Re: EXCP Counts in SMF Exit
Guess the curiosity is why it suddenly popped up? Longer run times, batch window, whatever-probably wouldn't hurt to look at EREP for temp or perm errors on device and see if there are any data checks on the VOLSER. In a message dated 12/14/2013 6:21:51 P.M. Central Standard Time, charl...@mcn.org writes: Great idea. I played with Easy SMF once upon a time and found it very -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: EXCP Counts in SMF Exit
Based on the step level summary, there are lots of EXCPs: + | --TIMINGS (MINS.)-- | JOBNAME STEPNAME PROCSTEPRC EXCP CONNTCBSRB CLOCK | CSSDCU01 CSSDCU01 STEP160 00 17820K 6089K 3.25.68 108.8 + '17820K' or 17,8 million of them. What's missing is device level detail, including simple 'vanilla' I/O like STEPLIB. Regardless of how the utility itself does I/O, STEPLIB is accessed by Fetch. At least that DDNAME should be available. . JO.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com From: Mark Zelden m...@mzelden.com To: IBM-MAIN@LISTSERV.UA.EDU, Date: 12/14/2013 08:52 PM Subject:Re: EXCP Counts in SMF Exit Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On Sat, 14 Dec 2013 11:39:10 -0800, Skip Robinson jo.skip.robin...@sce.com wrote: Doesn't SDSF get the counts from SMF 30? Assuming so, have you tried monitoring via SDSF to see what it reports while the step is running? Mark -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS ITIL v3 Foundation Certified mailto:m...@mzelden.com Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html Systems Programming expert at http://search390.techtarget.com/ateExperts/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OMVS UID display
Venkat, Does this system have its own RACF database or does it share its database with other systems? If it shares its database, do commands like id display properly on those other systems? What is the AIM level of this database? Run the following job to find out. //jobname JOB (account),'username',CLASS=x,MSGCLASS=x //STEP EXEC PGM=IRRIRA00 //SYSPRINT DD SYSOUT=* If AIM is at level 0 or 1, is the UNIXMAP class active? Check SETROPTS LIST. If it is active, are there any UNIXMAP profiles? Execute SEARCH CLASS(UNIXMAP) to find out. Specifically, is there a profile U12345 in which your USERID is in the access list? Execute RLIST UNIXMAP U12345 ALL to check. Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel http://twitter.com/RSH_RACF www.rshconsulting.com - 2013-2014 RACF Training - Audit Compliance Roadmap - Boston - APR 22-25, 2014 - Intro Basic Admin - WebEx - FEB 3-7, 2014 - Intro Basic Admin - WebEx - JUN 9-13, 2014 - Securing z/OS UNIX - WebEx - MAR 4-7, 2014 - -Original Message- Date:Sun, 15 Dec 2013 09:35:30 +0530 From:venkat kulkarni venkatkulkarn...@gmail.com Subject: Re: OMVS UID display Issue is only with this LPAR. I tried checking on other LPAR, all are fine. On Sun, Dec 15, 2013 at 9:04 AM, venkat kulkarni venkatkulkarn...@gmail.com wrote: This issue is not with single user. I am facing this with all RACF users. On Sun, Dec 15, 2013 at 9:02 AM, Jon Perryman jperr...@pacbell.netwrote: I think that the first user assigned to OMVS UID 12345 was deleted, or it's OMVS segment was deleted or it was assigned to a new UID. My suggestion is that you modify the user to which you want displayed. Jon Perryman. From: venkat kulkarni venkatkulkarn...@gmail.com Hello, I have RACF id associated with all UID and this problem is with all users anf getting *Error for uid.* I tried with many of the RACF user having diff access level and getting same issue even with UID 0 . I really don't think that my RACF is corrupted. Is there any other possibility. Who am i command gives me RACFID@SYSNAME. I tried looking at many of the manual for this error but somehow failed. Still looking into maual. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OMVS UID display
Hello, We have 3 system in plex and out of three systems, two are running with z/OS 1.11 and one with z/OS 1.13. commands ( whoami ,id ) running on z/OS 1.11 running fine but on z/OS 1.13 system OMVS, these command giving bad output. I tried checking RLIST UNIXMAP U12345 ALL on z/OS 1.13 and found below thing. CLASS NAME - UNIXMAPU12345 LEVEL OWNER UNIVERSAL ACCESS YOUR ACCESS WARNING - --- --- 00VENKAT9 NONE NONENO INSTALLATION DATA - NONE APPLICATION DATA NONE SECLEVEL NO SECLEVEL CATEGORIES -- NO CATEGORIES SECLABEL NO SECLABEL AUDITING FAILURES(READ) NOTIFY -- NO USER TO BE NOTIFIED CREATION DATE LAST REFERENCE DATE LAST CHANGE DATE (DAY) (YEAR) (DAY) (YEAR) (DAY) (YEAR) - --- 34713 34713 34713 ALTER COUNT CONTROL COUNT UPDATE COUNT READ COUNT --- - -- 00 00 00 00 USER ACCESS ACCESS COUNT -- -- - VENKAT NONE00 ID ACCESS ACCESS COUNT CLASS ENTITY NAME --- --- NO ENTRIES IN CONDITIONAL ACCESS LIST On Sun, Dec 15, 2013 at 3:29 PM, Robert S. Hansel (RSH) r.han...@rshconsulting.com wrote: Venkat, Does this system have its own RACF database or does it share its database with other systems? If it shares its database, do commands like id display properly on those other systems? What is the AIM level of this database? Run the following job to find out. //jobname JOB (account),'username',CLASS=x,MSGCLASS=x //STEP EXEC PGM=IRRIRA00 //SYSPRINT DD SYSOUT=* If AIM is at level 0 or 1, is the UNIXMAP class active? Check SETROPTS LIST. If it is active, are there any UNIXMAP profiles? Execute SEARCH CLASS(UNIXMAP) to find out. Specifically, is there a profile U12345 in which your USERID is in the access list? Execute RLIST UNIXMAP U12345 ALL to check. Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel http://twitter.com/RSH_RACF www.rshconsulting.com - 2013-2014 RACF Training - Audit Compliance Roadmap - Boston - APR 22-25, 2014 - Intro Basic Admin - WebEx - FEB 3-7, 2014 - Intro Basic Admin - WebEx - JUN 9-13, 2014 - Securing z/OS UNIX - WebEx - MAR 4-7, 2014 - -Original Message- Date:Sun, 15 Dec 2013 09:35:30 +0530 From:venkat kulkarni venkatkulkarn...@gmail.com Subject: Re: OMVS UID display Issue is only with this LPAR. I tried checking on other LPAR, all are fine. On Sun, Dec 15, 2013 at 9:04 AM, venkat kulkarni venkatkulkarn...@gmail.com wrote: This issue is not with single user. I am facing this with all RACF users. On Sun, Dec 15, 2013 at 9:02 AM, Jon Perryman jperr...@pacbell.net wrote: I think that the first user assigned to OMVS UID 12345 was deleted, or it's OMVS segment was deleted or it was assigned to a new UID. My suggestion is that you modify the user to which you want displayed. Jon Perryman. From: venkat kulkarni venkatkulkarn...@gmail.com Hello, I have RACF id associated with all UID and this problem is with all users anf getting *Error for uid.* I tried with many of the RACF user having diff access level and getting same issue even with UID 0 . I really don't think that my RACF is corrupted. Is there any other possibility. Who am i command gives me RACFID@SYSNAME. I tried looking at many of the manual for this error but somehow failed. Still looking into maual. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: COBOL IN SRB Mode (Was Un-authorized caller)
On Thu, 12 Dec 2013 23:38:54 -0600, Russ Teubner r...@hostbridge.com wrote: As a result of writing this bit of infrastructure, I would offer the following observation: The conceptual/theoretical discussions related to zIIP enablement and SRB authorization are interesting. However, the practical realities of getting LE and COBOL to work in this environment are a WHOLE different matter. It's certainly not impossible, but it should be approached with great care. Additionally, running your own product's code in an SRB is one thing, but running general user-supplied code there has a very different set of security and integrity concerns. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OMVS UID display
IRR66017I The system is currently operating in stage 1. On Sun, Dec 15, 2013 at 3:54 PM, venkat kulkarni venkatkulkarn...@gmail.com wrote: Hello, We have 3 system in plex and out of three systems, two are running with z/OS 1.11 and one with z/OS 1.13. commands ( whoami ,id ) running on z/OS 1.11 running fine but on z/OS 1.13 system OMVS, these command giving bad output. I tried checking RLIST UNIXMAP U12345 ALL on z/OS 1.13 and found below thing. CLASS NAME - UNIXMAPU12345 LEVEL OWNER UNIVERSAL ACCESS YOUR ACCESS WARNING - --- --- 00VENKAT9 NONE NONENO INSTALLATION DATA - NONE APPLICATION DATA NONE SECLEVEL NO SECLEVEL CATEGORIES -- NO CATEGORIES SECLABEL NO SECLABEL AUDITING FAILURES(READ) NOTIFY -- NO USER TO BE NOTIFIED CREATION DATE LAST REFERENCE DATE LAST CHANGE DATE (DAY) (YEAR) (DAY) (YEAR) (DAY) (YEAR) - --- 34713 34713 34713 ALTER COUNT CONTROL COUNT UPDATE COUNT READ COUNT --- - -- 00 00 00 00 USER ACCESS ACCESS COUNT -- -- - VENKAT NONE00 ID ACCESS ACCESS COUNT CLASS ENTITY NAME --- --- NO ENTRIES IN CONDITIONAL ACCESS LIST On Sun, Dec 15, 2013 at 3:29 PM, Robert S. Hansel (RSH) r.han...@rshconsulting.com wrote: Venkat, Does this system have its own RACF database or does it share its database with other systems? If it shares its database, do commands like id display properly on those other systems? What is the AIM level of this database? Run the following job to find out. //jobname JOB (account),'username',CLASS=x,MSGCLASS=x //STEP EXEC PGM=IRRIRA00 //SYSPRINT DD SYSOUT=* If AIM is at level 0 or 1, is the UNIXMAP class active? Check SETROPTS LIST. If it is active, are there any UNIXMAP profiles? Execute SEARCH CLASS(UNIXMAP) to find out. Specifically, is there a profile U12345 in which your USERID is in the access list? Execute RLIST UNIXMAP U12345 ALL to check. Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel http://twitter.com/RSH_RACF www.rshconsulting.com - 2013-2014 RACF Training - Audit Compliance Roadmap - Boston - APR 22-25, 2014 - Intro Basic Admin - WebEx - FEB 3-7, 2014 - Intro Basic Admin - WebEx - JUN 9-13, 2014 - Securing z/OS UNIX - WebEx - MAR 4-7, 2014 - -Original Message- Date:Sun, 15 Dec 2013 09:35:30 +0530 From:venkat kulkarni venkatkulkarn...@gmail.com Subject: Re: OMVS UID display Issue is only with this LPAR. I tried checking on other LPAR, all are fine. On Sun, Dec 15, 2013 at 9:04 AM, venkat kulkarni venkatkulkarn...@gmail.com wrote: This issue is not with single user. I am facing this with all RACF users. On Sun, Dec 15, 2013 at 9:02 AM, Jon Perryman jperr...@pacbell.net wrote: I think that the first user assigned to OMVS UID 12345 was deleted, or it's OMVS segment was deleted or it was assigned to a new UID. My suggestion is that you modify the user to which you want displayed. Jon Perryman. From: venkat kulkarni venkatkulkarn...@gmail.com Hello, I have RACF id associated with all UID and this problem is with all users anf getting *Error for uid.* I tried with many of the RACF user having diff access level and getting same issue even with UID 0 . I really don't think that my RACF is corrupted. Is there any other possibility. Who am i command gives me RACFID@SYSNAME. I tried looking at many of the manual for this error but somehow failed. Still looking into maual. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OMVS UID display
Venkat, He system I work on is 1.13 no changes..vanilla out of the box...displays whoami fine .. How are the racf omvs segment defined, is it different from the system that works vs the one that fails ? Something is different ... Scott ford www.identityforge.com from my IPAD 'Infinite wisdom through infinite means' On Dec 15, 2013, at 9:41 AM, venkat kulkarni venkatkulkarn...@gmail.com wrote: IRR66017I The system is currently operating in stage 1. On Sun, Dec 15, 2013 at 3:54 PM, venkat kulkarni venkatkulkarn...@gmail.com wrote: Hello, We have 3 system in plex and out of three systems, two are running with z/OS 1.11 and one with z/OS 1.13. commands ( whoami ,id ) running on z/OS 1.11 running fine but on z/OS 1.13 system OMVS, these command giving bad output. I tried checking RLIST UNIXMAP U12345 ALL on z/OS 1.13 and found below thing. CLASS NAME - UNIXMAPU12345 LEVEL OWNER UNIVERSAL ACCESS YOUR ACCESS WARNING - --- --- 00VENKAT9 NONE NONENO INSTALLATION DATA - NONE APPLICATION DATA NONE SECLEVEL NO SECLEVEL CATEGORIES -- NO CATEGORIES SECLABEL NO SECLABEL AUDITING FAILURES(READ) NOTIFY -- NO USER TO BE NOTIFIED CREATION DATE LAST REFERENCE DATE LAST CHANGE DATE (DAY) (YEAR) (DAY) (YEAR) (DAY) (YEAR) - --- 34713 34713 34713 ALTER COUNT CONTROL COUNT UPDATE COUNT READ COUNT --- - -- 00 00 00 00 USER ACCESS ACCESS COUNT -- -- - VENKAT NONE00 ID ACCESS ACCESS COUNT CLASS ENTITY NAME --- --- NO ENTRIES IN CONDITIONAL ACCESS LIST On Sun, Dec 15, 2013 at 3:29 PM, Robert S. Hansel (RSH) r.han...@rshconsulting.com wrote: Venkat, Does this system have its own RACF database or does it share its database with other systems? If it shares its database, do commands like id display properly on those other systems? What is the AIM level of this database? Run the following job to find out. //jobname JOB (account),'username',CLASS=x,MSGCLASS=x //STEP EXEC PGM=IRRIRA00 //SYSPRINT DD SYSOUT=* If AIM is at level 0 or 1, is the UNIXMAP class active? Check SETROPTS LIST. If it is active, are there any UNIXMAP profiles? Execute SEARCH CLASS(UNIXMAP) to find out. Specifically, is there a profile U12345 in which your USERID is in the access list? Execute RLIST UNIXMAP U12345 ALL to check. Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel http://twitter.com/RSH_RACF www.rshconsulting.com - 2013-2014 RACF Training - Audit Compliance Roadmap - Boston - APR 22-25, 2014 - Intro Basic Admin - WebEx - FEB 3-7, 2014 - Intro Basic Admin - WebEx - JUN 9-13, 2014 - Securing z/OS UNIX - WebEx - MAR 4-7, 2014 - -Original Message- Date:Sun, 15 Dec 2013 09:35:30 +0530 From:venkat kulkarni venkatkulkarn...@gmail.com Subject: Re: OMVS UID display Issue is only with this LPAR. I tried checking on other LPAR, all are fine. On Sun, Dec 15, 2013 at 9:04 AM, venkat kulkarni venkatkulkarn...@gmail.com wrote: This issue is not with single user. I am facing this with all RACF users. On Sun, Dec 15, 2013 at 9:02 AM, Jon Perryman jperr...@pacbell.net wrote: I think that the first user assigned to OMVS UID 12345 was deleted, or it's OMVS segment was deleted or it was assigned to a new UID. My suggestion is that you modify the user to which you want displayed. Jon Perryman. From: venkat kulkarni venkatkulkarn...@gmail.com Hello, I have RACF id associated with all UID and this problem is with all users anf getting *Error for uid.* I tried with many of the RACF user having diff access level and getting same issue even with UID 0 . I really don't think that my RACF is corrupted. Is there any other possibility. Who am i command gives me RACFID@SYSNAME. I tried looking at many of the manual for this error but somehow failed. Still looking into maual. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access
Re: OMVS UID display
On Sun, Dec 15, 2013 at 4:24 AM, venkat kulkarni venkatkulkarn...@gmail.com wrote: Hello, We have 3 system in plex and out of three systems, two are running with z/OS 1.11 and one with z/OS 1.13. commands ( whoami ,id ) running on z/OS 1.11 running fine but on z/OS 1.13 system OMVS, these command giving bad output. snip Based just on the above, is the z/OS 1.13 system in the same GRSplex as the other systems? Why? http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza2c0/4.9 quote If your shared RACF database is at application identity mapping (*AIM*)level 1 or higher, all systems that update the OMVS segment of USER or GROUP profiles, or update the ALIAS segment of general resource profiles (for example, any SERVAUTH class profile), or run RACF utilities, should have global resource serialization connections between the systems, should be in the same global resource serialization complex, and should be running OS/390 release 10 or any z/OS release. Adding or deleting a profile that has any of these segments, altering these segments, or running RACF utilities from a system outside the global resource serialization complex might result in incorrect results; for example, an alias index entry for an OMVS UID or SERVAUTH alias might point to the wrong profile, or to one that does not exist. To prevent database sharing errors, it might be useful to use RACF program control to restrict access to all RACF commands that can update these segments, to ensure that they cannot be used from systems outside a single global resource serialization complex. /quote Also, I found a curious phrase here, towards the bottom of the page : http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza7c0/17.2.1 quote For installations at *AIM* stage 2 or higher, you can list a set of users or groups with a specific UID or GID, for example using '223' for the UID value and '55' for the GID value, enter: SEARCH CLASS(USER) UID(223) SEARCH CLASS(GROUP) GID(55) /quote This is in the z/OS 1.13 manual. And it says that you can do a SEARCH for a UID or GID at AIM level 2 or higher. But does not mention exactly what happens at AIM 1 (your level) or lower. I wonder it the z/OS UNIX command you are using has a similar restriction. I don't know. I'm still looking. Looking in the UNIX manuals, I would _guess_ that these commands use the UNIX program, BPX1GPU, to get the information. This, in turn, uses the RACF callable service IRRSUM00 (aka GetUMAP). If this has some problem, it writes a LOGREC record, per http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichzb2c0/2.4.1 . If worse comes to worse, you might want to dump and print an EREP report quickly after a failure to see if RACF has written any error information. I can't really figure out exactly what the problem is. But I will say that it would be __extremely advantageous__ for you to see about upgrading your RACF database from AIM 1 to AIM 3. Most of the new facilities and speed ups, especially in UNIX, require an AIM level of 3. It was very easy for me. But that's because I had a very well controlled UNIX environment and few users when I went from AIM 0 to AIM 3. It only took me about 3 weeks, and that was only because I wanted to got to AIM level n, then wait a week, before going to AIM level n+1. I have no problem occur due to this. -- This is clearly another case of too many mad scientists, and not enough hunchbacks. Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
The NSA is coming to town
http://www.youtube.com/watch?v=8pcWlyUu8U4 -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OMVS UID display
On Sun, 15 Dec 2013 20:11:27 +0530, venkat kulkarni venkatkulkarn...@gmail.com wrote: IRR66017I The system is currently operating in stage 1. If you're at AIM stage 1, then you need to consider whether you have the UNIXMAP class active, and if so whether the UNIXMAP profiles are correct and complete. If UNIXMAP is active, but the profiles are not correct/complete, you can easily get errors like you're reporting. By the way, I don't think you've said whether the z/OS 1.13 system shares the RACF database with your other systems. My guess is that it does not, and that your UNIXMAP profiles are not correct. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: COBOL IN SRB Mode (Was Un-authorized caller)
Hi John, Your comment is wise: Just because you can do something doesn't mean it's worth doing. This is a great summary of our quest to zIIP enable a bit of our COBOL code. Of course, this also means you have to do your homework because it may just turn out that, in some cases, it's *definitely* worth it. A System z ISV in this day and age can't afford to miss those cases (at least that's my philosophy). For example, zIIP enabling our core HostBridge products, Base and JSE (our CICS-based JavaScript Engine), was a no-brainer Likewise with HB Socket Support (zIIP-enabled EZASOKET alternative). On the other hand, our COBOL/BMS utility transactions??? Not so much. I must add that this break-even assessment is a moving target because zOS processor switching overhead seems to be trending down (and our own code paths are getting shorter). Note also that the model of the System z hardware makes a big difference. If the GPs are knee-capped relative to the zIIPs, the GP savings and potential improvement in throughput are staggering in some cases. Russ Teubner HostBridge Technology -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
