Re: REXX ISPF edit FIND failing

2012-07-20 Thread CM Poncelet
I did explain that ISREDIT follows Clist rules when processing 's, in 
my earlier posting, methinks grin:


 Original Message 
Subject:Re: REXX ISPF edit FIND failing
Date:   Thu, 19 Jul 2012 06:46:37 +0100
From:   CM Poncelet ponce...@bcs.org.uk
Organization:   L! Logic Integration
To: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU
References: 
32716755.1342646266335.javamail.r...@mswamui-cedar.atl.sa.earthlink.net 
of516764f6.4efe65dc-on88257a3f.0079fe91-88257a3f.007a2...@ea.epson.com




I think this has to do with ISREDIT following Clist rules for 's - even 
when edit macros are written in REXX (no 'SYSSCAN = 0'.)


If rewritten in Clist it should work OK ... but 3 's should be coded 
instead of 1 - e.g.


SET SYSSCAN = 0
ISREDIT FIND ALL 'DISP=SHR,DSN=MSYS.UCMD.REMOTEPDQR.('
etc.
SET SYSSCAN = 16

TSO Clist edit macros have been around long before REXX appeared (around 
1989-90) and ISREDIT was meant to be called in Clist, not REXX.. So REXX 
has to follow the Clist rules when calling ISREDIT - e.g. to process 
data containing 's.


There is nothing wrong with ISPF itself.

Cheers, Chris Poncelet



John Mattson wrote:

There is a subtle and dangerous difference with ISREDIT FIND / CHANGE in 
REXX. 
Say you have a simple change command and forget to use  rather than  
/* REXX */ 
TRACE I 
ADDRESS ISPEXEC 
ISREDIT MACRO (MEM) NOPROCESS 
CONTROL ERRORS RETURN 
ISREDIT SCAN OFF 
ISREDIT C ALL 'DISP=SHR,DSN=AAA'   '@#$' 
EXIT 
And THIS is the file you wish to use it on... 
// DD  DISP=SHR,DSN=AAA.XXX 
// DD  DISP=SHR,DSN=BBB.YYY 
// DD  DISP=SHR,DSN=CCC.ZZZ 

IF you use  rather than  here s what you get 
// DD  @#$AAA.XXX 
// DD  @#$BBB.YYY 
// DD  @#$CCC.ZZZ 

If you use  you get 
// DD  @#$.XXX 
// DD  DISP=SHR,DSN=BBB.YYY 
// DD  DISP=SHR,DSN=CCC.ZZZ 

   The moral of all this is: Do not assume ISREDIT commands will work 
the same in REXX as in clists, or ISPF.  I find this very annoying, how 
about your folks? 





From:   Skip Robinson jo.skip.robin...@sce.com
To: IBM-MAIN@LISTSERV.UA.EDU
Date:   07/18/2012 02:26 PM
Subject:Re: REXX ISPF edit FIND failing
Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU



I have found that the ISPF development folks are pretty responsive. This 
problem is certainly worth an SR. 


.
.
JO.Skip Robinson
SCE Infrastructure Technology Services
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager

626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com



From:   John Mattson john_matt...@ea.epson.com
To: IBM-MAIN@LISTSERV.UA.EDU
Date:   07/18/2012 01:34 PM
Subject:Re: REXX ISPF edit FIND failing
Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU



While I am at it... 
WHY the Ampersand SYSTEM  WORKS in the find, 
but if you use PDQR rather than $PDQR  it fails  is just madness. 
7 *-* ISREDIT F ALL P'DISP=SHR,DSN=MSYS$UCMD$REMOTE$PDQR$(SYSTEM$'  
 L   ISREDIT F ALL P'DISP=SHR,DSN=MSYS$UCMD$REMOTE$PDQR$(SYSTEM$'





8 *-* ISREDIT F ALL P'DISP=SHR,DSN=MSYS$UCMD$REMOTEPDQR$(SYSTEM$'  
 L   ISREDIT F ALL P'DISP=SHR,DSN=MSYS$UCMD$REMOTEPDQR$(SYSTEM$'




 +++ RC(4) +++ 




From:   John Mattson/Epson
To: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU
Date:   07/18/2012 01:26 PM
Subject:Re: REXX ISPF edit FIND failing


Thanks to everyone!  I have kept plugging at this and tried all your 
suggestions. 
Here is what I see so far. 
1) There is no reason syntactically that this should not work 
ISREDIT F ALL 'DISP=SHR,DSN=MSYS.UCMD.REMOTEPDQR.(SYSTEM)' 

2) For some strange reality THIS works 
ISREDIT F FIRST 'DISP=SHR,DSN=MSYS.UCMD.REMOTEPDQR.'

and this does not.. as soon as you add the (
ISREDIT F FIRST 'DISP=SHR,DSN=MSYS.UCMD.REMOTEPDQR.('   

3) Lizette's P' processing can be made to work (but really should not be 
necessary)
ISREDIT F ALL P'DISP=SHR,DSN=MSYS$UCMD$REMOTE$PDQR$(SYSTEM' 
Works !!! 
ISREDIT F ALL P'DISP=SHR,DSN=MSYS$UCMD$REMOTE$PDQR$(SYSTEM$'
Works 
ISREDIT F ALL P'DISP=SHR,DSN=MSYS$UCMD$REMOTE$PDQR$(SYSTEM)'
Does NOT 

   Now, why ( causes the ISREDIT FIND to go nuts, but not the 
ISREDIT FIND P' ' is quite beyond me.
   And why ) causes ISREDIT FIND P' to go nuts, but NOT ( is also 





Thanks to all, I now have something that works, sort of, but there is 
really something wrong with ISPF here. 
by the by, I am on zOS 1.11 




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


 




Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-20 Thread Timothy Sipples
Shmuel Metz asks:
Can you log on to TSO foreground with an 8-character userid using the
LDAP client, or do you need TDS for that?

I'm not sure I understand the question, but I'll attempt an answer.

1. Unaided, TSO/E supports up to 7 character user IDs.

2. Note that you are not required to use TSO/E user IDs as user IDs. That
is, one ID might not necessarily be associated with one and only one human.

3. TSO/E is a part of z/OS, but most people who use z/OS these days
probably aren't using TSO/E.

4. TSO/E still runs lots of important applications that must not break, and
that's evidently the primary reason why #1 hasn't changed. However...

5. You can place practically anything you wish in front of TSO/E in a
variety of ways to provide additional security challenges before granting
access to TSO/E. In other words, you can control access to all TSO/E on
ramps. (One possible way is to use Certificate Express Logon.)

6. You can have additional security checks within your TSO/E applications
if you wish in a variety of ways, such as exits.

7. You can accomplish #6 with the ingredients available with your base z/OS
license if you wish. (Certificate Express Logon may require the z/OS
Security Server.)


Timothy Sipples
Resident Enterprise Architect (Based in Singapore)
E-Mail: timothy.sipp...@us.ibm.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Debug SVC

2012-07-20 Thread McKown, John
You really need a special class of debugger for SVC and other system level 
functions, such a PC code and SRB code. Many seem to love z/XDC from ColeSoft. 
I have no experience with it. I am doing some testing of another product, but I 
don't think it's available yet. So I won't mention the name.

-- 
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 -Original Message-
 From: IBM Mainframe Discussion List 
 [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Costin Enache
 Sent: Friday, July 20, 2012 3:29 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Debug SVC
 
 Hi,
 Please assist a poor soul into finding a way to debug SVC 
 (supervisor call
 interrupt) handlers. I am still learning HLASM and debugging 
 stuff on 390, so I
 am not really aware of the tools, hooks, methods and concepts 
 available. So far
 I have managed to get ASMIDF running nicely, relinked with AC=1,
 APF-authorized, so as far as normal programs are concerned I 
 can trace and
 inspect execution nicely. What I need is a way to follow-up 
 on SVC calls, a way
 to hook into the handler and examine the execution of the call.
 I use a test/development zPDT z/OS 1.11 system, I can mess 
 with it, kill it,
 etc. The real hardware is also around, but I am not that keen 
 to kill that.
 Thanks!
 Costin
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
 
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Debug SVC

2012-07-20 Thread Tom Harper
The best way is to run under z/VM. Set all processors off line except for one, 
and you can step through the code. I'm never used z/XDC to debug an SVC. It 
would be interesting to hear what Dave Cole has to say.

Tom

- Original Message -
From: McKown, John [mailto:john.mck...@healthmarkets.com]
Sent: Friday, July 20, 2012 09:32 AM
To: IBM-MAIN@LISTSERV.UA.EDU IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Debug SVC

You really need a special class of debugger for SVC and other system level 
functions, such a PC code and SRB code. Many seem to love z/XDC from ColeSoft. 
I have no experience with it. I am doing some testing of another product, but I 
don't think it's available yet. So I won't mention the name.

-- 
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 -Original Message-
 From: IBM Mainframe Discussion List 
 [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Costin Enache
 Sent: Friday, July 20, 2012 3:29 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Debug SVC
 
 Hi,
 Please assist a poor soul into finding a way to debug SVC 
 (supervisor call
 interrupt) handlers. I am still learning HLASM and debugging 
 stuff on 390, so I
 am not really aware of the tools, hooks, methods and concepts 
 available. So far
 I have managed to get ASMIDF running nicely, relinked with AC=1,
 APF-authorized, so as far as normal programs are concerned I 
 can trace and
 inspect execution nicely. What I need is a way to follow-up 
 on SVC calls, a way
 to hook into the handler and examine the execution of the call.
 I use a test/development zPDT z/OS 1.11 system, I can mess 
 with it, kill it,
 etc. The real hardware is also around, but I am not that keen 
 to kill that.
 Thanks!
 Costin
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
 
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Help with elementary CPU speed question

2012-07-20 Thread Ward, Mike S
This is one area where I really have a problem. It used to be back in the 370 
days that if a machine was rated at 50 mips and you moved up to 100 mips you 
really noticed the difference in execution time. Today if you have a 100 mip 
machine (I know they're rated at msu's not mips) and you moved up to a dual 
with 160 mips you might be cutting your own throat. They may give you 2 
processors each rated at 80 mips for a total of 160 mips. If your workload is 
such that it can't take advantage of dual processors then you have just dropped 
down to an 80 mip machine when you used to have a 100 mip machine. I know I'm 
on a rant, but it happened to up and we were being pressured by the vendor to 
go to the dual processor and that we would be very happy. We weren't. (end of 
rant)

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Charles Mills
Sent: Tuesday, July 17, 2012 8:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Help with elementary CPU speed question

I have gotten dragged into a CPU performance question; a field I know little 
about.



I run a test on a 2094-722. It is rated at 19778 SU/Second. The job consumes
.146 CPU seconds total.



I run the same job on a 2064-2C3. It is rated at 13378 SU/Second. All other 
things being roughly equal, should I expect that the job will consume 1.48
(19778/13378) times as much CPU time, or .216 CPU seconds?



Is my logic right, or am I off somewhere? I'm not worried about a millisecond 
or two; just the broad strokes.



Thanks,

Charles


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

==
This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to which it is addressed. If you 
have received this email in error, please notify the system manager. This 
message contains confidential information and is intended only for the 
individual named. If you are not the named addressee, you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this message by mistake and delete 
this e-mail from your system. If you are not the intended recipient, you are 
notified that disclosing, copying, distributing or taking any action in 
reliance on the contents of this information is strictly prohibited.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Debug SVC (and pretty much anything else with z/XDC)

2012-07-20 Thread David Cole

Tom,

z/XDC can be used to debug many System SVCs as well as any/all user 
SVCs. It also can be used to debug PC routines (all types and 
environments) and SRB routines, system and product exit routines, and 
pretty much anything else that runs in z/OS.


Dave

At 7/20/2012 09:39 AM, Tom Harper wrote:
The best way is to run under z/VM. Set all processors off line 
except for one, and you can step through the code. I'm never used 
z/XDC to debug an SVC. It would be interesting to hear what Dave 
Cole has to say.


Tom

- Original Message -

From: McKown, John [mailto:john.mck...@healthmarkets.com]
Sent: Friday, July 20, 2012 09:32 AM
To: IBM-MAIN@LISTSERV.UA.EDU IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Debug SVC

You really need a special class of debugger for SVC and other 
system level functions, such a PC code and SRB code. Many seem to 
love z/XDC from ColeSoft. I have no experience with it. I am doing 
some testing of another product, but I don't think it's available 
yet. So I won't mention the name.


--
John McKown
Systems Engineer IV
IT

Administrative Services Group
HealthMarkets(r)
9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone *
john.mck...@healthmarkets.com * www.HealthMarkets.com


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-20 Thread Tony Harminc
On 20 July 2012 05:06, Timothy Sipples timothy.sipp...@us.ibm.com wrote:

 3. TSO/E is a part of z/OS, but most people who use z/OS these days probably 
 aren't using TSO/E.

Well, it depends what you measure... When I use my bank's ATM, I am
using z/OS, and the bank has several million customers, so indeed
the portion of TSO/E users at the bank is tiny. And this was always
true; even in the old days at most shops TSO[/E] was not how most
computer users interacted with the system. Most programmers and
operations staff - well perhaps. Are you saying that that is what has
changed? That compile/edit/submit and data admin type of work is now
mostly not being done with TSO? If so, what is it being done with?

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Help with elementary CPU speed question

2012-07-20 Thread Anne Lynn Wheeler
mw...@ssfcu.org (Ward, Mike S) writes:
 This is one area where I really have a problem. It used to be back in
 the 370 days that if a machine was rated at 50 mips and you moved up
 to 100 mips you really noticed the difference in execution time. Today
 if you have a 100 mip machine (I know they're rated at msu's not mips)
 and you moved up to a dual with 160 mips you might be cutting your own
 throat. They may give you 2 processors each rated at 80 mips for a
 total of 160 mips. If your workload is such that it can't take
 advantage of dual processors then you have just dropped down to an 80
 mip machine when you used to have a 100 mip machine. I know I'm on a
 rant, but it happened to up and we were being pressured by the vendor
 to go to the dual processor and that we would be very happy. We
 weren't. (end of rant)

