Re: Pervasive Encryption - why?

2019-08-07 Thread Timothy Sipples
Phil Smith III wrote: >I think you're missing one of my main points: "Substantial, >real progress" isn't what data set encryption provides. It >provides a LITTLE BIT of protection for a FEW minor attack >vectors. I disagree. >Read about data-centric protection, note the analysts and >standards bo

Re: Current URI for SNA manuals?

2019-08-07 Thread Steve Horein
Will these do? https://www-05.ibm.com/e-business/linkweb/publications/servlet/pbi.wss?PAG=C11&SSN=19HHB0002880621576&TRL=TXT&WRD=&PBL=GC30-3073&LST=ALL&RPP=10 https://www-05.ibm.com/e-business/linkweb/publications/servlet/pbi.wss?PAG=C11&SSN=19HHB0002880621576&TRL=TXT&WRD=&PBL=GC30-3438&LST=ALL&RPP

Re: Capital One Data Breach-100 Million Customers affected

2019-08-07 Thread Clark Morris
[Default] On 31 Jul 2019 14:44:53 -0700, in bit.listserv.ibm-main jesse1.robin...@sce.com (Jesse 1 Robinson) wrote: >One frequent selling point for cloud solutions is that WE the hired-hand >storage experts can take better care of your precious data than you can. I >sense Death of a Salesman...

Re: LOADing a module into common storage

2019-08-07 Thread Michael Stein
On Wed, Aug 07, 2019 at 06:55:53PM -0400, Tony Harminc wrote: > Roughly forever we've loaded modules into 24- or 31-bit CSA by first > LOADing the module normally into private storage, obtaining the actual > length from the LOAD, DELETEing the module, getting the necessary CSA > storage, and finall

LOADing a module into common storage

2019-08-07 Thread Tony Harminc
Roughly forever we've loaded modules into 24- or 31-bit CSA by first LOADing the module normally into private storage, obtaining the actual length from the LOAD, DELETEing the module, getting the necessary CSA storage, and finally using LOAD with ADDR=. This works fine, but seems unduly complicated

Re: CPU time cost of dynamic allocation

2019-08-07 Thread Lennie Dymoke-Bradshaw
Which simply means that if UNIT and VOLUME are not supplied then it looks in the catalog, where it detects a MIGRAT value if the data set is migrated. Lennie Dymoke-Bradshaw | Security Lead | RSM Partners Ltd   Web:  www.rsmpartners.com ‘Dance like no one is watching. Encrypt like eve

Re: Pervasive Encryption - why?

2019-08-07 Thread Phil Smith III
Timothy Sipples wrote: >Even if you believe IBM caused some confusion -- I cannot find much >evidence in the historical record of official IBM communications, but if >that's what you believe -- that's certainly NOT a reason to add any more. >I've asked you to help reduce terminology confusion,

Re: CPU time cost of dynamic allocation

2019-08-07 Thread Paul Gilmartin
On Wed, 7 Aug 2019 16:25:52 +, Seymour J Metz wrote: >The Initiator does not check that the data set exists; ... > ... and yet it checks for whether it's migrated. -- gil -- For IBM-MAIN subscribe / signoff / archive access

Re: IBM Destination z - Of Elephants and Mainframes

2019-08-07 Thread Clark Morris
[Default] On 7 Aug 2019 09:45:51 -0700, in bit.listserv.ibm-main sme...@gmu.edu (Seymour J Metz) wrote: >Some nits: > > 1. I doubt that much was written in machine language in 1955, although > assemblers were >primitive by today's standards. > > 2. Many Share projects maintained mods tapes in

Re: CPU time cost of dynamic allocation

2019-08-07 Thread Seymour J Metz
Data sets on tape are created by OPEN. For that matter, allocation does no I/O for card punches, paper tape punches or printers; if you have the first two that is TMI. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussi

Re: FAST PATH (IEWBFDAT) SQ CALL Fail 10800029

2019-08-07 Thread Tony Harminc
On Wed, 7 Aug 2019 at 12:44, Greg Price wrote: > On 2019-08-07 10:59 PM, Joseph Reichman wrote: > > Thanks would IEWBIND work with load modules > > Yes, IEWBIND - the "full" Binder API - can process PDS load modules as > well as program objects from a PDSE and from the UNIX file system. > It c

Re: Having trouble converting to user logs from sys1.brodcast

2019-08-07 Thread Carmen Vitullo
Thanks Jesse and Shmuel, Jesse, my original parmlib update was pretty simple SEND /* SEND COMMAND DEFAULTS */ + OPERSEND(ON) /* */ + USERSEND(ON) /* */ + SAVE(ON) /* */ + CHKBROD(OFF) /* */ + LOGNAME(ULOG.DATA.SYST) /* */ after the first hang I went truging into the fine manuals, and used

Re: FAST PATH (IEWBFDAT) SQ CALL Fail 10800029

2019-08-07 Thread Joseph Reichman
Thanks > On Aug 7, 2019, at 12:44 PM, Greg Price wrote: > >> On 2019-08-07 10:59 PM, Joseph Reichman wrote: >> Thanks would IEWBIND work with load modules > > > Yes, IEWBIND - the "full" Binder API - can process PDS load modules as well > as program objects from a PDSE and from the UNIX

Re: CPU time cost of dynamic allocation

2019-08-07 Thread David Spiegel
That's true for DASD, but, not for Tape, IIRC. On 2019-08-07 12:53, Seymour J Metz wrote: > They say that the memory is the second thing to go (I don't remember the > first.) IEFBR14 with DDDISP=(,PASS) or DISP=(,CATLG) does allocate a new data > set. there would be much wailing and gnashing of

Re: CPU time cost of dynamic allocation

2019-08-07 Thread Seymour J Metz
They say that the memory is the second thing to go (I don't remember the first.) IEFBR14 with DDDISP=(,PASS) or DISP=(,CATLG) does allocate a new data set. there would be much wailing and gnashing of teeth if it stopped doing that. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 _

Re: IBM Destination z - Of Elephants and Mainframes

2019-08-07 Thread Seymour J Metz
Some nits: 1. I doubt that much was written in machine language in 1955, although assemblers were primitive by today's standards. 2. Many Share projects maintained mods tapes in the 1970s, and it would be appropriate to mention some of the maintainers by name. As I recall, Romney Whit

Re: FAST PATH (IEWBFDAT) SQ CALL Fail 10800029

2019-08-07 Thread Greg Price
On 2019-08-07 10:59 PM, Joseph Reichman wrote: Thanks would IEWBIND work with load modules Yes, IEWBIND - the "full" Binder API - can process PDS load modules as well as program objects from a PDSE and from the UNIX file system. Cheers, Greg

Re: CPU time cost of dynamic allocation

2019-08-07 Thread Greg Price
On 2019-08-07 6:36 PM, Lennie Dymoke-Bradshaw wrote: However, I think standard TSO ALLOCATE does perform that check Yes, I was probably basing my opinion on my observations of the behaviour of the ALLOCATE command. Cheers, Greg ---

Re: FAST PATH (IEWBFDAT) SQ CALL Fail 10800029

2019-08-07 Thread Joseph Reichman
Doing it from a program Thanks > On Aug 7, 2019, at 12:21 PM, Seymour J Metz wrote: > > Do you simply need a map, or do you need the ability for an application to > get a map? For the former, there's always AMBLIST. > > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > _

Re: CPU time cost of dynamic allocation

2019-08-07 Thread CM Poncelet
>From years ago, I *think* an IEFBR14 step with DISP=(,CATLG) [or (,PASS)] does not physically allocate a dataset on a VOLSER but only registers it in the usercat. Have you checked whether it is in the VTOC?   Chris Poncelet (retired sysprog)   On 06/08/2019 20:38, Charles Mills wrote: > FWIW I t

Re: CPU time cost of dynamic allocation

2019-08-07 Thread Seymour J Metz
The Initiator does not check that the data set exists; if it did, the documented JCL for various utilities and service aids would not work. As you note, "some of the text units used in dynamic allocation have no equivalent in the DD statement." -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/

Re: FAST PATH (IEWBFDAT) SQ CALL Fail 10800029

2019-08-07 Thread Seymour J Metz
Do you simply need a map, or do you need the ability for an application to get a map? For the former, there's always AMBLIST. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Joseph Reichman Sen

Re: Having trouble converting to user logs from sys1.brodcast

2019-08-07 Thread Seymour J Metz
If it hangs then I suggest that you report it and work with IBM to get a fix. An error in your parmlib should give you an error message. Did you take a console dump of the hanging SEND command? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 Fr

Re: Having trouble converting to user logs from sys1.brodcast

2019-08-07 Thread Jesse 1 Robinson
Best I can do is show you what we have had for decades. It's not a 'recommendation', just evidence of something that works. (I just noticed the comment about 'transition'. 😉 ) Be sure that your SAF rules are set properly. Remember that updates to user broadcast is done by the system, not by a p

Current URI for SNA manuals?

2019-08-07 Thread Seymour J Metz
I'm trying to update the list of references in https://en.wikipedia.org/wiki/IBM_Systems_Network_Architecture; each of these has a URL that now longer goes to the manual: Systems Network Architecture Technical Overview. Fifth Edition. IBM. January 1994. GC30-3073-04. Systems Network Architectur

Having trouble converting to user logs from sys1.brodcast

2019-08-07 Thread Carmen Vitullo
On my 2.3 sandbox system I am trying to convert to user datasets for brodcast, I've RTFM(s) and updated the parmlibs accordingly, seems to be a 2 step process to totally move from sys1.brodcast. current parmlib values for SEND SEND /* SEND COMMAND DEFAULTS */ + O

Re: FAST PATH (IEWBFDAT) SQ CALL Fail 10800029

2019-08-07 Thread Joseph Reichman
Thanks would IEWBIND work with load modules meaning if I want link map from a load module Thanks > On Aug 6, 2019, at 10:03 PM, Greg Price wrote: > >> On 2019-08-07 5:37 AM, Joseph Reichman wrote: >> The program is not a program object, anomalies were found in its >> structure, or the progr

Re: Pervasive Encryption - why?

2019-08-07 Thread Todd Arnold
Correcting a couple of careless "n" and "m" typos in my previous post... -- Another, similar approach that is sometimes used is to use "key shares" instead of components. The difference is that with components, you must combine ALL of the components to form the master key, but wi

Re: Pervasive Encryption - why?

2019-08-07 Thread Todd Arnold
The master keys, which are stored securely inside the Crypto Express HSM and can never be extracted, are the top-level keys in the key hierarchy. Your application-level keys are stored outside the HSM, encrypted by the master keys. Thus, if the HSM fails, you still have the externally-stored a

Re: FAST PATH (IEWBFDAT) SQ CALL Fail 10800029

2019-08-07 Thread Don Poitras
Greg was asking if you are trying to get info about load modules or program objects. The former isn't supported using IEWBFDAT. In article you wrote: > I tried two load modules using the load macro to load them into memory that > I know execute > And got the same error > > On Aug 6, 2019, at

Re: FAST PATH (IEWBFDAT) SQ CALL Fail 10800029

2019-08-07 Thread Joseph Reichman
I tried two load modules using the load macro to load them into memory that I know execute And got the same error > On Aug 6, 2019, at 10:03 PM, Greg Price wrote: > >> On 2019-08-07 5:37 AM, Joseph Reichman wrote: >> The program is not a program object, anomalies were found in its >> struc

Re: Pervasive Encryption - why?

2019-08-07 Thread Mark Jacobs
At $previousjob we had copies of the ICSF Master Encryption Keys stored in secure locations. During disaster recovery testing authorized people would re-enter those keys into the crypto-express hardware on that processor. One time we also lost a crypto-express card on our production machine. The

Re: Pervasive Encryption - why?

2019-08-07 Thread Timothy Sipples
Phil Smith III wrote: >I feel that IBM inadvertently caused the confusion by calling >the data set encryption "PE" at first: the fact that this >thread refers to it as such actually supports that, no? You've made this assertion a couple times now, and it's not actually true as far as I can tell. I

Re: CPU time cost of dynamic allocation

2019-08-07 Thread Lennie Dymoke-Bradshaw
Greg, I think you'll find that whether SVC 99 checks that a data set exists on disk or not depends on the text units used. If I want the 'does data set exist' check made I usually include the text unit to return data set organisation (DALRTORG). This ensures that the DSCB for the data set is