REXX exec, To compile or not to compile
Hi all Is there any performance benefit of compiling our frequently REXX execs? Kind regards Kostas -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
SSD tiering benefits
Dear Listers, We are thinking to implement storage tiering using some SSD volumes for some of our very active DB2 tablespaces. Is there any way to measure performance improvements for both CPU and IO utilization? Do you have any experience on tiering with SSD in DB2 environment? Kind regards Kostas -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX exec, To compile or not to compile
Hi, Yes if you have a lot of rexx-pure executing code. If you have a many host commands intermingled with the code it's probably not much benefits. It depends of how much of the processing is done in the rexx code. Regards Thomas Berg Thomas Berg Specialist z/OS\RQM\IT Delivery SWEDBANK AB (Publ) -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of K Sent: Wednesday, August 07, 2013 9:51 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: REXX exec, To compile or not to compile Hi all Is there any performance benefit of compiling our frequently REXX execs? Kind regards Kostas -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX exec, To compile or not to compile
Agree with Thomas On the REXX compiler installation, you find some compute intensive samples. Here we got the CPU speed 1 - 7 for the compiled REXX code I didn't see any official performance compare between compiled and interpreted code. Maybe a point would be to minimize the called external REXX functions. On 07.08.2013 11:06, Thomas Berg wrote: Hi, Yes if you have a lot of rexx-pure executing code. If you have a many host commands intermingled with the code it's probably not much benefits. It depends of how much of the processing is done in the rexx code. Regards Thomas Berg Thomas Berg Specialist z/OS\RQM\IT Delivery SWEDBANK AB (Publ) -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of K Sent: Wednesday, August 07, 2013 9:51 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: REXX exec, To compile or not to compile Hi all Is there any performance benefit of compiling our frequently REXX execs? Kind regards Kostas -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Kind regards, / Mit freundlichen Grüßen Miklos Szigetvari Research Development ISIS Papyrus Europe AG Alter Wienerweg 12, A-2344 Maria Enzersdorf, Austria T: +43(2236) 27551 333, F: +43(2236)21081 E-mail: miklos.szigetv...@isis-papyrus.com Info: i...@isis-papyrus.com Hotline: +43-2236-27551-111 Visit our brand new extended Website at www.isis-papyrus.com --- This e-mail is only intended for the recipient and not legally binding. Unauthorised use, publication, reproduction or disclosure of the content of this e-mail is not permitted. This email has been checked for known viruses, but ISIS Papyrus accepts no responsibility for malicious or inappropriate content. --- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SSD tiering benefits
What tools do you have? Do you have SAS SAS/MXG SAS/MICS, Omegamon (Tivoli), DISK Magic, etc... What version of z/OS, DB2? What hardware is used? EMC (VMAX, other), HDS, IBM? RMF which creates the Type 70 records, should contain some of the information you are looking for. Do you have experience in Performance analysis? If you do, what tools do you normally use? What will you be using for tiering? Each hardware vendors have their own tiering solutions. I think DISK magic (fee product) by Intellimagic can do what if analysis. My understanding is that Tiering is used to move less active data to slower devices inside a storage array and put highly accessed data on faster devices in the array. That tiering is used to smooth out the hot spots in the array itself. Or move data from more expensive storage (SSD) to less expensive (SATA) devices within the array. So is your issue hot spots in the array and DB2 requires better performance (1 ms or less per transaction)? Are you mixing SSD to SATA type devices and want to ensure high access data is on the fast device? What is the problem you are trying to solve with SSD drives? Do you use DFHSM and DFSMS to manage your storage? Do you have a mixed DFSMS pool with both Spinning and SSD disks? Is the SMS pool a pure DB2 table pool or share with non-VSAM? Are your DB2 Tables currently on SSD or spinning disks? Or on mixed devices? Do you use your Storage groups to direct your DB2 tables to SSD? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of K Sent: Wednesday, August 07, 2013 1:28 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SSD tiering benefits Dear Listers, We are thinking to implement storage tiering using some SSD volumes for some of our very active DB2 tablespaces. Is there any way to measure performance improvements for both CPU and IO utilization? Do you have any experience on tiering with SSD in DB2 environment? Kind regards Kostas -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX exec, To compile or not to compile
Yes, but modest. Others have pointed out the issue of external calls. I would also point out the issue of potential gain. If the Rexx exec currently takes .1 seconds to run, exactly how much are you likely to gain from compiling it? Also note that unlike what your expectations may be, compiled Rexx code requires a separately-licensed run-time library. It will run without it, but it runs in interpreted mode, so there is ZERO gain no matter what the code is like. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of K Sent: Wednesday, August 07, 2013 3:51 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: REXX exec, To compile or not to compile Hi all Is there any performance benefit of compiling our frequently REXX execs? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX exec, To compile or not to compile
I thought there were 2 versions of the runtime system for REXX. One that was free and one you paid for and therefore licensed. If this is still true, I suspect the differences between the two versions is related to either tighter code, more functions or both. I've truly never checked it out. I was under the impression that you can compile your REXX code and then distribute it license free with the alternate REXX library. Once thing that I have found is that compiled REXX cannot be run under IPCS. I have not heard if that has changed. Anyone know if it has? Chuck Charles (Chuck) Hardee Senior Systems Engineer/Database Administration CCG Information Technology Thermo Fisher Scientific 300 Industry Drive Pittsburgh, PA 15275 Direct: 724-517-2633 FAX: 412-490-9230 chuck.har...@thermofisher.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Charles Mills Sent: Wednesday, August 07, 2013 6:51 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: REXX exec, To compile or not to compile Yes, but modest. Others have pointed out the issue of external calls. I would also point out the issue of potential gain. If the Rexx exec currently takes .1 seconds to run, exactly how much are you likely to gain from compiling it? Also note that unlike what your expectations may be, compiled Rexx code requires a separately-licensed run-time library. It will run without it, but it runs in interpreted mode, so there is ZERO gain no matter what the code is like. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of K Sent: Wednesday, August 07, 2013 3:51 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: REXX exec, To compile or not to compile Hi all Is there any performance benefit of compiling our frequently REXX execs? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX exec, To compile or not to compile
On 8/7/2013 7:21 AM, Hardee, Chuck wrote: I thought there were 2 versions of the runtime system for REXX. One that was free and one you paid for and therefore licensed. If this is still true, I suspect the differences between the two versions is related to either tighter code, more functions or both. I've truly never checked it out. I was under the impression that you can compile your REXX code and then distribute it license free with the alternate REXX library. I worked for an ISV with programs in mixed mode (REXX and HLASM). My boss asked me the same question, with the intent of protecting intellectual property by not distributing source. The alternate REXX library is distributed as part of the system, hence available to all customers. As it turns out, the compiled module is bi-modal; when the installation is licensed for either the REXX compiler or only the chargeable library, then programs may run faster. But each compiled module also contains the original, parameterized source, able to run on unlicensed systems. A determined user could reverse engineer the code, so we saw no business case; a licensed user still had the option of compiling. Misusing the source was made trivially more difficult with a conversion program that eliminated all extraneous blanks and comments. Gerhard Postpischil Bradford, Vermont -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: C issue - 'struct stat'
On Tue, 6 Aug 2013 12:39:09 +0800, David Crayford wrote: I've always liked the nice abstraction with the z/OS C/C++ FILE I/O implementation. fopen() is a factory function which returns a semi-opaque structure with two function pointers to read/write routines (methods) which handle all the different access methods (QSAM, BSAM, VSAM, UNIX, Hiperspaces etc). It's a good design and an example of OO done well in C using pointers in structs ;). In fact, in Assembler the DCB has much this character. OPEN updates the DCB by adding pointers to the access method entry points. Alas, IBM developers abandoned this paradigm. One writes to the operator's console not using QSAM, but WTO; one writes to the TSO terminal not using QSAM to SYSTSPRT, but TPUT. And I believe I have evidence that FTP given the DD: construct does not Do the Right Thing of OPENing a DCB on that DDNAME, but chases control blocks to suss out the underlying object and performs its own allocation, probably thwarting any attempt of the caller to override attributes, etc. On Wed, 26 Jun 2013 07:33:40 -0400, Shmuel Metz (Seymour J.) wrote: What went wrong? It started early: George Mealy is alleged to have called it The rape of the design integrity of OS/360 and blamed it on a lack of standards enforcement. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: C issue - 'struct stat'
On 07/08/2013, at 9:34 PM, Paul Gilmartin paulgboul...@aim.com wrote: On Tue, 6 Aug 2013 12:39:09 +0800, David Crayford wrote: I've always liked the nice abstraction with the z/OS C/C++ FILE I/O implementation. fopen() is a factory function which returns a semi-opaque structure with two function pointers to read/write routines (methods) which handle all the different access methods (QSAM, BSAM, VSAM, UNIX, Hiperspaces etc). It's a good design and an example of OO done well in C using pointers in structs ;). In fact, in Assembler the DCB has much this character. OPEN updates the DCB by adding pointers to the access method entry points. Shame it doesn't support VSAM. Or maybe ACB should support QSAM, BSAM etc. Alas, IBM developers abandoned this paradigm. One writes to the operator's console not using QSAM, but WTO; one writes to the TSO terminal not using QSAM to SYSTSPRT, but TPUT. And I believe I have evidence that FTP given the DD: construct does not Do the Right Thing of OPENing a DCB on that DDNAME, but chases control blocks to suss out the underlying object and performs its own allocation, probably thwarting any attempt of the caller to override attributes, etc. I prefer the UNIX philosophy where everything is a file. Programming is difficult enough without inconsistent interfaces. On Wed, 26 Jun 2013 07:33:40 -0400, Shmuel Metz (Seymour J.) wrote: What went wrong? It started early: George Mealy is alleged to have called it The rape of the design integrity of OS/360 and blamed it on a lack of standards enforcement. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX exec, To compile or not to compile
This is from the REXX user guide: The performance improvements that you can expect when you run compiled REXX programs depend on the type of program. A program that performs large numbersof arithmetic operations of default precision shows the greatest improvement. Aprogram that mainly issues commands to the host shows limited improvement,because REXX cannot decrease the time taken by the host to process the commands. Compiled programs that include many ...Run this much faster:Arithmetic operations, string and word processing operations: .6 to 10 timesConstants and variables,references to procedures and built-in functions, changes to values of variables: .4 to 6 times Assignments, reused compound variables: .2 to 4 timesHost commands: .minimal improvement Hope that helps, Dave Salt SimpList(tm) - try it; you'll get it! http://www.mackinney.com/products/program-development/simplist.html Date: Wed, 7 Aug 2013 09:02:58 -0400 From: gerh...@valley.net Subject: Re: REXX exec, To compile or not to compile To: IBM-MAIN@LISTSERV.UA.EDU On 8/7/2013 7:21 AM, Hardee, Chuck wrote: I thought there were 2 versions of the runtime system for REXX. One that was free and one you paid for and therefore licensed. If this is still true, I suspect the differences between the two versions is related to either tighter code, more functions or both. I've truly never checked it out. I was under the impression that you can compile your REXX code and then distribute it license free with the alternate REXX library. I worked for an ISV with programs in mixed mode (REXX and HLASM). My boss asked me the same question, with the intent of protecting intellectual property by not distributing source. The alternate REXX library is distributed as part of the system, hence available to all customers. As it turns out, the compiled module is bi-modal; when the installation is licensed for either the REXX compiler or only the chargeable library, then programs may run faster. But each compiled module also contains the original, parameterized source, able to run on unlicensed systems. A determined user could reverse engineer the code, so we saw no business case; a licensed user still had the option of compiling. Misusing the source was made trivially more difficult with a conversion program that eliminated all extraneous blanks and comments. Gerhard Postpischil Bradford, Vermont -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: C issue - 'struct stat'
You know, IMHO IBM blew it when the 31-bit thing came along and they came up with a bunch of design patches to QSAM like the DBCE. They should have gone the file handle route where the control blocks were hidden from the using programmers. You could continue to use 24-bit DCBs as-is for as long as you liked, but if you wanted anything new you got a pointer to a control block whose exact format was DFSMS's business alone and was subject to change. If you wanted information about the dataset object that it pointed to, you called an API. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of David Crayford Sent: Wednesday, August 07, 2013 10:01 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: C issue - 'struct stat' On 07/08/2013, at 9:34 PM, Paul Gilmartin paulgboul...@aim.com wrote: On Tue, 6 Aug 2013 12:39:09 +0800, David Crayford wrote: I've always liked the nice abstraction with the z/OS C/C++ FILE I/O implementation. fopen() is a factory function which returns a semi-opaque structure with two function pointers to read/write routines (methods) which handle all the different access methods (QSAM, BSAM, VSAM, UNIX, Hiperspaces etc). It's a good design and an example of OO done well in C using pointers in structs ;). In fact, in Assembler the DCB has much this character. OPEN updates the DCB by adding pointers to the access method entry points. Shame it doesn't support VSAM. Or maybe ACB should support QSAM, BSAM etc. Alas, IBM developers abandoned this paradigm. One writes to the operator's console not using QSAM, but WTO; one writes to the TSO terminal not using QSAM to SYSTSPRT, but TPUT. And I believe I have evidence that FTP given the DD: construct does not Do the Right Thing of OPENing a DCB on that DDNAME, but chases control blocks to suss out the underlying object and performs its own allocation, probably thwarting any attempt of the caller to override attributes, etc. I prefer the UNIX philosophy where everything is a file. Programming is difficult enough without inconsistent interfaces. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX exec, To compile or not to compile
I compiled the ISPF DTL compiler which is written in REXX. It ran significantly quicker. I have EXECIO benchmarks where compiled REXX was actually slower. http://users.tpg.com.au/crayford/rexx-lua-c-io-benchmark.htm. On 07/08/2013, at 10:08 PM, Dave Salt ds...@hotmail.com wrote: This is from the REXX user guide: The performance improvements that you can expect when you run compiled REXX programs depend on the type of program. A program that performs large numbersof arithmetic operations of default precision shows the greatest improvement. Aprogram that mainly issues commands to the host shows limited improvement,because REXX cannot decrease the time taken by the host to process the commands. Compiled programs that include many ...Run this much faster:Arithmetic operations, string and word processing operations: .6 to 10 timesConstants and variables,references to procedures and built-in functions, changes to values of variables: .4 to 6 times Assignments, reused compound variables: .2 to 4 timesHost commands: .minimal improvement Hope that helps, Dave Salt SimpList(tm) - try it; you'll get it! http://www.mackinney.com/products/program-development/simplist.html Date: Wed, 7 Aug 2013 09:02:58 -0400 From: gerh...@valley.net Subject: Re: REXX exec, To compile or not to compile To: IBM-MAIN@LISTSERV.UA.EDU On 8/7/2013 7:21 AM, Hardee, Chuck wrote: I thought there were 2 versions of the runtime system for REXX. One that was free and one you paid for and therefore licensed. If this is still true, I suspect the differences between the two versions is related to either tighter code, more functions or both. I've truly never checked it out. I was under the impression that you can compile your REXX code and then distribute it license free with the alternate REXX library. I worked for an ISV with programs in mixed mode (REXX and HLASM). My boss asked me the same question, with the intent of protecting intellectual property by not distributing source. The alternate REXX library is distributed as part of the system, hence available to all customers. As it turns out, the compiled module is bi-modal; when the installation is licensed for either the REXX compiler or only the chargeable library, then programs may run faster. But each compiled module also contains the original, parameterized source, able to run on unlicensed systems. A determined user could reverse engineer the code, so we saw no business case; a licensed user still had the option of compiling. Misusing the source was made trivially more difficult with a conversion program that eliminated all extraneous blanks and comments. Gerhard Postpischil Bradford, Vermont -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: C issue - 'struct stat'
On Wed, 7 Aug 2013 10:26:56 -0400, Charles Mills wrote: You know, IMHO IBM blew it when the 31-bit thing came along and they came up with a bunch of design patches to QSAM like the DBCE. They should have gone the file handle route where the control blocks were hidden from the using programmers. You could continue to use 24-bit DCBs as-is for as long as you liked, but if you wanted anything new you got a pointer to a control block whose exact format was DFSMS's business alone and was subject to change. If you wanted information about the dataset object that it pointed to, you called an API. But still, will that be a 24-bit, a 31-bit, or a 64-bit API? UNIX and C benefit from a culture where programmers are willing to recompile in order to exploit new function, and understand the risks of meddling with opaque data objects. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: C issue - 'struct stat'
Right you are. Parenthetically, no need for a 24-bit API because the whole point would be to allow QSAM to exploit 32-bit. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Paul Gilmartin Sent: Wednesday, August 07, 2013 10:47 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: C issue - 'struct stat' On Wed, 7 Aug 2013 10:26:56 -0400, Charles Mills wrote: You know, IMHO IBM blew it when the 31-bit thing came along and they came up with a bunch of design patches to QSAM like the DBCE. They should have gone the file handle route where the control blocks were hidden from the using programmers. You could continue to use 24-bit DCBs as-is for as long as you liked, but if you wanted anything new you got a pointer to a control block whose exact format was DFSMS's business alone and was subject to change. If you wanted information about the dataset object that it pointed to, you called an API. But still, will that be a 24-bit, a 31-bit, or a 64-bit API? UNIX and C benefit from a culture where programmers are willing to recompile in order to exploit new function, and understand the risks of meddling with opaque data objects. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
RACF User ID resumed without an SMF record?
Hello group, Does anyone know of a method to resume a RACF revoked ID without having an SMF record be written? We produce a daily listing of RACF commands from our SMF type 80s (using RACFRW) and we list ADDUSER ADDGROUP ALTUSER ALTGROUP CONNECT DELUSER DELGROUP PASSWORD PERMIT RALTER RDEFINE REMOVE. We also produce a daily listing of our CICS user IDs and their RACF status. On July 8 we had a user ID on our report that was listed as REVOKED and a LAST-ACCESS date and time of 07/17/07 17:01:28. On July 9, the report showed the ID was no longer revoked and the LAST-ACCESS reported as 07/08/13 19:24:14. However, our SMF report listed no ALTUSER command or any other command against this ID. (No DELUSER or ADDUSER, for instance). I dumped the SMF records for both July 7 and July 8 and ran a RACFRW to list all the records and there is no reference to this User ID. I'm a sysprog, so I can't blame it on magic or elves - I could try blaming it on the software, but I'm finding that hard to believe - so I have to think there's something I'm missing. I've just looked at everything I know to look at. (Did someone modify SMF for a period? No. Does the COBOL program that lists the RACF users have a bug in it? No.) If anyone has a suggestion for what to look for, I'd appreciate hearing about it. Thanks, Greg Shirey Ben E. Keith Company -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF User ID resumed without an SMF record?
Greg Shirey wrote: I dumped the SMF records for both July 7 and July 8 and ran a RACFRW to list all the records and there is no reference to this User ID. From what LPARs are you collecting your records? Do you have RRSF? Do you have an IRREVX01 exit (RACF command processor exit) Do you have any password exit? Alternatively, rather use IRRADU00 for your audits. That will catch new things not possible with RACFRW. (Did someone modify SMF for a period? No. Really? Check your SMF status and check if SMFPRMxx parmlib member has been replaced/tampered? If you have audited OPERCMDS for all and any commands issued, perhaps you can catch someone who messed around with that SMF parmlib member. Think of using a phantom SMFPRMxx member and those T SMF=xx commands... If anyone has a suggestion for what to look for, I'd appreciate hearing about it. I would like to be interested of course! Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
OT? IBM licenses POWER architecture to other vendors.
http://www.phoronix.com/scan.php?page=news_itempx=MTQzMDM Kind of interesting. Hope people don't mind the fact that it is not about the z. -- As of next week, passwords will be entered in Morse code. Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF User ID resumed without an SMF record?
Ah, that is interesting. If I'm reading this correctly, I should see a type 7 record when the system loses other SMF records. So, seeing no type 7 record indicates that no records were lost. And there is no type 7 in the dump for that day. We converted to logstream recording of SMF data back in March and have not had any messages on the console about buffer shortages in SMF recording the way we did periodically when we used the VSAM files. Thanks for the info, Greg -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Klan, Rob (RET-DAY) Sent: Wednesday, August 07, 2013 11:54 AM Just a stab but maybe the below applies Record Type 7 (07) - Data Lost z/OS V1R12.0 MVS System Management Facilities (SMF) SA22-7630-22 If all SMF buffers become full (either a result of no available output data sets for SMF to write to OR the system generating records at a rate faster than SMF can physically write them), SMF data will be lost. When this condition occurs, record type 7 tracks the number of lost records. It contains a count of the SMF records that were not written and the start and end times of the period when data was lost. (The end time is the time recorded in SMF7TME at offset 6). Record type 7 is not built until SMF buffers become available again. Data existing in the SMF buffer, prior to data lost, is written to available SMF data sets before record type 7 is written to a data set. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF User ID resumed without an SMF record?
Just a stab but maybe the below applies Record Type 7 (07) - Data Lost z/OS V1R12.0 MVS System Management Facilities (SMF) SA22-7630-22 If all SMF buffers become full (either a result of no available output data sets for SMF to write to OR the system generating records at a rate faster than SMF can physically write them), SMF data will be lost. When this condition occurs, record type 7 tracks the number of lost records. It contains a count of the SMF records that were not written and the start and end times of the period when data was lost. (The end time is the time recorded in SMF7TME at offset 6). Record type 7 is not built until SMF buffers become available again. Data existing in the SMF buffer, prior to data lost, is written to available SMF data sets before record type 7 is written to a data set. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Greg Shirey Sent: Wednesday, August 07, 2013 12:33 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: RACF User ID resumed without an SMF record? Hello group, Does anyone know of a method to resume a RACF revoked ID without having an SMF record be written? We produce a daily listing of RACF commands from our SMF type 80s (using RACFRW) and we list ADDUSER ADDGROUP ALTUSER ALTGROUP CONNECT DELUSER DELGROUP PASSWORD PERMIT RALTER RDEFINE REMOVE. We also produce a daily listing of our CICS user IDs and their RACF status. On July 8 we had a user ID on our report that was listed as REVOKED and a LAST-ACCESS date and time of 07/17/07 17:01:28. On July 9, the report showed the ID was no longer revoked and the LAST-ACCESS reported as 07/08/13 19:24:14. However, our SMF report listed no ALTUSER command or any other command against this ID. (No DELUSER or ADDUSER, for instance). I dumped the SMF records for both July 7 and July 8 and ran a RACFRW to list all the records and there is no reference to this User ID. I'm a sysprog, so I can't blame it on magic or elves - I could try blaming it on the software, but I'm finding that hard to believe - so I have to think there's something I'm missing. I've just looked at everything I know to look at. (Did someone modify SMF for a period? No. Does the COBOL program that lists the RACF users have a bug in it? No.) If anyone has a suggestion for what to look for, I'd appreciate hearing about it. Thanks, Greg Shirey Ben E. Keith Company -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: C issue - 'struct stat'
On Wed, 7 Aug 2013 12:04:51 -0400, Charles Mills wrote: Parenthetically, no need for a 24-bit API because the whole point would be to allow QSAM to exploit 32-bit. Underreacher. While 32-bit may be twice as good as 31-bit, it's not nearly as good as 64-bit. Anyone who designs a new control block with less than 64-bit pointers, even for entry point addresses, is shortsighted. It'll (maybe?) happen someday. Until then, David's factory function can stuff the 64-bit pointers with addresses below-the-bar. Or am I underreaching? If the structure is truly opaque, the programmer shouldn't care (or even know) what size pointers it contains. But the API should be strictly 64-bit (until 128 looms on the horizon -- I understand ZFS is already 128-bit). And even then, the distinction should affect only Assembler programs; HLL programs should just be recompiled with the revised header files. I don't know how strongly Java is committed to 32 GiB address spaces with 32-bit pointers. Flight of fancy: If z/OS were truly well-parameterized, a designer could simply change _one_ whatever EQU 44 to whatever EQU 100 in a mapping macro and recompile the entire OS to get 100-character DSN capability. (We tried something like that with one of our products a couple decades ago. Sure enough, the hardware designers thought of a way to add an enhancement we hadn't parameterized -- something like adding a new dimension to the topology.) -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF User ID resumed without an SMF record?
Elardus, I have but one LPAR, we do not use RRSF, and we have no exits. We do use RRDF to allow for some password synchronization for those users who have multiple logons. This ID did not have a PEER, however. I tried a few experiments with the IRRADU00 utility. I haven't found any reference to this user ID yet, but will continue. Thanks for that hint - there are more tools to audit RACF than I know about. And yes, really, no one modified SMF, but thanks for asking. Regards, Greg -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Elardus Engelbrecht Sent: Wednesday, August 07, 2013 11:51 AM From what LPARs are you collecting your records? Do you have RRSF? Do you have an IRREVX01 exit (RACF command processor exit) Do you have any password exit? Alternatively, rather use IRRADU00 for your audits. That will catch new things not possible with RACFRW. snip Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
On Wed, 7 Aug 2013 11:55:07 -0500, John McKown wrote: http://www.phoronix.com/scan.php?page=news_itempx=MTQzMDM Kind of interesting. Hope people don't mind the fact that it is not about the z. Hmmm. Vaguely reminiscent of Amdahl, Fujitsu, Power Computing, and DayStar. But they probably won't license z/OS for them. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
Especially z/OS won't run on POWER. AIX, Linux, and i/OS (the IBM version, not Apple's!) are a possibility. But I doubt that IBM will license the i/OS system either. On Wed, Aug 7, 2013 at 2:07 PM, Paul Gilmartin paulgboul...@aim.com wrote: On Wed, 7 Aug 2013 11:55:07 -0500, John McKown wrote: http://www.phoronix.com/scan.php?page=news_itempx=MTQzMDM Kind of interesting. Hope people don't mind the fact that it is not about the z. Hmmm. Vaguely reminiscent of Amdahl, Fujitsu, Power Computing, and DayStar. But they probably won't license z/OS for them. -- gil -- As of next week, passwords will be entered in Morse code. Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
Especially z/OS won't run on POWER It won't run natively but could certainly run under an emulator. Bob Shannon Rocket Software -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
OK. Legally licensed? I know of only two emulators for z/Architecture. One is Hercules/390. The other is IBM's which is used on the zPDT machine (this is a guess on my part). I guess that IBM could license the zPDT, ported to POWER (AIX or Linux?). But I really doubt that they will. Futher discussion will likely devolve to previous observations about IBM's attitude about z/OS (also z/VM, z/VSE, z/TPF) running on non-z hardware. On Wed, Aug 7, 2013 at 3:14 PM, Bob Shannon bshan...@rocketsoftware.comwrote: Especially z/OS won't run on POWER It won't run natively but could certainly run under an emulator. Bob Shannon Rocket Software -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- As of next week, passwords will be entered in Morse code. Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
The z/OS V2.1 Migration PDF available
I was not sure if this had been sent out to the list. Only PDF no BOO http://publibz.boulder.ibm.com/epubs/pdf/e0z3m100.pdf The Migration PDF from z/OS V1.12 and V1.13 to V2.1 is out Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
john.archie.mck...@gmail.com (John McKown) writes: http://www.phoronix.com/scan.php?page=news_itempx=MTQzMDM Kind of interesting. Hope people don't mind the fact that it is not about the z. Folklore is that Apple moved to Intel because IBM decided to focus on servers and weren't keeping up with low-power chips for laptops and tablets. There was Somerset AIM (apple, ibm, motorola) https://en.wikipedia.org/wiki/PowerPC from above: However, toward the close of the decade, manufacturing issues began plaguing the AIM alliance in much the same way they did Motorola, which consistently pushed back deployments of new processors for Apple and other vendors: first from Motorola in the 1990s with the G3 and G4 processors, and IBM with the 64-bit G5 processor in 2003. In 2004, Motorola exited the chip manufacturing business by spinning off its semiconductor business as an independent company called Freescale Semiconductor. Around the same time, IBM exited the 32-bit embedded processor market by selling its line of PowerPC products to Applied Micro Circuits Corporation (AMCC) and focusing on 64-bit chip designs ... and ... The IBM-Freescale alliance was replaced by an open standards body called Power.org. Power.org operates under the governance of the IEEE with IBM continuing to use and evolve the PowerPC processor on game consoles and Freescale Semiconductor focusing solely on embedded devices. ... snip ... http://en.wikipedia.org/wiki/Power.org trivia, the executive we reported to when we were doing IBM's HA/CMP ... went over to head up the Somerset (Apple, IBM, and Motorola designing power/pc chips) ... he had previously come from Motorola Note that Google, part of OpenPOWER, now owns Motorola. -- virtualization experience starting Jan1968, online at home since Mar1970 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF User ID resumed without an SMF record?
On 7 August 2013, 13:34 Tony Harminc wrote: We produce a daily listing of RACF commands from our SMF type 80s (using RACFRW) and we list ADDUSER ADDGROUP ALTUSER ALTGROUP CONNECT DELUSER DELGROUP PASSWORD PERMIT RALTER RDEFINE REMOVE. We also produce a daily listing of our CICS user IDs and their RACF status. On July 8 we had a user ID on our report that was listed as REVOKED and a LAST-ACCESS date and time of 07/17/07 17:01:28. What produces this second listing? Is it possible that the REVOKED status reported the first time was actually an indication of some other reason the user would not be able to logon, e.g. being revoked at the group level or having a revoke date that has been reached? Do your SMF records show CONNECT command activity that affects the user? There are doubtless other reasons that a report might claim a userid to be revoked when the magic FLAG4 is not set. It is a COBOL program that parses the output of an LU * command. I didn't write it, but it appears that the program examines the 4th line of output for each User to see if ATTRIBUTES=REVOKED begins in column 3. It writes the information to a VSAM file and then creates the report from the data in the VSAM file. I just checked the User IDs listed as revoked on today's report, and indeed they are revoked in RACF, but I take your point - this report is probably where I need to look. Thanks, Greg -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
OK. Legally licensed? Processor speed increases have slowed and emphasis is being placed on more concurrent processes. This raises the possibility of emulating zArchitecture on Power and eliminating z-specific hardware, something that's been speculated about for years. With the hardware furloughs this week, who knows what's going to happen with IBM hardware. Bob Shannon Rocket Software -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: The z/OS V2.1 Migration PDF available
Get used to it! IBM announced EOS for BookManager Read yesterday. EOS date 11/2014. ISTR, No CD/DVD's in .boo format was announced a couple of months back Cheers, snip I was not sure if this had been sent out to the list. Only PDF no BOO http://publibz.boulder.ibm.com/epubs/pdf/e0z3m100.pdf The Migration PDF from z/OS V1.12 and V1.13 to V2.1 is out /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF User ID resumed without an SMF record?
is that lpar mirrored? any chances of command replication on this lpar? On Aug 7, 2013 10:03 PM, Greg Shirey wgshi...@benekeith.com wrote: Hello group, Does anyone know of a method to resume a RACF revoked ID without having an SMF record be written? We produce a daily listing of RACF commands from our SMF type 80s (using RACFRW) and we list ADDUSER ADDGROUP ALTUSER ALTGROUP CONNECT DELUSER DELGROUP PASSWORD PERMIT RALTER RDEFINE REMOVE. We also produce a daily listing of our CICS user IDs and their RACF status. On July 8 we had a user ID on our report that was listed as REVOKED and a LAST-ACCESS date and time of 07/17/07 17:01:28. On July 9, the report showed the ID was no longer revoked and the LAST-ACCESS reported as 07/08/13 19:24:14. However, our SMF report listed no ALTUSER command or any other command against this ID. (No DELUSER or ADDUSER, for instance). I dumped the SMF records for both July 7 and July 8 and ran a RACFRW to list all the records and there is no reference to this User ID. I'm a sysprog, so I can't blame it on magic or elves - I could try blaming it on the software, but I'm finding that hard to believe - so I have to think there's something I'm missing. I've just looked at everything I know to look at. (Did someone modify SMF for a period? No. Does the COBOL program that lists the RACF users have a bug in it? No.) If anyone has a suggestion for what to look for, I'd appreciate hearing about it. Thanks, Greg Shirey Ben E. Keith Company -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
Too true. Looks more like an Intel vs. ARM future. I'm not enough of a computer scientist to know which is better. I stopped learning the Intel architecture in the i568 time frame. I did _not_ like it. I have looked a bit at ARM and I would likely have been a RISC bigot back in the day. On Wed, Aug 7, 2013 at 3:43 PM, Bob Shannon bshan...@rocketsoftware.comwrote: OK. Legally licensed? Processor speed increases have slowed and emphasis is being placed on more concurrent processes. This raises the possibility of emulating zArchitecture on Power and eliminating z-specific hardware, something that's been speculated about for years. With the hardware furloughs this week, who knows what's going to happen with IBM hardware. Bob Shannon Rocket Software -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- As of next week, passwords will be entered in Morse code. Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
On Aug 7, 2013, at 4:08 PM, John McKown john.archie.mck...@gmail.com wrote: Too true. Looks more like an Intel vs. ARM future. I'm not enough of a computer scientist to know which is better. I stopped learning the Intel architecture in the i568 time frame. I did _not_ like it. I have looked a bit at ARM and I would likely have been a RISC bigot back in the day. I don't have strong feelings about any particular architecture, but I do think we all have a compelling interest that the number of common, commercially available hardware architectures be greater than one. In fact, I think three would be better than two, so if IBM can reignite interest in the Power architecture, then good. -- Curtis Pew (c@its.utexas.edu) ITS Systems Core The University of Texas at Austin -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OT? IBM licenses POWER architecture to other vendors.
On Wed, 7 Aug 2013 20:14:06 +, Bob Shannon wrote: Especially z/OS won't run on POWER It won't run natively but could certainly run under an emulator. OK. And I had been misled by chatter I had heard, possibly about the ECLipz endeavor, the rebuttal of which I failed to notice, to misbelieve the z has Power at its heart. Perhaps I'm better now that I looked deeper in Wikipedia. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Panel Graphics - Dynamic Area Question
Group,
I took out all the x'70' stuff. It looks like it works if you have the
right terminal settings. I had to adjust the width to get it to format
correctly.
/* REXX */
address ISPEXEC CONTROL ERRORS RETURN
S = '0123456789ABCDEF'
H = ''
do i1 = 1 by 1 to 16
do i2 = 1 by 1 to 16
n = SUBSTR(S,i1,1) || SUBSTR(S,i2,1)
H = H || x2c(n) || ' '
end
end
A = H
X = H
B = COPIES('G',512)
Y = COPIES('g',512)
address ISPEXEC VPUT (A B X Y)
address ISPEXEC CONTROL DISPLAY REFRESH
address ISPEXEC DISPLAY PANEL(GRAPHESC)
exit
)ATTR
% TYPE(TEXT)COLOR(WHITE)
* TYPE(TEXT)COLOR(TURQ)
+ TYPE(TEXT)COLOR(BLUE)
# TYPE(TEXT)COLOR(TURQ) HILITE(REVERSE)
$ AREA(DYNAMIC) SCROLL(OFF) EXTEND(OFF)
? AREA(DYNAMIC) SCROLL(OFF) EXTEND(OFF)
g TYPE(CHAR)INTENS(HIGH) COLOR(GREEN) GE(OFF)
G TYPE(CHAR)INTENS(HIGH) COLOR(GREEN) GE(ON)
)BODY
+
+# Displayable Characters In Graphical Escape Mode +
+
+ *Graphical Escape%OFF+*Graphical Escape%ON+
+
+0 1 2 3 4 5 6 7 8 9 A B C D E F 0 1 2 3 4 5 6 7 8 9 A B C D E F
+ +---+ +---+
+ 0+|$A,B $+| 0+|?X,Y ?+| 0
+ 1+|$ $+| 1+|? ?+| 1
+ 2+|$ $+| 2+|? ?+| 2
+ 3+|$ $+| 3+|? ?+| 4
+ 4+|$ $+| 4+|? ?+| 5
+ 5+|$ $+| 5+|? ?+| 6
+ 6+|$ $+| 6+|? ?+| 7
+ 7+|$ $+| 7+|? ?+| 8
+ 8+|$ $+| 8+|? ?+| 9
+ 9+|$ $+| 9+|? ?+| 0
+ A+|$ $+| A+|? ?+| A
+ B+|$ $+| B+|? ?+| B
+ C+|$ $+| C+|? ?+| C
+ D+|$ $+| D+|? ?+| D
+ E+|$ $+| E+|? ?+| E
+ F+|$ $+| F+|? ?+| F
+ +---+ +---+
+
+
)END
Displayable Characters In Graphical Escape Mode
Graphical Escape OFF Graphical Escape ON
0 1 2 3 4 5 6 7 8 9 A B C D E F 0 1 2 3 4 5 6 7 8 9 A B C D E F
--- ---
0 |- - | 0 | . . . . . . . . . . . . . . . | 0
1 | | 1 |. . . . . . . . . . . . . . . . | 1
2 | | 2 |. . . . . . . . . . . . . . . . | 2
3 | | 3 |. . . . . . . . . . . . . . . . | 4
4 | a b c d e f g h i - - - - - - | 4 | . . . . . . . . . ¢ . ( + | | 5
5 |- j k l m n o p q r - - - - - - | 5 | . . . . . . . . . ! $ * ) ; ¬ | 6
6 |- - s t u v w x y z - - - - - - | 6 |- / . . . . . . . . ¦ , % _ ? | 7
7 |Ø § þ Õ Ð Ñ € ë - - - - - - - | 7 |. . . . . . . . . ` : # @ ' = | 8
8 |~ † ƒ ‚ … ³ - - - - Æ Ç ó © ¾ ¸ | 8 |. a b c d e f g h i . . . . . . | 9
9 | Ý Þ ß Ü Û - - - - ã â ‡ ê ˆ ½ | 9 |. j k l m n o p q r . . . . . . | 0
A |ý ‰ Ä Š ‹ - - - - - ï ¬ Ž ò ø | A |. ~ s t u v w x y z . . . . . . | A
B |à î ì æ ù - õ \ ö - · ¶ ˜ ô | | B |. . . . . . . . . . . . . . . . | B
C |{ ¨ ± ¦ À Ú Ã Á “ - å ç Ó è Ô í | C |{ A B C D E F G H I . . . . . . | C
D |} ° ² Å Ù ¿ ´ Â ” - Ÿ ! ü û ‘ ä | D |} J K L M N O P Q R . . . . . . | D
E |Ï • – — - - - - - - ð ñ Ò é ’ ® | E |\ . S T U V W X Y Z . . . . . . | E
F |™ š ž ¡ ¢ £ ¤ ¥ « - ú ÷ µ ¯| F |0 1 2 3 4 5 6 7 8 9 . . . . . . | F
--- ---
Later, Dave
-Original Message-
From: Hansen, Dave L - Eagan, MN
Sent: Monday, August 05, 2013 1:20 PM
To: isp...@listserv.nd.edu
Subject: RE: Panel Graphics - Dynamic Area Question
Dear Group,
I tried to get this to work but I haven't used a Dynamic Area before. I
looked at: z/OS V1R13.0 ISPF Dialog Developer's Guide and Reference. I didn't
find too much on Dynamic Area examples. I searched SISPSAMP for
AREA(DYNAMIC) and didn't get a hit.
Q). Does the AREA(DYNAMIC) need to be specified twice on the same line with
different attrchars?
When I change my attrchars $ and ? to TYPE(TEXT) COLOR(RED) I do not
get an error. Otherwise I get an RC 20 (Severe error.). By trial and error I
removed enough to get my panel to display without a sever error.
Q). Is there an easy way to identify what is
Re: RACF User ID resumed without an SMF record?
On Wed, 7 Aug 2013 11:33:24 -0500, Greg Shirey wgshi...@benekeith.com wrote: Does anyone know of a method to resume a RACF revoked ID without having an SMF record be written? An APF-authorized program can use ICHEINTY or RACROUTE REQUEST=EXTRACT,TYPE=REPLACE to resume a user ID, and neither will cut an SMF record. ...snipped... We also produce a daily listing of our CICS user IDs and their RACF status. On July 8 we had a user ID on our report that was listed as REVOKED and a LAST-ACCESS date and time of 07/17/07 17:01:28. It had not been used in 6 years? Or was there a typo in there? On July 9, the report showed the ID was no longer revoked and the LAST-ACCESS reported as 07/08/13 19:24:14. However, our SMF report listed no ALTUSER command or any other command against this ID. (No DELUSER or ADDUSER, for instance). In theory the user ID could have been defined with a resume date of July 8, 2013, and if the user tried to logon on or after that date it would automatically become resumed. You would have whatever logon auditing you normally have, but no command records. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: REXX exec, To compile or not to compile
Yes if you have a lot of rexx-pure executing code. If you have a many host commands intermingled with the code it's probably not much benefits. I wanted to ask, where is EXECIO in the picture and how is it compares with using stream Thanks ZA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF User ID resumed without an SMF record?
That is only one issue of screen scraping which we have talked on here before. Its like trying to take an IDCAMS listing and parse it out to be more user friendly. It works great until IBM changes it. IOW its not a programmed interface that IBM is willing to advertise. Ed On Aug 7, 2013, at 3:41 PM, Greg Shirey wrote: On 7 August 2013, 13:34 Tony Harminc wrote: We produce a daily listing of RACF commands from our SMF type 80s (using RACFRW) and we list ADDUSER ADDGROUP ALTUSER ALTGROUP CONNECT DELUSER DELGROUP PASSWORD PERMIT RALTER RDEFINE REMOVE. We also produce a daily listing of our CICS user IDs and their RACF status. On July 8 we had a user ID on our report that was listed as REVOKED and a LAST-ACCESS date and time of 07/17/07 17:01:28. What produces this second listing? Is it possible that the REVOKED status reported the first time was actually an indication of some other reason the user would not be able to logon, e.g. being revoked at the group level or having a revoke date that has been reached? Do your SMF records show CONNECT command activity that affects the user? There are doubtless other reasons that a report might claim a userid to be revoked when the magic FLAG4 is not set. It is a COBOL program that parses the output of an LU * command. I didn't write it, but it appears that the program examines the 4th line of output for each User to see if ATTRIBUTES=REVOKED begins in column 3. It writes the information to a VSAM file and then creates the report from the data in the VSAM file. I just checked the User IDs listed as revoked on today's report, and indeed they are revoked in RACF, but I take your point - this report is probably where I need to look. Thanks, Greg -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF User ID resumed without an SMF record?
I agree, even though we have code which is similar. If I wrote it today, I'd use IRRXUTIL to get that data using a REXX program. On Aug 7, 2013 11:32 PM, Ed Gould edgould1...@comcast.net wrote: That is only one issue of screen scraping which we have talked on here before. Its like trying to take an IDCAMS listing and parse it out to be more user friendly. It works great until IBM changes it. IOW its not a programmed interface that IBM is willing to advertise. Ed On Aug 7, 2013, at 3:41 PM, Greg Shirey wrote: On 7 August 2013, 13:34 Tony Harminc wrote: We produce a daily listing of RACF commands from our SMF type 80s (using RACFRW) and we list ADDUSER ADDGROUP ALTUSER ALTGROUP CONNECT DELUSER DELGROUP PASSWORD PERMIT RALTER RDEFINE REMOVE. We also produce a daily listing of our CICS user IDs and their RACF status. On July 8 we had a user ID on our report that was listed as REVOKED and a LAST-ACCESS date and time of 07/17/07 17:01:28. What produces this second listing? Is it possible that the REVOKED status reported the first time was actually an indication of some other reason the user would not be able to logon, e.g. being revoked at the group level or having a revoke date that has been reached? Do your SMF records show CONNECT command activity that affects the user? There are doubtless other reasons that a report might claim a userid to be revoked when the magic FLAG4 is not set. It is a COBOL program that parses the output of an LU * command. I didn't write it, but it appears that the program examines the 4th line of output for each User to see if ATTRIBUTES=REVOKED begins in column 3. It writes the information to a VSAM file and then creates the report from the data in the VSAM file. I just checked the User IDs listed as revoked on today's report, and indeed they are revoked in RACF, but I take your point - this report is probably where I need to look. Thanks, Greg --**--** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN --**--**-- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
