Re: AUTHPGM in IKJTSOxx

2019-11-20 Thread Walt Farrell 
On Mon, 18 Nov 2019 20:03:59 +, Seymour J Metz  wrote:

>What do you mean by "the initial program"? The TMP doesn't need to be in any 
>list.
>
>There are a few caveats on authorization.
>
>   Whether the entire linklist is autoorized depends on what you have in 
> PARMLIB.
>
>   Anything in the LPA is authorized.

No, but that's a common misconception (or, perhaps, a common mis-statement).

The correct statement is: anything in LPA is considered to reside in an 
authorized library.

What that means is:
1. It can be loaded by something that is running either unauthorized or 
authorized (APF, system key, or supervisor state). When loaded, the state of 
the running program's authorization is not changed. (I will ignore the further 
complications that can be imposed by RACF Program Control, as those are not 
really related to authorized vs unauthorized.)

2. If it is loaded by the Initiator as a jobstep program, and it is linked 
AC(1), it will run APF-authorized. (I will ignore possible JOBLIB/STEPLIB 
effects.)

3. If it is run under TSO and is in the appropriate IKJTSOxx list (AUTHPGM, 
AUTHCMD, AUTHTSF) for the way it was run, it will run APF-authorized. (Again, 
ignoring possible JOBLIB/STEPLIB effects.)

But it is only truly "authorized" if it is loaded by an already-authorized 
program in case 1, or when cases 2 or 3 apply.

-- 
Walt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe DEVOPS

2019-11-20 Thread Rob Schramm 
from a purely TSS standpoint, Setup omvs sectrace for TSS.  It will provide
a lot of output.  Combine with SECTRACE for mvs side of things.

Or the regular omvs security report and audit everything.  Also a lot of
output but should show most things.

The other thing would be to rachet up debugging / logging on the Jenkins
client in omvs.

Rob

On Wed, Nov 20, 2019, 18:28 Chris Parker  wrote:

> Hi Dave,
>
> I wasn't aware that a Jenkins slave was able to run natively under USS.
> At the last place I worked, Jenkins was being used off mainframe to
> interface with z/OSMF and Zowe to execute and manage the tests.
>
> Chris
>
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf
> Of Jousma, David
> Sent: Wednesday, November 20, 2019 3:06 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Mainframe DEVOPS
>
> All,
>
> We are evaluating moving from standard green screen application
> development to using the new tooling including iDZ-> GIT -> IBM DBB,
> ->Jenkins -> Urban Code Deploy, etc.   Working on a mini POC in the
> sandbox, and am having a hard time finding z/OS security requirements for
> running the Jenkins slave as mainframe Unix user, and what it really needs
> access to.  I'm still learning this territory, but my impression is the
> Jenkins server (off platflorm) communicates with the Jenkins slave on the
> MF and is a pipeline control tool, and issues GIT, IBM DBB build commands,
> and that the intention that it does that work on behalf of others, which
> could be an individual developer, or could be the userid of the "change
> management process", etc.
>
> I'm hoping that there are some shops out there already doing this, and
> would interested in sharing some information off-list?
>
> Thanks, Dave
>
>
> _
> Dave Jousma
> AVP | Manager, Systems Engineering
> [cid:image003.png@01D4F915.C9E34050]
>
> Fifth Third Bank  |  1830 East Paris Ave, SE  |  MD RSCB2H  |  Grand
> Rapids, MI 49546
> 616.653.8429  |  fax: 616.653.2717
>
>
>
> This e-mail transmission contains information that is confidential and may
> be privileged.
> It is intended only for the addressee(s) named above. If you receive this
> e-mail in error, please do not read, copy or disseminate it in any manner.
> If you are not the intended recipient, any disclosure, copying,
> distribution or use of the contents of this information is prohibited.
> Please reply to the message immediately by informing the sender that the
> message was misdirected. After replying, please erase it from your computer
> system. Your assistance in correcting this error is appreciated.
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> ---
> NOTICE:
> This email and all attachments are confidential, may be proprietary, and
> may be privileged or otherwise protected from disclosure. They are intended
> solely for the individual or entity to whom the email is addressed.
> However, mistakes sometimes happen in addressing emails. If you believe
> that you are not an intended recipient, please stop reading immediately. Do
> not copy, forward, or rely on the contents in any way. Notify the sender
> and/or Imperva, Inc. by telephone at +1 (650) 832-6006 and then delete or
> destroy any copy of this email and its attachments. The sender reserves and
> asserts all rights to confidentiality, as well as any privileges that may
> apply. Any disclosure, copying, distribution or action taken or omitted to
> be taken by an unintended recipient in reliance on this message is
> prohibited and may be unlawful.
> Please consider the environment before printing this email.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe DEVOPS

2019-11-20 Thread Chris Parker 
Hi Dave,

I wasn't aware that a Jenkins slave was able to run natively under USS.  At the 
last place I worked, Jenkins was being used off mainframe to interface with 
z/OSMF and Zowe to execute and manage the tests.

Chris

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Jousma, David
Sent: Wednesday, November 20, 2019 3:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Mainframe DEVOPS

All,

We are evaluating moving from standard green screen application development to 
using the new tooling including iDZ-> GIT -> IBM DBB, ->Jenkins -> Urban Code 
Deploy, etc.   Working on a mini POC in the sandbox, and am having a hard time 
finding z/OS security requirements for running the Jenkins slave as mainframe 
Unix user, and what it really needs access to.  I'm still learning this 
territory, but my impression is the Jenkins server (off platflorm) communicates 
with the Jenkins slave on the MF and is a pipeline control tool, and issues 
GIT, IBM DBB build commands, and that the intention that it does that work on 
behalf of others, which could be an individual developer, or could be the 
userid of the "change management process", etc.

I'm hoping that there are some shops out there already doing this, and would 
interested in sharing some information off-list?

Thanks, Dave

_
Dave Jousma
AVP | Manager, Systems Engineering
[cid:image003.png@01D4F915.C9E34050]

Fifth Third Bank  |  1830 East Paris Ave, SE  |  MD RSCB2H  |  Grand Rapids, MI 
49546
616.653.8429  |  fax: 616.653.2717



This e-mail transmission contains information that is confidential and may be 
privileged.
It is intended only for the addressee(s) named above. If you receive this 
e-mail in error, please do not read, copy or disseminate it in any manner.  If 
you are not the intended recipient, any disclosure, copying, distribution or 
use of the contents of this information is prohibited. Please reply to the 
message immediately by informing the sender that the message was misdirected. 
After replying, please erase it from your computer system. Your assistance in 
correcting this error is appreciated.




--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN
---
NOTICE:
This email and all attachments are confidential, may be proprietary, and may be 
privileged or otherwise protected from disclosure. They are intended solely for 
the individual or entity to whom the email is addressed. However, mistakes 
sometimes happen in addressing emails. If you believe that you are not an 
intended recipient, please stop reading immediately. Do not copy, forward, or 
rely on the contents in any way. Notify the sender and/or Imperva, Inc. by 
telephone at +1 (650) 832-6006 and then delete or destroy any copy of this 
email and its attachments. The sender reserves and asserts all rights to 
confidentiality, as well as any privileges that may apply. Any disclosure, 
copying, distribution or action taken or omitted to be taken by an unintended 
recipient in reliance on this message is prohibited and may be unlawful.
Please consider the environment before printing this email.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: A real light bulb moment [for 3420 tape drives] | Computerworld Shark Tank

2019-11-20 Thread Paul Gilmartin 
On Wed, 20 Nov 2019 17:06:19 -0500, zMan wrote:

>So, no reflection on Mark for posting, but: pretty boring story. Hardware
>problem was hard to diagnose. This is special?
>
On Wed, 20 Nov 2019 15:21:59 -0500, Mark Regan wrote:

>https://www.computerworld.com/article/3447337/a-real-light-bulb-moment.html
>
Alas, in the day there was little microcode and no lucid diagnosis of
failure to detect BOT.  I wonder what did?  Just pass a few dozen
meters of leader and turn on a red light?

>On Wed, Nov 20, 2019 at 3:52 PM Seymour J Metz wrote:
>
>> https://jhs-shop.com/products/copy-of-wizard-of-id-print-pillage-then-burn

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: A real light bulb moment [for 3420 tape drives] | Computerworld Shark Tank

2019-11-20 Thread zMan 
Ah. Well, yeah. But since light bulb presumably LOOKED OK to the eye, not
clear they didn't actually do that. We've all been there, wound up
Easter-egging and fixing it thus. But that's just debugging.

On Wed, Nov 20, 2019 at 5:16 PM Seymour J Metz  wrote:

> What was special was not checking the easy things first, hence pillage
> then burn.
>
>
> --
> Shmuel (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
>
>
> 
> From: IBM Mainframe Discussion List  on behalf
> of zMan 
> Sent: Wednesday, November 20, 2019 5:06 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: A real light bulb moment [for 3420 tape drives] |
> Computerworld Shark Tank
>
> So, no reflection on Mark for posting, but: pretty boring story. Hardware
> problem was hard to diagnose. This is special?
>
> On Wed, Nov 20, 2019 at 3:52 PM Seymour J Metz  wrote:
>
> >
> https://secure-web.cisco.com/1aexAuvqb-0prO4a6Hdd11q6I5RCOtqNIDHirfqdEh4gsDWRxMaN8-V3htPZfgTdSLbhz25FW0Sc6sCLgyoR4IvpQ2EHmMLX3SoEZy8kwI1MVG64crTUCwjXqL2OKipT5eD9PSAFZtx5D82a3tmGzbpwpqnX7AA1eu8v9kOSKFKUlObAOdj1kn1BdfC5Y8rZSYDh5dNZsPnFNN23KwMmcJGhhquEgQK_qibznsHp8stmAe_-y5A47GT0d2Xg0Y0v_wQtRXZaYIln3v6XAVa8WRlTHvZyERCns24mffqki-AJ2bRzsO9HMEPwVIQL-z-SVi0N3mjBW7Cvl_73X8-UbgkllntBmJ7vw_EkJXV4x1r76Jqkj_YJdKvDbLY7_nzMAkod5KLwrGVSHh0ZMFondLya9BzPz7sAkRmWaZXYaiTT3yz0KFH4bGhka5WebxFyC/https%3A%2F%2Fjhs-shop.com%2Fproducts%2Fcopy-of-wizard-of-id-print-pillage-then-burn
> >
> >
> > --
> > Shmuel (Seymour J.) Metz
> > http://mason.gmu.edu/~smetz3
> >
> >
> > 
> > From: IBM Mainframe Discussion List  on behalf
> > of Mark Regan 
> > Sent: Wednesday, November 20, 2019 3:21 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Fwd: A real light bulb moment [for 3420 tape drives] |
> > Computerworld Shark Tank
> >
> >
> >
> https://secure-web.cisco.com/1fwg7knHygn-XgeTzInRuZeWwOkza8h3I35f6ZgzvzbULq44-UDLqK_nUYdKFK_BtBGy9zMf4xpKHJGqkKff3ZUOSTm2R6mVugjGcBVNL2aadjgddUNUaqsXD-UD0jzieN7AgeoP6i0DuKGuei1KHR1m25cp6d0_QwLCZhV_4Qe_oxKHcd0eO2nrf8GXS8Ihw0bCj9hhOydE2kR_x8UNY-NOrsrRA9LSmEKJTFe9t4pnRdTDLRZjVH3gW5208s38sWzwcp-pWsX8GFR3FwGa-_x5TnEeu303K0o71M19NE0WvzAYiH_0-MNqziRDbnHxUFSp1n2_rdT4U2ojtL-fCoPLh7anFM4thJCCHPb5hKbQRYHUB4wmP8rM_iIA2htbUS5y7dC-t0aELDZRSqWB0iw/https%3A%2F%2Fwww.computerworld.com%2Farticle%2F3447337%2Fa-real-light-bulb-moment.html
> >
> >
> >
> > Regards,
> >
> >
> >
> > Mark T. Regan, K8MTR
> >
> > CTO1 USNR-Retired,
> >
> > Nationwide Insurance, Retired
> >
> >
> >
> >
> >
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
>
> --
> zMan -- "I've got a mainframe and I'm not afraid to use it"
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


-- 
zMan -- "I've got a mainframe and I'm not afraid to use it"

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe DEVOPS

2019-11-20 Thread Seymour J Metz 
 5. ISPF/PDF EDIT has facilities not present on the PC editor you're
using.

FWIW the PC editor I use most is TSPF; I'll give it up when I have a clone of 
the current ISPF/PDF EDIT or they pry it out of my cold dead fingers.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3



From: IBM Mainframe Discussion List  on behalf of 
Lionel B Dyck 
Sent: Wednesday, November 20, 2019 5:00 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Mainframe DEVOPS

There is now a tool that will let your mainframe developers who are
currently very productive using ISPF to interface to git.  Check out
https://secure-web.cisco.com/1zS27ov-kujgAgebP2gOfK0vy8zezUKk9q2ObqbEqRnHp_ihMxxP7WvktQYWT5KxsCBbJZkvKJvx7xaO51yQebIXJqTjdSrOLLbbytPTxbOnT6DPTS3kEqgL8eHw0lwl1yY-BUb_JBeLSEstTXf9WM_S2_BSKvHERZcV1TpmscIQ9H_a_vik6EAkvX1j3GDy5QSQJQBbM6xeGd-YTPvAoiAOVQpkJSnhJewXor5IJWw9NDEjBiO3lYVyHYlrke7088NM-S87AqK7cGDIpi29rmwePQMe5JEkIGI6rz1ULvADYch_Zm3adTXTGcvfw_CK3dtyNmeQjDG9lA3JDoLN-V-f2cN1Q3Re4RaYYG3qj2DvrXQHzK5z0ZxavfN4qBWbzEPswmVV3x1Z2lJzNTf6VfILkXQARd2hkYL0MJxj7xzG0VqAwBY4gwHUn_7YCZ2GW/https%3A%2F%2Fzigi.rocks
 for more info.

The V1R1 is about to be released into the wild - a release candidate is
current available for the brave. This update addresses many of the issues in
the original v1r0 release.

Why use ISPF to interface to git:

1.  Many developers are very comfortable and thus very productive using
ISPF tools.
2.  There have been many extensions to ISPF edit, in house developed,
cbttape, and vendor, that extend ISPF Edit significantly to improve
productivity.
3.  The younger developers, who may already know about git, will find it
familiar while remaining on the mainframe
4.  The more seasoned developers will  not have to spend time learning a
new development interface and can continue to produce

Zigi - the Z ISPF Git Interface


Lionel B. Dyck <
Website: 
http://secure-web.cisco.com/15wUQePKuwls7GQ-8EAuz2sufjeKxkJM5_9qVksRQVJzks4cFKiO3S9xFLlnSUBSsOpcHfvasteRwuBGWRGP8D2RAYNvUKCTNPkiQQRPYkky5E5RKOcFD-Mn__AzpukprBvvCT0Rgrndjx065us2roBiTYblERlQKuMsVyY9d9PXQ9SlBF1B4lo3Z2pKb-ymeCsnO6Fpq_W5muVZxEUgDDnLE5_tjLDqMwJS2ctONcwUaarctTstzfP5pLruyKodm_8cS-HOXpCnYjSwCmxt1VAW1FmWp510siPkq-X11yRWELrRDXz3dLjX5IpMu13VM0sqFgUW1-lOtpKxmaRggTriY6YHXrXFW9urWUMiRs78zT6wZdlgK5D2Bjif3VU5mhDW8EKlVjBeW__D6aqD_6DvpgFVUBN6SdL0z6f2DIR0XP4LCicGPwYSUMRhBp49R/http%3A%2F%2Fwww.lbdsoftware.com

"Worry more about your character than your reputation.  Character is what
you are, reputation merely what others think you are." - John Wooden

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of
Jousma, David
Sent: Wednesday, November 20, 2019 3:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Mainframe DEVOPS

All,

We are evaluating moving from standard green screen application development
to using the new tooling including iDZ-> GIT -> IBM DBB, ->Jenkins -> Urban
Code Deploy, etc.   Working on a mini POC in the sandbox, and am having a
hard time finding z/OS security requirements for running the Jenkins slave
as mainframe Unix user, and what it really needs access to.  I'm still
learning this territory, but my impression is the Jenkins server (off
platflorm) communicates with the Jenkins slave on the MF and is a pipeline
control tool, and issues GIT, IBM DBB build commands, and that the intention
that it does that work on behalf of others, which could be an individual
developer, or could be the userid of the "change management process", etc.

I'm hoping that there are some shops out there already doing this, and would
interested in sharing some information off-list?

Thanks, Dave


_
Dave Jousma
AVP | Manager, Systems Engineering
[cid:image003.png@01D4F915.C9E34050]

Fifth Third Bank  |  1830 East Paris Ave, SE  |  MD RSCB2H  |  Grand Rapids,
MI 49546
616.653.8429  |  fax: 616.653.2717



This e-mail transmission contains information that is confidential and may
be privileged.
It is intended only for the addressee(s) named above. If you receive this
e-mail in error, please do not read, copy or disseminate it in any manner.
If you are not the intended recipient, any disclosure, copying, distribution
or use of the contents of this information is prohibited. Please reply to
the message immediately by informing the sender that the message was
misdirected. After replying, please erase it from your computer system. Your
assistance in correcting this error is appreciated.




--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@listserv.ua.edu   with the
message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the

Re: A real light bulb moment [for 3420 tape drives] | Computerworld Shark Tank

2019-11-20 Thread Seymour J Metz 
What was special was not checking the easy things first, hence pillage then 
burn.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3



From: IBM Mainframe Discussion List  on behalf of 
zMan 
Sent: Wednesday, November 20, 2019 5:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: A real light bulb moment [for 3420 tape drives] | Computerworld 
Shark Tank

So, no reflection on Mark for posting, but: pretty boring story. Hardware
problem was hard to diagnose. This is special?

On Wed, Nov 20, 2019 at 3:52 PM Seymour J Metz  wrote:

> https://secure-web.cisco.com/1aexAuvqb-0prO4a6Hdd11q6I5RCOtqNIDHirfqdEh4gsDWRxMaN8-V3htPZfgTdSLbhz25FW0Sc6sCLgyoR4IvpQ2EHmMLX3SoEZy8kwI1MVG64crTUCwjXqL2OKipT5eD9PSAFZtx5D82a3tmGzbpwpqnX7AA1eu8v9kOSKFKUlObAOdj1kn1BdfC5Y8rZSYDh5dNZsPnFNN23KwMmcJGhhquEgQK_qibznsHp8stmAe_-y5A47GT0d2Xg0Y0v_wQtRXZaYIln3v6XAVa8WRlTHvZyERCns24mffqki-AJ2bRzsO9HMEPwVIQL-z-SVi0N3mjBW7Cvl_73X8-UbgkllntBmJ7vw_EkJXV4x1r76Jqkj_YJdKvDbLY7_nzMAkod5KLwrGVSHh0ZMFondLya9BzPz7sAkRmWaZXYaiTT3yz0KFH4bGhka5WebxFyC/https%3A%2F%2Fjhs-shop.com%2Fproducts%2Fcopy-of-wizard-of-id-print-pillage-then-burn
>
>
> --
> Shmuel (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
>
>
> 
> From: IBM Mainframe Discussion List  on behalf
> of Mark Regan 
> Sent: Wednesday, November 20, 2019 3:21 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Fwd: A real light bulb moment [for 3420 tape drives] |
> Computerworld Shark Tank
>
>
> https://secure-web.cisco.com/1fwg7knHygn-XgeTzInRuZeWwOkza8h3I35f6ZgzvzbULq44-UDLqK_nUYdKFK_BtBGy9zMf4xpKHJGqkKff3ZUOSTm2R6mVugjGcBVNL2aadjgddUNUaqsXD-UD0jzieN7AgeoP6i0DuKGuei1KHR1m25cp6d0_QwLCZhV_4Qe_oxKHcd0eO2nrf8GXS8Ihw0bCj9hhOydE2kR_x8UNY-NOrsrRA9LSmEKJTFe9t4pnRdTDLRZjVH3gW5208s38sWzwcp-pWsX8GFR3FwGa-_x5TnEeu303K0o71M19NE0WvzAYiH_0-MNqziRDbnHxUFSp1n2_rdT4U2ojtL-fCoPLh7anFM4thJCCHPb5hKbQRYHUB4wmP8rM_iIA2htbUS5y7dC-t0aELDZRSqWB0iw/https%3A%2F%2Fwww.computerworld.com%2Farticle%2F3447337%2Fa-real-light-bulb-moment.html
>
>
>
> Regards,
>
>
>
> Mark T. Regan, K8MTR
>
> CTO1 USNR-Retired,
>
> Nationwide Insurance, Retired
>
>
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


--
zMan -- "I've got a mainframe and I'm not afraid to use it"

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe DEVOPS

2019-11-20 Thread Jousma, David 
Thanks Lionel.   I'll take a peek at it, but our current direction is to 
piggyback on similar pipeline functionality our installation is already using 
for all the other platforms as much as possible.   Your solution appears to be 
a very nice implementation, from what I have read, but doesn't address the 
needed processes to promote code, packages, etc from development stage through 
to Production.

_
Dave Jousma
AVP | Manager, Systems Engineering  

Fifth Third Bank  |  1830 East Paris Ave, SE  |  MD RSCB2H  |  Grand Rapids, MI 
49546
616.653.8429  |  fax: 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Lionel B Dyck
Sent: Wednesday, November 20, 2019 5:01 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Mainframe DEVOPS

**CAUTION EXTERNAL EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

There is now a tool that will let your mainframe developers who are currently 
very productive using ISPF to interface to git.  Check out 
https://protect2.fireeye.com/url?k=23e2235b-7fbed754-23e209c3-0cc47a33347c-0ba6f4518c1b7c75=https://zigi.rocks/
 for more info.

The V1R1 is about to be released into the wild - a release candidate is current 
available for the brave. This update addresses many of the issues in the 
original v1r0 release.

Why use ISPF to interface to git:

1.  Many developers are very comfortable and thus very productive using
ISPF tools. 
2.  There have been many extensions to ISPF edit, in house developed,
cbttape, and vendor, that extend ISPF Edit significantly to improve 
productivity.
3.  The younger developers, who may already know about git, will find it
familiar while remaining on the mainframe
4.  The more seasoned developers will  not have to spend time learning a
new development interface and can continue to produce

Zigi - the Z ISPF Git Interface


Lionel B. Dyck <
Website: 
https://protect2.fireeye.com/url?k=98b27cf5-c4ee88fa-98b2566d-0cc47a33347c-e71e673d8eea16a2=http://www.lbdsoftware.com/

"Worry more about your character than your reputation.  Character is what you 
are, reputation merely what others think you are." - John Wooden

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Jousma, David
Sent: Wednesday, November 20, 2019 3:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Mainframe DEVOPS

All,

We are evaluating moving from standard green screen application development to 
using the new tooling including iDZ-> GIT -> IBM DBB, ->Jenkins -> Urban
Code Deploy, etc.   Working on a mini POC in the sandbox, and am having a
hard time finding z/OS security requirements for running the Jenkins slave as 
mainframe Unix user, and what it really needs access to.  I'm still learning 
this territory, but my impression is the Jenkins server (off
platflorm) communicates with the Jenkins slave on the MF and is a pipeline 
control tool, and issues GIT, IBM DBB build commands, and that the intention 
that it does that work on behalf of others, which could be an individual 
developer, or could be the userid of the "change management process", etc.

I'm hoping that there are some shops out there already doing this, and would 
interested in sharing some information off-list?

Thanks, Dave


_
Dave Jousma
AVP | Manager, Systems Engineering
[cid:image003.png@01D4F915.C9E34050]

Fifth Third Bank  |  1830 East Paris Ave, SE  |  MD RSCB2H  |  Grand Rapids, MI 
49546
616.653.8429  |  fax: 616.653.2717



This e-mail transmission contains information that is confidential and may be 
privileged.
It is intended only for the addressee(s) named above. If you receive this 
e-mail in error, please do not read, copy or disseminate it in any manner.
If you are not the intended recipient, any disclosure, copying, distribution or 
use of the contents of this information is prohibited. Please reply to the 
message immediately by informing the sender that the message was misdirected. 
After replying, please erase it from your computer system. Your assistance in 
correcting this error is appreciated.




--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu   with the
message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL 
EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**


This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the

Re: A real light bulb moment [for 3420 tape drives] | Computerworld Shark Tank

2019-11-20 Thread zMan 
So, no reflection on Mark for posting, but: pretty boring story. Hardware
problem was hard to diagnose. This is special?

On Wed, Nov 20, 2019 at 3:52 PM Seymour J Metz  wrote:

> https://jhs-shop.com/products/copy-of-wizard-of-id-print-pillage-then-burn
>
>
> --
> Shmuel (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
>
>
> 
> From: IBM Mainframe Discussion List  on behalf
> of Mark Regan 
> Sent: Wednesday, November 20, 2019 3:21 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Fwd: A real light bulb moment [for 3420 tape drives] |
> Computerworld Shark Tank
>
>
> https://secure-web.cisco.com/1fwg7knHygn-XgeTzInRuZeWwOkza8h3I35f6ZgzvzbULq44-UDLqK_nUYdKFK_BtBGy9zMf4xpKHJGqkKff3ZUOSTm2R6mVugjGcBVNL2aadjgddUNUaqsXD-UD0jzieN7AgeoP6i0DuKGuei1KHR1m25cp6d0_QwLCZhV_4Qe_oxKHcd0eO2nrf8GXS8Ihw0bCj9hhOydE2kR_x8UNY-NOrsrRA9LSmEKJTFe9t4pnRdTDLRZjVH3gW5208s38sWzwcp-pWsX8GFR3FwGa-_x5TnEeu303K0o71M19NE0WvzAYiH_0-MNqziRDbnHxUFSp1n2_rdT4U2ojtL-fCoPLh7anFM4thJCCHPb5hKbQRYHUB4wmP8rM_iIA2htbUS5y7dC-t0aELDZRSqWB0iw/https%3A%2F%2Fwww.computerworld.com%2Farticle%2F3447337%2Fa-real-light-bulb-moment.html
>
>
>
> Regards,
>
>
>
> Mark T. Regan, K8MTR
>
> CTO1 USNR-Retired,
>
> Nationwide Insurance, Retired
>
>
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


-- 
zMan -- "I've got a mainframe and I'm not afraid to use it"

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Mainframe DEVOPS

2019-11-20 Thread Lionel B Dyck 
There is now a tool that will let your mainframe developers who are
currently very productive using ISPF to interface to git.  Check out
https://zigi.rocks for more info.

The V1R1 is about to be released into the wild - a release candidate is
current available for the brave. This update addresses many of the issues in
the original v1r0 release.

Why use ISPF to interface to git:

1.  Many developers are very comfortable and thus very productive using
ISPF tools. 
2.  There have been many extensions to ISPF edit, in house developed,
cbttape, and vendor, that extend ISPF Edit significantly to improve
productivity.
3.  The younger developers, who may already know about git, will find it
familiar while remaining on the mainframe
4.  The more seasoned developers will  not have to spend time learning a
new development interface and can continue to produce

Zigi - the Z ISPF Git Interface


Lionel B. Dyck <
Website: http://www.lbdsoftware.com

"Worry more about your character than your reputation.  Character is what
you are, reputation merely what others think you are." - John Wooden

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of
Jousma, David
Sent: Wednesday, November 20, 2019 3:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Mainframe DEVOPS

All,

We are evaluating moving from standard green screen application development
to using the new tooling including iDZ-> GIT -> IBM DBB, ->Jenkins -> Urban
Code Deploy, etc.   Working on a mini POC in the sandbox, and am having a
hard time finding z/OS security requirements for running the Jenkins slave
as mainframe Unix user, and what it really needs access to.  I'm still
learning this territory, but my impression is the Jenkins server (off
platflorm) communicates with the Jenkins slave on the MF and is a pipeline
control tool, and issues GIT, IBM DBB build commands, and that the intention
that it does that work on behalf of others, which could be an individual
developer, or could be the userid of the "change management process", etc.

I'm hoping that there are some shops out there already doing this, and would
interested in sharing some information off-list?

Thanks, Dave


_
Dave Jousma
AVP | Manager, Systems Engineering
[cid:image003.png@01D4F915.C9E34050]

Fifth Third Bank  |  1830 East Paris Ave, SE  |  MD RSCB2H  |  Grand Rapids,
MI 49546
616.653.8429  |  fax: 616.653.2717



This e-mail transmission contains information that is confidential and may
be privileged.
It is intended only for the addressee(s) named above. If you receive this
e-mail in error, please do not read, copy or disseminate it in any manner.
If you are not the intended recipient, any disclosure, copying, distribution
or use of the contents of this information is prohibited. Please reply to
the message immediately by informing the sender that the message was
misdirected. After replying, please erase it from your computer system. Your
assistance in correcting this error is appreciated.




--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@listserv.ua.edu   with the
message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Mainframe DEVOPS

2019-11-20 Thread Jousma, David 
All,

We are evaluating moving from standard green screen application development to 
using the new tooling including iDZ-> GIT -> IBM DBB, ->Jenkins -> Urban Code 
Deploy, etc.   Working on a mini POC in the sandbox, and am having a hard time 
finding z/OS security requirements for running the Jenkins slave as mainframe 
Unix user, and what it really needs access to.  I'm still learning this 
territory, but my impression is the Jenkins server (off platflorm) communicates 
with the Jenkins slave on the MF and is a pipeline control tool, and issues 
GIT, IBM DBB build commands, and that the intention that it does that work on 
behalf of others, which could be an individual developer, or could be the 
userid of the "change management process", etc.

I'm hoping that there are some shops out there already doing this, and would 
interested in sharing some information off-list?

Thanks, Dave

_
Dave Jousma
AVP | Manager, Systems Engineering
[cid:image003.png@01D4F915.C9E34050]

Fifth Third Bank  |  1830 East Paris Ave, SE  |  MD RSCB2H  |  Grand Rapids, MI 
49546
616.653.8429  |  fax: 616.653.2717



This e-mail transmission contains information that is confidential and may be 
privileged.
It is intended only for the addressee(s) named above. If you receive this 
e-mail in error,
please do not read, copy or disseminate it in any manner.  If you are not the 
intended 
recipient, any disclosure, copying, distribution or use of the contents of this 
information
is prohibited. Please reply to the message immediately by informing the sender 
that the 
message was misdirected. After replying, please erase it from your computer 
system. Your 
assistance in correcting this error is appreciated.




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: What no BXLE's on a Weds.

2019-11-20 Thread Edward Finnell 
Uhhh, looks the List is still up but the distribution server has the hiccups. 
Don't know when and if-yet.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

What no BXLE's on a Weds.

2019-11-20 Thread Edward Finnell 
Thought Zebulon Glitz might have zinged us.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: A real light bulb moment [for 3420 tape drives] | Computerworld Shark Tank

2019-11-20 Thread Seymour J Metz 
https://jhs-shop.com/products/copy-of-wizard-of-id-print-pillage-then-burn


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3



From: IBM Mainframe Discussion List  on behalf of 
Mark Regan 
Sent: Wednesday, November 20, 2019 3:21 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Fwd: A real light bulb moment [for 3420 tape drives] | Computerworld 
Shark Tank

https://secure-web.cisco.com/1fwg7knHygn-XgeTzInRuZeWwOkza8h3I35f6ZgzvzbULq44-UDLqK_nUYdKFK_BtBGy9zMf4xpKHJGqkKff3ZUOSTm2R6mVugjGcBVNL2aadjgddUNUaqsXD-UD0jzieN7AgeoP6i0DuKGuei1KHR1m25cp6d0_QwLCZhV_4Qe_oxKHcd0eO2nrf8GXS8Ihw0bCj9hhOydE2kR_x8UNY-NOrsrRA9LSmEKJTFe9t4pnRdTDLRZjVH3gW5208s38sWzwcp-pWsX8GFR3FwGa-_x5TnEeu303K0o71M19NE0WvzAYiH_0-MNqziRDbnHxUFSp1n2_rdT4U2ojtL-fCoPLh7anFM4thJCCHPb5hKbQRYHUB4wmP8rM_iIA2htbUS5y7dC-t0aELDZRSqWB0iw/https%3A%2F%2Fwww.computerworld.com%2Farticle%2F3447337%2Fa-real-light-bulb-moment.html



Regards,



Mark T. Regan, K8MTR

CTO1 USNR-Retired,

Nationwide Insurance, Retired






--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Fwd: A real light bulb moment [for 3420 tape drives] | Computerworld Shark Tank

2019-11-20 Thread Mark Regan 
https://www.computerworld.com/article/3447337/a-real-light-bulb-moment.html 

 

Regards,

 

Mark T. Regan, K8MTR

CTO1 USNR-Retired,

Nationwide Insurance, Retired

 

 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IODF 2107 control unit define error

2019-11-20 Thread Pew, Curtis G 
On Nov 20, 2019, at 8:45 AM, Jake Anderson  wrote:
> 
> I was trying to define control Unit 7001 for dasd and while connecting to
> CHPID 0C it threw a message saying it is already connected to another
> control unit 7000.
> 
> I have defined CHP 0C as shared
> 
> Is there anything I am missing here ?
> 

Make sure the CUADDR is different.


-- 
Pew, Curtis G
curtis@austin.utexas.edu

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

IODF 2107 control unit define error

2019-11-20 Thread Jake Anderson 
Hi

I was trying to define control Unit 7001 for dasd and while connecting to
CHPID 0C it threw a message saying it is already connected to another
control unit 7000.

I have defined CHP 0C as shared

Is there anything I am missing here ?

Jake.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Around ASSBASST and ASSBPHTM time fields

2019-11-20 Thread John Arwe 
On 11/14/2019 9:25 AM, Michael Stein wrote:
...
>> Q2.  ... Because PHTM is for all types
>>  of SRBs. Is this the correct understanding?

My CMG95 paper on these fields should help.  I don't recall if that
paper covered enclave tasks as well, but from the standpoint of the
fields under discussion they work exactly like enclave SRBs.

As Peter's answer noted, you do need to read the field's comments: in
particular, "preemptible class" work is a superset of "preemptible"
SRBs. Basically in 5.2 I needed to come up with a new term (preemptible
class was the least bad at the time) to cover enclave SRBs, client SRBs,
and "simple preemptible" SRBs (those with home=owner, which at the time
we had no exploiters for).  I also used "work" rather than "SRBs"
because we knew we were adding enclave tasks next for DB2's use in
stored procedures.

A more accurate formulation is: Because PHTM is for all types
of preemptible class work not running with the subject address space as
home whose CPU time is not already accounted for by ASCBEJST.

I don't need to talk about local or global SRBs in that formulation,
because they're not "preemptible class" work.

> find that those fields are only updated with CPU from the SRB routine
> use after some types interrupts of the SRB routines involved.  I would
> usually expect this "interrupt" to be the SRB routine termination, but
> other reasons (page fault?, wait for lock?, preemption?) might get those
> ASSB CPU time fields updated with CPU time "used so far" sooner.

Preemptible class work is regularly interrupted to see if something else
should be dispatched (higher absolute priority, or same priority when
the dispatcher is rotating within a priority).  The CPU time is
accounted for then.  Local and global (aka non-preemptible) SRBs are the
ones with "lumpy" time accounting of the sort you described.

Bumping up one level of abstraction, this is the rule for the then-new
ASSB fields:
1. PHTM + EJST + SRBT = all CPU time consumed by all work units with
that address space = home
2. EJST + SRBT + ASST = all CPU time consumed _on behalf of_ that
address space, regardless of the work units' home address space.

One of the weirder consequences of enclaves' status as "memory-less
peers" to address spaces is that their CPU time contributes to 1 but not
to 2 (the enclave equivalent to 2 is enclave CPU time).


-- 
John Arwe
IBM Wave for z/VM Development product owner

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN