Re: LXRES best practices

2018-12-06 Thread Mark Jacobs - Listserv
AFAIK it's not. If so, please educate me. Mark Jacobs Joseph Reichman wrote on 12/6/18 7:48 AM: Wasn’t aware that name/token was valid across an ipl > On Dec 6, 2018, at 1:35 AM, Ed Jaffe > wrote: > >> On 11/29/2018 5:17 AM, Joseph Reichman wrote: >> I am

Re: ZFS RECORG=FS

2018-12-11 Thread Mark Jacobs - Listserv
A zFS is a specially formatted VSAM LDS. How are you creating the ZFS? Hervey Martinez wrote on 12/11/18 3:59 PM: Working on HFS to ZFS conversion and the DFSMS manual for zos 2.3 mentions the RECORG=FS to be used for ZFS files. In creating a test case in ISMF, it does not recognize this parm a

Re: The WHY of the POR

2019-01-17 Thread Mark Jacobs - Listserv
This thread brings me way back to the PORs needed for MVS/XA testing on the 3081. Shut down production MVS/SP POR to MVS/XA mode Test MVS/XA Shut down MVS/XA POR back to MVS/370 mode IPL MVS/SP Each POR took about 30-45 minutes from what I recall. Tom Conley wrote on 1/17/19 9:19 AM: There is n

So long, farewell,Auf wiedersehen, goodbye

2019-01-30 Thread Mark Jacobs - Listserv
Tomorrow marks my last day at Time Customer Service as the closing of the division is completed. After 8573 days, what a long strange trip its been. I've close to retirement, but would like a few more years. Looking for remote z/OS System Programmer positions seems to be harder than I initially

CSVAPF Facility Class Profiles

2017-04-27 Thread Mark Jacobs - Listserv
I asked this on the RACF mailing list yesterday, didn't get a response, so I'm trying here next. I'm 99.9% confident that CSVAPF.dataset profiles aren't used during system IPL when datasets in the PROGxx member are added to the active APF list. Can someone confirm? -- *One grows tired of jell

Re: Storage Creep

2017-05-02 Thread Mark Jacobs - Listserv
Would a Getmain/Freemain/Storage Trace on the STC help find the problem? Mark Jacobs scott Ford May 2, 2017 at 9:41 AM All: I have a STC written in Cobol V4.1 calling Assembler routines to perform various RACF functions. I have a customer who is reporting seeing a s

Re: SFTP From Linux to z/OS

2017-05-02 Thread Mark Jacobs - Listserv
That's a command when you're using the Co:Z Toolkit's sftp server. No zOS shop should be without it. Mark Jacobs Roach, Dennis May 2, 2017 at 2:32 PM This makes no sense. ls lists the directory at the remote end. The ls command you provided looks like it should be

Re: Activating CFRM policy

2017-05-04 Thread Mark Jacobs - Listserv
You're updating the CFRM dataset on volume PLY001, but the active CFRM dataset is on volume PLY003. Mark Jacobs Jorge Garcia May 4, 2017 at 7:16 AM Hi all, We are activating a new CFRM policy. The build of new policy finishs succesfully and it's build in the righ

Re: SoftAudit ?

2017-05-10 Thread Mark Jacobs - Listserv
I think it was rebranded as Tivoli Asset Manager. Dyck, Lionel B. (TRA) May 10, 2017 at 10:20 AM Whatever happened to SoftAudit from Isogon? Did IBM pick it up and rename it or did it die with the IBM acquisition? Are there any other products that will detect the r

Re: The Mainframe vs. the Server Farm: A Comparison

2017-05-19 Thread Mark Jacobs - Listserv
That's so cool. I'm a Facebook friend of the author. Mark Jacobs Mark Post May 19, 2017 at 12:27 PM On 5/19/2017 at 11:39 AM, Lizette Koehler wrote: -snip- I noticed this: Original Article was at SUSE -snip- https://www.suse.com/communities/blog/mainframe-versus-se

Re: Eliminating CA-Optimizer

2017-06-02 Thread Mark Jacobs - Listserv
There's a file on cbttape.org, File841, that allows programs compiled with CA-Optimizer to continue to execute without recompiling and without needing the Optimizer run time libraries. Mark Jacobs Charles Mills June 2, 2017 at 6:15 PM The real question is "do they ha

Re: curious: Anybody still use ADDRSPC=REAL ?

2017-06-09 Thread Mark Jacobs - Listserv
Over 20 years ago for me. Never looked back. Greg Dyck June 9, 2017 at 12:43 PM It has been 30 years since I saw a program that actually required V=R to run successfully, and that was only for specific OLTEP test programs that dynamically modified CCW chains. beli

Re: Customer is Using CPACF (Crypto) purchased Crypto Express

2017-06-12 Thread Mark Jacobs - Listserv
Encryption/decryption without a CryptoExpress only supports clear keys, not protected or secured encryption keys. Might be enough for the OP, but wouldn't fly in my environment. Tony Thigpen June 12, 2017 at 7:22 AM For encrypting "data at rest", the CPACF is really

Re: Customer is Using CPACF (Crypto) purchased Crypto Express

2017-06-12 Thread Mark Jacobs - Listserv
d email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Mark Jacobs - Listserv <mailto:mark.jac...@custserv.com> June 12, 2017 at 8:01 AM Encryption/decryption without a CryptoExpress only supports clear keys, not protected or secured encryption keys. Might be enough for the OP, but wouldn&#

Moving a Sysplex

2015-11-17 Thread Mark Jacobs - Listserv
Would a GDPS like solution work for moving a sysplex from here to there, where the there is over 1200 miles from here, without taking a sysplex outage? -- Mark Jacobs Time Customer Service Technology and Product Engineering The standard you walk past, is the standard you accept. Lieutenant Gene

Re: Moving a Sysplex

2015-11-17 Thread Mark Jacobs - Listserv
gon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, November 17, 2015 11:02 AM To: IBM-MA

Re: Straightforward way to determine hardware architecture level?

2015-12-01 Thread Mark Jacobs - Listserv
We had an operator named Sheldon, who had the habit of resting his elbow on the POR? button on the console keyboard (3033 maybe). After this happened a couple of times we installed a pill box cover over the button and named it the "Sheldon Shield". Mark Jacobs J O Skip Robinson

Re: What does the 8th character of Load parm mean

2015-12-01 Thread Mark Jacobs - Listserv
It's less useful than it once was, and I don't see any need to use anything other than the default (1) any longer. IEANUC01, IEANUC11 and IEANUC21 are logically the same nucleus; IEANUC01, V=V Nucleus Modules IEANUC11, V=R Nucleus Modules, 31 Bit, not used any longer (Look at the length of the

Re: What does the 8th character of Load parm mean

2015-12-02 Thread Mark Jacobs - Listserv
email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Please be alert for any emails that may ask you for login information or directs you to login via a link. If you believe this message is a phish or aren't sure whether this message is trustworthy, please send the origi

STP Question

2016-01-19 Thread Mark Jacobs - Listserv
We're moving from a three CEC configuration, with all STP rolls, Primary/Backup/Arbiter defined, to a singe CEC that's defined as the Primary, with no backup or arbiter defined to the STP network. I'm not seeing any additional risks, since we're already running in "all our eggs in one basket mo

Re: STP Question

2016-01-20 Thread Mark Jacobs - Listserv
STP is to coordinate time between the CECs. When you have only one, there is nothing to coordinate anymore. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: 19 January, 2016 21:06 To: IBM-MAIN@LISTSERV.UA.E

Re: STP Question

2016-01-20 Thread Mark Jacobs - Listserv
ssion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: 20 January, 2016 13:15 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: STP Question It's being configured that way by our outsourcer, we no longer have control over the configuration. I agree with you, but wanted to

Re: STP Question

2016-01-20 Thread Mark Jacobs - Listserv
Yea, that was my thought too. Just wanted to ask around. Thanks. Mark Jacobs R.S. wrote: W dniu 2016-01-20 o 15:52, Mark Jacobs - Listserv pisze: Our LPARs are being hosted on a single CEC which also might include other client LPARs. All I'm seeing in operlog is that the STP timing ne

Re: Concatenation order in LPALST

2016-02-16 Thread Mark Jacobs - Listserv
It's not required but a good practice to have SYS1.LPALIB first in the LPALST unless you know what you're doing. Mark Jacobs Nathan Astle February 16, 2016 at 7:51 AM Hi, Apology for asking dummy question. Is there a reason on why we need to place Security produ

Re: ISPF library Full

2016-04-01 Thread Mark Jacobs - Listserv
Maybe instead of a customer option, use a RACF profile which would allow finer granularity on who and/or what datasets can be compressed with DISP=SHR Mark Jacobs Peter Relson April 1, 2016 at 8:24 AM In general, I'd change "probably" to "definitely". Of course the

Re: IEC614I Scratch

2018-07-09 Thread Mark Jacobs - Listserv
Is it being suppressed either using MPFLSTxx or AutoOps? Either one can prevent the message from being written to the log. Hervey Martinez wrote on 7/9/18 2:39 PM: We have instances where some GDG files don't get deleted while these are in ML1; thus, they end up generating errors during Second

Re: IEC614I Scratch

2018-07-11 Thread Mark Jacobs - Listserv
is this in? zos? Hervey From: IBM Mainframe Discussion List <mailto:IBM-MAIN@LISTSERV.UA.EDU> on behalf of Mark Jacobs - Listserv <mailto:mark.jac...@custserv.com> Sent: Monday, July 9, 2018 3:01 PM To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@

Re: Migration from DB2 V10 to V11

2018-07-17 Thread Mark Jacobs - Listserv
Early code mismatch? Chopperla Vrao wrote on 7/17/18 7:33 AM: Hello Can someone help me on DB2 V10 to V11 migration related error. So far I have been able to apply fallback PTF's/maintenance and migrate the catalog to V11 CM(DSNTIJTC), till this point things were looking good. When I'm testin

Re: Migration from DB2 V10 to V11

2018-07-20 Thread Mark Jacobs - Listserv
Mainframe Discussion List <mailto:IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, July 17, 2018 6:21 PM To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU> Subject: Re: Migration from DB2 V10 to V11 Early code mismatch? Chopperla Vrao wrote on 7/1

Re: 0,clpa

2018-08-29 Thread Mark Jacobs - Listserv
I mandated CLPA for all IPLs around 1996 or 1997 and told everyone that checkpoint restart was going away. No one cared enough to argue with me. Mark Jacobs Seymour J Metz wrote on 8/29/18 11:32 AM: You'd be unable to restart those jobs. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz

Un-Sysplex a zOS System

2018-08-29 Thread Mark Jacobs - Listserv
We're in a parallel sysplex, sharing most everything, and need to begin planning activities to remove one system from the sysplex, while continuing to use it to run a subset of our current workload. Some of the things we need to consider are; * PDS/e Sharing * Catalogs (we're ECS shared

Re: Un-Sysplex a zOS System

2018-08-30 Thread Mark Jacobs - Listserv
home for a while after everything else is shutdown, hence research on whether it's feasible to begin a system split prior to everything else being shut down. Mark Jacobs Elardus Engelbrecht wrote on 8/30/18 2:35 AM: Mark Jacobs - Listserv wrote: We're in a parallel sysplex, sha

Re: Report volumes with IPLText

2018-09-10 Thread Mark Jacobs - Listserv
Before that command was available, I used this process to prevent Operations from IPLing from volumes I didn't want them to; //ASM EXEC HLASMC,PARM='NOGOFF' //SYSIN DD* NOIPLSTART 0 BALR 12,0 USING *,12 LPSW WAITDBF DS0D WAITDBF DCXL8'000A0

Re: Help With PENDING OFFLINE Devices

2018-09-17 Thread Mark Jacobs - Listserv
Depends what the resources are. If proclibs, and you've implemented dynamic proclibs you can work around it. Mark Jacobs George Rodriguez wrote on 9/17/18 11:58 AM: Mike, You're a lifesaver... Most say they are owned by CATALOG, th2 remainder says either me (GRODRIG) or JES2. I can probably sh

Re: Help With PENDING OFFLINE Devices

2018-09-17 Thread Mark Jacobs - Listserv
T Security* *PX - 47652* *(561) 357-7652 (office)* *(954) 415-7586 (mobile)* *School District of Palm Beach County* *3348 Forest Hill Blvd.* *Room B-332* *West Palm Beach, FL. 33406-5869* *Florida's Only A-Rated Urban District* On Mon, Sep 17, 2018 at 12:04 PM Mark Jacobs - Listserv < m

Re: Help With PENDING OFFLINE Devices

2018-09-17 Thread Mark Jacobs - Listserv
orest Hill Blvd.* *Room B-332* *West Palm Beach, FL. 33406-5869* *Florida's Only A-Rated Urban District* On Mon, Sep 17, 2018 at 1:03 PM Mark Jacobs - Listserv < mark.jac...@custserv.com<mailto:mark.jac...@custserv.com>> wrote: Issue a $DPROCLIB(*) command and see if anything&

Re: ICSF crypto domain sharing

2018-09-27 Thread Mark Jacobs - Listserv
Looks like it; * Greater than 16 Domain support * – Support to allow a cryptographic coprocessor to be shared across more than 16 domains, up to the maximum number of LPARs on the system. * – This support relies on enhanced firmware available with a minimum microcode leve

Re: Any reason to still use SWA=BELOW?

2018-10-08 Thread Mark Jacobs - Listserv
If something/some program executing in that jobclass (I assume it's a batch initiator) is still running control blocks and not using SWAREQ, then yes it might be needed. Mark Jacobs Tom Conley wrote on 10/8/18 8:37 PM: Just wondering if there is any reason to still use SWA=BELOW. I'm seeing th

Re: ECSA tuning clarification

2018-11-12 Thread Mark Jacobs - Listserv
By tuning, do you mean size of, or something else? Peter wrote on 11/12/18 12:43 PM: Hi This is just general question and ignorant about this area. So wanted to get some suggestions and pointers about ECSA running. What are the factors that decides the tunning of ECSA value for zOS ? Please sh

Re: ECSA tuning clarification

2018-11-12 Thread Mark Jacobs - Listserv
allow for unexpected spikes. YMMV. Mark Jacobs Peter wrote on 11/12/18 1:18 PM: I meant the size On Mon 12 Nov, 2018, 10:08 PM Mark Jacobs - Listserv < mark.jac...@custserv.com<mailto:mark.jac...@custserv.com> wrote: By tuning, do you mean size of, or something else? Peter wrote on 11/

Re: Security, Other Risks When Unsupported (Was: z14 and z/OS 2.3 Blog Post)

2017-08-02 Thread Mark Jacobs - Listserv
Been there too. Got the t-shirt and everything myself several times over a 38 year career. Mark Jacobs John McKown August 2, 2017 at 8:42 AM ​Hum, around here when I "poke my nose in where it doesn't belong", it tends to get whacked. My immediate manager

Application Performance Tuning Products

2017-08-15 Thread Mark Jacobs - Listserv
Does anyone know of additional products for application performance tuning activities other than Strobe, TriTune, and IBM's Application Performance Analyzer. Just started looking today myself. -- Mark Jacobs Time Customer Service Global Technology Services The standard you walk past is the sta

Re: Application Performance Tuning Products

2017-08-15 Thread Mark Jacobs - Listserv
analysis tool? Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Tuesday, August 15, 2017 10:12 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Application Performance Tuning Products On Tue, Aug 15, 2017 at 9:01

Re: CONSOLE command failing - what else to check?

2017-08-16 Thread Mark Jacobs - Listserv
Does the falling user have an OPERPARM segment in their RACF profile? Todd Burrell August 16, 2017 at 11:52 AM I have 2 users and one can successfully execute the CONSOLE command while running it in a started task and in batch, but the other user cannot. From what

Re: GIM69209S ** RECEIVE PROCESSING HAS FAILED BECAUSE PROGRAM GIMJVCLT COULD NOT BE Started.

2017-08-24 Thread Mark Jacobs - Listserv
Try using the 31 bit version of Java 8. See if that makes a difference. Mark Jacobs גדי בן אבי August 24, 2017 at 9:14 AM This is what SYSPRINT says: -- DATE 08/24/17 TIME 16:08:40 SERVER Data

Re: Reload nucleus module dynamically

2017-09-13 Thread Mark Jacobs - Listserv
University Computing Company (UCC), later known as UCCel. I think that DUO was UCC-2, TMS was UCC-1. Mark Jacobs Edward Gould September 13, 2017 at 3:41 PM On Sep 13, 2017, at 12:11 PM, Peter Hunkeler wrote: What modules do you want to reload? If that is in

Re: Reload nucleus module dynamically

2017-09-13 Thread Mark Jacobs - Listserv
irects you to login via a link. If you believe this message is a phish or aren't sure whether this message is trustworthy, please send the original message as an attachment to 'phish...@timeinc.com'. Mark Jacobs - Listserv <mailto:mark.jac...@custserv.com> September 13,

Re: OA49446 changed RACF behavior for ALIAS, PATH, and AIX

2017-09-18 Thread Mark Jacobs - Listserv
YMMV, but we've been running with that APAR applied for well over a year without any fallout and didn't define that RACF profile. Pinnacle September 18, 2017 at 2:04 PM I'm looking at the HOLDDATA for OA49446. RACF was changed to do authorization checks again

zOS Encryption Services and ICSF

2017-09-20 Thread Mark Jacobs - Listserv
Is there anything like a best practices document available from IBM or Share on setting this up? I just started thinking about all the bits and pieces and was concerned about how having this enabled affects the timeline/method of entering the ICSF Master Keys during a DR situation or processor

Re: zOS Encryption Services and ICSF

2017-09-20 Thread Mark Jacobs - Listserv
No. Don't have, not likely to get one. Mark Jacobs Rob Schramm <mailto:rob.schr...@gmail.com> September 20, 2017 at 12:09 PM 1st Question Do you have/need a TKE? Rob On Wed, Sep 20, 2017, 10:31 AM Mark Jacobs - Listserv < -

Re: zOS Encryption Services and ICSF

2017-09-20 Thread Mark Jacobs - Listserv
27;t be able to read any encrypted zOS dataset. Mark Jacobs Rob Schramm <mailto:rob.schr...@gmail.com> September 20, 2017 at 1:34 PM Well that is either a good thing or a bad thing. What kind of keys are you storing? On Wed, Sep 20, 2017, 12:11 PM Mark Jacobs - Listserv <

Re: Keeping SSN init modules current

2017-09-20 Thread Mark Jacobs - Listserv
Here's a wild thought. Create your own dummy subsystem with its own initialization routine that gets executed before any of the subsystems you're concerned about. This initialization routine can load the other modules into CSA, or even copy from one library to a linklist library. We have an ins

Re: DLIB volume for SAD

2017-09-27 Thread Mark Jacobs - Listserv
When I was doing zOS work, sigh, I always rebuilt the SAD environment on &SYSR2 every time I rebuilt my sysres set after maintenance activities. Mark Jacobs Jesse 1 Robinson September 27, 2017 at 2:13 PM As a practical matter, the SAD IPL volume needs enough sp

Re: DLIB volume for SAD

2017-09-28 Thread Mark Jacobs - Listserv
Mr. Murphy taught me a very long time ago that I should always ensure I have a working SADUMP that matches the OS level requiring it. Agree. That's why I always rebuilt it after every zOS maintenance cycle, cause' ya never know. Mark Jacobs Mark Zelden September

Re: DLIB volume for SAD

2017-09-28 Thread Mark Jacobs - Listserv
hat may ask you for login information or directs you to login via a link. If you believe this message is a phish or aren't sure whether this message is trustworthy, please send the original message as an attachment to 'phish...@timeinc.com'. Mark Jacobs - Listserv <ma

PROCUSERMAX in OMVS Segment

2017-10-05 Thread Mark Jacobs - Listserv
This question might be better asked in the RACF or OMVS mailing lists, but I'm starting here. Does a value set in the OMVS segment for PROCUSERMAX override the setting of MAXPROCUSER in BPXPRMxx? It's documented that way for THREADSMAX, but not for PROCUSERMAX. -- Mark Jacobs Time Customer S

Space Allocation Products

2017-10-06 Thread Mark Jacobs - Listserv
Outside of these four, are there any other products on the market? CA Allocate DASD Space and Placement -- CA Technologies Space Recovery System -- DTS Software MAINVIEW SRM StopX37/II -- BMC Tivoli Advanced Allocation Management -- IBM -- Mark Jacobs Time Customer Service Global Technolo

Re: AEHTRIBMKC?

2017-10-12 Thread Mark Jacobs - Listserv
There are two kinds of fools. One says, “This is old, therefore it is good”; the other says, “This is new, therefore it is better.” -- William Ralph Inge John McKown October 12, 2017 at 2:27 PM On Thu, Oct 12, 2017 at 1:16 PM, Allan Staller ​ But they ar

Re: Question on some z/OS Tuning Parms USEZOSV1R9RULES and MEMDSENQMGT

2017-10-30 Thread Mark Jacobs - Listserv
I enabled MEMDSENQMGT with zOS 1.12. Also started to use it in our sysres build program; IEFDDSRV MODIFY,TYPE=FEATURE,DSENQMGMT=MEMORY USE MEMORY-BASED * DATA SET ENQ * MANAGEMENT F

Re: IKJEFTxx should fail if not JobStep Task

2017-11-02 Thread Mark Jacobs - Listserv
Yes I did. Gave them the same treatment as the French Soldier in Monty Python and the Holy Grail when he taunted King Arthur. Mark Jacobs Edward Gould October 30, 2017 at 2:26 PM Semi on topic. Have any of you seen the “video” that claims that they can bypass

Re: Standalone IPL ADRDSSU and Operating Systems Messages z14

2017-11-03 Thread Mark Jacobs - Listserv
Have you recreated the iplable tape with the latest level of standalone ADRDSSU? Is there anything in the z14 PSP bucket? I'd start with those items. Crispin Hugo November 3, 2017 at 5:55 PM I have used the tape many times on zBC12 but when I use it on Z14 , w

Re: Are JZOS JVM loader excutables installed in PDSE libraries?

2017-11-07 Thread Mark Jacobs - Listserv
Are you talking about these? BROWSESYS1.SIEALNKE Command ===> Name Prompt _ JVMLDM60 _ JVMLDM61 _ JVMLDM66 _ JVMLDM67 _ JVMLDM70 _ JVMLDM71 _ JVMLDM76 _ JVMLDM77 _ JVMLDM80 _ JVMLDM86 Farl

Re: Are JZOS JVM loader excutables installed in PDSE libraries?

2017-11-07 Thread Mark Jacobs - Listserv
tly did not. Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, November 07, 2017 4:10 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Are JZOS JVM loader excutables installed in PDSE libraries? Are

Re: NFS on Mainframe

2017-12-04 Thread Mark Jacobs - Listserv
Last time I looked (about 15 years ago), zOS has both an NFS client and server available. > Timothy Sipples > December 4, 2017 at 4:01 AM > To clarify, z/OS is the NFS client, and something else is the NFS server, > correct? > > It'd be helpful to know exactly what is t

Fire-call, emergency RACF userid

2017-12-07 Thread Mark Jacobs - Listserv
We have an emergency use userid with it's password "locked in a safe", which can be used by authorized people when/if needed. How do other organizations better control something like this? I'm asking since we're implementing MFA for "special" userids, and I don't know how to fit this shared userid

Re: Fire-call, emergency RACF userid

2017-12-07 Thread Mark Jacobs - Listserv
envelope on a lock box > in the computer room, this was before MFA, only MFA experience we have > is windows, LAN ID's > I suspect with MFA, you don't need to suspend the ID, since you'd need > a password and a PIN to be valid? > > > > > > > Carmen Vi

Re: Fire-call, emergency RACF userid

2017-12-08 Thread Mark Jacobs - Listserv
the pin and the new pin and token go back > into the safe. > > Tom Chicklon > > -Original Message----- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Mark Jacobs - Listserv > Sent: Thursday, December 07, 2017 3:12 PM > To:

Re: Can anyone remember "drum" storage?

2017-12-20 Thread Mark Jacobs - Listserv
When I started working in the field, 1979, they had a couple of 2305 devices attached to a 3033 processor. They used it for PLPA and COMMON paging devices if I remember correctly. Mark Jacobs > Joel C. Ewing > December 20, 2017 at 10:05 AM > No, not the same. > > From t

Re: Security PTFS

2018-01-03 Thread Mark Jacobs - Listserv
The Security and Integrity Portal on ResourceLink should have what you're looking for. > גדי בן אבי > January 3, 2018 at 7:18 AM > Hi, > > Does IBM publish a list of PTF’s that are related to security, > especially preventing unauthorized access from outside the mainframe

Re: Intel Chip flaw

2018-01-05 Thread Mark Jacobs - Listserv
The IBM Security/Integrity portal has the information you're seeking. Mark Jacobs > David Crayford > January 5, 2018 at 7:09 AM > > > Indeed. And there are Linux patches for AMD WRT RDSTC speculation > exploits > https://github.com/openSUSE/kernel/commit/6a334d96b8c89

Re: How set CVTLSO?

2016-10-11 Thread Mark Jacobs - Listserv
I believe that if you're using STP to control system time, it all happens automagically. Charles Mills October 11, 2016 at 9:42 AM Mostly a curiosity and "long-term" question: where do you set the leap second offset? Can it be set without an IPL? I searched System Com

Re: How set CVTLSO?

2016-10-11 Thread Mark Jacobs - Listserv
uld in fact change without an IPL? That is really the core of my curiosity. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, October 11, 2016 6:45 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject:

Re: How set CVTLSO?

2016-10-11 Thread Mark Jacobs - Listserv
l...@mcn.org> October 11, 2016 at 10:00 AM So could in fact change without an IPL? That is really the core of my curiosity. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, October 11,

Re: How set CVTLSO?

2016-10-11 Thread Mark Jacobs - Listserv
October 11, 2016 at 12:00 PM *Somebody* sets it ... who and how? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, October 11, 2016 8:48 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: How set

Re: DFHSM query command from Console

2016-10-14 Thread Mark Jacobs - Listserv
F HSM,Q CDS Peter October 14, 2016 at 11:14 AM Hi Is it possible to query MCDS dataset usage from master console ? I apologize as I am new to DFHSM. Peter -- For IBM-MAIN subscribe / signoff / a

ICETOOL Question

2016-10-14 Thread Mark Jacobs - Listserv
Before I dig into the books, does anyone have an ICETOOL example that does this; Copy all records in a file has these fields B CCC D to a different file in this field order -- Mark Jacobs Time Customer Service Global Tec

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

2016-10-19 Thread Mark Jacobs - Listserv
Unless you have a TKE, you will have to use the ICSF panels to enter the master keys. So yes, you'll need to IPL each image to do so. Just a heads up that if you perform ICSF Master Key changes (recommended), you might have to first enter the previous set of keys, then the current set. I can el

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

2016-10-19 Thread Mark Jacobs - Listserv
If you're not creating any data encryption keys in the CKDS, then a one cylinder database is plenty of sapce. Mark Jacobs Dazzo, Matt October 19, 2016 at 11:46 AM RS, Kirk thanks. I was able to confirm from the SE that CPACF is enabled.

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

2016-10-19 Thread Mark Jacobs - Listserv
Once the ICSF Master Keys are entered into the crypto domain after the first IPL of each system, they'll be there and ready when you IPL your DR system in the future. If you've changed the keys on the production side, you have to keep them in sync with the DR box too. Mark Jacobs Jesse 1 Robi

Re: Xposted from TCP/IP list SSL Problems, please help

2016-10-27 Thread Mark Jacobs - Listserv
WAG, Does TCP/IP have read access to the private key in the PKDS? CSFKEYS resource. Mark Jacobs Ward, Mike S October 27, 2016 at 12:33 PM Hello list I have a small problem that I was hoping I could get some help with. System is z/OS V1.13 running on a Z13s W01 soon

IBM Software Support Services - Service Extension Question

2016-11-01 Thread Mark Jacobs - Listserv
Is IBM still building security and integrity fixes for out of support releases of zOS? If so, does having BM Software Support Services - Service Extension, aka IBM Lifecycle Extension for z/OS give you access rights to those PTFs? Mark Jacobs Time Customer Service Global Technology Services T

Re: DB2 Shutdown Problem

2016-11-03 Thread Mark Jacobs - Listserv
Check your SMF options, If DDCONS(NO) is not set, that may be your problem. Steve Carlson (Contractor) November 3, 2016 at 9:00 AM When trying to shut down the DB2 regions on our Development LPAR the DB2M1 regions are taking over 1 hour to shut down. I have also

Re: Problem with startup DB2

2016-11-10 Thread Mark Jacobs - Listserv
Restore the file system from the last good backup would be a good idea. Hilario Garcia November 10, 2016 at 5:53 AM Hello, After a hard stop of the partition, DB2 does not start and produces the following messages; -DB9G START DB2 S DB9GMSTR $HASP100 DB9GMSTR ON ST

Re: ADMF?

2016-11-15 Thread Mark Jacobs - Listserv
ADMF was used to accelerate the movement of pages from expanded storage to real storage. With the demise of expanded storage, it's useless now. Here's the patent information. https://www.google.ch/patents/US5377337 Jesse 1 Robinson November 15, 2016 at 11:42 A

Re: z/OS 2.2 and z9

2016-11-18 Thread Mark Jacobs - Listserv
I'd expect a wait state. Mark Jacobs R.S. November 18, 2016 at 10:43 AM 1. As far as I know z/OS 2.2 will not run on z9 machine - is it true? 2. What message one can expect when trying to IPL the z/OS 2.2 on the z9? -- Radoslaw Skorupka Lodz, Poland

Re: IBM Java 8 SR2

2016-11-23 Thread Mark Jacobs - Listserv
They are yes. Mark Jacobs Vince Coen November 23, 2016 at 11:28 AM Are not the service pack cumulative ? E.g., SP3 has SP2 within. -- - IMPORTANT – This email and the information in it may be confidential, legally privileged and/or protected by law. It is int

Re: Load Module Trace, anyone?

2017-01-13 Thread Mark Jacobs - Listserv
I think that's been repacked as Tivoli Asset Manager. Mark Jacobs Lizette Koehler January 13, 2017 at 8:02 AM There is or used to be a product called SoftAudit by Isogon. I think IBM acquired it. It is able to provide module auditing functions. SoftAudit for

Re: SFTP on z/OS

2017-02-04 Thread Mark Jacobs - Listserv
If you don't have CryptoExpress processors, but do have CPAF enabled on your processor/LPAR, you still might need ICSF active. I don't know off hand if ssh will directly use the CPAF facilities without ICSF being available. Mark Jacobs scott Ford February 4, 2017

Re: CPACF DES/TDES enablement feature 3863 with no Co Processors/Express Cards

2017-02-08 Thread Mark Jacobs - Listserv
There should be no differences in ICSF setup in a CPACF only environment. ICSF will query the system at startup for available hardware support. Anything that can't be done either by CPACF machine instructions or via software emulation will fail. These failures mostly relate to secure/protected

MFA/2FA for RACF

2017-02-09 Thread Mark Jacobs - Listserv
We're looking at implementing MFA/2FA sometime in 2017. I know about IBM's product, found something from CA, and some references for Rocket Strong Authentication Expert for z/OS, but it's not on their web site any longer. Are there any other products out there? Not finding much on Google. --

Re: Job Loyalty

2017-02-10 Thread Mark Jacobs - Listserv
Almost 22 for me, 16 at my previous position. Mark Jacobs Frank Swarbrick February 10, 2017 at 6:53 PM I've been with my current employer for 25 years. But I will admit we're rather an anomaly these days! From: IBM Mainfram

Re: ICSF Question

2017-02-16 Thread Mark Jacobs - Listserv
The key labels are readable, so you know what keys are there. The field that describes what the key is used for, DATA, EXPORTER,... is also readable. What information are you looking to ascertain? Mark Jacobs Steely.Mark February 16, 2017 at 6:20 PM Is there

Re: z/OS V2R2 ZFS file system question

2017-02-27 Thread Mark Jacobs - Listserv
The numeric values in the owner and group fields of the directory entry are resolved into text from your security system. The UID value resolves back to IBMUSER and the GID to OMVSGRP. You can list the actual numeric values by using the ls command with the -n option. The #1 indicates that there

Re: IKJ56220I max # of datasets reached

2015-01-14 Thread Mark Jacobs - Listserv
My first guess is that it's related to system resources needed to support dynamic allocation in a 24-bit address space of the time. Mark Jacobs Paul Gilmartin wrote: My first guess is that it's related to system resources needed to support dynamic allocation in a 24-bit address space of the ti

Re: AW: CICS 3.2 under z/OS 2.1?

2015-01-22 Thread Mark Jacobs - Listserv
CICS/TS 3.2 is supported until September 30, 2015. Mark Jacobs Christian Birr January 22, 2015 at 2:59 PM Works, but unsupported. ;-) Christian -Ursprüngliche Nachricht- Von: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] Im

Re: AW: CICS 3.2 under z/OS 2.1?

2015-01-22 Thread Mark Jacobs - Listserv
S 3.2 under z/os 2.1? Just curious: why to install old unsupported CICS under new shining z/OS? On Thu, 22 Jan 2015 17:18:58 -0500, Mark Jacobs - Listserv wrote: CICS/TS 3.2 is supported until September 30, 2015. CICS Transaction Server for z/OS V3.2 (5655-M15) is supported until 2015-12-31

Re: SFTP in a batch job

2015-02-04 Thread Mark Jacobs - Listserv
You should really, really use public key authentication instead of user/passwords. Mark Jacobs Dana Mitchell February 4, 2015 at 4:42 PM Hello All, We have a need to implement sftp transfers in place of some ftp batch jobs. I have installed IBM Ported Tools OpenSS

z10 BC LPAR Capping question

2015-02-10 Thread Mark Jacobs - Listserv
This isn't my area of expertise, but I've been asked if we can define a capacity defined group and also have one of the members of the group have a hard cap enabled. This is on a z10 BC processor. -- Mark Jacobs Time Customer Service Technology and Product Engineering The standard you walk pas

CA/Reclaim Question

2015-02-11 Thread Mark Jacobs - Listserv
We have a VSAM KSDS that was allocated and populated with data prior to the CA/Reclaim function being available. This evening we had to reorg the dataset, and the REPRO back used the same physical dataset with the REPLACE and REUSE options. Does this enable CA/RECLAIM for the dataset, or do we

Re: CA/Reclaim Question

2015-02-12 Thread Mark Jacobs - Listserv
, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Mark Jacobs - Listserv <mailto:mark.jac...@custserv.com> February 11, 2015 at 11:27 PM We have a VSAM KSDS that was allocated and populated with data prior to the CA/Reclaim function being available. This evening we had to

  1   2   >