370s  for a few generations ... going from uniprocessor to
dual-processor started off by slowing machine cycle of each processor
down by 10% ... bascially allowing caches a little headroom to handle
cross-cache invalidations from the other cache (store through processor
caches, every store operation would also involve sending invalidation
signal to the other cache for that cache line). So basic two-processor
hardware ran at 1.8 times a single processor. Then operating system
multiprocessor overhead would increase (back when single processor MVS
capture ratio could be 50%) ... leaving even less cycles for
application execution ... aka same exact 10mip uniprocessor would only
start out only being 9mip processor in two processor mode.  Note that
actual handling of cross-cache invalidation was overabove the 10%
processor cycle slowdown (in real live operation, 10mip process running
at 9mips ... would actually effectively have less than 9mips, further
reduced by multiprocessor operating system overhead  cache overhead of
handling cross-cache invalidation signals).

strategy with 3081 was to never again to offer single process at the
high-end. this ran into a couple problems ... clone processor vendors
were offering uniprocessor and ACP/TPF didn't have multiprocessor
support. All sorts of unnatural acts were done to try an make a 3081
acceptable to ACP/TPF (and head off customer base all moving to clone
processors). this is besides the issues outline here about comparison
between 3081 and clone processors:
http://www.jfsowa.com/computer/memo125.htm

eventually there was 3083 (in large part for the ACP/TPF market) which
was created by removing a processor from a 3081 (which is not as simple
as you might think, processor 0 was at the top of the frame, so
processor 1 in the middle of the frame would be the one removed ... but
that made the frame dangerously top-heavy). Being only single processor,
turning off the cross-cache 10% slowdown made the processor nearly 15%
faster (than a processor in 3081).

combining two 3081s together for a four-process 3084 was big challenge
... singe it met that each processor cache would be getting cross-cache
invalidation signals from three other caches (not just one). kernel
storage use became significant ... so operating systems running on 3084
were cache-line sensitised ... all kernel storage was changed to align
on cache-line boundaries and be multiples of cache-lines.  The problem
was that if the start of end of one storage location was at the start of
a cache-line and the start of a different storage location was at the
end of the same cache-line ... the two different storage locations could
be in use by different processors simultaneously. However, it represents
only a single storage block for cache management ... and could result in
cache thrashing. The storage cache sensitivity change is claimed to
improve 3084 throughput by 5-6% (minimizing cache line thrashing).

However, higher-end 370s processor throughput was quite sensitive to
cache hit ratios ... which would be seriously affected by high-rate of
asynchronous i/o interrupts. For my resource manager ... I did some
hacks (at high i/o rates) turning off enabling for I/O interrupts for
periods of time and then draining all pending I/O interrupts. I could
demonstrate aggregate higher throughput (even I/O throughput) ... since
the batching of I/O interrupts would have much higher processor
throughput (because of better cache hit ratio) ... offsetting any delay
in taking the interrupt (note part of 370/xa was attempting to address
same issue with various kinds of i/o queuing in the hardware).

When I first did two-processor 370 support ... I was able to deploy in
production environemnt ... two processors running more than twice MIP
rate as single processor ... including processor cycle only running at
.9 that of single processor. Some games with cache affinity allowed
improved cache hit ratio ... which more than offset the 10% slowdown in
processor cycle.

-- 
virtualization experience starting Jan1968, online at home since Mar1970

--
For 

Test

2012-07-20 Thread George, William@FTB
Please ignore. A test as I've not seen any posing in a while which is
quite odd

__
CONFIDENTIALITY NOTICE: This email from the State of California is for the sole 
use of the intended recipient and may contain confidential and privileged 
information. Any unauthorized review or use, including disclosure or 
distribution, is prohibited. If you are not the intended recipient, please 
contact the sender and destroy all copies of this email.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: COBOL packed decimal

2012-07-20 Thread Shmuel Metz (Seymour J.)
In 9307538697441482.wa.paulgboulderaim@listserv.ua.edu, on
07/19/2012
   at 09:22 AM, Paul Gilmartin paulgboul...@aim.com said:

Is this because Unisys is deficient in conformance to the standard,
or because IBM's implementation contains an extension to the
standard?

No, it's because UNIVAC used ones complement arithmetic on most of its
lines, Including the 1108 et al that Unisys inherited.

-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 Atid/2http://patriot.net/~shmuel
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: REXX ISPF edit FIND failing

2012-07-20 Thread Shmuel Metz (Seymour J.)
In
ofc799207c.54ac2d90-on88257a40.004f10aa-88257a40.004f4...@ea.epson.com,
on 07/19/2012
   at 07:25 AM, John Mattson john_matt...@ea.epson.com said:

Shmuel ! A previous reply also suggested SCAN OFF. I tried it,

Did you try it with your original FIND, or with the FIND that used
picture?

Please look at the example I sent before and try it yourself. 

Alas, I don't have access to a z system.

-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 Atid/2http://patriot.net/~shmuel
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-20 Thread Shmuel Metz (Seymour J.)
In
ofbece3590.44f08adb-on48257a41.002f9ff5-48257a41.00320...@us.ibm.com,
on 07/20/2012
   at 05:06 PM, Timothy Sipples timothy.sipp...@us.ibm.com said:

I'm not sure I understand the question,

There is support for mapping long user ids into short user ids. Does
that support work if the access validation is in a third party LDAP
server?

1. Unaided, TSO/E supports up to 7 character user IDs.

Yes, otherwise there would have been no need to ask the question.

2. Note that you are not required to use TSO/E user IDs as user IDs.

You are if you want to log on to TSO foreground, which is what I asked
about.

3. TSO/E is a part of z/OS, but most people who use z/OS these days
probably aren't using TSO/E.

But I explicitly asked about TSO.

5. You can place practically anything you wish in front of TSO/E in
a variety of ways to provide additional security challenges before
granting access to TSO/E.

But can you still remap userids if you do?

-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 Atid/2http://patriot.net/~shmuel
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Debug SVC

2012-07-20 Thread Shmuel Metz (Seymour J.)
In 1342772932.49603.yahoomail...@web171502.mail.ir2.yahoo.com, on
07/20/2012
   at 09:28 AM, Costin Enache e_cos...@yahoo.com said:

Please assist a poor soul into finding a way to debug SVC (supervisor
call interrupt) handlers.

There is a major difference between the SVC interrupt handler and an
interrupt routine. You really don't want to mess with the former at
all, and you shouldn't mess with the latter until you understand the
SVC types and have some experience writing privileged code.

I am still learning HLASM and debugging stuff on 390,

Then I recommend that you start with unprivileged code.

-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 Atid/2http://patriot.net/~shmuel
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


healthCheck search

2012-07-20 Thread Bonno, Tuco
there is a HealthCheck called  zosmigv1r13_zfs_filesys  that I would like to 
install in my 1.11 system .
I know that new healthChecks are usualy distributed bmo ptf-s.
so I went to this site


https://www-304.ibm.com/ibmlink/sis/searchAparAndUsageLibSubmit.wss

and after signin blah blah blah
submitted a search on the search argument of  zosmigv1r13_zfs_filesys

all I got in return was a reference to a ptf which talks about an abend which 
can occur when you try to run that HealthCheck.

is there an UNEQUIVOCAL method for finding out which ptf introduced which 
HealthCheck??

thank you




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Help with elementary CPU speed question

2012-07-20 Thread Ward, Mike S
You really know your processors and how they work. I think the  only time I  
ran anything dual was in a 370/155AP. We ran VM/SP and OS/VS1.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Anne  Lynn Wheeler
Sent: Friday, July 20, 2012 11:44 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Help with elementary CPU speed question

mw...@ssfcu.org (Ward, Mike S) writes:
 This is one area where I really have a problem. It used to be back in
 the 370 days that if a machine was rated at 50 mips and you moved up
 to 100 mips you really noticed the difference in execution time. Today
 if you have a 100 mip machine (I know they're rated at msu's not mips)
 and you moved up to a dual with 160 mips you might be cutting your own
 throat. They may give you 2 processors each rated at 80 mips for a
 total of 160 mips. If your workload is such that it can't take
 advantage of dual processors then you have just dropped down to an 80
 mip machine when you used to have a 100 mip machine. I know I'm on a
 rant, but it happened to up and we were being pressured by the vendor
 to go to the dual processor and that we would be very happy. We
 weren't. (end of rant)

370s  for a few generations ... going from uniprocessor to dual-processor 
started off by slowing machine cycle of each processor down by 10% ... 
bascially allowing caches a little headroom to handle cross-cache invalidations 
from the other cache (store through processor caches, every store operation 
would also involve sending invalidation signal to the other cache for that 
cache line). So basic two-processor hardware ran at 1.8 times a single 
processor. Then operating system multiprocessor overhead would increase (back 
when single processor MVS capture ratio could be 50%) ... leaving even less 
cycles for application execution ... aka same exact 10mip uniprocessor would 
only start out only being 9mip processor in two processor mode.  Note that 
actual handling of cross-cache invalidation was overabove the 10% processor 
cycle slowdown (in real live operation, 10mip process running at 9mips ... 
would actually effectively have less than 9mips, further reduced by 
multiprocessor operating system overhead  cache overhead of handling 
cross-cache invalidation signals).

strategy with 3081 was to never again to offer single process at the high-end. 
this ran into a couple problems ... clone processor vendors were offering 
uniprocessor and ACP/TPF didn't have multiprocessor support. All sorts of 
unnatural acts were done to try an make a 3081 acceptable to ACP/TPF (and head 
off customer base all moving to clone processors). this is besides the issues 
outline here about comparison between 3081 and clone processors:
http://www.jfsowa.com/computer/memo125.htm

eventually there was 3083 (in large part for the ACP/TPF market) which was 
created by removing a processor from a 3081 (which is not as simple as you 
might think, processor 0 was at the top of the frame, so processor 1 in the 
middle of the frame would be the one removed ... but that made the frame 
dangerously top-heavy). Being only single processor, turning off the 
cross-cache 10% slowdown made the processor nearly 15% faster (than a processor 
in 3081).

combining two 3081s together for a four-process 3084 was big challenge ... 
singe it met that each processor cache would be getting cross-cache 
invalidation signals from three other caches (not just one). kernel storage use 
became significant ... so operating systems running on 3084 were cache-line 
sensitised ... all kernel storage was changed to align on cache-line boundaries 
and be multiples of cache-lines.  The problem was that if the start of end of 
one storage location was at the start of a cache-line and the start of a 
different storage location was at the end of the same cache-line ... the two 
different storage locations could be in use by different processors 
simultaneously. However, it represents only a single storage block for cache 
management ... and could result in cache thrashing. The storage cache 
sensitivity change is claimed to improve 3084 throughput by 5-6% (minimizing 
cache line thrashing).

However, higher-end 370s processor throughput was quite sensitive to cache hit 
ratios ... which would be seriously affected by high-rate of asynchronous i/o 
interrupts. For my resource manager ... I did some hacks (at high i/o rates) 
turning off enabling for I/O interrupts for periods of time and then draining 
all pending I/O interrupts. I could demonstrate aggregate higher throughput 
(even I/O throughput) ... since the batching of I/O interrupts would have much 
higher processor throughput (because of better cache hit ratio) ... offsetting 
any delay in taking the interrupt (note part of 370/xa was attempting to 
address same issue with various kinds of i/o queuing in the hardware).

When I first did two-processor 370 support ... I was able to deploy in 
production 

Re: healthCheck search

2012-07-20 Thread Mark Zelden
On Fri, 20 Jul 2012 14:45:40 -0500, Mark Zelden m...@mzelden.com wrote:

On Fri, 20 Jul 2012 13:33:07 -0400, Bonno, Tuco t...@cio.sc.gov wrote:

is there an UNEQUIVOCAL method for finding out which ptf introduced which 
HealthCheck??


Yes, consult the encyclopedia - AKA Marna Walle.:-)

(it is Friday).


Since the checks are written by individual components for health checker,  
there
is probably a lot of inconsistencies in the way the APARs are documented.  

Since the checks should include documentation updates, you should be able
to search by the check name as you did and find it.   I just did a search
on Health Checker and ZFS in IBMLINK and I came up with this APAR
that may be the one, but there is no doc other than


ZFS HEALTH CHECK FOR MIGRATION TO ZFS R13.


APAR Identifier .. OA35465 
Release 3B0   : UA59383 available 11/04/03 (F103 )

I thought that was it, but in looking at my SMPPTS, it isn't. After some 
research, 
I think it was introduced with PTF  UA61854 , which addresses several APARs
including one that talks about a problem with that check itself (maybe the 
problem
was found while in development).

This link in the migration manual is supposed to help, but it is just leads you
to the manual and APAR text, which you (and I) searched.

http://www.ibm.com/systems/z/os/zos/hchecker/check_table.html

So back to my original suggestion - Marna!


I looked again closer.


Part of that check - MSGIOEZH0015I which states the  the check doesn't
apply to single system, came in with OA36514 / UA61854.  The pre for
that is OA35465 / UA59383, and if you look in the MCS for that PTF you can find
msg IOEZH0010I which stages that the correct interface level 3 is active.  


You really should have both PTFs, but my first suspicion was correct that the
check came in with OA35465 - ZFS HEALTH CHECK FOR MIGRATION TO ZFS R13. 

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: healthCheck search

2012-07-20 Thread Mark Zelden
On Fri, 20 Jul 2012 15:31:07 -0500, Mark Zelden m...@mzelden.com wrote:

On Fri, 20 Jul 2012 14:45:40 -0500, Mark Zelden m...@mzelden.com wrote:

On Fri, 20 Jul 2012 13:33:07 -0400, Bonno, Tuco t...@cio.sc.gov wrote:

is there an UNEQUIVOCAL method for finding out which ptf introduced which 
HealthCheck??


Yes, consult the encyclopedia - AKA Marna Walle.:-)

(it is Friday).


Since the checks are written by individual components for health checker,  
there
is probably a lot of inconsistencies in the way the APARs are documented.  

Since the checks should include documentation updates, you should be able
to search by the check name as you did and find it.   I just did a search
on Health Checker and ZFS in IBMLINK and I came up with this APAR
that may be the one, but there is no doc other than


ZFS HEALTH CHECK FOR MIGRATION TO ZFS R13.


APAR Identifier .. OA35465 
Release 3B0   : UA59383 available 11/04/03 (F103 )

I thought that was it, but in looking at my SMPPTS, it isn't. After some 
research, 
I think it was introduced with PTF  UA61854 , which addresses several APARs
including one that talks about a problem with that check itself (maybe the 
problem
was found while in development).

This link in the migration manual is supposed to help, but it is just leads 
you
to the manual and APAR text, which you (and I) searched.

http://www.ibm.com/systems/z/os/zos/hchecker/check_table.html

So back to my original suggestion - Marna!


I looked again closer.


Part of that check - MSGIOEZH0015I which states the  the check doesn't
apply to single system, came in with OA36514 / UA61854.  The pre for
that is OA35465 / UA59383, and if you look in the MCS for that PTF you can find
msg IOEZH0010I which stages that the correct interface level 3 is active.  


You really should have both PTFs, but my first suspicion was correct that the
check came in with OA35465 - ZFS HEALTH CHECK FOR MIGRATION TO ZFS R13. 


I meant to add this but got distracted by a phone call.   The information for
the PTFs you need should be in the PSP buckets, and therefore in FIXCAT.
So the easiest way to make sure you have everything you need (not just
Health Checker migration checks) is to run an SMP/E job similar to
this:


//SMPCNTL  DD  *
  SET BOUNDARY(GLOBAL) .   /* SET TO GLOBAL ZONE*/  
  REPORT MISSINGFIX/* Identify missing PTFs */  
 ZONES(RESZ11T) /* In these target zones */  
 FIXCAT(   /* For these categories  */  
   IBM.TargetSystem-RequiredService.z/OS.V1R12  
   IBM.TargetSystem-RequiredService.z/OS.V1R13  
   IBM.Coexistence.z/OS.V1R12   
   IBM.Coexistence.z/OS.V1R13   
   ).   



--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-20 Thread Don Leahy
On Fri, Jul 20, 2012 at 12:08 PM, Tony Harminc t...@harminc.net wrote:

 On 20 July 2012 05:06, Timothy Sipples timothy.sipp...@us.ibm.com wrote:

  3. TSO/E is a part of z/OS, but most people who use z/OS these days
 probably aren't using TSO/E.

 Are you saying that that is what has
 changed? That compile/edit/submit and data admin type of work is now
 mostly not being done with TSO? If so, what is it being done with?

 Tony H.


 I think that IBM is *hoping* that they'll all start using RDz.  We have it
our shop, but as far as I can tell there hasn't been a stampede away from
TSO/ISPF.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: BDAM READ with BLKREF of X'0'

2012-07-20 Thread Tony Harminc
On 19 July 2012 11:00, Thomas David Rivers riv...@dignus.com wrote:
 Thomas David Rivers wrote:

 The parms passed to the READ SVC (addressed by R1) are

 0X''
 4X'0048' 6X''  (zero length, use the blksize from the DCB?)
 8X'BFF8' (address of the DCB)
 12  X'00016000'  (AREA ADDRESS)
 16  X''  (IOB ADDRESS)
 20  X''  (KEY ADDRESS)
 24  X'c40c'  (BLKREF ADDRESS)

What is this READ SVC?

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: REXX ISPF edit FIND failing

2012-07-20 Thread John Mattson
Shmuel !  Its amazing how much you contribute without access to a z 
system.  Hope my memory and research is that good when we go off zOS 
(we're being SAPonified). 
I have to move on to other things but I have found the following: 
1) It is indeed necessary to use the  with the ISREDIT in REXX, 
whenever there is an  in your string, and no matter whether it is a 
symbolic or not (could be just text). 
2) When testing FIND, it is a good idea to VIEW your target data set so 
things will not get changed accidentially, and use CHANGE rather than 
FIND.  Reason is you may be successfully FINDing something OTHER than what 
you think you are finding.  Doing a change to some strange string makes it 
very clear just what you FOUND and CHANGEd.  Much of my confusion was 
self-induced because the FIND commands appeared to be working, but they 
were only finding everything up to the single . 
Thanks for you, and everyone's help 



From:   Shmuel Metz (Seymour J.) shmuel+...@patriot.net
To: IBM-MAIN@LISTSERV.UA.EDU
Date:   07/20/2012 10:25 AM
Subject:Re: REXX ISPF edit FIND failing
Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU



In
ofddeba129.3add7da9-on88257a40.0050f760-88257a40.00514...@ea.epson.com,
on 07/19/2012
   at 07:47 AM, John Mattson john_matt...@ea.epson.com said:

Shmuel !  I sent my original source, and it was REXX.

It's ISPF that interprets the ampersamds, not REXX. Try turning on the
ISPF trace and see if anything pops out.

Having a few spare moments, I quickly converted the REXX to CLIST 
and all of the FIND's worked as a clist.

What was the exact code? 

-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 Atid/2http://patriot.net/~shmuel
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-20 Thread Scott Ford
Sales pitch, sorry guys...I will bet there are thousands and thousands of users 
using either TSO or CMS ..of course CICS and IMS and DB2 ...we also sell 
software ...LDAP ...but I won't go there unless its offline. This isn't the 
place to try to hustle ppl

Scott ford
www.identityforge.com

On Jul 20, 2012, at 4:57 PM, Don Leahy don.le...@leacom.ca wrote:

 On Fri, Jul 20, 2012 at 12:08 PM, Tony Harminc t...@harminc.net wrote:
 
 On 20 July 2012 05:06, Timothy Sipples timothy.sipp...@us.ibm.com wrote:
 
 3. TSO/E is a part of z/OS, but most people who use z/OS these days
 probably aren't using TSO/E.
 
 Are you saying that that is what has
 changed? That compile/edit/submit and data admin type of work is now
 mostly not being done with TSO? If so, what is it being done with?
 
 Tony H.
 
 
 I think that IBM is *hoping* that they'll all start using RDz.  We have it
 our shop, but as far as I can tell there hasn't been a stampede away from
 TSO/ISPF.
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: COBOL packed decimal

2012-07-20 Thread Scott Ford
Shmuel,

Who did the inherit the 1108 from ? My dad worked for Unisys on the 
1108sdude

Scott ford
www.identityforge.com

On Jul 20, 2012, at 11:43 AM, Shmuel Metz (Seymour J.) 
shmuel+...@patriot.net wrote:

 In 9307538697441482.wa.paulgboulderaim@listserv.ua.edu, on
 07/19/2012
   at 09:22 AM, Paul Gilmartin paulgboul...@aim.com said:
 
 Is this because Unisys is deficient in conformance to the standard,
 or because IBM's implementation contains an extension to the
 standard?
 
 No, it's because UNIVAC used ones complement arithmetic on most of its
 lines, Including the 1108 et al that Unisys inherited.
 
 -- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 Atid/2http://patriot.net/~shmuel
 We don't care. We don't have to care, we're Congress.
 (S877: The Shut up and Eat Your spam act of 2003)
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: JCL DD SUBSYS - how to write the SUBSYS

2012-07-20 Thread Jim Mulder
 Well, Batch LSR Subsystem(BLSR)  started out as a sample of how to write 
a
 subsystem, IIRC. I think it was in a WSC orange book.
 
 But I don't know how to locate it now. Anyone?

  The Subsystem Interface in MVS/SP Version 3   GC66-3131-00
  August 1989 

  I have a hardcopy of a pre-publication draft of this book.
It was from WSC, but I don't know what color the published
version was.

  The authors of the book wrote an assembler language subsystem
which was originally going to be included with the book as a sample 
program.  That code ended up being rewritten in PL/AS, renamed as 
Batch LSR, and shipped as a PTF on top of MVS SP 3.1.3.  The
original assembler code is probably long gone.  I thought I had 
kept a copy, but:

ARC1010I USER REQUEST FOR A MIGRATED DATA SET FAILED. 
ARC1001I D10JHM1.PHPD.PLAS  RECALL FAILED, RC=0003, REAS=0004
ARC1103I MIGRATION/BACKUP/DUMP VOLUME NOT AVAILABLE 

 
 Has anyone found where there is documentation on how to code a SUBSYSTEM
 that could be the target of a JCL DD SUBSYS=(xyz,abc) statement? I am
 looking for information on how to code the subsystem itself and how to
 pick up the DD information and the PARM passed to the subsystem.


Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Passwords and user-ids was Re: Yahoo Password Breach: 7 Lessons Learned - Security - Attacks/breaches - Informationweek

2012-07-20 Thread Clark Morris
On 16 Jul 2012 09:00:40 -0700, in bit.listserv.ibm-main you wrote:

The acceptability of length limitations depends upon their values.

Passwords or userids that may be at most 8 characters in length are
unacceptable today.

Has IBM changed that limitation for standard TSO and CICS login.  I
also have a problem with using special characters in passwords unless
I know they are stable across code pages.  In EBCDIC the US dollar
sign becomes the pound sterling sign in Britain and the yen sign in
Japan.  If you believe that user-ids should be larger than 7
characters or even 8, then what are the implications for SMF records
and various control blocks in z/OS?  I think that you have to use LDAP
or something similar to have passwords larger than 8 bytes in z/OS.

Clark Morris

 A limitation to at most  2^15 - 1 = 32767 characters is, in my view
at least, unobjectionable.  Larger limitations like this one are often
reflections of control-block overflow problems in some procedural
language.  These limitations can be circumvented, but the
concatenation schemes that do so are very tedious.

John Gilmore, Ashland, MA 01721 - USA


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Integrating User Identity

2012-07-20 Thread mf db
Dear All,

Good Morning..

For one of our Client looking for a solutions to Integrate User Identity in
the Distributed environment (Windows Active directory , Sun’s IDM –
Identity Manager , CA-Siteminder ) with Topsecret in zVSE . I am just
trying to understand the Technical requirements about this integration and
some experiences.

Could someone please share your thoughts or experience on the similar
integration. This would be really a good starter for me to review, research
and plan for the executions.

Peter

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN