Does anyone know what I should be declaring or doing differently?

(If all else fails I will just write a stub in assembler to do this. I know
how to L 15 BALR 14,15 in assembler g.)

Charles

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How call from C++ thru function pointer to assembler?

2012-07-16 Thread David Crayford
I suggest investigating the CALLBACKANY compiler option. 

On 17/07/2012, at 8:13 AM, Charles Mills charl...@mcn.org wrote:

 Does anyone know the answer to this?
 
 I have an assembler function whose address I know at run-time in C++. I
 define and store it like this
 
 void __cdecl (*entryPoint)(const char *);
 entryPoint = (void (__cdecl *)(const char *))(myVoidStar);
 printf(entryPoint is %p\n, entryPoint);
 
 Printf prints the correct address (DFFD058, FWIW) so I am good so far.
 
 I then call it with
 (entryPoint)(record);
 
 and I end up S0C6ing out in the weeds at 27F5023B.
 
 Here is the pseudo-assembler from the C++ compiler.
 
 4400  C1AC000114 | EX   r0,HOOK..STMT  
 5870  D0C0000114 | Lr7,record(,r13,192)
 5810  D0C8000114 | Lr1,#CEECAACRENT_2(,
 5880  35DA000114 | Lr8,=Q(entryPoint)(,
 4118  1000000114 | LA   r1,=Q(entryPoint)(r
 5810  1000000114 | Lr1,entryPoint(,r1,0
 58F0  1008000114 | Lr15,EPA_WSA(,r1,8
 5800  100C000114 | Lr0,EPA_WSA(,r1,12
 5000  C1F4000114 | ST   r0,_CEECAA_(,r12,50
 4110  D098000114 | LA   r1,#MX_TEMP2(,r13,1
 5070  D098000114 | ST   r7,#MX_TEMP2(,r13,1
 4400  C1C0000114 | EX   r0,HOOK..CALLBGN   
 0DEF  000114 | BASR r14,r15
 4400  C1C4000114 | EX   r0,HOOK..CALLRET   
 
 Does anyone know what I should be declaring or doing differently?
 
 (If all else fails I will just write a stub in assembler to do this. I know
 how to L 15 BALR 14,15 in assembler g.)
 
 Charles
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How call from C++ thru function pointer to assembler?

2012-07-16 Thread David Crayford
Why the __cdecl instead of extern OS?

On 17/07/2012, at 8:34 AM, Charles Mills charl...@mcn.org wrote:

 Wow! Fast answer, and looked very promising, but no change in behavior.
 
 Added DLL(CBA) to my options.
 
 Charles
 
 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of David Crayford
 Sent: Monday, July 16, 2012 5:19 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: How call from C++ thru function pointer to assembler?
 
 I suggest investigating the CALLBACKANY compiler option. 
 
 On 17/07/2012, at 8:13 AM, Charles Mills charl...@mcn.org wrote:
 
 Does anyone know the answer to this?
 
 I have an assembler function whose address I know at run-time in C++. 
 I define and store it like this
 
 void __cdecl (*entryPoint)(const char *); entryPoint = (void (__cdecl 
 *)(const char *))(myVoidStar); printf(entryPoint is %p\n, 
 entryPoint);
 
 Printf prints the correct address (DFFD058, FWIW) so I am good so far.
 
 I then call it with
 (entryPoint)(record);
 
 and I end up S0C6ing out in the weeds at 27F5023B.
 
 Here is the pseudo-assembler from the C++ compiler.
 
 4400  C1AC000114 | EX   r0,HOOK..STMT  
 5870  D0C0000114 | Lr7,record(,r13,192)
 5810  D0C8000114 | Lr1,#CEECAACRENT_2(,
 5880  35DA000114 | Lr8,=Q(entryPoint)(,
 4118  1000000114 | LA   r1,=Q(entryPoint)(r
 5810  1000000114 | Lr1,entryPoint(,r1,0
 58F0  1008000114 | Lr15,EPA_WSA(,r1,8
 5800  100C000114 | Lr0,EPA_WSA(,r1,12
 5000  C1F4000114 | ST   r0,_CEECAA_(,r12,50
 4110  D098000114 | LA   r1,#MX_TEMP2(,r13,1
 5070  D098000114 | ST   r7,#MX_TEMP2(,r13,1
 4400  C1C0000114 | EX   r0,HOOK..CALLBGN   
 0DEF  000114 | BASR r14,r15
 4400  C1C4000114 | EX   r0,HOOK..CALLRET   
 
 Does anyone know what I should be declaring or doing differently?
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Paul Gilmartin
On Mon, 16 Jul 2012 13:31:07 -0400, zMan wrote:

On Mon, Jul 16, 2012 at 12:00 PM, John Gilmore wrote:

 Passwords or userids that may be at most 8 characters in length are
 unacceptable today.

Passwords, yes; userids, meh -- I don't consider a userid to be a secure
data point.
 
It's not a matter of security; rather that many IT departments nowadays
have a standard of 8-character userids.  IBM is a tail that can no longer
wag that dog; the CIO can cite refusal to comply with corporate standards
as one more strike against z/OS in a purchase decision.

And ID administration must be via LDAP from the corporate standard
Linux server.  There are 3rd party products that enable this; none AFAIK
for 8-character userids.

Hmm... what's the length limit of aliases in USERIDALIASTABLE?  Is
USERIDALIASTABLE processed for connections to FTP server, or only
for logins?  Does it affect the output of getpwuid()?  Etc.?

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/bpxzb2c0/3.7.4.5

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How call from C++ thru function pointer to assembler?

2012-07-16 Thread Charles Mills
1. If I code the declaration as

extern C void  (*entryPoint)(const SMFrecd *);

(did not try OS but it would have the same problem I think) then that is
the declaration of an external function, not the definition of a pointer,
right? In any event I get unresolved extern's on entryPoint at link time.
There is no such syntax, I believe, as just OS without the extern.

2. It won't allow extern C (and again, I think extern OS would be the
same) in the cast. It says all linkage declarations must be at the module
level or something like that.

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of David Crayford
Sent: Monday, July 16, 2012 6:09 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: How call from C++ thru function pointer to assembler?

Why the __cdecl instead of extern OS?

On 17/07/2012, at 8:34 AM, Charles Mills charl...@mcn.org wrote:

 Wow! Fast answer, and looked very promising, but no change in behavior.
 
 Added DLL(CBA) to my options.
 
 Charles
 
 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
 On Behalf Of David Crayford
 Sent: Monday, July 16, 2012 5:19 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: How call from C++ thru function pointer to assembler?
 
 I suggest investigating the CALLBACKANY compiler option. 
 
 On 17/07/2012, at 8:13 AM, Charles Mills charl...@mcn.org wrote:
 
 Does anyone know the answer to this?
 
 I have an assembler function whose address I know at run-time in C++. 
 I define and store it like this
 
 void __cdecl (*entryPoint)(const char *); entryPoint = (void (__cdecl 
 *)(const char *))(myVoidStar); printf(entryPoint is %p\n, 
 entryPoint);
 
 Printf prints the correct address (DFFD058, FWIW) so I am good so far.
 
 I then call it with
 (entryPoint)(record);
 
 and I end up S0C6ing out in the weeds at 27F5023B.
 
 Here is the pseudo-assembler from the C++ compiler.
 
 4400  C1AC000114 | EX   r0,HOOK..STMT  
 5870  D0C0000114 | Lr7,record(,r13,192)
 5810  D0C8000114 | Lr1,#CEECAACRENT_2(,
 5880  35DA000114 | Lr8,=Q(entryPoint)(,
 4118  1000000114 | LA   r1,=Q(entryPoint)(r
 5810  1000000114 | Lr1,entryPoint(,r1,0
 58F0  1008000114 | Lr15,EPA_WSA(,r1,8
 5800  100C000114 | Lr0,EPA_WSA(,r1,12
 5000  C1F4000114 | ST   r0,_CEECAA_(,r12,50
 4110  D098000114 | LA   r1,#MX_TEMP2(,r13,1
 5070  D098000114 | ST   r7,#MX_TEMP2(,r13,1
 4400  C1C0000114 | EX   r0,HOOK..CALLBGN   
 0DEF  000114 | BASR r14,r15
 4400  C1C4000114 | EX   r0,HOOK..CALLRET   
 
 Does anyone know what I should be declaring or doing differently?
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions, send 
 email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IGGCSI to retrieve tape volume serial

2012-07-16 Thread Victor Zhang
For a non-vsam dataset, how can I determine if it is a dasd dataset or a tape 
dataset? What's the criteria to check if a dataset reside on tape?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How call from C++ thru function pointer to assembler?

2012-07-16 Thread Charles Mills
Another way of saying what I am trying to do is what you do if you are
calling from C++ any MVS callable service or something like that using the
pointer somewhere off of the CVT.

Looking at the header file for CSRSI it looks like perhaps you can't do it
from C++.

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Charles Mills
Sent: Monday, July 16, 2012 5:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: How call from C++ thru function pointer to assembler?

Does anyone know the answer to this?

I have an assembler function whose address I know at run-time in C++. I
define and store it like this

void __cdecl (*entryPoint)(const char *);
entryPoint = (void (__cdecl *)(const char *))(myVoidStar);
printf(entryPoint is %p\n, entryPoint);

Printf prints the correct address (DFFD058, FWIW) so I am good so far.

I then call it with
(entryPoint)(record);

and I end up S0C6ing out in the weeds at 27F5023B.

Here is the pseudo-assembler from the C++ compiler.

4400  C1AC000114 | EX   r0,HOOK..STMT  
5870  D0C0000114 | Lr7,record(,r13,192)
5810  D0C8000114 | Lr1,#CEECAACRENT_2(,
5880  35DA000114 | Lr8,=Q(entryPoint)(,
4118  1000000114 | LA   r1,=Q(entryPoint)(r
5810  1000000114 | Lr1,entryPoint(,r1,0
58F0  1008000114 | Lr15,EPA_WSA(,r1,8
5800  100C000114 | Lr0,EPA_WSA(,r1,12
5000  C1F4000114 | ST   r0,_CEECAA_(,r12,50
4110  D098000114 | LA   r1,#MX_TEMP2(,r13,1
5070  D098000114 | ST   r7,#MX_TEMP2(,r13,1
4400  C1C0000114 | EX   r0,HOOK..CALLBGN   
0DEF  000114 | BASR r14,r15
4400  C1C4000114 | EX   r0,HOOK..CALLRET   

Does anyone know what I should be declaring or doing differently?

(If all else fails I will just write a stub in assembler to do this. I know
how to L 15 BALR 14,15 in assembler g.)

Charles

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: How call from C++ thru function pointer to assembler?

2012-07-16 Thread Charles Mills
David, thanks, will try again tomorrow.

Does it perhaps want to factor differently? Perhaps something more like 

(*extern OS entryPoint)(const char *);

or something? Otherwise aren't you saying that the pointer itself is extern?

Don't let me confuse the issue -- it is not CSRSI that I am calling. Header
for CSRSI is in SYS1.SAMPLIB somewhere but is printed in the callable
services manual. They have something they call csrsi_byaddr that looks
exactly like what I am trying to accomplish but it is bracketed with #ifndef
__cplusplus which is what leads me to think that perhaps this linkage is not
supported for C++.

No, have not taken the XPLINK leap. One of these days.

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of David Crayford
Sent: Monday, July 16, 2012 7:17 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: How call from C++ thru function pointer to assembler?

extern OS (*entryPoint)(const char *) is the correct declaration for C++.

I have called OS linkage functions from the CVT in C++ without problems. 
Where is the header file for CSRSI?

Are you XPLINK?


On 17/07/2012 10:10 AM, Charles Mills wrote:
 Another way of saying what I am trying to do is what you do if you are 
 calling from C++ any MVS callable service or something like that using 
 the pointer somewhere off of the CVT.

 Looking at the header file for CSRSI it looks like perhaps you can't 
 do it from C++.

 Charles

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
 On Behalf Of Charles Mills
 Sent: Monday, July 16, 2012 5:14 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: How call from C++ thru function pointer to assembler?

 Does anyone know the answer to this?

 I have an assembler function whose address I know at run-time in C++. 
 I define and store it like this

 void __cdecl (*entryPoint)(const char *); entryPoint = (void (__cdecl 
 *)(const char *))(myVoidStar); printf(entryPoint is %p\n, 
 entryPoint);

 Printf prints the correct address (DFFD058, FWIW) so I am good so far.

 I then call it with
 (entryPoint)(record);

 and I end up S0C6ing out in the weeds at 27F5023B.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IGGCSI to retrieve tape volume serial

2012-07-16 Thread Scott Ford
Victor,

Try a 'google rexx iggcsi' , there several samples and one of the fields was 
tape datasets 

Scott ford
www.identityforge.com

On Jul 16, 2012, at 9:43 PM, Victor Zhang victor_wor...@yahoo.com.cn wrote:

 For a non-vsam dataset, how can I determine if it is a dasd dataset or a tape 
 dataset? What's the criteria to check if a dataset reside on tape?
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: OT: I received a purported .doc file which appears to be a zip file full ...

2012-07-16 Thread Ed Finnell
I saw on the 10 o'clock news that MS is offering Cloud based Office 2013  
for trial. Not brave enough to try it on my PC(old). I searched a little but  
couldn't find a MS link, but found this.
 
_http://msoffice2013.com/tag/office-15/_ 
(http://msoffice2013.com/tag/office-15/)  
 
 Don't know if it's the real magilla or VOGON trojan...
 
 
In a message dated 7/16/2012 8:12:55 A.M. Central Daylight Time,  
k...@dovetail.com writes:

a  version of MS Word that supports it, you can load
it using the free  OpenOffice / LibreOffice and then save as  the


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Timothy Sipples
Paul Gilmartin writes:
It's not a matter of security; rather that many IT departments nowadays
have a standard of 8-character userids.  IBM is a tail that can no longer
wag that dog; the CIO can cite refusal to comply with corporate standards
as one more strike against z/OS in a purchase decision.

You're referring to TSO/E only, which has a 7 character user ID limitation.
Yes, if you're shopping for TSO/E, maybe that's a strike against TSO/E.
Also (consequently?) if you're shopping for a Lockheed Martin F-22 Raptor
military fighter aircraft. Its design support and parts database is limited
to 7 character user IDs, too:

http://www.lockheedmartin.com/us/aeronautics/materialmanagement/scm-engineering/scm-emap.html

Fact: Every z/OS licensee receives Tivoli Directory Server for z/OS with
LDAP. There's no such limit there, and, like TSO/E, it's part of base z/OS.
If you want N-character user IDs (N7), go for it. Enjoy.


Timothy Sipples
Resident Enterprise Architect (Based in Singapore)
E-Mail: timothy.sipp...@us.ibm.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-16 Thread Timothy Sipples
Shmuel Metz asks:
Are you still using Wired Equivalent Privacy (WEP) or something more
modern, e.g., Wi-Fi Protected Access (WPA)?

Of course I use the latter, but a few points:

1. Wi-fi encryption only handles the hop between your wireless device and
the wireless router/access point. Beyond that almost everything Yahoo!
Mail's Web UI transmits (and receives) is in the clear via HTTP not HTTPS.

2. I specifically mentioned coffee shops. Most coffee shops, hotels, etc.
still don't use encrypted wi-fi.(*)

3. The Internet is a public, untrusted network. It is not a private,
secured network. Everything you send and receive via Yahoo! Mail's Web UI
flows in the clear with the exception of your login credentials which are
checked (by default) only once every 7 days. Anybody between you and Yahoo!
can intercept that unencrypted traffic -- the hotel, the coffee shop, the
ISPs, governments, an employer, etc., etc. Spammers are already sifting
through that unencrypted data to capture e-mail addresses and other
information. Your inbox, every e-mail you read, every e-mail you write, and
your entire address book are all wide open to anyone who can intercept the
Web UI network traffic at any point.

4. It's a big problem when practically everybody in the security community
criticizes Yahoo! for their intransigence in fixing the problem. It's an
even bigger problem when my own mother suffered from Yahoo's decade plus
long failure to turn on HTTPS.

(*) It would certainly help if the wi-fi industry adopted a Public
WPA2 (a.k.a. coffee shop) addition to their standards, requiring
adoption and compliance among manufacturers. Such an amendment would be
similar to HTTPS, allowing simple walk up encryption of wi-fi
connections. Hopefully it would also have reputation-based client
evaluation of wi-fi hotspots to reduce spoofing risk. Oddly, wi-fi doesn't
yet have a great, easy-to-use security solution for the coffee shop/hotel
scenarios where wi-fi is so popular. Maybe Apple will figure this out.


Timothy Sipples
Resident Enterprise Architect (Based in Singapore)
E-Mail: timothy.sipp...@us.ibm.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN