Re: IBM customer anchor

2017-06-26 Thread Brian Westerman
With the NAME/TOKEN, it would be pretty hard to accidentally use the same token 
name (assuming you give your token a non-generic name).  For ours they all 
start with "Syzygy_somthing" or "Syz_somethingelse" and since you have 16 bytes 
to play with you would have to try pretty hard to "accidentally" use it.  

At first we were worried that "Syz" was close to "Sys" but when it came down to 
it, there were too many other characters in the name(s) that chances of reusing 
someone else's was deemed to be extremely low.  

I have since noticed that a lot of vendors even use non-readable characters to 
be really sure they are unique.  We have considered doing something like that, 
but decided that seeing Syz was important if we ever actually had a problem 
that warranted a dump.

Brian

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Searching PMR

2017-06-26 Thread Lizette Koehler
I think if you are part of the shop that opened the PMR you can see it.  If it 
is not for your shop, you cannot see it.

You use   www.ibm.com/ibmlinkselect Service Request link to look for your 
shops PMR.

You can search by software request number or  IBM Customer number.



Lizette


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Nathan Astle
> Sent: Monday, June 26, 2017 8:32 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Searching PMR
> 
> Hi
> 
> Is it possible to search PMR number opened by others. This is to check the
> status and see if the PMR is resolved
> 
> Apology this might dummy but I am logged not able to see.
> 
> Could someone please help me with the correct URL ?
> 
> Regards
> Nathan
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Searching PMR

2017-06-26 Thread Nathan Astle
Hi

Is it possible to search PMR number opened by others. This is to check the
status and see if the PMR is resolved

Apology this might dummy but I am logged not able to see.

Could someone please help me with the correct URL ?

Regards
Nathan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: FW: common storage usage question

2017-06-26 Thread Jim Mulder
 For an SQA request which needs to convert some multiple of 4K pages from 
CSA to SQA, 
the path length is longer.  As to the question of whether or not it is 
dramatic, the answer is 
the same as for most performance questions - "it depends".  One could 
construct 
an artificial workload where the SQA 4k multiple free page space is not 
fragmented,
and the CSA multiple 4k page free space is highly fragmented, and then be 
doing a lot
SQA getmains for a size which requires a long CSA search, and produce a 
measurable
(even dramatic, for some definition of dramatic) performance effect. 

  For a particular customer's workload, the only way to tell whether or 
not there is a 
measurable difference is to measure it both ways. 
 
Jim Mulder z/OS Diagnosis, Design, Development, Test  IBM Corp. 
Poughkeepsie NY

IBM Mainframe Discussion List  wrote on 
06/26/2017 07:24:37 AM:

> From: Barry Merrill 
> To: IBM-MAIN@LISTSERV.UA.EDU
> Date: 06/26/2017 03:38 PM
> Subject: FW: common storage usage question
> Sent by: IBM Mainframe Discussion List 
> 
> My 2003 Newsletter has this note:
> 
> 29. APAR OW54622 introduced an SQA overflow into CSA condition that
> increased CPU time for many STCs over time; the new GETMAIN larger
> than FREEMAIN was corrected by APAR OW55360.  It has long been known
> that when SQA is too small and expands into the CSA area, path
> lengths are dramatically increased; you can detect this condition in
> MXG dataset TYPE78VS variables SQAEXPNx.
> 
> 
> Unfortunately, I do NOT know if that statement with regard to increased
> CPU time due to path length when there is an overflow is still true, and
> I can't find the "long known" source.



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: EBCDIC, ASCII, ugh

2017-06-26 Thread Kirk Wolf
On Mon, Jun 26, 2017 at 1:55 PM, Paul Gilmartin <
000433f07816-dmarc-requ...@listserv.ua.edu> wrote:
  

> Does this do anytning that couldn't as well be done with:
> cp "//'KIRK.CLEARTEXT.DATA'" /dev/fd/1 |
> iconv -f IBM-037 -t IBM-1252 |
> gpg -r key-1 --batch --output=- --encrypt=- >~KIRK/ENCRYPT  # (I'm
> guessing.)
>

Well, my example:
a) runs the shell script on a remote linux server
and b) reaches back into the source z/OS job for I/O.

Your example would only run on z/OS.   Which is fine if that's what you
want.


> Why go back to to a non-UNIX data set at all?  UNIX files are much
> more tractable for sftp, NFS, etc.
>
> Is gpg:
> o Standard with z/OS/
> o Supplied with Co:Z?
> o In Ported Tools?
> o Other?
>

No. No. No.
But - since you are running on linux, gpg is a standard package on all
distros.
Which is kind of the whole point: you are offloading processing as well.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: EBCDIC, ASCII, ugh

2017-06-26 Thread Paul Gilmartin
On Mon, 26 Jun 2017 11:20:29 -0500, Kirk Wolf wrote:

>Since you kindly mentioned "fromdsn", I'll plug that a nice option would be
>to use Co:Z Hybrid batch to offload the encryption as part of transfer
>(without any unencrypted data at rest).
>
>Here's a slight variation of the example from our cookbook:
>https://dovetail.com/docs/coz/cookbook.html#4_3
>
>//STEP1   EXEC PROC=COZPROC,
>//ARGS='my...@linux1.myco.com'
>//STDIN   DD *
>
>fromdsn -l rdw -k //DD:INPUT   \
>  | gpg -r key-1 --batch --output=- --encrypt=- \
>  | todsn -b //DD:OUTPUT
>/*
>//INPUT DD DISP=SHR,DSN=KIRK.CLEARTEXT.DATA
>//OUTPUT DD DSN=KIRK.ENCRYPT,DISP=(NEW,PASS),
>//  SPACE=(CYL,(1,1),RLSE),
>//  DCB=(RECFM=U,BLKSIZE=4096)
>
Does this do anytning that couldn't as well be done with:
cp "//'KIRK.CLEARTEXT.DATA'" /dev/fd/1 |
iconv -f IBM-037 -t IBM-1252 |
gpg -r key-1 --batch --output=- --encrypt=- >~KIRK/ENCRYPT  # (I'm 
guessing.)

Why go back to to a non-UNIX data set at all?  UNIX files are much
more tractable for sftp, NFS, etc.

Is gpg:
o Standard with z/OS/
o Supplied with Co:Z?
o In Ported Tools?
o Other?

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Windows 10 Pro automatic update

2017-06-26 Thread Clark F Morris
[Default] On Mon, 26 Jun 2017 11:47:36 -0500, Norbert Friemel
 wrote:

>On Sun, 25 Jun 2017 16:40:47 -0300, Clark Morris wrote:
>
>>I don't recall if I updated to the Creator's edition but I have kept
>>fairly up to date on all my computers.  Windows 10 itself has not
>>caused me the problems others here have had.  What I object to is the
>>lack of a way to prevent an automatic reboot when you are away from
>>even if you are doing uploads or downloads.  I object to not being
>>able to do an immediate shutdown without installing updates even if I
>>am faced with an imminent loss of power (I don't have that much time
>>on my UPS).   I object to not being able to hold off on an update
>>download if I have another time critical upload or download occurring.
>>I do not object to increasingly hard to ignore messages to download
>>and apply updates.
>>
>
>From 
>https://blogs.windows.com/windowsexperience/2017/03/01/providing-customers-choice-control-creators-update/
>"With the Creators Update you will have several new options for scheduling the 
>timing of when updates install. For example, you can specify exactly when you 
>want an update to occur (including the ability to reschedule an update if your 
>original choice ends up being less convenient than expected), or “hit the 
>snooze button.” The “snooze” capability allows you to pause the update process 
>completely for three days when you need uninterrupted time on your device. In 
>addition, we are widening the “Active Hours” time so Windows doesn’t install 
>an update at times when you want your device to be ready to use."

This is true if you have Windows 10 Pro, Educational and one other.  I
have Windows 10 Home, Creators Edition and these features are not
available.  I need them.

Clark Morris
>
>and
>
>https://www.cnet.com/news/microsoft-forced-windows-update-auto-restart-snooze-indefinitely-windows-10/
>
>Norbert Friemel
>Disclaimer: I didn't test this -I'm still using Windows 7
>
>
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IEAMSCHD no FRR param

2017-06-26 Thread Greg Dyck

On 6/23/2017 11:37 AM, contactmura...@gmail.com wrote:

Hi, Thanks for the response. But while testing it is observed that if we 
execute FRR with a debugger then it doesn't work as expected. Mostly because 
the debugger places its own FRR in the FRR stack.


That sounds like a concern to take up with the owner of the debugger.

Regards, Greg

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Windows 10 Pro automatic update: was Re: Eliminating the systems programmer was Re: IBM cuts contractor billing by 15 percent (our else)

2017-06-26 Thread Bill Wilkie
To set a metered connection in Windows 10 and stop the automatic updates:


Select Start Windows logo Start button > Settings Gear-shaped Settings icon > 
Network & Internet > Wi-Fi Expanding curves Wi-Fi icon > Manage known networks.
2
Select the Wi-Fi network > Properties > turn on Set as metered connection.

No more automatic updates. Although My wife had to turn it back on to print 
some stuff, then turned it off again.

As far as thinking it was your new computer, When mine crashed, I went out and 
bout a new HP and It died with I/O errors after a windows 10 updates. I had it 
only for 6 months. Did some searching and found out some new machines that were 
turned for the first time experienced disk failures after Windows 10 updates.

Bill



From: IBM Mainframe Discussion List  on behalf of 
Barkow, Eileen 
Sent: Monday, June 26, 2017 4:53 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Windows 10 Pro automatic update: was Re: Eliminating the systems 
programmer was Re: IBM cuts contractor billing by 15 percent (our else)

There was an option somewhere  to turn the updates off altogether - I don't 
remember right now but will check it when I get home and will let you know 
tomorrow.
These updates were driving me crazy - I was even trying to blame the problem on 
Walmart since I bought the discounted refurbished laptop from them
(though at a bargain price of $300 for an 8gb HP)

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Clark Morris
Sent: Monday, June 26, 2017 12:37 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Windows 10 Pro automatic update: was Re: Eliminating the systems 
programmer was Re: IBM cuts contractor billing by 15 percent (our else)

[Default] On 26 Jun 2017 08:45:34 -0700, in bit.listserv.ibm-main
ebar...@doitt.nyc.gov (Barkow, Eileen) wrote:

>I thought that the Windows 10 Update problems were due to something in the way 
>that Windows 10 had been mis-installed or upgraded from  Windows 7 on my 
>refurbished computer.
>It would just update and update and then claim that the updates could not be 
>completed for some reason.
>After researching all the error msgs and performing the supposed fixes which 
>did not work,
> I finally figured out how to turn the updates off in the systems settings and 
> have not had any problems since then.

How did you do that?

Clark Morris
>
>-Original Message-
>From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On 
>Behalf Of Bill Wilkie
>Sent: Sunday, June 25, 2017 7:51 AM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: Re: Windows 10 Pro automatic update: was Re: Eliminating the systems 
>programmer was Re: IBM cuts contractor billing by 15 percent (our else)
>
>The choices you get are UPDATE AND RESTART or UPDATE AND SHUTDOWN. But you 
>must install the updates.
>
>
>I learned later after having numerous crashes that you can set the METERED 
>CONNECTION and it will  stop the automatic updates. But even that comes with 
>some quirks. For example, I set it on my wife's machine but when she tried 
>printing it said she may exceed her time so it wouldn't print. I had to remove 
>the metered connection, do the print and turn it on again. I worry about the 
>day when I need to enable it again.
>
>
>I am not against the automatic updates. I am against the ones that cause 
>crashes.
>
>
>For example, they clobbered my WIFI driver after one update and I couldn't 
>connect. I had to hardwire to the Comcast box to be able to keep working. When 
>I had time, I did some searches and found they clobbered my WIFI driver. I 
>found where to download the new driver and it worked again. But I pity the 
>number of people who didn't know how to fix it and ran to Best Buy or Staples 
>and spent a fortune.
>
>
>The worst part is when they tell people they need a new machine and Microsoft 
>makes yet more money. And nobody is saying a word about it, and IMHO it is the 
>biggest RIP OFF of the century.
>
>
>Another one was It didn't come up after the updates. I researched that and 
>finally found that it was because you couldn't have anything plugged into a 
>USB port, so even the wireless mouse stopped it from coming up. On a restart, 
>I was only seeing those circular dots, the ones that give you a stomach ache. 
>I used my wife's machine to Look It up and removed the USB devices and it came 
>up.  I asked the guys at Best Buys and Staples how much they must be making 
>from Windows 10 updates killing machines and they said a fortune.
>
>
>Bill
>
>
>
>
>From: IBM Mainframe Discussion List  on behalf of 
>Clark Morris 
>Sent: Saturday, June 24, 2017 8:11 PM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: Windows 10 Pro automatic update: was Re: Eliminating the systems 
>programmer was Re: IBM cuts contractor billing by 15 percent (our 

Re: EBCDIC, ASCII, ugh

2017-06-26 Thread Kirk Wolf
Frank,

It's kind of a difficult thing to explain what's going on with "z/OS Hyrid
Batch", but this 10 minute youtube video should help:

https://www.youtube.com/embed/WlZbN_vs7us



Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Mon, Jun 26, 2017 at 12:21 PM, Frank Swarbrick <
frank.swarbr...@outlook.com> wrote:

> Interesting.  But in this case it's a transfer to a remote (non-z/OS)
> platform, so I don't think that would work.
>
> Frank
>
> 
> From: IBM Mainframe Discussion List  on behalf
> of Cieri, Anthony 
> Sent: Sunday, June 25, 2017 7:44 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: EBCDIC, ASCII, ugh
>
> z/OS FTP client and Server support a parameter called CONDDISP.
> Perhaps this might help.
>
> If CONDDISP were coded as DELETE, then a partial file transfer
> should not be saved!!
>
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Frank Swarbrick
> Sent: Friday, June 23, 2017 7:55 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: EBCDIC, ASCII, ugh
>
> It must be encrypted such that when decrypted on an ASCII platform (or any
> platform, really) it will be in ASCII.  Not sure on the line separator
> requirement, but I will find out.
>
> Your comment about TLS ensuring the data is not altered in transmission is
> interesting.  As far as I know the only concern there is that in the past
> we've sent files from z/OS (or more often sent files to z/OS) and the file
> ended up being truncated (for example, the FTP client job was somehow
> cancelled part way through).  Or at least that is the concern.  Not sure
> that TLS could guard against that.  (Yes, I know, Connect: Direct could,
> but we don't have C:D for z/OS.)
>
> It does need to be encrypted at rest, as it will be offsite at a location
> not under our control.
>
> Thanks!  Frank
>
> 
> From: IBM Mainframe Discussion List  on behalf
> of Alan Altmark 
> Sent: Friday, June 23, 2017 2:57 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: EBCDIC, ASCII, ugh
>
> On Thu, 22 Jun 2017 22:25:21 +, Frank Swarbrick <
> frank.swarbr...@outlook.com> wrote:
>
> > We have a requirement to store some information in an encrypted ASCII
> > file (that is, it was ASCII prior to being encrypted) on a distributed
> > platform over which we have no control.  We also have a requirement that
> we make sure that no data is lost during transmission.
>
> Do you have a requirement to create an encrypted ASCII file?  Or do you
> have a requirement to decrypt and save (store) a clear-text EBCDIC version
> of such a file?
>
> Don't overthink the solution.  Just remember that ASCII text files are
> streams with CRLFs in them, which means the CRLFs are part of the encrypted
> data.  You don't encrypt the LINES of a file and then append CRLFs.
> (Tempting in EBCDIC systems.)
>
> Is the encryption solely for the purpose of file transmission?  Or does it
> need to be encrypted at rest for other reasons?  I would be tempted to just
> use TLS-enabled FTP.  TLS ensures that the data is not altered in
> transmission, so the MD5 is superfluous for that purpose.
>
> Alan Altmark
> IBM Lab Services
> z/VM and Linux
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: EBCDIC, ASCII, ugh

2017-06-26 Thread Frank Swarbrick
Interesting.  But in this case it's a transfer to a remote (non-z/OS) platform, 
so I don't think that would work.

Frank


From: IBM Mainframe Discussion List  on behalf of 
Cieri, Anthony 
Sent: Sunday, June 25, 2017 7:44 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: EBCDIC, ASCII, ugh

z/OS FTP client and Server support a parameter called CONDDISP. Perhaps 
this might help.

If CONDDISP were coded as DELETE, then a partial file transfer should 
not be saved!!



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Frank Swarbrick
Sent: Friday, June 23, 2017 7:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: EBCDIC, ASCII, ugh

It must be encrypted such that when decrypted on an ASCII platform (or any 
platform, really) it will be in ASCII.  Not sure on the line separator 
requirement, but I will find out.

Your comment about TLS ensuring the data is not altered in transmission is 
interesting.  As far as I know the only concern there is that in the past we've 
sent files from z/OS (or more often sent files to z/OS) and the file ended up 
being truncated (for example, the FTP client job was somehow cancelled part way 
through).  Or at least that is the concern.  Not sure that TLS could guard 
against that.  (Yes, I know, Connect: Direct could, but we don't have C:D for 
z/OS.)

It does need to be encrypted at rest, as it will be offsite at a location not 
under our control.

Thanks!  Frank


From: IBM Mainframe Discussion List  on behalf of 
Alan Altmark 
Sent: Friday, June 23, 2017 2:57 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: EBCDIC, ASCII, ugh

On Thu, 22 Jun 2017 22:25:21 +, Frank Swarbrick 
 wrote:

> We have a requirement to store some information in an encrypted ASCII
> file (that is, it was ASCII prior to being encrypted) on a distributed
> platform over which we have no control.  We also have a requirement that we 
> make sure that no data is lost during transmission.

Do you have a requirement to create an encrypted ASCII file?  Or do you have a 
requirement to decrypt and save (store) a clear-text EBCDIC version of such a 
file?

Don't overthink the solution.  Just remember that ASCII text files are streams 
with CRLFs in them, which means the CRLFs are part of the encrypted data.  You 
don't encrypt the LINES of a file and then append CRLFs.  (Tempting in EBCDIC 
systems.)

Is the encryption solely for the purpose of file transmission?  Or does it need 
to be encrypted at rest for other reasons?  I would be tempted to just use 
TLS-enabled FTP.  TLS ensures that the data is not altered in transmission, so 
the MD5 is superfluous for that purpose.

Alan Altmark
IBM Lab Services
z/VM and Linux

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Windows 10 Pro automatic update: was Re: Eliminating the systems programmer was Re: IBM cuts contractor billing by 15 percent (our else)

2017-06-26 Thread Barkow, Eileen
There was an option somewhere  to turn the updates off altogether - I don't 
remember right now but will check it when I get home and will let you know 
tomorrow.
These updates were driving me crazy - I was even trying to blame the problem on 
Walmart since I bought the discounted refurbished laptop from them 
(though at a bargain price of $300 for an 8gb HP)

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Clark Morris
Sent: Monday, June 26, 2017 12:37 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Windows 10 Pro automatic update: was Re: Eliminating the systems 
programmer was Re: IBM cuts contractor billing by 15 percent (our else)

[Default] On 26 Jun 2017 08:45:34 -0700, in bit.listserv.ibm-main
ebar...@doitt.nyc.gov (Barkow, Eileen) wrote:

>I thought that the Windows 10 Update problems were due to something in the way 
>that Windows 10 had been mis-installed or upgraded from  Windows 7 on my 
>refurbished computer.
>It would just update and update and then claim that the updates could not be 
>completed for some reason.
>After researching all the error msgs and performing the supposed fixes which 
>did not work,
> I finally figured out how to turn the updates off in the systems settings and 
> have not had any problems since then.

How did you do that?

Clark Morris
>
>-Original Message-
>From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On 
>Behalf Of Bill Wilkie
>Sent: Sunday, June 25, 2017 7:51 AM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: Re: Windows 10 Pro automatic update: was Re: Eliminating the systems 
>programmer was Re: IBM cuts contractor billing by 15 percent (our else)
>
>The choices you get are UPDATE AND RESTART or UPDATE AND SHUTDOWN. But you 
>must install the updates.
>
>
>I learned later after having numerous crashes that you can set the METERED 
>CONNECTION and it will  stop the automatic updates. But even that comes with 
>some quirks. For example, I set it on my wife's machine but when she tried 
>printing it said she may exceed her time so it wouldn't print. I had to remove 
>the metered connection, do the print and turn it on again. I worry about the 
>day when I need to enable it again.
>
>
>I am not against the automatic updates. I am against the ones that cause 
>crashes.
>
>
>For example, they clobbered my WIFI driver after one update and I couldn't 
>connect. I had to hardwire to the Comcast box to be able to keep working. When 
>I had time, I did some searches and found they clobbered my WIFI driver. I 
>found where to download the new driver and it worked again. But I pity the 
>number of people who didn't know how to fix it and ran to Best Buy or Staples 
>and spent a fortune.
>
>
>The worst part is when they tell people they need a new machine and Microsoft 
>makes yet more money. And nobody is saying a word about it, and IMHO it is the 
>biggest RIP OFF of the century.
>
>
>Another one was It didn't come up after the updates. I researched that and 
>finally found that it was because you couldn't have anything plugged into a 
>USB port, so even the wireless mouse stopped it from coming up. On a restart, 
>I was only seeing those circular dots, the ones that give you a stomach ache. 
>I used my wife's machine to Look It up and removed the USB devices and it came 
>up.  I asked the guys at Best Buys and Staples how much they must be making 
>from Windows 10 updates killing machines and they said a fortune.
>
>
>Bill
>
>
>
>
>From: IBM Mainframe Discussion List  on behalf of 
>Clark Morris 
>Sent: Saturday, June 24, 2017 8:11 PM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: Windows 10 Pro automatic update: was Re: Eliminating the systems 
>programmer was Re: IBM cuts contractor billing by 15 percent (our else)
>
>[Default] On 24 Jun 2017 12:43:13 -0700, in bit.listserv.ibm-main
>idfli...@gmail.com (scott Ford) wrote:
>
>>Guys,
>>
>>I am a bit different. We run z/PDT on OpenSuse Leap 42.2 x64..running z/OS
>>2.2 .
>>But we us Windows and Linux for our LDAP with are STC agents on z/OS. I am
>>basically all alone with other developers.
>>My laptop runs Windows 10 Pro with a Tn3270 client and use ssh.
>
>Does Windows 10 Pro have the forced automatic update?  Is the ability
>to say that normal working hours are 00:01 to 24:00?  Do you always
>have the choice of Shutdown without update?
>
>Clark Morris
>>
>>I am seeing a lot of customers who lack knowledge in a lot of areas ...so I
>>get pulled in ..
>>
>>Scott
>>
>>
>>
>>On Fri, Jun 23, 2017 at 4:19 PM John McKown 
>>wrote:
>>
>>> On Fri, Jun 23, 2017 at 2:58 PM, Bobbie Justice <
>>> 0013e2d84072-dmarc-requ...@listserv.ua.edu> wrote:
>>>
>>> > "As I  am reading this, all I can think of is Windows 10 and Automatic
>>> > updates. Since accidentally going to Windows 10, I have crashed my laptop
>>> > at least 10 times and spent 

Re: Windows 10 Pro automatic update: was Re: Eliminating the systems programmer was Re: IBM cuts contractor billing by 15 percent (our else)

2017-06-26 Thread Clark Morris
[Default] On 26 Jun 2017 08:45:34 -0700, in bit.listserv.ibm-main
ebar...@doitt.nyc.gov (Barkow, Eileen) wrote:

>I thought that the Windows 10 Update problems were due to something in the way 
>that Windows 10 had been mis-installed or upgraded from  Windows 7 on my 
>refurbished computer.
>It would just update and update and then claim that the updates could not be 
>completed for some reason.
>After researching all the error msgs and performing the supposed fixes which 
>did not work,
> I finally figured out how to turn the updates off in the systems settings and 
> have not had any problems since then.

How did you do that?

Clark Morris
>
>-Original Message-
>From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On 
>Behalf Of Bill Wilkie
>Sent: Sunday, June 25, 2017 7:51 AM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: Re: Windows 10 Pro automatic update: was Re: Eliminating the systems 
>programmer was Re: IBM cuts contractor billing by 15 percent (our else)
>
>The choices you get are UPDATE AND RESTART or UPDATE AND SHUTDOWN. But you 
>must install the updates.
>
>
>I learned later after having numerous crashes that you can set the METERED 
>CONNECTION and it will  stop the automatic updates. But even that comes with 
>some quirks. For example, I set it on my wife's machine but when she tried 
>printing it said she may exceed her time so it wouldn't print. I had to remove 
>the metered connection, do the print and turn it on again. I worry about the 
>day when I need to enable it again.
>
>
>I am not against the automatic updates. I am against the ones that cause 
>crashes.
>
>
>For example, they clobbered my WIFI driver after one update and I couldn't 
>connect. I had to hardwire to the Comcast box to be able to keep working. When 
>I had time, I did some searches and found they clobbered my WIFI driver. I 
>found where to download the new driver and it worked again. But I pity the 
>number of people who didn't know how to fix it and ran to Best Buy or Staples 
>and spent a fortune.
>
>
>The worst part is when they tell people they need a new machine and Microsoft 
>makes yet more money. And nobody is saying a word about it, and IMHO it is the 
>biggest RIP OFF of the century.
>
>
>Another one was It didn't come up after the updates. I researched that and 
>finally found that it was because you couldn't have anything plugged into a 
>USB port, so even the wireless mouse stopped it from coming up. On a restart, 
>I was only seeing those circular dots, the ones that give you a stomach ache. 
>I used my wife's machine to Look It up and removed the USB devices and it came 
>up.  I asked the guys at Best Buys and Staples how much they must be making 
>from Windows 10 updates killing machines and they said a fortune.
>
>
>Bill
>
>
>
>
>From: IBM Mainframe Discussion List  on behalf of 
>Clark Morris 
>Sent: Saturday, June 24, 2017 8:11 PM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: Windows 10 Pro automatic update: was Re: Eliminating the systems 
>programmer was Re: IBM cuts contractor billing by 15 percent (our else)
>
>[Default] On 24 Jun 2017 12:43:13 -0700, in bit.listserv.ibm-main
>idfli...@gmail.com (scott Ford) wrote:
>
>>Guys,
>>
>>I am a bit different. We run z/PDT on OpenSuse Leap 42.2 x64..running z/OS
>>2.2 .
>>But we us Windows and Linux for our LDAP with are STC agents on z/OS. I am
>>basically all alone with other developers.
>>My laptop runs Windows 10 Pro with a Tn3270 client and use ssh.
>
>Does Windows 10 Pro have the forced automatic update?  Is the ability
>to say that normal working hours are 00:01 to 24:00?  Do you always
>have the choice of Shutdown without update?
>
>Clark Morris
>>
>>I am seeing a lot of customers who lack knowledge in a lot of areas ...so I
>>get pulled in ..
>>
>>Scott
>>
>>
>>
>>On Fri, Jun 23, 2017 at 4:19 PM John McKown 
>>wrote:
>>
>>> On Fri, Jun 23, 2017 at 2:58 PM, Bobbie Justice <
>>> 0013e2d84072-dmarc-requ...@listserv.ua.edu> wrote:
>>>
>>> > "As I  am reading this, all I can think of is Windows 10 and Automatic
>>> > updates. Since accidentally going to Windows 10, I have crashed my laptop
>>> > at least 10 times and spent many days and a lot of money trying to
>>> recover.
>>> > Be careful what you wish for."
>>> >
>>> > Ditto on windows anything. I've had quite enough of windows automatic
>>> > updates, system restore, reboot, safe mode, reload the entire operating
>>> > system, reload various drivers, reload various apps, reboot again, etc.
>>> etc.
>>> >
>>> > No thanks.
>>> >
>>>
>>> ?At home, I have Windows 7 Professional which I run in a VM under Linux -
>>> Fedora 25. The _only_ time that I use this is to log on to work. It is
>>> _required_ because work eliminated our VPN in favor of using "Microsoft
>>> Terminal Server Gateway". This decision was made during the height of the
>>> "We are going 100.0% 

Re: EBCDIC, ASCII, ugh

2017-06-26 Thread Kirk Wolf
Please ignore my previous post; my mailer let it loose while I was editing
it :-)

Let me try again:

You could use Co:Z Hybrid batch to offload the encryption as part of
transfer (without any unencrypted data at rest).
Here's a slight variation of the example from our cookbook:
https://dovetail.com/docs/coz/cookbook.html#4_3

//STEP1   EXEC PROC=COZPROC,
//ARGS='my...@linux1.myco.com'
//STDIN   DD *
# This shell script runs on the remote Linux server

# the fromdsn on the server reaches back into z/OS...
fromdsn -k -l nl -s IBM-1047 -t ISO8859-1 //DD:INPUT |
  gpg -r key-1 --batch --output=/path/to/myfile.gpg

/*
//INPUT DD DISP=SHR,DSN=MY.CLEARTEXT.DATA
//

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Mon, Jun 26, 2017 at 11:20 AM, Kirk Wolf  wrote:

> Since you kindly mentioned "fromdsn", I'll plug that a nice option would
> be to use Co:Z Hybrid batch to offload the encryption as part of transfer
> (without any unencrypted data at rest).
>
> Here's a slight variation of the example from our cookbook:
> https://dovetail.com/docs/coz/cookbook.html#4_3
>
> //STEP1   EXEC PROC=COZPROC,
> //ARGS='my...@linux1.myco.com'
> //STDIN   DD *
>
> fromdsn -l rdw -k //DD:INPUT   \
>   | gpg -r key-1 --batch --output=- --encrypt=- \
>   | todsn -b //DD:OUTPUT
> /*
> //INPUT DD DISP=SHR,DSN=KIRK.CLEARTEXT.DATA
> //OUTPUT DD DSN=KIRK.ENCRYPT,DISP=(NEW,PASS),
> //  SPACE=(CYL,(1,1),RLSE),
> //  DCB=(RECFM=U,BLKSIZE=4096)
>
>
>
>
> Kirk Wolf
> Dovetailed Technologies
> http://dovetail.com
>
> On Mon, Jun 26, 2017 at 10:08 AM, John McKown <
> john.archie.mck...@gmail.com> wrote:
>
>> On Mon, Jun 26, 2017 at 9:29 AM, Paul Gilmartin <
>> 000433f07816-dmarc-requ...@listserv.ua.edu> wrote:
>>
>> > On Mon, 26 Jun 2017 07:54:35 -0400, Steve Thompson wrote:
>> > >
>> > >However, if you still have tape, you can write the file from
>> > >EBCDIC to tape (where conversion will be done by I/O routines) in
>> > >ASCII. Once that is done, you can write to DASD with NO
>> > >Conversion, and then compress it and do the MD5 thing.
>> > >
>> > Why not just convert disk-to-disk?  What does the tape intermediate
>> > gain?  Performance?  What code translation options are available
>> > nowadays?  At all costs, avoid OPTCD=Q, which, I believe, still uses
>> > the dreadful IGC0010C translation.
>> >
>> > >I'd suggest that you Zip the file before encryption. You won't
>> > >get very much in the way of compression once it is encrypted.
>> > >
>> > Was compression a requirement?  I don't see it mentioned in the
>> > original ply.
>> >
>> > I urge doing as much processing on z/OS, then a simple binary
>> > transfer, originated at either end, to the "distributed" server.
>> >
>> > -- gil
>> >
>> >
>> ​What ​I, personally, would like to do in a situation such as this is to
>> avoid FTP entirely by sharing an NFS v4 mount between z/OS and the "far
>> end". Assuming that the NFS mount is on a mount point such as:
>> /NFS/server/, one could do the following on z/OS (using Co:Z Dataset
>> Pipes):
>>
>> # copy to NFS, convert as Windows standard text file with CRLF line
>> endings
>> ​fromdsn -l crlf -s IBM-037 -t IBM-1252 "//the.sequential.zos.dsn"
>> >|/NFS/server/some/directory/file.data​
>> cksum /NFS/server/some/directory/file.data
>> >|/NFS/server/some/directory/file.data.cksum
>>
>> The far end could do the chksum itself to compare with what z/OS said. It
>> could then copy the file to another area or just us it "in place". Of
>> course, I will agree with the someone who will point out that NFS is not
>> exactly the "best of all worlds" for doing file transfers.
>>
>> Normal people can stop reading now because the following is my usual
>> weirdness.
>>
>> Instead of NFS, I _might_ do the "fromdsn" to a local z/OS UNIX file.
>> Assuming the "far end" is Linux, I could then use "sshfs" to "mount" the
>> directory onto this Linux system. This actually allows NFS-like operations
>> to run over a normal SSH channel. So the data would be encrypted "in
>> flight". This would allow the Linux system to do something like:
>>
>> == on Linux system ==
>> mkdir -p ~/zos-data
>> sshfs zos:/some/directory ~/zos-data
>> cd ~/local-data
>> cp ~/zos-data/file.data* . # copy to local directory
>> fusermount -u ~/zos-data # unmount zos
>> cat file.data.cksum
>> cksum file.data
>> # visually check that the cksum outputs match.
>>
>>
>>
>>
>>
>> --
>> Veni, Vidi, VISA: I came, I saw, I did a little shopping.
>>
>> Maranatha! <><
>> John McKown
>>
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>>
>
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: EBCDIC, ASCII, ugh

2017-06-26 Thread Kirk Wolf
Since you kindly mentioned "fromdsn", I'll plug that a nice option would be
to use Co:Z Hybrid batch to offload the encryption as part of transfer
(without any unencrypted data at rest).

Here's a slight variation of the example from our cookbook:
https://dovetail.com/docs/coz/cookbook.html#4_3

//STEP1   EXEC PROC=COZPROC,
//ARGS='my...@linux1.myco.com'
//STDIN   DD *

fromdsn -l rdw -k //DD:INPUT   \
  | gpg -r key-1 --batch --output=- --encrypt=- \
  | todsn -b //DD:OUTPUT
/*
//INPUT DD DISP=SHR,DSN=KIRK.CLEARTEXT.DATA
//OUTPUT DD DSN=KIRK.ENCRYPT,DISP=(NEW,PASS),
//  SPACE=(CYL,(1,1),RLSE),
//  DCB=(RECFM=U,BLKSIZE=4096)




Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Mon, Jun 26, 2017 at 10:08 AM, John McKown 
wrote:

> On Mon, Jun 26, 2017 at 9:29 AM, Paul Gilmartin <
> 000433f07816-dmarc-requ...@listserv.ua.edu> wrote:
>
> > On Mon, 26 Jun 2017 07:54:35 -0400, Steve Thompson wrote:
> > >
> > >However, if you still have tape, you can write the file from
> > >EBCDIC to tape (where conversion will be done by I/O routines) in
> > >ASCII. Once that is done, you can write to DASD with NO
> > >Conversion, and then compress it and do the MD5 thing.
> > >
> > Why not just convert disk-to-disk?  What does the tape intermediate
> > gain?  Performance?  What code translation options are available
> > nowadays?  At all costs, avoid OPTCD=Q, which, I believe, still uses
> > the dreadful IGC0010C translation.
> >
> > >I'd suggest that you Zip the file before encryption. You won't
> > >get very much in the way of compression once it is encrypted.
> > >
> > Was compression a requirement?  I don't see it mentioned in the
> > original ply.
> >
> > I urge doing as much processing on z/OS, then a simple binary
> > transfer, originated at either end, to the "distributed" server.
> >
> > -- gil
> >
> >
> ​What ​I, personally, would like to do in a situation such as this is to
> avoid FTP entirely by sharing an NFS v4 mount between z/OS and the "far
> end". Assuming that the NFS mount is on a mount point such as:
> /NFS/server/, one could do the following on z/OS (using Co:Z Dataset
> Pipes):
>
> # copy to NFS, convert as Windows standard text file with CRLF line endings
> ​fromdsn -l crlf -s IBM-037 -t IBM-1252 "//the.sequential.zos.dsn"
> >|/NFS/server/some/directory/file.data​
> cksum /NFS/server/some/directory/file.data
> >|/NFS/server/some/directory/file.data.cksum
>
> The far end could do the chksum itself to compare with what z/OS said. It
> could then copy the file to another area or just us it "in place". Of
> course, I will agree with the someone who will point out that NFS is not
> exactly the "best of all worlds" for doing file transfers.
>
> Normal people can stop reading now because the following is my usual
> weirdness.
>
> Instead of NFS, I _might_ do the "fromdsn" to a local z/OS UNIX file.
> Assuming the "far end" is Linux, I could then use "sshfs" to "mount" the
> directory onto this Linux system. This actually allows NFS-like operations
> to run over a normal SSH channel. So the data would be encrypted "in
> flight". This would allow the Linux system to do something like:
>
> == on Linux system ==
> mkdir -p ~/zos-data
> sshfs zos:/some/directory ~/zos-data
> cd ~/local-data
> cp ~/zos-data/file.data* . # copy to local directory
> fusermount -u ~/zos-data # unmount zos
> cat file.data.cksum
> cksum file.data
> # visually check that the cksum outputs match.
>
>
>
>
>
> --
> Veni, Vidi, VISA: I came, I saw, I did a little shopping.
>
> Maranatha! <><
> John McKown
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Windows 10 Pro automatic update: was Re: Eliminating the systems programmer was Re: IBM cuts contractor billing by 15 percent (our else)

2017-06-26 Thread Barkow, Eileen
I thought that the Windows 10 Update problems were due to something in the way 
that Windows 10 had been mis-installed or upgraded from  Windows 7 on my 
refurbished computer.
It would just update and update and then claim that the updates could not be 
completed for some reason.
After researching all the error msgs and performing the supposed fixes which 
did not work,
 I finally figured out how to turn the updates off in the systems settings and 
have not had any problems since then.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Bill Wilkie
Sent: Sunday, June 25, 2017 7:51 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Windows 10 Pro automatic update: was Re: Eliminating the systems 
programmer was Re: IBM cuts contractor billing by 15 percent (our else)

The choices you get are UPDATE AND RESTART or UPDATE AND SHUTDOWN. But you must 
install the updates.


I learned later after having numerous crashes that you can set the METERED 
CONNECTION and it will  stop the automatic updates. But even that comes with 
some quirks. For example, I set it on my wife's machine but when she tried 
printing it said she may exceed her time so it wouldn't print. I had to remove 
the metered connection, do the print and turn it on again. I worry about the 
day when I need to enable it again.


I am not against the automatic updates. I am against the ones that cause 
crashes.


For example, they clobbered my WIFI driver after one update and I couldn't 
connect. I had to hardwire to the Comcast box to be able to keep working. When 
I had time, I did some searches and found they clobbered my WIFI driver. I 
found where to download the new driver and it worked again. But I pity the 
number of people who didn't know how to fix it and ran to Best Buy or Staples 
and spent a fortune.


The worst part is when they tell people they need a new machine and Microsoft 
makes yet more money. And nobody is saying a word about it, and IMHO it is the 
biggest RIP OFF of the century.


Another one was It didn't come up after the updates. I researched that and 
finally found that it was because you couldn't have anything plugged into a USB 
port, so even the wireless mouse stopped it from coming up. On a restart, I was 
only seeing those circular dots, the ones that give you a stomach ache. I used 
my wife's machine to Look It up and removed the USB devices and it came up.  I 
asked the guys at Best Buys and Staples how much they must be making from 
Windows 10 updates killing machines and they said a fortune.


Bill




From: IBM Mainframe Discussion List  on behalf of 
Clark Morris 
Sent: Saturday, June 24, 2017 8:11 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Windows 10 Pro automatic update: was Re: Eliminating the systems 
programmer was Re: IBM cuts contractor billing by 15 percent (our else)

[Default] On 24 Jun 2017 12:43:13 -0700, in bit.listserv.ibm-main
idfli...@gmail.com (scott Ford) wrote:

>Guys,
>
>I am a bit different. We run z/PDT on OpenSuse Leap 42.2 x64..running z/OS
>2.2 .
>But we us Windows and Linux for our LDAP with are STC agents on z/OS. I am
>basically all alone with other developers.
>My laptop runs Windows 10 Pro with a Tn3270 client and use ssh.

Does Windows 10 Pro have the forced automatic update?  Is the ability
to say that normal working hours are 00:01 to 24:00?  Do you always
have the choice of Shutdown without update?

Clark Morris
>
>I am seeing a lot of customers who lack knowledge in a lot of areas ...so I
>get pulled in ..
>
>Scott
>
>
>
>On Fri, Jun 23, 2017 at 4:19 PM John McKown 
>wrote:
>
>> On Fri, Jun 23, 2017 at 2:58 PM, Bobbie Justice <
>> 0013e2d84072-dmarc-requ...@listserv.ua.edu> wrote:
>>
>> > "As I  am reading this, all I can think of is Windows 10 and Automatic
>> > updates. Since accidentally going to Windows 10, I have crashed my laptop
>> > at least 10 times and spent many days and a lot of money trying to
>> recover.
>> > Be careful what you wish for."
>> >
>> > Ditto on windows anything. I've had quite enough of windows automatic
>> > updates, system restore, reboot, safe mode, reload the entire operating
>> > system, reload various drivers, reload various apps, reboot again, etc.
>> etc.
>> >
>> > No thanks.
>> >
>>
>> ?At home, I have Windows 7 Professional which I run in a VM under Linux -
>> Fedora 25. The _only_ time that I use this is to log on to work. It is
>> _required_ because work eliminated our VPN in favor of using "Microsoft
>> Terminal Server Gateway". This decision was made during the height of the
>> "We are going 100.0% Microsoft! If it's not MS, we will refuse to run
>> it!" to the sounds of cheering by the Windows support staff.This was
>> immediately after our business-oriented CIO retired and the Windows
>> Infrastructure manager was promoted to CIO. That person is gone, but parts

Re: EBCDIC, ASCII, ugh

2017-06-26 Thread John McKown
On Mon, Jun 26, 2017 at 9:29 AM, Paul Gilmartin <
000433f07816-dmarc-requ...@listserv.ua.edu> wrote:

> On Mon, 26 Jun 2017 07:54:35 -0400, Steve Thompson wrote:
> >
> >However, if you still have tape, you can write the file from
> >EBCDIC to tape (where conversion will be done by I/O routines) in
> >ASCII. Once that is done, you can write to DASD with NO
> >Conversion, and then compress it and do the MD5 thing.
> >
> Why not just convert disk-to-disk?  What does the tape intermediate
> gain?  Performance?  What code translation options are available
> nowadays?  At all costs, avoid OPTCD=Q, which, I believe, still uses
> the dreadful IGC0010C translation.
>
> >I'd suggest that you Zip the file before encryption. You won't
> >get very much in the way of compression once it is encrypted.
> >
> Was compression a requirement?  I don't see it mentioned in the
> original ply.
>
> I urge doing as much processing on z/OS, then a simple binary
> transfer, originated at either end, to the "distributed" server.
>
> -- gil
>
>
​What ​I, personally, would like to do in a situation such as this is to
avoid FTP entirely by sharing an NFS v4 mount between z/OS and the "far
end". Assuming that the NFS mount is on a mount point such as:
/NFS/server/, one could do the following on z/OS (using Co:Z Dataset Pipes):

# copy to NFS, convert as Windows standard text file with CRLF line endings
​fromdsn -l crlf -s IBM-037 -t IBM-1252 "//the.sequential.zos.dsn"
>|/NFS/server/some/directory/file.data​
cksum /NFS/server/some/directory/file.data
>|/NFS/server/some/directory/file.data.cksum

The far end could do the chksum itself to compare with what z/OS said. It
could then copy the file to another area or just us it "in place". Of
course, I will agree with the someone who will point out that NFS is not
exactly the "best of all worlds" for doing file transfers.

Normal people can stop reading now because the following is my usual
weirdness.

Instead of NFS, I _might_ do the "fromdsn" to a local z/OS UNIX file.
Assuming the "far end" is Linux, I could then use "sshfs" to "mount" the
directory onto this Linux system. This actually allows NFS-like operations
to run over a normal SSH channel. So the data would be encrypted "in
flight". This would allow the Linux system to do something like:

== on Linux system ==
mkdir -p ~/zos-data
sshfs zos:/some/directory ~/zos-data
cd ~/local-data
cp ~/zos-data/file.data* . # copy to local directory
fusermount -u ~/zos-data # unmount zos
cat file.data.cksum
cksum file.data
# visually check that the cksum outputs match.





-- 
Veni, Vidi, VISA: I came, I saw, I did a little shopping.

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: EBCDIC, ASCII, ugh

2017-06-26 Thread Paul Gilmartin
On Mon, 26 Jun 2017 07:54:35 -0400, Steve Thompson wrote:
>
>However, if you still have tape, you can write the file from
>EBCDIC to tape (where conversion will be done by I/O routines) in
>ASCII. Once that is done, you can write to DASD with NO
>Conversion, and then compress it and do the MD5 thing.
> 
Why not just convert disk-to-disk?  What does the tape intermediate
gain?  Performance?  What code translation options are available
nowadays?  At all costs, avoid OPTCD=Q, which, I believe, still uses
the dreadful IGC0010C translation.

>I'd suggest that you Zip the file before encryption. You won't
>get very much in the way of compression once it is encrypted.
> 
Was compression a requirement?  I don't see it mentioned in the
original ply.

I urge doing as much processing on z/OS, then a simple binary
transfer, originated at either end, to the "distributed" server.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IBM customer anchor

2017-06-26 Thread Peter Relson
>What precludes collisions of name/tokens? 
>Simply bigger name space?

Nothing precludes collisions of anything. This is one big sometimes-happy 
family among IBM, ISVs, and customers and I think that those who play by 
the rules tend to be happiest.

This is why it has always been recommended that things like module and 
macro names, message IDs, name/token names, dynamic exit names, and many 
other things all begin with a prefix owned by the company that is using 
the name/ID.

Regarding clobbering of someone's customer anchor table slot:
Of course that's possible since anyone in key 0 can clobber anything 
(whether accidentally or maliciously or even intentionally with misguided 
but not malicious intent). And that includes your name/token name (it's 
just harder to find) which, if changed, would then make your name/token 
retrieve fail.

Some overlays can be detected and corrected, others have limited effect, 
others might bring the system down.

Peter Relson
z/OS Core Technology Design


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: EBCDIC, ASCII, ugh

2017-06-26 Thread Steve Thompson

On 06/23/2017 07:54 PM, Frank Swarbrick wrote:

It must be encrypted such that when decrypted on an ASCII platform (or any 
platform, really) it will be in ASCII.  Not sure on the line separator 
requirement, but I will find out.

Your comment about TLS ensuring the data is not altered in transmission is 
interesting.  As far as I know the only concern there is that in the past we've 
sent files from z/OS (or more often sent files to z/OS) and the file ended up 
being truncated (for example, the FTP client job was somehow cancelled part way 
through).  Or at least that is the concern.  Not sure that TLS could guard 
against that.  (Yes, I know, Connect: Direct could, but we don't have C:D for 
z/OS.)

It does need to be encrypted at rest, as it will be offsite at a location not 
under our control.

Thanks!  Frank



This is why I suggested doing the work using a Windows machine at 
your location. Unless you are using a server, or have managed to 
put an ftp server on a non-server copy of Windows, the ftp will 
have to be done from windows.


The problem is, if the "file" to be converted to ASCII is size 
huge (1TB or better), your Windows system may not be able to 
receive it, so you may need to have it access some server that 
can provide that size of a workspace via a network connection 
(this is going to take longer with the I/Os involved).


However, if you still have tape, you can write the file from 
EBCDIC to tape (where conversion will be done by I/O routines) in 
ASCII. Once that is done, you can write to DASD with NO 
Conversion, and then compress it and do the MD5 thing.


In this way, you [your company] is in control until it is sent to 
the other entity. "You" will know if it is able to be "recovered" 
as you need it to be (I assume back to EBCDIC...).


I'd suggest that you Zip the file before encryption. You won't 
get very much in the way of compression once it is encrypted.


Have fun with checkpoint/retry using ftp. I've had to send files 
several times before they finally made it complete to the 
receiving entity.


Regards,
Steve Thompson

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


FW: common storage usage question

2017-06-26 Thread Barry Merrill
My 2003 Newsletter has this note:

29. APAR OW54622 introduced an SQA overflow into CSA condition that
increased CPU time for many STCs over time; the new GETMAIN larger
than FREEMAIN was corrected by APAR OW55360.  It has long been known
that when SQA is too small and expands into the CSA area, path
lengths are dramatically increased; you can detect this condition in
MXG dataset TYPE78VS variables SQAEXPNx.


Unfortunately, I do NOT know if that statement with regard to increased
CPU time due to path length when there is an overflow is still true, and
I can't find the "long known" source.

Barry


Merrilly yours,

 Herbert W. Barry Merrill, PhD
 President-Programmer
 Merrill Consultants
 MXG Software
 10717 Cromwell Drive  technical questions: supp...@mxg.com
 Dallas, TX 75229
 http://www.mxg.comadmin questions: ad...@mxg.com
 tel: 214 351 1966
 fax: 214 350 3694



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Vernooij, Kees (ITOPT1) - KLM
Sent: Monday, June 26, 2017 4:11 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: common storage usage question



> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Pommier, Rex
> Sent: 20 June, 2017 16:12
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: common storage usage question
> 
> Hi all,
> 
> Curiosity question.  Due to some storage issues we've had recently 
> with old 24 bit programs, I am revisiting our common storage 
> configuration - CSA and SQA.  Taking fragmentation into account, it 
> appears that I'm using about 38% of my allocated SQA and about 46% of my 
> allocated CSA.
> So I'm wondering if anybody has a good feel as to what a "good"
> percentage of used versus allocated space for these areas is.  How low 
> can I safely go in free space in these areas if we decide we want to 
> try to eke out an additional MB of below-the-line private?  Our 
> current private size is 11MB.
> 
> TIA,
> 
> Rex
> 
> The information contained in this message is confidential, protected 
> from disclosure and may be legally privileged.  If the reader of this 
> message is not the intended recipient or an employee or agent 
> responsible for delivering this message to the intended recipient, you 
> are hereby notified that any disclosure, distribution, copying, or any 
> action taken or action omitted in reliance on it, is strictly 
> prohibited and may be unlawful.  If you have received this 
> communication in error, please notify us immediately by replying to 
> this message and destroy the material in its entirety, whether in electronic 
> or hard copy format.
> Thank you.
> 
> 

- Usually I check the peaks of the last 6 or 12 months and consider those good 
guidelines, if you don't plan upgrades that might change the picture.
- You can cut SQA to near 100% usage, because it can overflow to CSA, so you 
don't only need 1 free space area.

Kees.

For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message. 

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt. 
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: common storage usage question

2017-06-26 Thread Vernooij, Kees (ITOPT1) - KLM


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Pommier, Rex
> Sent: 20 June, 2017 16:12
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: common storage usage question
> 
> Hi all,
> 
> Curiosity question.  Due to some storage issues we've had recently with
> old 24 bit programs, I am revisiting our common storage configuration -
> CSA and SQA.  Taking fragmentation into account, it appears that I'm
> using about 38% of my allocated SQA and about 46% of my allocated CSA.
> So I'm wondering if anybody has a good feel as to what a "good"
> percentage of used versus allocated space for these areas is.  How low
> can I safely go in free space in these areas if we decide we want to try
> to eke out an additional MB of below-the-line private?  Our current
> private size is 11MB.
> 
> TIA,
> 
> Rex
> 
> The information contained in this message is confidential, protected
> from disclosure and may be legally privileged.  If the reader of this
> message is not the intended recipient or an employee or agent
> responsible for delivering this message to the intended recipient, you
> are hereby notified that any disclosure, distribution, copying, or any
> action taken or action omitted in reliance on it, is strictly prohibited
> and may be unlawful.  If you have received this communication in error,
> please notify us immediately by replying to this message and destroy the
> material in its entirety, whether in electronic or hard copy format.
> Thank you.
> 
> 

- Usually I check the peaks of the last 6 or 12 months and consider those good 
guidelines, if you don't plan upgrades that might change the picture.
- You can cut SQA to near 100% usage, because it can overflow to CSA, so you 
don't only need 1 free space area.

Kees.

For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message. 

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt. 
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN