Re: Crypto Facility performance.
Hi again, is there anybody who can answer my last (and maybe not least) question ? Thank you in advance. Massimo 2013/5/6 Massimo Biancucci mad4...@gmail.com Hi everybody, I want to thank you for your valuable support anyway I hope you'll have a little more patience and give me the final hint. What I've understood is that Protected Key is almost as secure as Secure Key but the clear everything and more in case of attack. Greg said: CSNBKEX (Key Export) and CSNBKIM (Key Import) are both secure key APIs, which are executed on the Crypto Express cards so, if I well understand, I can do nothing to use the local processor and still ICSF will use CryptoCard. If so, I can consider closed my trip on the topic. If not, do I have to modify my application (I'm expecting - NO) ? Is ICSF still doing the work for me (I'm expecting - YES) ? (I think there're different stuffs to do at RACF level). I'd not want to make my RACF colleagues working on a dead track and paying beers for the whole century ! :D Thank you again. Massimo Biancucci 2013/4/30 Todd Arnold arno...@us.ibm.com IMHO protected key *does require* CryptoExpress option, not for data processing, but for key storing. You are right. The keys are stored in a form that is protected by the Crypto Express card. Crypto Express unwraps the key and passes it directly to CPACF. Thus, Crypto Express is needed in order to use the Protected Key CPACF features. Once CPACF receives the key from the Crypto Express, it re-wraps the key using a key encrypting key (KEK) that it generates. That key is not permanent - it goes away if the system is restarted, etc. Thus, keys wrapped under the CPACF KEK are not suitable for long-term storage, such as storage in CKDS. At a very high level, it works something like this: 1. Key read from CKDS 2. Key sent to Crypto Express 3. Crypto Express unwraps the key and sends the cleartext key directly to CPACF 4. CPACF rewraps the key with the volatile KEK it generated when it started up 5. CPACF returns the rewrapped key to the application program 6. Application program uses that rewrapped key in protected mode requests to CPACF . 7. When system is powered off, restarted, etc., the CPACF KEK is lost and it generates a new one 8. Repeat from step 1 Todd Arnold -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
TCPIP Problem
Staff of the forum, Recently we had problems after cancel the TCPIP Trace, which was necessary to IPL the partition of the z / OS 1.11 and consulting a specialist product, it informed us that the TCPIP does not clean up memory when it is canceled and ... when it makes a start of another then this can cause problems. Anyone had this problem? Help is welcome -- Jorge Arueira Campos Analyst supports mainframe ww.tmsolutions.com.br 55 11 96861 4863 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
z/VM and ICF
Starting from z10 an LPAR in zVM mode supports mix of IFLs ad CPs and, of course, IFL cannot be used for z/OS guests. What about Coupling Facility? Does such LPAR mode support ICF processors? What processors can be used for CF guest? CPs and ICFs? Just curious. -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax +48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2013 r. kapitał zakładowy BRE Banku SA (w całości wpłacony) wynosi 168.555.904 złotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ANTMAIN takes a lot of CPU
open can of worms When someone writes about excessive amount of CPU time, I'm always left wondering. A lot of CPU time, I understand. More than it used to, I understand. But excessive -- compared to what? If you ask for something to be done, whether explicitly or implicitly, it will take whatever amount of CPU time it takes. Maybe in the ANTMAIN case (I have no idea) you're lucky it's not done under your job and charged to you (as it perhaps could be). If you view the amount as excessive, you might choose not to do that something. The amount of processing done might be intentional and necessary. Or it might be a problem. You're of course welcome to inquire and it will be looked at. But there is no necessary correlation between inquiry and change. /end-open Peter Relson z/OS Core Technology Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/VM and ICF
Radoslaw, The PR/SM planning guide is your friend here (SB10-7153 for z10 et al): Chapter 3 Processor considerations for z/VM mode LPs: In a z/VM mode partition, z/VM will: snip Operate coupling facility virtual machines in support of a Parallel Sysplex test environment on ICFs and optionally on CPs. Regards, Geoff IBM System z, UK -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/VM and ICF
What about Coupling Facility? Does such LPAR mode support ICF processors? What processors can be used for CF guest? CPs and ICFs? We use an ICF for MVS guests under VM. A CP can be used instead of an ICF, but when we stated to run out of capacity we saw severe Virtual Coupling Facility problems (i.e., delays) and had to switch to an ICF instead of a CP. The CP could not be dedicated to serve the VCF so it was also used for general processing. Bob Shannon Rocket Software -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TCPIP Problem
When you say consulting a specialist product: what is that? Did you contact IBM for assistance? Why are you cancelling TCPIP? Is there a reason you cannot stop it normally? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Grillo Paul Sent: Monday, May 13, 2013 3:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: TCPIP Problem Staff of the forum, Recently we had problems after cancel the TCPIP Trace, which was necessary to IPL the partition of the z / OS 1.11 and consulting a specialist product, it informed us that the TCPIP does not clean up memory when it is canceled and ... when it makes a start of another then this can cause problems. Anyone had this problem? Help is welcome -- Jorge Arueira Campos -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Business politics and software development
I have a friend who used to work for Microsoft in the area of performance monitoring of the operating system itself. He was laid off three years ago. Microsoft is more interested in new whiz-bang features and components than in performance improvement. I guess their thinking is that the hardware developers will always find ways to speed up the CPU and then complaints about the software's performance will go away for a few more years. Bill Fairchild Franklin, TN - Original Message - From: J. Leslie Turriff jlturr...@centurytel.net To: IBM-MAIN@LISTSERV.UA.EDU Sent: Sunday, May 12, 2013 6:53:19 PM Subject: Business politics and software development This is an interesting exposition on the subject. I suppose that this is unavoidable in any business that produces large software systems. http://blog.zorinaq.com/?e=74 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Co:z SFTP and Public/Private Key Authentication
Roger, The FOTS1373 message is being emitted from Ported Tools OpenSSH. Are you able to connect a basic SSH session to the target system with that z/OS user? Because the Ported Tools SSH client can't be run under OMVS, The best way to test this is to use a generic ssh client to connect to z/OS (like PuTTY), then from the Unix System Services command prompt issue: ssh x...@some.host.name. If you're prompted for a password, there's an issue with your key setup. The most common error is a bad file/directory permission: - Your $HOME directory must not be group writable - $HOME/.ssh should be rwx for the user and not accessible by others - Your private key (e.g. $HOME/.ssh/id_rsa) must be readable for the user only - You don't have have your public key properly available in your $HOME/xyz/.ssh/authorized_keys file on some.host.name. The most common problem here is that the public key was transferred from z/OS without translation. If you can connect without a password prompt, you're using the keypair and the problem is probably somewhere in the Co:Z SFTP script setup. If this is the case, let me know and I'll give you some trace settings to run with so we can take a look. --Steve Dovetailed Technologies www.dovetail.com On Mon, May 13, 2013 at 1:11 AM, Roger Lowe roger_l...@bigpond.com wrote: Hi Listers, We are trying to use Co: z SFTP in batch with Public/Private key authentication and not having much success. JCL that we are using: //SFTPCAT EXEC PROC=SFTPPROC //SFTPIN DD * user=xyz host=some.host.name lzopts=mode=text ldsn=//DD:MYDD rpat=/u/abc/sftp.txt . $script_dir/sftp_cat.sh /* //MYDD DD DSN=UID.SFTPCAT.DATA,DISP=(,CATLG),UNIT=SYSDA, //DCB=(LRECL=80,RECFM=FB),SPACE=(CYL,(3,1)) (some fields have been changed to protect the innocent) . When we run the job, it produces the following error message - FOTS1373 Permission denied (publickey,password). . Have read the documentation and it is still not clear as to what we need to do to make use of private/public key authentication . Any ideas? . Thanks, Roger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TCPIP Problem
The cancellation was inadvertent action of an analyst, the question is why this happens and if anyone has had this problem ... but if this is not the list for which I may have answers to requests, I will go to another group, then I apologize. The expert consulted an analyst is representative of the product software house ... IBM is reviewing and analyzing the dumps at the moment before the IPL 2013/5/13, Lizette Koehler stars...@mindspring.com: When you say consulting a specialist product: what is that? Did you contact IBM for assistance? Why are you cancelling TCPIP? Is there a reason you cannot stop it normally? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Grillo Paul Sent: Monday, May 13, 2013 3:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: TCPIP Problem Staff of the forum, Recently we had problems after cancel the TCPIP Trace, which was necessary to IPL the partition of the z / OS 1.11 and consulting a specialist product, it informed us that the TCPIP does not clean up memory when it is canceled and ... when it makes a start of another then this can cause problems. Anyone had this problem? Help is welcome -- Jorge Arueira Campos -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Jorge Arueira Campos Analista de Suporte Mainframe ww.tmsolutions.com.br 11 6861 4863 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Business politics and software development
Sounds like many of our users. Gotta have the fancy bling. If it needs rebooting , that's just part of the cost. Same in the food industry. Tasty is better than healthy. On May 13, 2013 7:57 AM, DASDBILL2 dasdbi...@comcast.net wrote: I have a friend who used to work for Microsoft in the area of performance monitoring of the operating system itself. He was laid off three years ago. Microsoft is more interested in new whiz-bang features and components than in performance improvement. I guess their thinking is that the hardware developers will always find ways to speed up the CPU and then complaints about the software's performance will go away for a few more years. Bill Fairchild Franklin, TN - Original Message - From: J. Leslie Turriff jlturr...@centurytel.net To: IBM-MAIN@LISTSERV.UA.EDU Sent: Sunday, May 12, 2013 6:53:19 PM Subject: Business politics and software development This is an interesting exposition on the subject. I suppose that this is unavoidable in any business that produces large software systems. http://blog.zorinaq.com/?e=74 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ML1 to ML2
For the current ML1 data, you can issue the commands directly (hsend migrate dsn(x) ML2). There is a variation of the HSM LIST command that will show only the datasets on ML1. You will still need (at least) 1 ML1 volume if you are using the AUTODUMP feature. This is where HSM stores the VTOC copies used in volume recovery. For the data on Primary, I would set ML1 days equal to ML2 days in the Management Class definition.. HTH, snip What I want to have happen All migrations go directly to tape, no longer go to ML1 DASD. But I still have a lot of migrated data on ML1 I need to get to ML2. For that I suppose I can wait for it to roll off to ML2. I changed the TAPEMIGRATION( DIRECT) thinking that anything that migrated from this point forward would go to ML2 and not ML1. But, nope, issued an HMIG command against a dataset and it went to ML1. /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Co:z SFTP and Public/Private Key Authentication
BTW: Co:Z SFTP uses IBM Ported Tools OpenSSH for the underlying ssh layer - that is where authentication occurs. You might want to take a look at the slides/recordings of the following webinars on our site: IBM Ported Tools for z/OS: OpenSSH - Key Authentication (Part 1) IBM Ported Tools for z/OS: OpenSSH - Using Key Rings (Part 2) http://dovetail.com/webinars.html Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, May 13, 2013 at 12:11 AM, Roger Lowe roger_l...@bigpond.com wrote: Hi Listers, We are trying to use Co: z SFTP in batch with Public/Private key authentication and not having much success. JCL that we are using: //SFTPCAT EXEC PROC=SFTPPROC //SFTPIN DD * user=xyz host=some.host.name lzopts=mode=text ldsn=//DD:MYDD rpat=/u/abc/sftp.txt . $script_dir/sftp_cat.sh /* //MYDD DD DSN=UID.SFTPCAT.DATA,DISP=(,CATLG),UNIT=SYSDA, //DCB=(LRECL=80,RECFM=FB),SPACE=(CYL,(3,1)) (some fields have been changed to protect the innocent) . When we run the job, it produces the following error message - FOTS1373 Permission denied (publickey,password). . Have read the documentation and it is still not clear as to what we need to do to make use of private/public key authentication . Any ideas? . Thanks, Roger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TCPIP Problem
This is a good group for this type of questions. Quite often we ask the why? sort of questions, and want to make sure that you've remembered to get official support from the vendor. We have occasionally had people come here thinking this was an official IBM support site. And get upset when nobody took ownership of their complaint. So we tend to want to reinforce that this forum is a corner bar type of support forum. Another possible group is called IBMTCP-L on Marist. Google will get u a link. I'm at home on my tablet right now and so can't easily enter the address. On May 13, 2013 8:07 AM, Grillo Paul arue...@gmail.com wrote: The cancellation was inadvertent action of an analyst, the question is why this happens and if anyone has had this problem ... but if this is not the list for which I may have answers to requests, I will go to another group, then I apologize. The expert consulted an analyst is representative of the product software house ... IBM is reviewing and analyzing the dumps at the moment before the IPL 2013/5/13, Lizette Koehler stars...@mindspring.com: When you say consulting a specialist product: what is that? Did you contact IBM for assistance? Why are you cancelling TCPIP? Is there a reason you cannot stop it normally? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Grillo Paul Sent: Monday, May 13, 2013 3:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: TCPIP Problem Staff of the forum, Recently we had problems after cancel the TCPIP Trace, which was necessary to IPL the partition of the z / OS 1.11 and consulting a specialist product, it informed us that the TCPIP does not clean up memory when it is canceled and ... when it makes a start of another then this can cause problems. Anyone had this problem? Help is welcome -- Jorge Arueira Campos -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Jorge Arueira Campos Analista de Suporte Mainframe ww.tmsolutions.com.br 11 6861 4863 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ICETOOL question
Dear All
I could never thought that DFSORT should help to produce percentages of the
records...
Thank you for your (more or less tricky) help
Kind regards
Kostas
On 10 May 2013 20:10, Norbert Friemel nf.ibmm...@web.de wrote:
On Fri, 10 May 2013 08:53:40 -0500, K wrote:
Two steps:
//*
//S1 EXEC PGM=ICETOOL
//*
//TOOLMSG DD SYSOUT=*
//DFSMSGDD SYSOUT=*
//DATA DD DISP=(,PASS),
// DSN=amp;DATA,
// SPACE=(80,(10,10)),AVGREC=U,
// LRECL=80,RECFM=FB
//TOTAL DD DISP=(,PASS),
// DSN=amp;TOTAL,
// SPACE=(80,(1,1)),AVGREC=U,
// LRECL=80,RECFM=FB
//INDD *
AAA
BBB
AAA
CCC
AAA
BBB
/*
//TOOLINDD *
COPY FROM(IN) TO(DATA)
COUNT FROM(DATA) WRITE(TOTAL) TEXT('Total#,+') DIGITS(9) WIDTH(80)
/*
//*
//S2 EXEC PGM=SORT
//*
//SYSOUTDD SYSOUT=*
//SYMNOUT DD SYSOUT=*
//SORTINDD DISP=(OLD,DELETE),
// DSN=amp;DATA
//SORTOUT DD SYSOUT=*
//SYMNAMES DD DISP=(OLD,DELETE),
// DSN=amp;TOTAL
//SYSIN DD *
SORT FIELDS=(1,3,CH,A)
INREC BUILD=(1,3,+1,TO=PD,LENGTH=5,Total#,TO=PD,LENGTH=5)
SUM FIELDS=(4,5,PD)
OUTREC BUILD=(1,3,(((4,5,PD,DIV,9,5,PD),ADD,+5),DIV,+10),
EDIT=(IIIT,T%))
/*
Norbert Friemel
Hi dear all,
I would like to produce a statistic report using ICETOOL. This report
should shown the percentage of records in the file according to their
values e.g.
Input:
AAA
BBB
AAA
CCC
AAA
BBB
Output Percentages:
AAA 50,0
BBB 33,0
CCC 16,7
Is there any ICETOOL operator (like OCCUR) to find out the above
percentage? Do I have to use various INCLUDE COND and then read the DFSMSG
to extract percentages (from ICE054I 0 RECORDS - IN: xxx, OUT: yyy) ?
Thanks in advance
Kzafirop at gmail dot com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ML1 to ML2
Allan, I think you mean set ML1 days equal to Primary days as there is no ML2 days parameter. Once that is done, data currently on ML1 should become eligible for migration to ML2 thus eliminating the need to issue the HLIST and subsequent HMIG / ML2 commands. Mark, What is the threshold value for your ML1 volumes? That might also be limiting your ability to migrate off of those volumes. It should be 1% as I don't think zero is valid. Thank You, Dave O'Brien NIH Contractor From: Staller, Allan [allan.stal...@kbmg.com] Sent: Monday, May 13, 2013 9:07 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ML1 to ML2 For the current ML1 data, you can issue the commands directly (hsend migrate dsn(x) ML2). There is a variation of the HSM LIST command that will show only the datasets on ML1. You will still need (at least) 1 ML1 volume if you are using the AUTODUMP feature. This is where HSM stores the VTOC copies used in volume recovery. For the data on Primary, I would set ML1 days equal to ML2 days in the Management Class definition.. HTH, snip What I want to have happen All migrations go directly to tape, no longer go to ML1 DASD. But I still have a lot of migrated data on ML1 I need to get to ML2. For that I suppose I can wait for it to roll off to ML2. I changed the TAPEMIGRATION( DIRECT) thinking that anything that migrated from this point forward would go to ML2 and not ML1. But, nope, issued an HMIG command against a dataset and it went to ML1. /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ML1 to ML2
Agreed. You are correct. I was just about to post an update. To my reponse.. Al Staller | Z Systems Programmer | KBM Group | (Tel) 972 664-3565 | allan.stal...@kbmg.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of O'Brien, David W. (NIH/CIT) [C] Sent: Monday, May 13, 2013 8:22 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ML1 to ML2 Allan, I think you mean set ML1 days equal to Primary days as there is no ML2 days parameter. Once that is done, data currently on ML1 should become eligible for migration to ML2 thus eliminating the need to issue the HLIST and subsequent HMIG / ML2 commands. Mark, What is the threshold value for your ML1 volumes? That might also be limiting your ability to migrate off of those volumes. It should be 1% as I don't think zero is valid. Thank You, Dave O'Brien NIH Contractor -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Co:z SFTP and Public/Private Key Authentication
Activate debug on both ends of connection. Here is my jcl to do that on the client side: //STEPNAME EXEC PGM=COZBATCH,REGION=0M, // PARM='ru=userid8 rh=host1.xyz.com' //STEPLIB DD DISP=SHR,DSN=UTIL.TCP.COZ.LOADLIB //STDOUT DD SYSOUT=* //STDERR DD SYSOUT=* //STDINDD DATA ssh_opts=-oStrictHostKeyChecking=no cozsftp $ssh_opts -vvv -b- $ru@$rh EOB get filename.vb //userid8.test1.txt EOB // -- Donald J. dona...@4email.net On Sun, May 12, 2013, at 10:11 PM, Roger Lowe wrote: Hi Listers, We are trying to use Co: z SFTP in batch with Public/Private key authentication and not having much success. JCL that we are using: //SFTPCAT EXEC PROC=SFTPPROC //SFTPIN DD * user=xyz host=some.host.name lzopts=mode=text ldsn=//DD:MYDD rpat=/u/abc/sftp.txt . $script_dir/sftp_cat.sh /* //MYDD DD DSN=UID.SFTPCAT.DATA,DISP=(,CATLG),UNIT=SYSDA, //DCB=(LRECL=80,RECFM=FB),SPACE=(CYL,(3,1)) (some fields have been changed to protect the innocent) . When we run the job, it produces the following error message - FOTS1373 Permission denied (publickey,password). . Have read the documentation and it is still not clear as to what we need to do to make use of private/public key authentication . Any ideas? . Thanks, Roger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- http://www.fastmail.fm - One of many happy users: http://www.fastmail.fm/help/overview_quotes.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Examing Setting Return Codes in a CLIST/MACRO
In 20130511.154412.1327...@webmail03.dca.untd.com, on 05/11/2013 at 07:44 PM, esst...@juno.com esst...@juno.com said: My question is How Do I properly Test and SET the Return Code in the EDIT MACRO LASTCC and MAXCC to test. EXIT CODE(foo) to set. Any examples would be appreciated. ISREDIT MACRO SET LROW = 00 SET LCOL = 00 SET LNUM = 00 ISPEXEC VGET (V0) SHARED ISREDIT FIND XXX ISREDIT CHANGE 'XXX' 'V0' ALL ISREDIT SUB IF LASTCC 0 THEN EXIT CODE(4) ISREDIT CAN EXIT CODE(0) -- Shmuel (Seymour J.) Metz, SysProg and JOAT Atid/2http://patriot.net/~shmuel We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ANTMAIN takes a lot of CPU
My apologies if I was not clear or if I offended you. Exessive for me was when ANTMAIN with a service class of SYSTEM took ninety percent CPU for about two minutes while the flash copies were running. Anyway the problem is solved thanks to Graham Harris. Best Regards Sheldon Davis -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Peter Relson Sent: Monday, May 13, 2013 2:42 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ANTMAIN takes a lot of CPU open can of worms When someone writes about excessive amount of CPU time, I'm always left wondering. A lot of CPU time, I understand. More than it used to, I understand. But excessive -- compared to what? If you ask for something to be done, whether explicitly or implicitly, it will take whatever amount of CPU time it takes. Maybe in the ANTMAIN case (I have no idea) you're lucky it's not done under your job and charged to you (as it perhaps could be). If you view the amount as excessive, you might choose not to do that something. The amount of processing done might be intentional and necessary. Or it might be a problem. You're of course welcome to inquire and it will be looked at. But there is no necessary correlation between inquiry and change. /end-open Peter Relson z/OS Core Technology Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TCPIP Problem
The Comm Server stack used to manage its CTRACE storage in a data space. In V1R13, this was moved to 64-bit common (HVCOMMON) storage. The data space would have been deleted when the stack address space ended, but common storage has to be explicitly freed. I have not seen this happen, but if you cancel a V1R13 (or later) stack, it's possible it could fail to free the storage. I'd be surprised to see this in anything less than a catastrophic situation, like a forced cancel, or termination at end of memory. Steven St.Jean http://sdsusa.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Grillo Paul Sent: Monday, May 13, 2013 6:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: TCPIP Problem Staff of the forum, Recently we had problems after cancel the TCPIP Trace, which was necessary to IPL the partition of the z / OS 1.11 and consulting a specialist product, it informed us that the TCPIP does not clean up memory when it is canceled and ... when it makes a start of another then this can cause problems. Anyone had this problem? Help is welcome -- Jorge Arueira Campos Analyst supports mainframe ww.tmsolutions.com.br 55 11 96861 4863 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Business politics and software development
Plus ça change, plus c'est la même chose. This is a pervasive mainframe problem too. I have not heard the term used recently, but for obvious reasons IBM marketing people used to prize what they called 'hardware hawks' very highly. A hardware hawk was a customer executive whose unvarying response to any and all problems was to throw more hardware at them. In the short term this tactic often works. In the slightly longer term its use yields systems that become progressively harder and harder to maintain and all but impossible to replace. Looking at the litany of vulnerabilities documented in the posts I receive from us-cert.gov has convinced me that almost every application and all systems software needs to be rewritten ab initio. They were designed, to the extent that they were designed, in a simpler time. They reflect the assumption that most of their users will be benign, with only a few being prerternaturally stupid and a few others bent on theft. The only appropriate assumption now is that all users are bent upon subverting and/or destroying the systems they use. This assumption is of course hyperbolic: some users will always be too lazy or too unimaginative to do much damage. It is nevertheless necessary. The work of Rufus Isaacs on aircraft-collision avoidance, which I have mentioned here before, is highly instructive. He found that the only safe collision-avoidance strategies for aircraft A in an air space also occupied by aircrafts B, C, D, . . . were based upon the assumption they were hellbent on colliding suicidally with it. This weekend, for the first time in a very long time, I looked at a stream of problem reports for a compiler. (It was a C compiler, but that is not important.) What struck me about them was that most of those that involved syntactically constructs reflected 'bizarre' uses of the language that would not occur to anyone who was proficient in it. The only way to cope with such deficiencies is to generate syntactically correct constructs, however absurd, mechanically/programmatically for testing. Here, as elsewhere, malice and ignorance are often very difficult to disentangle. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ANTMAIN takes a lot of CPU
The word excessive is sometimes, I think, legitimate shorthand for unexpectedly large in comparison with what has been the case. It is important is to remember that excess is symptomatic. It identifies something unfortunate that has happened. The question who is be blamed for that thing, when it is meaningful at all, is a different one that may, often does, have an answer that is not the obvious one. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Business politics and software development
They reflect the assumption that most of their users will be benign, with only a few being preternaturally stupid I think most systems have been written with the assumption that most users were folks like us. (Trusted, professional, benign, reasonably knowledgeable.) Now nearly every system is to some extent accessible to every bad guy in a basement in Russia. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John Gilmore Sent: Monday, May 13, 2013 10:47 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Business politics and software development Plus ça change, plus c'est la même chose. This is a pervasive mainframe problem too. I have not heard the term used recently, but for obvious reasons IBM marketing people used to prize what they called 'hardware hawks' very highly. A hardware hawk was a customer executive whose unvarying response to any and all problems was to throw more hardware at them. In the short term this tactic often works. In the slightly longer term its use yields systems that become progressively harder and harder to maintain and all but impossible to replace. Looking at the litany of vulnerabilities documented in the posts I receive from us-cert.gov has convinced me that almost every application and all systems software needs to be rewritten ab initio. They were designed, to the extent that they were designed, in a simpler time. They reflect the assumption that most of their users will be benign, with only a few being prerternaturally stupid and a few others bent on theft. The only appropriate assumption now is that all users are bent upon subverting and/or destroying the systems they use. This assumption is of course hyperbolic: some users will always be too lazy or too unimaginative to do much damage. It is nevertheless necessary. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Business politics and software development
On Mon, 13 May 2013 10:46:45 -0400, John Gilmore wrote: The work of Rufus Isaacs on aircraft-collision avoidance, which I have mentioned here before, is highly instructive. He found that the only safe collision-avoidance strategies for aircraft A in an air space also occupied by aircrafts B, C, D, . . . were based upon the assumption they were hellbent on colliding suicidally with it. The John Madden / Isaac Asimov corollary: If any of B, C, D, has a higher maximum airspeed and higher operational ceiling than A, there is no safe strategy for A. This weekend, for the first time in a very long time, I looked at a stream of problem reports for a compiler. (It was a C compiler, but that is not important.) What struck me about them was that most of those that involved syntactically constructs reflected 'bizarre' uses of the language that would not occur to anyone who was proficient in it. Plus those that would occur only to someone who was proficient in it. (Or is that what you meant to say?) The only way to cope with such deficiencies is to generate syntactically correct constructs, however absurd, mechanically/programmatically for testing. Here, as elsewhere, malice and ignorance are often very difficult to disentangle. Fuzz testing. Black Team. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Business politics and software development
Paul Gilmartin wrote: begin extract Plus those that would occur only to someone who was proficient in it. (Or is that what you meant to say?) /end extract I said what I meant to say. At least some of the developers of a compiler for language L are usually proficient in it. In my experienced highly nuanced tests of notional 'misuse' of a language by those proficient in it are usually made by the developers of a a compiler for it. (This sort of thing can even, and in my view often does, go too far in the name of 'strong typing'.) What get short shrift are tests of constructs that would never occur to someone who is proficient in language L. Anachronistic criticism of past design decisions is not, of course, what I had in mind. The inventor of the nul-delimited string cannot reasonably be blamed for the misuses of it that hackers now make. Those who continue to externalize them can properly and should be so blamed. We live in an irrevocably changed world. There will be no return to Arcadia. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ANTMAIN takes a lot of CPU
I understand the root cause of this issue (which is essentially repetitive parallel execution of large numbers of SRBs within ANTMAIN when flashcopy eligibility/pairing checking is applied against very large numbers of volumes) is recognised, and is intended to be addressed in a future version of z/OS. The way to avoid ANTMAIN CPU spikes for the time being, appears to be to make the eligible volume target list as small as possible, or turn off the flashcopy 'trigger' in whatever software you are using (assuming you don't actually need flashcopy of course!) On 13 May 2013 16:37, John Gilmore jwgli...@gmail.com wrote: The word excessive is sometimes, I think, legitimate shorthand for unexpectedly large in comparison with what has been the case. It is important is to remember that excess is symptomatic. It identifies something unfortunate that has happened. The question who is be blamed for that thing, when it is meaningful at all, is a different one that may, often does, have an answer that is not the obvious one. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ANTMAIN takes a lot of CPU
Since no one has asked yet, I will. Is SYSTEM the appropriate level of priority for this task? I don't have any flashcopy here, so I have no experience or even knowledge of all that ANTMAIN does. Dave Gibney Information Technology Services Washington State University -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Graham Harris Sent: Monday, May 13, 2013 11:38 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ANTMAIN takes a lot of CPU I understand the root cause of this issue (which is essentially repetitive parallel execution of large numbers of SRBs within ANTMAIN when flashcopy eligibility/pairing checking is applied against very large numbers of volumes) is recognised, and is intended to be addressed in a future version of z/OS. The way to avoid ANTMAIN CPU spikes for the time being, appears to be to make the eligible volume target list as small as possible, or turn off the flashcopy 'trigger' in whatever software you are using (assuming you don't actually need flashcopy of course!) On 13 May 2013 16:37, John Gilmore jwgli...@gmail.com wrote: The word excessive is sometimes, I think, legitimate shorthand for unexpectedly large in comparison with what has been the case. It is important is to remember that excess is symptomatic. It identifies something unfortunate that has happened. The question who is be blamed for that thing, when it is meaningful at all, is a different one that may, often does, have an answer that is not the obvious one. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: TCPIP Problem
A large cognac please. En réponse à Grillo Paul arue...@gmail.com : -- Début du message d'origine Thank Steven for his explanations. I'am not TCPIP team, I get better information about the problem that led us to having to IPL the LPAR, which was later contacted the specialist non-IBM product, that vacation in Greece , said he had warned the team that could not cancel TCPIP TRACE underway. Now after this tragic extent of taking out the LPAR, we are more apt to not let that happen again, because it caused huge financial losses to the company.. Jorge Arueira Campos Analista de Suporte Mainframe ww.tmsolutions.com.br 55 11 96861 4863 arue...@gmail.com https://www.facebook.com/groups/165496453567866/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN --- Fin du message d'origine - www.lavache.com : l'email gratuit sans pub, vachement meuh. www.hugolescargot.com : coloriage, fiches recettes et bricolage, chansons, etc. www.jeux-gratuits.com : des jeux en ligne pour toute la famille. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ANTMAIN takes a lot of CPU
ANTMAIN is one of the tasks IBM automatically assigns to SYSTEM, iirc. So, if this is (still) true, the answer is YES. - Ted MacNEIL eamacn...@yahoo.ca Twitter: @TedMacNEIL -Original Message- From: Gibney, Dave gib...@wsu.edu Sender: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Date: Mon, 13 May 2013 18:49:52 To: IBM-MAIN@LISTSERV.UA.EDU Reply-To: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ANTMAIN takes a lot of CPU Since no one has asked yet, I will. Is SYSTEM the appropriate level of priority for this task? I don't have any flashcopy here, so I have no experience or even knowledge of all that ANTMAIN does. Dave Gibney Information Technology Services Washington State University -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Graham Harris Sent: Monday, May 13, 2013 11:38 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ANTMAIN takes a lot of CPU I understand the root cause of this issue (which is essentially repetitive parallel execution of large numbers of SRBs within ANTMAIN when flashcopy eligibility/pairing checking is applied against very large numbers of volumes) is recognised, and is intended to be addressed in a future version of z/OS. The way to avoid ANTMAIN CPU spikes for the time being, appears to be to make the eligible volume target list as small as possible, or turn off the flashcopy 'trigger' in whatever software you are using (assuming you don't actually need flashcopy of course!) On 13 May 2013 16:37, John Gilmore jwgli...@gmail.com wrote: The word excessive is sometimes, I think, legitimate shorthand for unexpectedly large in comparison with what has been the case. It is important is to remember that excess is symptomatic. It identifies something unfortunate that has happened. The question who is be blamed for that thing, when it is meaningful at all, is a different one that may, often does, have an answer that is not the obvious one. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Co:z SFTP and Public/Private Key Authentication
Agreed - it would be nice if TSO OMVS had a solution for masking passwords, but it doesn't. In the mean time, it is silly to completely disable the ssh client under TSO OMVS - it would suffice to simply disable password-interactive mode under the Ported Tools ssh client if a tty that doesn't support masking is detected. BTW - I always use an ssh telnet shell under z/OS rather than TSO OMVS, which is brain-dead by comparison ( IMO :-) Kirk Wolf Dovetailed Technologies http://dovetail.com On Mon, May 13, 2013 at 8:43 AM, Paul Gilmartin paulgboul...@aim.comwrote: On Mon, 13 May 2013 09:04:28 -0400, Steve Goetze wrote: ... the Ported Tools SSH client can't be run under OMVS, ... I understand that the (only?) reason for this limitation is that (3270) OMVS doesn't correctly mask passwords being entered. If so, why doesn't IBM repair the defect in OMVS (which can affect programs other than SSH, even outside SSL) rather than restricting the function of SSH? Conway's Law, again? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
ICSF master keys at DR site
I'm pretty sure I know the answer (no), but I just want to make sure. Is there any method other than loading the original key parts that one can load the current production keys into a cryptocard at another (DR) site? No TKE available, if that makes a difference. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ICSF master keys at DR site
W dniu 2013-05-13 23:18, Frank Swarbrick pisze: I'm pretty sure I know the answer (no), but I just want to make sure. Is there any method other than loading the original key parts that one can load the current production keys into a cryptocard at another (DR) site? For master key, NO. No TKE available, if that makes a difference. No, it doesn't. BTW: depending on your DR scenario, loading master keys may be a part of DR preparation recipe. -- Radoslaw Skorupka Lodz, Poland -- Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax +48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. Wedug stanu na dzie 01.01.2013 r. kapita zakadowy BRE Banku SA (w caoci wpacony) wynosi 168.555.904 zotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Catalog interface question IGGCSI00 question
Hi Using the catalog interface program IGGCSI00 And say I am looking for all SYS1.*. Datasets then CSIRESNM. = CL44'SYS1.*' ? Thanks Sent from my iPhone -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog interface question IGGCSI00 question
I believe you should use CSIFILTK instead of CSIRESNM. Look at the complete documentation of Catalog Search Interface User's Guide. Check section 11.3 which explains Selection Criteria Fields along with examples. http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DGT2C191/11.0 Kolusu IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu wrote on 05/13/2013 03:30:08 PM: From: Micheal Butz michealb...@optonline.net To: IBM-MAIN@listserv.ua.edu, Date: 05/13/2013 03:30 PM Subject: Catalog interface question IGGCSI00 question Sent by: IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu Hi Using the catalog interface program IGGCSI00 And say I am looking for all SYS1.*. Datasets then CSIRESNM. = CL44'SYS1.*' ? Thanks Sent from my iPhone -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Co:z SFTP and Public/Private Key Authentication
On Mon, 13 May 2013 15:15:06 -0500, Kirk Wolf wrote: Agreed - it would be nice if TSO OMVS had a solution for masking passwords, but it doesn't. Long ago, before SSL was available, I went to PMR with this. I even used the magic word, security. I reported it as a problem with stty -echo, and said that I thought the root cause was in tcsetattr(). Guess what? IBM patched stty -echo and left tcsetattr() broken. They may have made a collateral comment that I should be using getpass() instead. In the mean time, it is silly to completely disable the ssh client under TSO OMVS - it would suffice to simply disable password-interactive mode under the Ported Tools ssh client if a tty that doesn't support masking is detected. agreed. BTW - I always use an ssh telnet shell under z/OS rather than TSO OMVS, which is brain-dead by comparison ( IMO :-) What!? Have you no respect for the many decades of rich tradition behind the 3270? And scant appreciation for ISPF and OEDIT and OBROWSE? What do your peers think? Can you not at least use an editor that emulates the behavior of ISPF? You seem to be as much a masochist as John M. VM VTAM allows a session to wait concurrently for terminal output and for keyboard input. Porting that technology to TSO OMVS would eliminate the need for the infuriating RUNNING/INPUT toggle and elevate TSO OMVS from brain-dead to merely comatose. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ANTMAIN takes a lot of CPU
Since no one has asked yet, I will. Is SYSTEM the appropriate level of priority for this task? I don't have any flashcopy here, so I have no experience or even knowledge of all that ANTMAIN does. Regardless if you use flashcopy or not, you'll have an ANTMAIN address space automatically started at IPL (and an ANTAS000). And SYSTEM is where the SPM rule in WLM puts it, so it must be on the list IBM maintains that puts things into SYSTEM. Not sure if that can be overwritten, though. (I do know that you cannot force CONSOLE out of SYSTEM anymore, and a good thing, too!) Barbara -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Co:z SFTP and Public/Private Key Authentication
Steve, Thank you for the info - the problem was related to permission settings on the users directory... Thanks, Roger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
