Re: Where to find TSO defaults?
TSUCLASS of JES2 PARMs? On Wed, Sep 23, 2020 at 4:55 AM Juergen Kehr wrote: > Hello, perhaps a fairly stupid question: > > > > In the description of the RACF TSO segment for several settings TSO > defaults are referenced. > > > > HOLDCLASS(hold-class) > > Specifies the user's default hold class. ... > > If you … do not specify a value for HOLDCLASS, RACF uses a default value > consistent with current TSO defaults. > > JOBCLASS(job-class) > > Specifies the user's default job class. ... > > If you … do not specify a value for JOBCLASS, RACF uses a default value > consistent with current TSO defaults. > > MAXSIZE(maximum-region-size) > > Specifies the maximum region size the user can request at logon. ... > > If you … do not specify a value for MAXSIZE, or specify MAXSIZE(0), RACF > uses a default value consistent with current TSO defaults. > > MSGCLASS(message-class) > > Specifies the user's default message class. The specified value must be 1 > alphanumeric character, excluding national characters. > > If … do not specify a value for MSGCLASS, RACF uses a default value > consistent with current TSO defaults. > > SYS(sysout-class) > > Specifies the user's default SYSOUT class. ... > > If … do not specify a value for SYS, RACF uses a default value consistent > with current TSO defaults > > > > My question now is, where are these defaults specified and how to change > them? > > > > Kind regards. > > Juergen > > > > ---------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
z/OS/Rocket find and xargs
I have Rocket’s bash, git, findutils, xargs, vim, etc installed on my
z/OS 2.4 system and can't seem to make something work.
I have a directory /u/xx35/test that contains directories with names
like 20200512, 20200513, 20200514, etc (year, month, day). These
directories have other directories and files under them. I want to tar
(but not feather!) each directory over 3 days old. I only want to
archive the directories (which should get everything in that directory
and below).
So after archiving it should look like the following (as long as each
directory is over 3 days old):
Under /u/xx35/test:
20200512
20200512.tar
20200513
20200513.tar
20200514
20200514.tar
I have a batch job executing the following:
//STEPNAME EXEC PGM=BPXBATSL
//STDPARM DD DISP=SHR,DSN=XX35.ARCHIVE.FOLDERS
//SYSPRINT DD SYSOUT=*
//SYSIN DD DUMMY
//STDOUT DD SYSOUT=*
//STDERR DD SYSOUT=*
The STDPARM contains:
SH /rsusr/ported/bin/bash -l
/u/xx35/ArchiveDelete.sh /u/xx35/test
ArchiveDelete.sh contains:
#!/rsusr/ported/bin/bash
StartFolder=$1
find $StartFolder -mindepth 1 -maxdepth 1 -type d -mtime +3 | xargs echo
When I run the batch job, it’s output is as it should be no matter which
directory I’m in.
IEF375I JOB/XX35REXX/START 2020140.1451
IEF033I JOB/XX35REXX/STOP 2020140.1451
CPU: 0 HR 00 MIN 00.00 SEC SRB: 0 HR 00 MIN 00.00 SEC
/u/xx35/test/20200512 /u/xx35/test/20200513 /u/xx35/test/20200514
But when I change "xargs echo" to "xargs -I '{}' tar -cvzf '{}'.tar"
(full command below).
find $StartFolder -mindepth 1 -maxdepth 1 -type d -mtime +3 | xargs -I
'{}' tar -cvzf '{}'.tar
It doesn’t execute as I expect it to. If I do it manually in a VT320
session and am in the /u/xx35/test directory, it works as expected, but
if I’m in the directory /u/xx35, it tries to archive everything in that
directory and stick it in the /u/xx35/test directory as 20200512.tar.
I’ve looked at numerous examples on the net and mine should work so I
don’t understand where I’m going wrong. I know this is a convoluted way
of doing it, but can anyone help? Need more info?
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS/Rocket find and xargs
I figured this out myself. Something really stupid. I wasn't putting
'{}' at the end of the tar command. Jeez.
On 5/21/2020 8:47 AM, Michael Babcock wrote:
I have Rocket’s bash, git, findutils, xargs, vim, etc installed on my
z/OS 2.4 system and can't seem to make something work.
I have a directory /u/xx35/test that contains directories with names
like 20200512, 20200513, 20200514, etc (year, month, day). These
directories have other directories and files under them. I want to
tar (but not feather!) each directory over 3 days old. I only want to
archive the directories (which should get everything in that directory
and below).
So after archiving it should look like the following (as long as each
directory is over 3 days old):
Under /u/xx35/test:
20200512
20200512.tar
20200513
20200513.tar
20200514
20200514.tar
I have a batch job executing the following:
//STEPNAME EXEC PGM=BPXBATSL
//STDPARM DD DISP=SHR,DSN=XX35.ARCHIVE.FOLDERS
//SYSPRINT DD SYSOUT=*
//SYSIN DD DUMMY
//STDOUT DD SYSOUT=*
//STDERR DD SYSOUT=*
The STDPARM contains:
SH /rsusr/ported/bin/bash -l
/u/xx35/ArchiveDelete.sh /u/xx35/test
ArchiveDelete.sh contains:
#!/rsusr/ported/bin/bash
StartFolder=$1
find $StartFolder -mindepth 1 -maxdepth 1 -type d -mtime +3 | xargs echo
When I run the batch job, it’s output is as it should be no matter
which directory I’m in.
IEF375I JOB/XX35REXX/START 2020140.1451
IEF033I JOB/XX35REXX/STOP 2020140.1451
CPU: 0 HR 00 MIN 00.00 SEC SRB: 0 HR 00 MIN 00.00 SEC
/u/xx35/test/20200512 /u/xx35/test/20200513 /u/xx35/test/20200514
But when I change "xargs echo" to "xargs -I '{}' tar -cvzf '{}'.tar"
(full command below).
find $StartFolder -mindepth 1 -maxdepth 1 -type d -mtime +3 | xargs -I
'{}' tar -cvzf '{}'.tar
It doesn’t execute as I expect it to. If I do it manually in a VT320
session and am in the /u/xx35/test directory, it works as expected,
but if I’m in the directory /u/xx35, it tries to archive everything in
that directory and stick it in the /u/xx35/test directory as
20200512.tar. I’ve looked at numerous examples on the net and mine
should work so I don’t understand where I’m going wrong. I know this
is a convoluted way of doing it, but can anyone help? Need more info?
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/osmf Network Configuration Assistant
I also use manual modification and it works fine. NCA in the other hand seems daunting to me. A question and answer format like zCX would be far better IMHO. On Tue, Oct 27, 2020 at 7:05 AM Roberto Halais wrote: > We are using manual modifications. Before, we used the Windows application > which was excellent. > We tried z/OSMF NCA but don't like it. > Maybe IBM will force us to use it. > > On Mon, Oct 26, 2020 at 12:21 PM Keith Gooding < > 034af3894af4-dmarc-requ...@listserv.ua.edu> wrote: > > > Is anyone using this to maintain AT-TLS policies or any other policies ? > > > > Any views on NCA vs manual editing of the policy file ? > > > > When I first encountered AT-TLS I used the Windows version to generate a > > simple policy file for one type of application and thereafter did manual > > edits to the policy file (all applications were similar). Using AT-TLS > for > > z/OS-supplied applications such as Telnet and FTP will make the policy > file > > more complicated and I am wondering whether NCA is the best way. > > > > Keith > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > > -- > Politics: Poli (many) - tics (blood sucking parasites) > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Interchip's RTD/DB2
Anyone use Interchip's Real Time Defrag for DB2? Does it work well? Any gotchas? Other comments? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMPE Receive Order post May 1st
Oh, and the AT-TLS error was 402. BPXF024I (STSYSLOG) May 12 20:26:41 X/TCPIP TCPIP 256 TTLS[280]: 15:26:41 TCPIP EZD1286I TTLS Error GRPID: 0017 ENVID: 008B CONNID: C6AD LOCAL: xxx.xxx.xxx.xxx..7199 REMOTE: 170.225.15.117..21 JOBNAME: RECV USERID: RULE: Secure_FTP_Client_9921 RC: 402 Initial Handshake 0052FDA4BC90 Which is "402: An SSL cipher suite could not be agreed upon between the client and server. " On 5/12/2021 3:47 PM, Michael Babcock wrote: Kurt, Unless I'm doing something wrong, my testing does not bear that out. The only cipher in the list was: # Allow only AES ciphers V3CipherSuites TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 PAGENT was refreshed. Here’s the DEBUG ALL output. SC0588 initConnection: Calling getaddrinfo() with deliverycb-bld.dhe.ibm.com SC0627 initConnection: getaddrinfo() returned. SC0798 initNamedConnection: entered SC0960 initIPv4Connection: entered CY3336 access_via_socks_server: entered Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21. SC3362 getReply: entered SC4549 getNextReply: entered with waitForData = TRUE 220-IBM's internal systems must only be used for conducting IBM's SC4549 getNextReply: entered with waitForData = TRUE 220-business or for purposes authorized by IBM management. SC4549 getNextReply: entered with waitForData = TRUE 220- SC4549 getNextReply: entered with waitForData = TRUE 220-Use is subject to audit at any time by IBM management. SC4549 getNextReply: entered with waitForData = TRUE 220- SC4549 getNextReply: entered with waitForData = TRUE 220- SC4549 getNextReply: entered with waitForData = TRUE 220 dhebpcb01 secure FTP server ready. SC4241 getLastReply: entered SC4241 getLastReply: entered SC4241 getLastReply: entered SC7601 update_cntl_appldata: entered GU5351 ftpSetApplData: entered FC0259 ftpAuth: entered FC0294 ftpAuth: security values: mech=TLS, tlsmech=ATTLS, tlsreuse=N, sFTP=R, sCC=P, sDC=P FC2895 ftpAuthAttls: entered FC2971 ftpAuthAttls: AT-TLS policy set as application controlled. FU2410 printAttlsPolicyNames: entered FU2420 TTLSRule: Secure_FTP_Client_9921 FU2426 TTLSGroupAction: grp_Production FU2432 TTLSEnvironmentAction: Secure_FTP_Client_Env_Ext FU2439 TTLSConnectionACtion: Secure_FTP_Conn_Ext SC2899 sendCmd: entered >>> AUTH TLS SC3362 getReply: entered SC4549 getNextReply: entered with waitForData = TRUE 234 SSLv23/TLSv1 SC4241 getLastReply: entered FC3101 authServerAttls: entered SC4405 getFNDELAY: entered SC4440 setFNDELAY: entered FC3140 authServerAttls: Start Handshake FC3149 authServerAttls: ioctl() failed on SIOCTTLSCTL - EDC8121I Connection reset. (errno2=0x77A9733D) SC4440 setFNDELAY: entered Authentication negotiation failed SC4289 inSession: entered *** Control connection with dispby-117.boulder.ibm.com dies. SC4332 SETCEC code = 10 SC3610 endSession: entered (sn=1BE35B18) SC2776 dataClose: entered SC3693 endSession: recv() failed - EDC8121I Connection reset. (errno2=0x76650446) CZ1459 ftpClose: entered SC4289 inSession: entered SC4367 setLoggedIn: entered You must first issue the 'OPEN' command The rest of the ciphers were re-added and PAGENT refreshed. # Allow only AES ciphers V3CipherSuites TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 V3CipherSuites TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 V3CipherSuites TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA V3CipherSuites TLS_RSA_WITH_AES_256_GCM_SHA384 V3CipherSuites TLS_RSA_WITH_AES_256_CBC_SHA256 V3CipherSuites TLS_RSA_WITH_AES_256_CBC_SHA V3CipherSuites TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 V3CipherSuites TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 V3CipherSuites TLS_ECDH_RSA_WITH_AES_256_CBC_SHA V3CipherSuites TLS_DHE_RSA_WITH_AES_256_CBC_SHA V3CipherSuites TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 V3CipherSuites TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 V3CipherSuites TLS_DH_RSA_WITH_AES_256_CBC_SHA V3CipherSuites TLS_DH_RSA_WITH_AES_256_CBC_SHA256 V3CipherSuites TLS_DH_RSA_WITH_AES_256_GCM_SHA384 V3CipherSuites TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA V3CipherSuites TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 V3CipherSuites TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 V3CipherSuites TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA V3CipherSuites TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 V3CipherSuites TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 } Here’s the DEBUG ALL output for that. As you can see the 009D cipher was picked. It did not pick one of the stronger ciphers even though TLSv1.2 was used. SC0588 initConnection: Calling getaddrinfo() with deliverycb-bld.dhe.ibm.com SC0627 initConnection: getaddrinfo() returned. SC0798 initNamedConnection: entered SC0960 initIPv4Connection: entered CY3336 access_via_socks_server: entered Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21. SC3362 getReply: entered SC4549 getNextReply: entered with wai
Re: SMPE Receive Order post May 1st
I did some testing on our sandbox (I commented out all ciphers except the
one I was interested in and refreshed policy agent) and here’s what I found.
According to https://www.ibm.com/support/pages/node/6417233
The cipher suites that will be enabled for AT-TLS for using FTPS are:
· TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
· TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
· TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
· TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
· TLS_RSA_WITH_AES_128_CBC_SHA
· TLS_RSA_WITH_AES_256_CBC_SHA
The ECDHE ciphers were rejected but the TLS_RSA_WITH_AES_256_CBC_SHA did
work (I didn’t try the TLS_RSA_WITH_AES_128_CBC_SHA cipher).
What gives IBM?
On Sun, May 9, 2021 at 1:01 PM Cieri, Anthony <
02d7f4ec1fff-dmarc-requ...@listserv.ua.edu> wrote:
>
> While I agree with your recommendations, the FTPS job does not
> work without the ciphers I listed below. Apparently IBM needs to make some
> adjustments first.
>
>
>
> -Original Message-
> From: IBM Mainframe Discussion List On Behalf
> Of Michael Babcock
> Sent: Wednesday, May 05, 2021 2:58 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: SMPE Receive Order post May 1st
>
> [[ SEI WARNING *** This email was sent from an external source. Do not
> open attachments or click on links from unknown or suspicious senders. ***
> ]]
>
>
> I would highly discourage the use of the ciphers listed. I would use
> these more secure ciphers (I'm sure there are others that are acceptable).
>
> TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
>
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
>
> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
>
> TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
>
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
>
> TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
>
> On 5/5/2021 12:58 PM, Cieri, Anthony wrote:
> > Dave,
> > Here you go:
> >
> > ##
> > # #
> > # Secure FTP Application #
> > # #
> > ###
> >
>
> > TTLSRule secure_ftp_client_rule
> > {
> >RemotePortRange 21 # This should be set to the port the FTP
> > # listening on
> >Direction Outbound
> >TTLSGroupActionRef secure_ftp_client_group
> >TTLSEnvironmentActionRef secure_ftp_client_env
> > }
> >
>
> > TTLSGroupAction secure_ftp_client_group
> > {
> >TTLSEnabled On
> >Trace 7
> > }
> >
>
> > TTLSEnvironmentAction secure_ftp_client_env
> > {
> >TTLSKeyringParms
> >{
> > Keyring /u/ftps/zos17dbf.kdb
> > KeyringStashFile /u/ftps/zos17dbf.sth
> >}
> >HandshakeRole Client
> > TTLSEnvironmentAdvancedParms
> >{
> > ApplicationControlledOn
> > SecondaryMap On
> > SSLV3Off
> > TLSV1Off
> > TLSV1.1 Off
> > TLSV1.2 On
> >}
> >TTLSCipherParmsRef ftp_client_ciphers # to cust ciphers
> > }
> >
>
> > TTLSCipherParms ftp_client_ciphers
> > {
> > # Sample ciphers. Should be customized!
> > V3CipherSuitesTLS_RSA_WITH_AES_256_CBC_SHA
> > V3CipherSuitesTLS_RSA_WITH_3DES_EDE_CBC_SHA
> > V3CipherSuitesTLS_RSA_WITH_NULL_SHA
> > }
> >
> >
> > -Original Message-
> > From: IBM Mainframe Discussion List On
> > Behalf Of Dave Jousma
> > Sent: Wednesday, May 05, 2021 1:13 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Re: SMPE Receive Order post May 1st
> >
> > [[ SEI WARNING *** This email was sent from an external source. Do not
> > open attachments or click on links from unknown or suspicious senders.
> > *** ]]
> >
> >
> >> Well, for what it's worth, I just tried it and my job was
> >> successful, however, I also received the SSLv23/TLSv1 messages. So I
> >> used the standard job that IBM provided (RFNJOBS) and I turned on Debug
> SEC.
> >> Here is what I got
Re: SMPE Receive Order post May 1st
I would highly discourage the use of the ciphers listed. I would use
these more secure ciphers (I'm sure there are others that are acceptable).
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
On 5/5/2021 12:58 PM, Cieri, Anthony wrote:
Dave,
Here you go:
##
# #
# Secure FTP Application #
# #
###
TTLSRule secure_ftp_client_rule
{
RemotePortRange 21 # This should be set to the port the FTP
# listening on
Direction Outbound
TTLSGroupActionRef secure_ftp_client_group
TTLSEnvironmentActionRef secure_ftp_client_env
}
TTLSGroupAction secure_ftp_client_group
{
TTLSEnabled On
Trace 7
}
TTLSEnvironmentAction secure_ftp_client_env
{
TTLSKeyringParms
{
Keyring /u/ftps/zos17dbf.kdb
KeyringStashFile /u/ftps/zos17dbf.sth
}
HandshakeRole Client
TTLSEnvironmentAdvancedParms
{
ApplicationControlledOn
SecondaryMap On
SSLV3Off
TLSV1Off
TLSV1.1 Off
TLSV1.2 On
}
TTLSCipherParmsRef ftp_client_ciphers # to cust ciphers
}
TTLSCipherParms ftp_client_ciphers
{
# Sample ciphers. Should be customized!
V3CipherSuitesTLS_RSA_WITH_AES_256_CBC_SHA
V3CipherSuitesTLS_RSA_WITH_3DES_EDE_CBC_SHA
V3CipherSuitesTLS_RSA_WITH_NULL_SHA
}
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Dave Jousma
Sent: Wednesday, May 05, 2021 1:13 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SMPE Receive Order post May 1st
[[ SEI WARNING *** This email was sent from an external source. Do not open
attachments or click on links from unknown or suspicious senders. *** ]]
Well, for what it's worth, I just tried it and my job was successful,
however, I also received the SSLv23/TLSv1 messages. So I used the
standard job that IBM provided (RFNJOBS) and I turned on Debug SEC.
Here is what I got
(snip)
Hey Tony, Thanks for this. For some reason we are still struggling. Would
you be willing to share what your pagent policy for these items:
FU2420 TTLSRule: secure_ftp_client_rule
FU2426 TTLSGroupAction: secure_ftp_client_group
FU2432 TTLSEnvironmentAction: secure_ftp_client_env
looks like? I dont think there is anything sensitive, and if you'd rather,
you can send to me off-list (david.jou...@53.com)
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMPE Receive Order post May 1st
What’s the secret decoder ring/handshake to make FTP work? We need AT-TLS? Or can we make updates to the FTPDATA DD (using TLSMECHANISM FTP)? On Thu, May 6, 2021 at 7:46 AM Kurt Quackenbush wrote: > On 5/5/2021 1:13 PM, Dave Jousma wrote: > > > ... For some reason we are still struggling. > For anyone still struggling to connect with FTPS to IBM's download > server after the May 1 server update, please, please, PLEASE consider > telling SMP/E to use HTTPS for the downloads instead of FTPS. It is a > very simple update to your SMP/E job and for the vast majority of folks > requires much less finagling with your firewall settings than for FTP. > > The short version: add downloadmethod and downloadkeyring to your > specification, like this: > > downloadmethod=”https” >downloadkeyring=”javatruststore” >javahome="/usr/lpp/java/J8.0" >> > > > If you need more details, see the SMP/E User's Guide, here: > > https://www.ibm.com/docs/en/zos/2.4.0?topic=guide-preparing-secure-internet-delivery > > Kurt Quackenbush -- IBM, SMP/E Development > Chuck Norris never uses CHECK when he applies PTFs. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMPE Receive Order post May 1st
Nevermind, found this in the latest book *TLSMECHANISM* Use this statement to specify whether TLS is implemented by AT-TLS or by FTP.*ATTLS indicates TLS processing is performed by AT-TLS, and must be specified in order to support TLS 1.2 which is required by IBM's download server.* On Thu, May 6, 2021 at 7:46 AM Kurt Quackenbush wrote: > On 5/5/2021 1:13 PM, Dave Jousma wrote: > > > ... For some reason we are still struggling. > For anyone still struggling to connect with FTPS to IBM's download > server after the May 1 server update, please, please, PLEASE consider > telling SMP/E to use HTTPS for the downloads instead of FTPS. It is a > very simple update to your SMP/E job and for the vast majority of folks > requires much less finagling with your firewall settings than for FTP. > > The short version: add downloadmethod and downloadkeyring to your > specification, like this: > > downloadmethod=”https” >downloadkeyring=”javatruststore” >javahome="/usr/lpp/java/J8.0" >> > > > If you need more details, see the SMP/E User's Guide, here: > > https://www.ibm.com/docs/en/zos/2.4.0?topic=guide-preparing-secure-internet-delivery > > Kurt Quackenbush -- IBM, SMP/E Development > Chuck Norris never uses CHECK when he applies PTFs. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMPE Receive Order post May 1st
01 secure FTP server ready. SC4241 getLastReply: entered SC4241 getLastReply: entered SC7601 update_cntl_appldata: entered GU5351 ftpSetApplData: entered FC0259 ftpAuth: entered FC0294 ftpAuth: security values: mech=TLS, tlsmech=ATTLS, tlsreuse=N, sFTP=R, sC C=P, sDC=P FC2895 ftpAuthAttls: entered FC2971 ftpAuthAttls: AT-TLS policy set as application controlled. FU2410 printAttlsPolicyNames: entered FU2420 TTLSRule: Secure_FTP_Client_9921 FU2426 TTLSGroupAction: grp_Production FU2432 TTLSEnvironmentAction: Secure_FTP_Client_Env_Ext FU2439 TTLSConnectionACtion: Secure_FTP_Conn_Ext SC2899 sendCmd: entered >>> AUTH TLS SC3362 getReply: entered SC4549 getNextReply: entered with waitForData = TRUE 234 SSLv23/TLSv1 SC4241 getLastReply: entered FC3101 authServerAttls: entered SC4405 getFNDELAY: entered SC4440 setFNDELAY: entered FC3140 authServerAttls: Start Handshake SC4440 setFNDELAY: entered FC3171 authServerAttls: FIPS140 not enabled FC3208 authServerAttls: Using TLSv1.2 protocol FC3226 authServerAttls: SSL cipher: 009D FU2091 getCtrlConnCertAttls: entered FU2135 getCtrlConnCertAttls: Request certificate, size 1581 FU2739 getSessionIdAttls: entered FU2755 getSessionIdAttls: Issuing SIOCTTLSCTL to get decoded AT-TLS Session ID Authentication negotiation succeeded FC2028 setdlevel: entered FC2197 setpbsz: entered SC2899 sendCmd: entered >>> PBSZ 0 SC3362 getReply: entered SC4549 getNextReply: entered with waitForData = TRUE 200 PBSZ=0 SC4241 getLastReply: entered SC2899 sendCmd: entered >>> PROT P SC3362 getReply: entered SC4549 getNextReply: entered with waitForData = TRUE 200 Command PROT okay. On 5/12/2021 12:34 PM, Kurt Quackenbush wrote: On 5/10/2021 4:57 PM, Michael Babcock wrote: I did some testing on our sandbox (I commented out all ciphers except the one I was interested in and refreshed policy agent) and here’s what I found. The ECDHE ciphers were rejected but the TLS_RSA_WITH_AES_256_CBC_SHA did work (I didn’t try the TLS_RSA_WITH_AES_128_CBC_SHA cipher). In spite of what the IBM Support page says, my tests show the following ciphers enabled on the delivercb-bld.dhe.ibm.com server: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA This was confirmed by an individual that supports the server. The ciphers mentioned on the IBM Support page are a subset of the ciphers actually enabled. https://www.ibm.com/support/pages/node/6417233 I hope this helps. Is anyone still having trouble connecting? Kurt Quackenbush -- IBM, SMP/E Development Chuck Norris never uses CHECK when he applies PTFs. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 3270 emulator / telnet with encryption
We use Bluezone which does encryption (TLS 1.2) On 5/5/2021 5:14 AM, Bill Giannelli wrote: Our network security group (with no mainframe knowledge) is complaining about the use of telnet for mainframe connections as they say it is not encrypted. We use attachmate and HOD. Are there any 3270 emulators that also do encryption? thanks Bill -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 3270 emulator / telnet with encryption
We use AT-TLS with our Bluezone product On Wed, May 5, 2021 at 9:20 AM Radoslaw Skorupka wrote: > W dniu 05.05.2021 o 12:14, Bill Giannelli pisze: > > Our network security group (with no mainframe knowledge) is complaining > about the use of telnet for mainframe connections as they say it is not > encrypted. We use attachmate and HOD. Are there any 3270 emulators that > also do encryption? > > thanks > > TLS encryption is supported by most emulators including PCOMM, Nexus, > free wc3270, Vista, ZOC, Rumba, QWS... > Note: TLS needs some customization on z/OS side. > > -- > Radoslaw Skorupka > (looking for new job) > Lodz, Poland > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: And the survey says...
Bluezone. On Tue, Apr 27, 2021 at 9:10 AM Allan Staller < 0387911dea17-dmarc-requ...@listserv.ua.edu> wrote: > Classification: Confidential > > What 3270 emulator are you using? > > I (and my colleagues) have been using PCOMM as our 3270 emulator by > corporate edict. > Corporate has removed PCOMM from the available list of emulators, hence > this survey (survey ends Fri. Apr 30 @ COB). > > Since we have to go through a procurement process, we want to obtain the > optimal product. > I am aware of the usual suspects and have them on my short list. > > Responses can be posted on-list or directly to me. > > Thanks to all in advance for your time and attention, > > > > > ::DISCLAIMER:: > > The contents of this e-mail and any attachment(s) are confidential and > intended for the named recipient(s) only. E-mail transmission is not > guaranteed to be secure or error-free as information could be intercepted, > corrupted, lost, destroyed, arrive late or incomplete, or may contain > viruses in transmission. The e mail and its contents (with or without > referred errors) shall therefore not attach any liability on the originator > or HCL or its affiliates. Views or opinions, if any, presented in this > email are solely those of the author and may not necessarily reflect the > views or opinions of HCL or its affiliates. Any form of reproduction, > dissemination, copying, disclosure, modification, distribution and / or > publication of this message without the prior written consent of authorized > representative of HCL is strictly prohibited. If you have received this > email in error please delete it and notify the sender immediately. Before > opening any email and/or attachments, please check them for viruses and > other defects. > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
Sounds like it to me! On Thu, Mar 4, 2021 at 8:28 PM kekronbekron < 02dee3fcae33-dmarc-requ...@listserv.ua.edu> wrote: > Yeah.. does that mean cert usage is now finally trackable? > > - KB > > ‐‐‐ Original Message ‐‐‐ > On Thursday, March 4, 2021 8:10 PM, Michael Babcock > wrote: > > > According to the preview announcement, they plan to store the fingerprint > > stuff in SMF. > > > > On Thu, Mar 4, 2021 at 5:38 AM kekronbekron < > > 02dee3fcae33-dmarc-requ...@listserv.ua.edu> wrote: > > > > > Any comments on this one from an IBM-er. > > > Could use some more info on cert fingerprint stuff. > > > > > > - KB > > > > > > ‐‐‐ Original Message ‐‐‐ > > > On Thursday, March 4, 2021 5:57 AM, Charles Mills charl...@mcn.org > > > wrote: > > > > > > > I was hoping for Radoslaw Skorupka V2R5. > > > > Charles > > > > -Original Message- > > > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU > ] > > > > On Behalf Of Radoslaw Skorupka > > > > Sent: Wednesday, March 3, 2021 2:51 PM > > > > To: IBM-MAIN@LISTSERV.UA.EDU > > > > Subject: Re: z/OS v2r5 - Cert fingerprint > > > > Typo! > > > > IT was announced. > > > > > > > Radoslaw Skorupka > > > > (looking for new job) > > > > Lodz, Poland > > > > W dniu 03.03.2021 o 18:29, Charles Mills pisze: > > > > > > > > > And here I was, busy coding. > > > > > Charles > > > > > -Original Message- > > > > > From: IBM Mainframe Discussion List [mailto: > IBM-MAIN@LISTSERV.UA.EDU] > > > > > On Behalf Of Radoslaw Skorupka > > > > > > > > > Sent: Wednesday, March 3, 2021 8:33 AM > > > > > To: IBM-MAIN@LISTSERV.UA.EDU > > > > > Subject: Re: z/OS v2r5 - Cert fingerprint > > > > > I was announced. > > > > > > > https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/7/897/ENUS221-057/index.html_locale=en > > > > > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > > > send email to lists...@listserv.ua.edu with the message: INFO > IBM-MAIN > > > > > > > > -- > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > > send email to lists...@listserv.ua.edu with the message: INFO > IBM-MAIN > > > > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > > send email to lists...@listserv.ua.edu with the message: INFO > IBM-MAIN > > > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > > Michael Babcock > > OneMain Financial > > z/OS Systems Programmer, Lead > > > > --- > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
Preview for 2.5 came out yesterday. On Wed, Mar 3, 2021 at 10:31 AM Charles Mills wrote: > I would guess you are not going to get anyone from IBM to admit publicly > that there is such a thing as z/OS V2R5; not until it is announced. > > Charles > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of kekronbekron > Sent: Wednesday, March 3, 2021 6:28 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: z/OS v2r5 - Cert fingerprint > > Recently, there was a question about identifying certs being used in an > environment. > I had suggested looking for the cert fingerprint(s) in the TLS inspection > proxy's logs. > > It looks like z/OS v2r5 is adding cert fingerprints, so I think it means > usage will get recorded to SMF? > Would be great if an IBM-er or someone in the know can clarify. > > - KB > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2r5 - Cert fingerprint
According to the preview announcement, they plan to store the fingerprint stuff in SMF. On Thu, Mar 4, 2021 at 5:38 AM kekronbekron < 02dee3fcae33-dmarc-requ...@listserv.ua.edu> wrote: > Any comments on this one from an IBM-er. > Could use some more info on cert fingerprint stuff. > > - KB > > ‐‐‐ Original Message ‐‐‐ > On Thursday, March 4, 2021 5:57 AM, Charles Mills > wrote: > > > I was hoping for Radoslaw Skorupka V2R5. > > > > Charles > > > > -Original Message- > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Radoslaw Skorupka > > Sent: Wednesday, March 3, 2021 2:51 PM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: z/OS v2r5 - Cert fingerprint > > > > Typo! > > IT was announced. > > > > > -- > > > > Radoslaw Skorupka > > (looking for new job) > > Lodz, Poland > > > > W dniu 03.03.2021 o 18:29, Charles Mills pisze: > > > > > And here I was, busy coding. > > > Charles > > > -Original Message- > > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Radoslaw Skorupka > > > Sent: Wednesday, March 3, 2021 8:33 AM > > > To: IBM-MAIN@LISTSERV.UA.EDU > > > Subject: Re: z/OS v2r5 - Cert fingerprint > > > I was announced. > > > > https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/7/897/ENUS221-057/index.html_locale=en > > > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > > --- > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS ssh git issue
Is AUTOCONVERT turned on in USS? And the files are tagged? On Sat, Feb 27, 2021 at 2:24 PM Lionel B Dyck wrote: > I’m having an issue on a test lpar with git for z/OS – both version 2.14 > and > the latest 2.26 ports. > > > > I’ve looked at this as have several others without success. > > > > When I attempt a git clone I get this error: > > > > fatal: protocol error: bad line length character: ---Á > > > > When I do a ssh g...@github.com <mailto:g...@github.com> git-receive-pack > lbdyck/qtab.git I get this: > > > > > --ÄÁ---Ä--ÃÃ-À--ÄÂÂ--Á-/ÄÁ---À/--ÊÁÃËÇÁ/ÀË_/ËÈÁÊÊÁø?ÊÈ-ËÈ/ÈÍË-ÊÁ > ø?ÊÈ-ËÈ/ÈÍË-Î--ÀÁ%ÁÈÁ-ÊÁÃË-ËÑÀÁ-Â/>À---,-ÉÍÑÁÈ-/È?_ÑÄ-?à > > Ë-ÀÁ%È/-øÍËÇ-?øÈÑ?>Ë-?¦ÁÄÈ-Ã?Ê_/È-ËÇ/--/ÅÁ>È-ÅÑÈÅÑÈÇÍÂ-Å-ÃÃ-Ä/À-- > > > > > If I do the same ssh g...@github.com <mailto:g...@github.com> > git-receive-pack lbdyck/qtab.git on one of my other systems it looks like > this: > > > > 00ce342c27f0363f6d24cbb68e8ace7454218d4828a2 refs/heads/masterreport-status > report-status-v2 delete-refs side-band-64k quiet atomic > > ofs-delta push-options object-format=sha1 agent=git/github-g2ff1cad44179 > > > > > We’ve looked at the TCP/IP setup, the SSH setup, and the Git setup with no > joy. We’ve also confirmed that the ssh public key has been properly added > to github. > > > > Can anyone provide any suggestions that will help resolve this? > > > > Thank you > > > > > > _ > > > Lionel B Dyck < > > Website: <http://www.lbdsoftware.com/> www.lbdsoftware.com > > > > "Worry more about your character than your reputation. Character is what > you are, reputation merely what others think you are." - John Wooden > > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Print a SYSMDUMP
And if I remember correctly you can look at ACTIVE control blocks/memory using IPCS. On Mon, Apr 19, 2021 at 7:25 AM Peter Relson wrote: > > >What is the 21st-Century rationale for not allowing everyone to use IPCS? > Mostly ignorance, I would guess. > > > One "practical" consideration could be "not being willing to properly > protect dump data sets". > If that's the case, restricting IPCS makes it harder (but far from > impossible) for "Jane Programmer" to be able to look at data captured in a > dump that they should not be able to see. This would be very important for > SVC Dump data sets. Probably not important for transaction dumps (I just > don't remember their rules). Definitely not important for sysmdumps. > > Peter Relson > z/OS Core Technology Design > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP problem
Are you using TLS? ATTLS? Hardware crypto? On Thu, Aug 19, 2021 at 6:26 AM Gadi Ben-Avi wrote: > Pinging the dr box returns great results. > As far as I know, there is no attempt to authenticate the user's ability > to do the FTP. > I haven't seen anything happen on the FTPD address space when the attempt > is made. > > Gadi > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Richards, Robert B. (CTR) > Sent: Thursday, August 19, 2021 2:22 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: FTP problem > > Can you PING from the DR box and get better response than the FTP? > Does the FTP request authenticate the user's ability to do the FTP before > authenticating the password? > Does the z13s show any impact to the FTPD address space while the FTP is > taking place? > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Gadi Ben-Avi > Sent: Thursday, August 19, 2021 7:07 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: FTP problem > > Hi Robert, > We tried that. > The said everything looks fine. > We tried from another server, and the problem was still there. > > Gadi > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Richards, Robert B. (CTR) > Sent: Thursday, August 19, 2021 2:00 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: FTP problem > > It might be fruitful to ask the network folks if they can spot the delay > and or what's the difference between the network's DR setup and production > that could account for the delay? > > Ignore my previous reply...out or order thinking. ☹ > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Richards, Robert B. (CTR) > Sent: Thursday, August 19, 2021 6:51 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: FTP problem > > > Once the user enters the USER NAME and presses enter... > > Where is the password coming from? LDAP? - Check that and you may find > your delay. > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Gadi Ben-Avi > Sent: Thursday, August 19, 2021 6:22 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: FTP problem > > Hi, > We are in the midst of a DR test. > A user is complaining that they are have problems using ftp. > > When the issue the ftp command from the command line in windows, they get > the prompt for the user name almost immediately. > Once the user enters the password and presses enter, it takes over a > minute to get the prompt for the password. > > Has anyone encountered this problem. > > We do not have a similar problem on our production system. > > The production system is a z15-t02. The LPAR has 92 GB of storage. > The DR system is a z13s. The LPAR has 16GB of storage. > > Both are running z/OS 2.3. > > Any help would be appreciated. > > Thanks > > Gadi > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > Email secured by Check Point > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > Email secured by Check Point > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IPL's POR's frequency [EXTERNAL]
Prod IPL once a month, Dev weekly, test as needed. No POR unless installing a new CEC. On Tue, Sep 14, 2021 at 8:33 AM Feller, Paul < 02fc94e14c43-dmarc-requ...@listserv.ua.edu> wrote: > We do monthly IPLs to pull in fixes. I can't think of the last time I did > a POR other then when installing a new CEC. All my IOGEN work is dynamic. > > > Thanks.. > > Paul Feller > GTS Mainframe Technical Support > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Joe > Sent: Tuesday, September 14, 2021 7:30 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: IPL's POR's frequency [EXTERNAL] > > Just curious about how often folks here IPL their systems as a scheduled > event , once a month, once a quarter, once a year? > and same question for POR's. > I understand there are times when you HAVE to have unscheduled or hot fix > IPL's, I'm just asking in general terms. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > Please note: This message originated outside your organization. Please > use caution when opening links or attachments. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: funny about started task
Funny, I just ran into this. My ID's OMVS segment was using /bin/bash which was a symbolic link to Rocket's Conda environment (where bash is installed). bash does not behave well with BPXBATCH. There are a few ways around the issue. I finally just added: #!/bin/bash -l to my script I was running. The -l causes it to be treated as a login shell and reads /etc/profile. If you are using bash, you can also code: //STDENV DD * BASH_ENV=/etc/profile /* //STDPARM DD * sh env /* // On 11/17/2021 8:07 AM, Colin Paice wrote: Im trying to run the shell script (httpd server) as a started task If I use userid websrv it takes the instream //STDENV and uses it, and works if I use a different userid, it ignores the instream //STDENV values, and fails because of Libpath. With WEBSRV it takes the //STDENV and ignores /etc/profile. With WEB2 it ignores //STDENV and uses /etc/profile The userids have very similar OMVS attributes. My shell script displays all of the "set" variables, so I can tell what is being used. The doc says *Note: When using BPXBATCH with the SH option (SH is the default), environment variables speci®ed in the STDENV DD are overridden by those speci®ed in /etc/profile and .profile (whichoverrides /etc/profile). This is because SH causes BPXBATCH to execute a login shell that runsthe ietcipro® e script and runs the user's .profile.* I do not have any .profile shells. Is there a magic attribute I am missing? Colin -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
Does the input have the USER keyword specified, then the actual userid/password? I thought if you actually connected by specifying a URL, you didn't need the USER keyword. On 11/16/2021 11:47 AM, Charles Mills wrote: Thanks. Good thought. The file is machine-generated by software that generally works so that seems unlikely. I don't *think* it is even getting up to the USER statement, because that should come after the 220 message, but I am grasping at straws here too. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Michael Babcock Sent: Tuesday, November 16, 2021 9:36 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: FTP Switch between users not accepted as anonymouslevel = 3 A grasp at straws, but make sure the INPUT data does not contain data in column 72 onward (mostly it would be line numbers). On 11/15/2021 5:55 PM, Charles Mills wrote: Does anyone know what the heck I should be looking for on this? A customer running the z/OS FTP client is attempting to log into our FTP server. The FTP client is ATTACHed dynamically with FTP -e -i -n -f//DD:SYS00032 url.of.ftp.server The FTP client is passed an INPUT file that begins Useruserid password The output from the FTP client is EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server EZY2640I Using dd:SYS00032 for local site configuration parameters. EZA1450I IBM FTP CS V2R3 EZA1772I FTP: EXIT has been set. EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. EZA2589E Connection to server interrupted or timed out. USER command failed. Switch between users not accepted as anonymouslevel = 3 EZA1735I Std Return Code = 1, Error Code = 8 I can connect from another z/OS system using similar parameters with no problem, but this customer has never tried it before. "Nothing has changed." Does anyone have a clue? Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
A grasp at straws, but make sure the INPUT data does not contain data in column 72 onward (mostly it would be line numbers). On 11/15/2021 5:55 PM, Charles Mills wrote: Does anyone know what the heck I should be looking for on this? A customer running the z/OS FTP client is attempting to log into our FTP server. The FTP client is ATTACHed dynamically with FTP -e -i -n -f//DD:SYS00032 url.of.ftp.server The FTP client is passed an INPUT file that begins Useruserid password The output from the FTP client is EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server EZY2640I Using dd:SYS00032 for local site configuration parameters. EZA1450I IBM FTP CS V2R3 EZA1772I FTP: EXIT has been set. EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. EZA2589E Connection to server interrupted or timed out. USER command failed. Switch between users not accepted as anonymouslevel = 3 EZA1735I Std Return Code = 1, Error Code = 8 I can connect from another z/OS system using similar parameters with no problem, but this customer has never tried it before. "Nothing has changed." Does anyone have a clue? Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Serverpac installs January 2022 and beyond - Issues
Use VA next to the file name in ISPF 3.4 or 3.17. On Mon, Nov 1, 2021 at 5:53 AM Barbara Nitz wrote: > >Those files are not stored in EBCDIC. I used ISPF 3.17 to View the files > using the UTF-8 option. Then you can see the XML source. > > Thanks for that pointer. I did use the command "ASCII" (which got command > not found), but "ASCII" is an IPCS command. :-( > > Regards, Barbara > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
DFSORT job to convert FBM to FBA
I don’t want to reinvent the wheel so I’m asking this list. Anyone have a DFSORT job to convert FBM to FBA? -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: DFSORT job to convert FBM to FBA
Kolusu, your job works as advertised and I thank you! I have a question though. Your simply converts the X'8B' with a X'F1' and leaves the rest blank. But an XDC of the report, drops the X'8B' line and places the X'F1' in the first position of the next line. As you can see, here's what it does. Your job replaces this (shown in hex): 01 » 8444 B000 --- 02 V2.4 0EF4F444 952B4000 --- 03 Smfid: 1E988874 124694A0 With this: 01 1 F444 1000 --- 02 V2.4 4EF4F444 052B4000 03 0Smfid: FE988874 024694A0 But an XDC from SDSF replaces this: 01 » 8444 B000 --- 02 V2.4 0EF4F444 952B4000 --- 03 Smfid: 1E988874 124694A0 With this: 01 1V2.4 FEF4F444 152B4000 --- 02 Smfid: 4E988874 024694A0 --- XDC drops the x’8B’ line entirely and places the X’F1’ at the beginning of the next line. Will your solution generate extra blank pages/lines? On 12/6/2021 1:58 PM, Sri h Kolusu wrote: DFSORT job to convert FBM to FBA? -- Michael, Try this. /STEP0100 EXEC PGM=SORT //SYSOUT DD SYSOUT=* //SORTIN DD DISP=SHR,DSN=your.FBM.file //SORTOUT DD DSN=Your.FBA.File, //DISP=(NEW,CATLG,DELETE), //SPACE=(CYL,(X,Y),RLSE) //SYSINDD * OPTION COPY INREC FINDREP=(ENDPOS=1, INOUT=(X'01',C'+',X'03',C'+', X'0B',C' ',X'09',C' ', X'13',C'0',X'11',C'0', X'1B',C'-',X'19',C'-', X'8B',C'1',X'89',C'1', X'93',C'2',X'81',C'2', X'9B',C'3',X'99',C'3', X'A3',C'4',X'A1',C'4', X'AB',C'5',X'A9',C'5', X'B3',C'6',X'B1',C'6', X'BB',C'7',X'B9',C'7', X'C3',C'8',X'C1',C'8', X'CB',C'9',X'C9',C'9', X'D3',C'A',X'C1',C'A', X'DB',C'B',X'D9',C'B', X'E3',C'C',X'E1',C'C')) /* Thanks, Kolusu DFSORT Development IBM Corporation -- For IBM-MAIN subscribe / signoff / archive access instructions, send email tolists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Certificates ,extKeyUsage and Criticality flag
To all you certificate experts out there: We have z/OS Connect EE (ZCEE) installed and are running into an issue with our CICS SITE certificate. We are getting the following during a handshake from CICS to ZCEE: "Extended key usage does not permit use for TLS client authentication" The CICS certificate is a SITE cert and has the extKeyUsage extension defined with serverAuth and the criticality flag set to false. What the message is indicating is that we need to have clientAuth as well as serverAuth in the extKeyusage field. I understand that part. My question is "since the criticality flag is set to false" should ZCEE honor that extension and enforce the restriction?" Or is it up to the application to honor that particular extension and enforce the restrictions even though the criticality flag is false? I understand that if the flag is true the application MUST honor/enforce the restrictions. Can someone enlighten me? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Certificates ,extKeyUsage and Criticality flag
I know which cert has the problem. It's the CICS SITE certificate which has serverAuth only in the extKeyUsage extension. What I'm trying to understand is IF the criticality flag is false AND the app recognizes the extension is it REQUIRED to honor the restrictions of said extension (if indeed there are restrictions). From what I've read, IF the app DOES NOT recognize the extension and IF the flag is TRUE, then the app MUST reject the cert. Further, IF the app DOES NOT recognize the extension AND the flag is FALSE, then the app can IGNORE the extension. However, I cannot determine (or comprehend what I'm reading) that IF the app recognizes the extension AND the flag is FALSE, is it REQUIRED to honor restrictions (or is it simply up to the app to make a decision - honor or not). On 2/28/2022 9:51 AM, Colin Paice wrote: My reading of this is, the certificate sent *from the client *(not sent down from the server) does not have Client set in the EKU. I blogged <https://colinpaice.blog/2020/01/17/understanding-the-tls-concepts-for-using-certificates-to-authenticate-in-mqweb/> on TLS, and said The Extended Key Usage (EKU) indicates the purpose, or what the certificate public key can be used for. - A client certificate needs extendedKeyUsage = clientAuth - A server certificate needs extendedKeyUsage = serverAuth. Check which certificate has the problem, Colin On Mon, 28 Feb 2022 at 14:55, Michael Babcock wrote: To all you certificate experts out there: We have z/OS Connect EE (ZCEE) installed and are running into an issue with our CICS SITE certificate. We are getting the following during a handshake from CICS to ZCEE: "Extended key usage does not permit use for TLS client authentication" The CICS certificate is a SITE cert and has the extKeyUsage extension defined with serverAuth and the criticality flag set to false. What the message is indicating is that we need to have clientAuth as well as serverAuth in the extKeyusage field. I understand that part. My question is "since the criticality flag is set to false" should ZCEE honor that extension and enforce the restriction?" Or is it up to the application to honor that particular extension and enforce the restrictions even though the criticality flag is false? I understand that if the flag is true the application MUST honor/enforce the restrictions. Can someone enlighten me? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Certificates ,extKeyUsage and Criticality flag
CICS is the client, ZCEE is the server. I got a new CICS SITE certificate that includes clientAuth and serverAuth. I’ve gotten further but run into another issue. I’ve opened a case with IBM. Thanks for the assistance. On Mon, Feb 28, 2022 at 5:21 PM Charles Mills wrote: > Trying to follow this. > > Who connects to who? (I'm not knowledgeable about ZCEE.) Is ZCEE the > client (initiator of the connection) and CICS the server? If so, then CICS > needs a *server* certificate and the lack of clientAuth is not the problem > -- not with that certificate anyway. > > If CICS is configured for client certificate authentication -- that's > always a *server* option, not a configuration option at the client end -- > then ZCEE has to present a certificate that proves its identity, and CICS > would need access to a local trusted chain that signs that certificate. > THAT certificate would need or potentially need clientAuth. And presumably > CICS would check that identity against some list of permitted clients. > > > IF the app recognizes the extension AND the flag > > is FALSE, is it REQUIRED to honor restrictions > > Well, for your purposes, it doesn't really matter what it is required to > do, does it? Certainly it is at least permitted to do so -- otherwise what > the heck would be the purpose or function of the extension? And at least > apparently from your description, that is what it is doing. (And FWIW, I > *think* yes, it is required to honor an extension that it understands, even > if not critical.) > > Although I *suspect* perhaps there is some sort of confusion here over > what certificate is in error, and in what way. > > As I tried to say earlier, the function of "critical" is to say "if you do > NOT understand this extension then you are required to reject the > certificate." > > Charles > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Michael Babcock > Sent: Monday, February 28, 2022 11:32 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Certificates ,extKeyUsage and Criticality flag > > I know which cert has the problem. It's the CICS SITE certificate which > has serverAuth only in the extKeyUsage extension. > > What I'm trying to understand is IF the criticality flag is false AND > the app recognizes the extension is it REQUIRED to honor the > restrictions of said extension (if indeed there are restrictions). > > From what I've read, IF the app DOES NOT recognize the extension and IF > the flag is TRUE, then the app MUST reject the cert. Further, IF the > app DOES NOT recognize the extension AND the flag is FALSE, then the app > can IGNORE the extension. However, I cannot determine (or comprehend > what I'm reading) that IF the app recognizes the extension AND the flag > is FALSE, is it REQUIRED to honor restrictions (or is it simply up to > the app to make a decision - honor or not). > > ---------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: View ASCII Command inUSS
I’m not sure I’ve tried with a large EBCDIC file. I’ll try. On Thu, Mar 31, 2022 at 12:03 PM Paul Gilmartin < 000433f07816-dmarc-requ...@listserv.ua.edu> wrote: > On Wed, 30 Mar 2022 22:48:21 -0500, Michael Babcock wrote: > > >Anyone else find this annoying? When viewing an ASCII file in USS using > >ISPF 3.4 and placing a VA command next to the file, if the file is too > big, > >it substitutes browse but defaults to EBCDIC?It should substitute > >“browse ASCII” but I know of no such command. > > > Does it work better, or even differently, with a similarly large EBCDIC > UNIX file? > > (Don't try it with a card reader.) > > -- > gil > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
View ASCII Command inUSS
Anyone else find this annoying? When viewing an ASCII file in USS using ISPF 3.4 and placing a VA command next to the file, if the file is too big, it substitutes browse but defaults to EBCDIC?It should substitute “browse ASCII” but I know of no such command. RFE? Or am I missing something? -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2R5 TN3270 Changes
We use Rocket’s TE (formerly Bluezone) with AT-TLS but do not use mutual authentication. Works well. On Fri, Apr 1, 2022 at 9:45 AM Jasi Grewal < 040674ae00fc-dmarc-requ...@listserv.ua.edu> wrote: > Greetings, > As most of you must be aware that TN3270 server at z/OS V2R5 does not > support the use of the nativeSSL/TLS as it must be configured to use AT-TLS. > I am aware that all FTP Server would have to use AT-TLS under z/OS v2r5 as > well. > This brings up the question if anyone has done Testing under z/OS v2r5 > using Mocha Emulator at release of v1.8 as it only allows SSL option. I > understand the later release supports certificates options and we are > trying to determine, if we would have to ask all our Company users to > upgrade their Mocha to latest release or we use v1.8 of Mocha. > I understand that Personal Communications, would have to make changes to > Security Tab to access host. > I would be interested in any information in regards to testing and usage > of Emulators under z/OS v2r5. > Thank You in advance,Regards,Jasi Grewal. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: MVS PURGE command
Part of JES3? On Thu, Feb 3, 2022 at 11:59 AM Radoslaw Skorupka wrote: > This is a part of my investigation. > Yes, command manual does not mention PURGE command, because it no longer > exist - I suspect. > However migration manual for SDSF may cover "all possible" profiles, > including obsolete ones. > > BTW: current z/OS 2.4 still supports UNIT=SEP construct in JCL. Yes, it > is ignored, but still syntactically correct. > AFAIK this parameter predates MVS. :-) > > -- > Radoslaw Skorupka > Lodz, Poland > > > > W dniu 03.02.2022 o 18:52, Carmen Vitullo pisze: > > that's just crazy, one doc, the doc I searched for shows no MVS.PURGE > > RACF profile, and yet in another, it does. > > > > scratching my head at this one > > > > Carmen > > > > On 2/3/2022 11:49 AM, Radoslaw Skorupka wrote: > >> I see the following: > >> PURGE MVS.PURGE.MSS MVS.PURGE.** Update Medium > >> > >> > >> > https://www.ibm.com/docs/en/zos/2.4.0?topic=guide-racf-profiles-that-protect-mvs-commands > >> > >> > >> > > ---------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: View ASCII Command inUSS
Just getting back to this (sorry, been busy).
I think this might have more to do with how the product in question
(z/OS Connect Enterprise Edition) generates the file versus the size.
If I do a wordcount on the file it shows no newlines. Then if I run an
awk command against the file, it (I assume) also sees no newlines and
hits it's line-length limit. If I run an iconv on the file to convert
it to IBM-1047 code page and try to browse the file, I get something
that says "line longer than 32752" or something like that. If I do a
wc on one of the .xml files for zCEE, it does indeed show >0 newlines.
To me, this should be APARable.
-bash-4.3# wc trace_large.log
0 36497 20971432 trace_large.log
-bash-4.3# awk ' { if ( length > x ) { x = length } }END{ print x }'
trace_large.log
awk: line 0 (NR=0): FSUM9393 line too long: limit 2
-bash-4.3#
On 4/3/2022 6:09 PM, Rob Schramm wrote:
Use of a desktop editor + ftp, in this case, is simply expedient.
Rob
On Thu, Mar 31, 2022, 14:52 Paul Gilmartin <
000433f07816-dmarc-requ...@listserv.ua.edu> wrote:
On Thu, 31 Mar 2022 13:54:40 -0400, Rob Schramm wrote:
Just ftp to desktop with an editor like Ultra edit.
Would IBM recommend that if one of their products has a bug
you simply use one from a competitor?
It is annoying that the 3.17 has weird limitations for file sizes.
Is the size limit peculiar to 3.17 or a fundamental limit of ISPF Edit?
How big is the OP's file?
ISPF Edit and XEDIT appear to be RECFM=V-ignorant. They
appear to convert to Fixed on input and back to V on Save,
corrupting trailing blanks in the round-trip.
Does Edit translate the entire file on input, and translate it back
on Save, or does it translate only as needed for display?
(Good questions for ISPF-L.)
-- gil
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email tolists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email tolists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: View ASCII Command inUSS
I had to add the -B to prevent “head” from doing autoconvert on the file. -bash-4.3# iconv -f ISO8859-1 -t IBM-1047 trace_large.log | head -B product = WAS FOR Z/OS 21.0.0.12, z/OS Connect EE Unlimited 03.00.53 (wlp-1.0.59.cl21122027-1256) wlp.install.dir = /usr/lpp/IBM/zosconnect/v3r0/wlp/ server.config.dir = /var/zosconnect/servers/zceesrv/ java.home = /usr/lpp/java/J8.0_64 java.version = 1.8.0_311 java.runtime = Java(TM) SE Runtime Environment (8.0.7.0 - pmz6480sr7-20211025_01(SR7)) os = z/OS (02.04.00; s390x) (en_US) process = 33555325@A02AGF trace.specification = *=info:SSL=all:SSLChannel=all:com.ibm.ws.security.*=all:com.ibm.zosconnect.wv*=FINEST:zosConnect=all:zosConnectApiRequester=all: zosConnectSaf=all CEE5213S The signal SIGPIPE was received. I ran: iconv -f ISO8859-1 -t IBM-1047 trace_large.log > trace_large.log.IBM1047 Then did a browse on the IBM1047 file and it worked. When I tried Edit I got: The z/OS UNIX file contains a record with a length greater than 32750. Records of this size are not supported by the ISPF editor. I may open an issue with IBM. I still think that ISPF 3.4, when doing a VA and the file is too large, should substitute BA (I know BA doesn’t exist, but should!). Substituting “browse” for “edit” should be fine as long as it takes into account the filetag/codepage/etc. On 4/12/2022 10:33 AM, Paul Gilmartin wrote: On Tue, 12 Apr 2022 10:13:45 -0500, Michael Babcock wrote: -bash-4.3# ls -lTHE trace_large.log t UTF-8 T=on -rw-r- --s- 1 BPXROOT SOFT1 20971432 Apr 8 07:40 trace_large.log -bash-4.3# od -tx1 trace_large.log | head 00 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A * 000120 0A 70 72 6F 64 75 63 74 20 3D 20 57 41 53 20 46 ... Looks like ASCII data, perhaps UTF-8, 20971432 bytes, starting with a line of 80 asterisks. What do you see with: iconv -f ISO8859-1 -t IBM-1047 trace_large.log | head -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: View ASCII Command inUSS
-bash-4.3# ls -lTHE trace_large.log t UTF-8 T=on -rw-r- --s- 1 BPXROOT SOFT1 20971432 Apr 8 07:40 trace_large.log -bash-4.3# od -tx1 trace_large.log | head 00 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A * 000120 0A 70 72 6F 64 75 63 74 20 3D 20 57 41 53 20 46 000140 4F 52 20 5A 2F 4F 53 20 32 31 2E 30 2E 30 2E 31 000160 32 2C 20 7A 2F 4F 53 20 43 6F 6E 6E 65 63 74 20 000200 45 45 20 55 6E 6C 69 6D 69 74 65 64 20 30 33 2E 000220 30 30 2E 35 33 20 28 77 6C 70 2D 31 2E 30 2E 35 000240 39 2E 63 6C 32 31 31 32 32 30 32 31 31 31 31 37 000260 2D 31 32 35 36 29 0A 77 6C 70 2E 69 6E 73 74 61 000300 6C 6C 2E 64 69 72 20 3D 20 2F 75 73 72 2F 6C 70 CEE5213S The signal SIGPIPE was received. On 4/12/2022 8:07 AM, Paul Gilmartin wrote: On Tue, 12 Apr 2022 07:32:16 -0500, Michael Babcock wrote: I think this might have more to do with how the product in question (z/OS Connect Enterprise Edition) generates the file versus the size. If I do a wordcount on the file it shows no newlines. Then if I run an awk command against the file, it (I assume) also sees no newlines ... What do you see with: ls -lTHE file od -tx1 file | head Do you see any 0D, 0A, 15, or 25 characters? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Command execution through OUTTRAP giving rc -1645
Check each users region size? On Wed, Apr 6, 2022 at 11:11 PM Vaid Laturkar wrote: > cross post to IBM-MAIN, TSO REXX. > > > We have a long running REXX exec working at different customer sites. > This uses OUTTRAP to trap output of RACF command 'SEARCH CLASS(USER)' and > then iterates through the list for further processing. > > Recently at one customer site, this command execution through REXX exec is > giving RC -1645 (and incomplete user list) when executed using one user id > but works when executed using other ID. (gets all users) > > READY > %MYEXECV > 46 *-* cmd ---> The cmd variable has 'SEARCH CLASS(USER)' command > +++ RC(-1645) +++ > > We tried to add "PROFILE VARSTORAGE(HIGH)" before OUTTRAP and increased the > REGION parameter on job too. But somehow it's now working. Earlier we had a > similar issue and specifying this profile setting has worked. > There are around 145K+ users and user in error is only able to trap around > 89K users only. RACF permission wise this id is set up properly. so that's > no issue. > > The code snippet goes as below: > 41 issue_scmd: > 42 /*---*/ > 43 address TSO > 44 "PROFILE VARSTORAGE(HIGH)" > 45 x = OUTTRAP(rec.,,'NOCONCAT') > 46 cmd = 'SEARCH CLASS(USER)' > 47 cmd > > Any pointers on how this can be further investigated. Thanks in advance. > > > Regard > Vaid > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Free SMPE product to just practice
How about Rocket’s Ported Tools in SMPE format? I thought it’s free with no support. I can’t remember if you need to be licensed for one of their other products first or not. On Thu, Sep 14, 2023 at 6:36 PM Farley, Peter < 031df298a9da-dmarc-requ...@listserv.ua.edu> wrote: > Mike, it seems to me that BUILDING an SMPE package (no matter how simple) > and INSTALLING an SMPE package that someone else built are two different > skill levels. I think Tom was asking to practice the latter, the INSTALL > skills, not the BUILD skills. > > Peter > > From: IBM Mainframe Discussion List On Behalf > Of Mike Schwab > Sent: Thursday, September 14, 2023 4:05 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Free SMPE product to just practice > > > Not in smpe format, but a simple application you could package. > > https://github.com/mainframed/DOGECICS > > > > On Thu, Sep 14, 2023 at 2:51 PM Tom Marchant > > <000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote: > > > > > > I don't know of any. Maybe someone else does. > > > > > > You could use any product that your installation runs and install it > into your own data sets. That will get you practice applying, accepting, > restoring, rejecting, etc. And if you get stuck, you can blow it all away > and start over. > > > > > > Or you could build your own product. You don't need much. Just a load > module, maybe a source to generate it. The result doesn't even have to do > anything. But if you create a function sysmod (FMID) and apply it, you will > learn a lot more. > > > > > > On Thu, 14 Sep 2023 23:36:22 +0400, Jake Anderson < > justmainfra...@gmail.com> wrote: > > > > > > >Is there any freeware product which can be installed using SMP/e. > > -- > > This message and any attachments are intended only for the use of the > addressee and may contain information that is privileged and confidential. > If the reader of the message is not the intended recipient or an authorized > representative of the intended recipient, you are hereby notified that any > dissemination of this communication is strictly prohibited. If you have > received this communication in error, please notify us immediately by > e-mail and delete the message and any attachments from your system. > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Resize a ZFS aggregate
It’s documented in the ZFS Administration book, section “Copying the physical blocks of the aggregate to a larger dataset”. Don’t format the .NEW or it doesn’t work. On Wed, Oct 11, 2023 at 2:07 PM Mark Pace wrote: > Hmm - never tried repo on an zfs aggregate. I'll give it a try. Thanks./ > > On Wed, Oct 11, 2023 at 3:01 PM Michael Babcock > wrote: > > > I usually allocate a .NEW, REPRO from the current to .NEW and RENAME. > > > > On Wed, Oct 11, 2023 at 1:59 PM Mark Pace > wrote: > > > > > Same results using replace or replaceu > > > > > > On Wed, Oct 11, 2023 at 2:47 PM Mark Pace > > wrote: > > > > > > > No, I've used REPLACE. I'll give that a try. > > > > > > > > On Wed, Oct 11, 2023 at 2:46 PM Art Zeigler > > wrote: > > > > > > > >> Did you use the REPLACEUnconditional parameter with the restore? > > Also, > > > >> make sure you don't have SMS routines getting in the way. > > > >> > > > >> Art Zeigler > > > >> > > > >> > > > >> From: IBM Mainframe Discussion List on > > > behalf > > > >> of Mark Pace > > > >> Sent: Wednesday, October 11, 2023 2:26 PM > > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > > >> Subject: Resize a ZFS aggregate > > > >> > > > >> I have a zfs file that has grown so large it can't any more extents. > > > >> > > > >> So the plan was to > > > >> Unmount the filesystem > > > >> Dump the file to disk dataset. > > > >> Delete the filesystem > > > >> Define the filesystem with larger primary and secondary extents. > > > >> Restore the dump to the new filesystem > > > >> and remount. > > > >> > > > >> BUT - when I restore the dump it deletes the filesystem I created > and > > > >> creates a new one using the old allocations. > > > >> > > > >> How do I make adrdssu use the new preallocated filesystem > allocation? > > > >> > > > >> -- > > > >> The postings on this site are my own and don’t necessarily represent > > > >> Mainline’s positions or opinions > > > >> > > > >> Mark D Pace > > > >> Senior Systems Engineer > > > >> Mainline Information Systems > > > >> > > > >> > -- > > > >> For IBM-MAIN subscribe / signoff / archive access instructions, > > > >> send email to lists...@listserv.ua.edu with the message: INFO > > IBM-MAIN > > > >> > > > >> > -- > > > >> For IBM-MAIN subscribe / signoff / archive access instructions, > > > >> send email to lists...@listserv.ua.edu with the message: INFO > > IBM-MAIN > > > >> > > > > > > > > > > > > -- > > > > The postings on this site are my own and don’t necessarily represent > > > > Mainline’s positions or opinions > > > > > > > > Mark D Pace > > > > Senior Systems Engineer > > > > Mainline Information Systems > > > > > > > > > > > > > > > > > > > > > > -- > > > The postings on this site are my own and don’t necessarily represent > > > Mainline’s positions or opinions > > > > > > Mark D Pace > > > Senior Systems Engineer > > > Mainline Information Systems > > > > > > -- > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > > -- > The postings on this site are my own and don’t necessarily represent > Mainline’s positions or opinions > > Mark D Pace > Senior Systems Engineer > Mainline Information Systems > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Resize a ZFS aggregate
I usually allocate a .NEW, REPRO from the current to .NEW and RENAME. On Wed, Oct 11, 2023 at 1:59 PM Mark Pace wrote: > Same results using replace or replaceu > > On Wed, Oct 11, 2023 at 2:47 PM Mark Pace wrote: > > > No, I've used REPLACE. I'll give that a try. > > > > On Wed, Oct 11, 2023 at 2:46 PM Art Zeigler wrote: > > > >> Did you use the REPLACEUnconditional parameter with the restore? Also, > >> make sure you don't have SMS routines getting in the way. > >> > >> Art Zeigler > >> > >> > >> From: IBM Mainframe Discussion List on > behalf > >> of Mark Pace > >> Sent: Wednesday, October 11, 2023 2:26 PM > >> To: IBM-MAIN@LISTSERV.UA.EDU > >> Subject: Resize a ZFS aggregate > >> > >> I have a zfs file that has grown so large it can't any more extents. > >> > >> So the plan was to > >> Unmount the filesystem > >> Dump the file to disk dataset. > >> Delete the filesystem > >> Define the filesystem with larger primary and secondary extents. > >> Restore the dump to the new filesystem > >> and remount. > >> > >> BUT - when I restore the dump it deletes the filesystem I created and > >> creates a new one using the old allocations. > >> > >> How do I make adrdssu use the new preallocated filesystem allocation? > >> > >> -- > >> The postings on this site are my own and don’t necessarily represent > >> Mainline’s positions or opinions > >> > >> Mark D Pace > >> Senior Systems Engineer > >> Mainline Information Systems > >> > >> -- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > >> > >> -- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > >> > > > > > > -- > > The postings on this site are my own and don’t necessarily represent > > Mainline’s positions or opinions > > > > Mark D Pace > > Senior Systems Engineer > > Mainline Information Systems > > > > > > > > > > -- > The postings on this site are my own and don’t necessarily represent > Mainline’s positions or opinions > > Mark D Pace > Senior Systems Engineer > Mainline Information Systems > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM APAR Names
I’ve always gone to https://www.ibm.com/support/pages/enhanced-holddata-zos and scrolled down to “ *REPORT ERRSYSMODS APAR SYSMOD ID to RETAIN APAR Number mapping” to figure out the mapping. * On Mon, Nov 6, 2023 at 9:20 AM Ed Jaffe wrote: > On 11/5/2023 4:03 PM, Shaffer, Terri wrote: > > So I am trying to apply maintenance and want to know the actual APAR to > look up to see if its open closed, or what? > > Slide 72 in SHARE New Orleans Bit Bucket X'42' explains the APAR and > ++APAR naming convention used most often with z/OS products and components. > > The possible APAR prefixes are: OA, PH, PI, PK, PL, PM, PN, IO, PP, PQ, > IR, OW, OY and OZ. The second letter of the ++APAR is the mapping. > > -- > Phoenix Software International > Edward E. Jaffe > 831 Parkview Drive North > El Segundo, CA 90245 > https://www.phoenixsoftware.com/ > > > > > This e-mail message, including any attachments, appended messages and the > information contained therein, is for the sole use of the intended > recipient(s). If you are not an intended recipient or have otherwise > received this email message in error, any use, dissemination, distribution, > review, storage or copying of this e-mail message and the information > contained therein is strictly prohibited. If you are not an intended > recipient, please contact the sender by reply e-mail and destroy all copies > of this email message and do not otherwise utilize or retain this email > message or any or all of the information contained therein. Although this > email message and any attachments or appended messages are believed to be > free of any virus or other defect that might affect any computer system > into > which it is received and opened, it is the responsibility of the recipient > to ensure that it is virus free and no responsibility is accepted by the > sender for any loss or damage arising in any way from its opening or use. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SDSF and JESSPOOL
I don’t know where the build JCL came from cuz it was here before I got here. I’ll keep that in mind too, thanks! On Fri, Sep 22, 2023 at 2:35 PM Mark Zelden wrote: > On Thu, 21 Sep 2023 06:50:01 -0500, Michael Babcock > wrote: > > >Thanks Rob! That’s the explanation I needed! However, I did create a > >ISF*.** profile with a UACC of ALTER but it still didn’t work because I > >didn’t have NOFAILRC4 (I assume). > > > >On Thu, Sep 21, 2023 at 2:52 AM Rob Scott > wrote: > > > >> Michael > >> > >> Although we strongly recommend JESSPOOL (and OPERCMDS) being active, you > >> can use successfully use SDSF without it. > >> > >> The big difference in z/OS 2.5 is that SDSF will no longer fall back to > >> any legacy ISFPRMxx authority keywords on the GROUP statements when SAF > >> returns RC=4. > >> > >> How SDSF handles SAF RC=4 (returned when the ESM cannot make a > >> determination - for example the class not active or no matching > profile) is > >> governed by the AUXSAF(FAILRC4/NOFAILRC4) keyword on the CONNECT > statement > >> in ISFPRMxx. > >> > >> The default value of FAILRC4 means that SDSF will translate RC=4 from > SAF > >> into a "denied" response, whereas NOFAILRC4 will translate to "allowed". > >> > >> So you could keep JESSPOOL inactive and use AUXSAF(NOFAILRC4) on your > >> rescue system ... > > > > If this happens to be a modified version of my onepack JCL from my web > site / CBT file 434, when I put out the z/OS 2.5 version it will have > CONNECT AUXSAF(NOFAILRC4) in the ISFPRM00 member that is > supplied by default. > > Best Regards, > > Mark > -- > Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS > ITIL v3 Foundation Certified > mailto:m...@mzelden.com > Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SDSF and JESSPOOL
Thanks Rob! That’s the explanation I needed! However, I did create a ISF*.** profile with a UACC of ALTER but it still didn’t work because I didn’t have NOFAILRC4 (I assume). On Thu, Sep 21, 2023 at 2:52 AM Rob Scott wrote: > Michael > > Although we strongly recommend JESSPOOL (and OPERCMDS) being active, you > can use successfully use SDSF without it. > > The big difference in z/OS 2.5 is that SDSF will no longer fall back to > any legacy ISFPRMxx authority keywords on the GROUP statements when SAF > returns RC=4. > > How SDSF handles SAF RC=4 (returned when the ESM cannot make a > determination - for example the class not active or no matching profile) is > governed by the AUXSAF(FAILRC4/NOFAILRC4) keyword on the CONNECT statement > in ISFPRMxx. > > The default value of FAILRC4 means that SDSF will translate RC=4 from SAF > into a "denied" response, whereas NOFAILRC4 will translate to "allowed". > > So you could keep JESSPOOL inactive and use AUXSAF(NOFAILRC4) on your > rescue system and this will help overcome most obstacles, however there is > another way : > > SDSF has the concept of "destination operator" within the product dating > back decades to the time when companies had print operations staff that > needed to manage individual destinations regardless of the output-creating > userid. > Profiles in the SDSF class of ISFOPER.DEST.destname would allow print > operators to manage output on individual destinations without specific > authority to the spool object. > > On top of individual destination authority, there is a profile > ISFOPER.ANYDEST.jesname in the SDSF class which, when the user has READ > authority, performs a RECVR handshake with JES on the JESSPOOL RACROUTE > request to grant access to the output. So you could permit your sysprogs > on the rescue system to this profile and keep JESSPOOL class active while > allowing you to implement other profiles so that it is consistent with > non-rescue system (if so desired). > > One thing to note is that JESSPOOL and OPERCMDS classes are not owned by > SDSF, we check profiles in these classes on the user's behalf to enhance > the user experience, however the owning components will make their own > authority decisions when SDSF passes thru any request for data/action (and > also when access is attempted outside of SDSF - for example from a SYSOUT > archiving product or automated operations). > > I do have a "How SDSF Security Works" presentation that is available on > IBM Education github : > https://github.com/IBM/IBM-Z-zOS/tree/main/zOS-Education/zOS-V2.5-Education > > > Rob Scott > Rocket Software > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Michael Babcock > Sent: Wednesday, September 20, 2023 6:50 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: SDSF and JESSPOOL > > EXTERNAL EMAIL > > > > > > We have a rescue system that we just brought up on z/OS 2.5. I > couldn't access SDSF so I defined the appropriate groups, modified > ISFPRMxx and restarted SDSF, logged off and back on. I could then get into > SDSF. I could NOT access ANY output whatsoever. I kept getting NO > DISPLAYABLE DATA. We did not have the JESSPOOL class active on that > system. Now the SDSF security migration guide says that JESSPOOL class > activation is not REQUIRED, but until I activated that class, I could > not access any output. Is the book wrong or did I have something not > quite set right? > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA > 02451 ■ Main Office Toll Free Number: +1 855.577.4323 > Contact Customer Support: > https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport > Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - > http://www.rocketsoftware.com/manage-your-email-preferences > Privacy Policy - > http://www.rocketsoftware.com/company/legal/privacy-policy > > > This communication and any attachments may contain confidential > information of Rocket Software, Inc. All unauthorized use, disclosure or > distribution is prohibited. If you are not the intended recipient, please > notify Rocket Software immediately and destroy all copies of this > communication. Thank you. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Utility to Read from JES2 spool
Programmatically or manually? Manually, in SDSF, you can always put a question mark next to the output and put an XDC next to the output you want. Or skip the question mark and XDC the entire job. See the SDSF help for XDC. On Fri, Sep 29, 2023 at 9:10 AM Roberto Halais wrote: > Listers: > > Is there an z/os utility that will allow the reading of a spool file (in > some class) and copy it to a sequential dataset? > > We need to read a report from spool and copy it o a sequential dataset. > Just a z/os utility or a CBT tape utility. > Thank you for any pointers. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SDSF and JESSPOOL
We did not previously convert this one pack rescue system to SDSF external security. This is the first time IPLing it with z/OS 2.5. I defined the GROUP.SYSPROG.* profile in SDSF, refreshed the SDSF class, made the necessary ISFPRMxx member and refreshed SDSF. I could not browse any output in SDSF. I had to activate JESSPOOL and define the appropriate profiles before I could browse output. The migration guide says JESSPOOL is optional but it appeared it’s not. On Wed, Sep 20, 2023 at 1:55 PM Radoslaw Skorupka < 0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote: > W dniu 20.09.2023 o 19:49, Michael Babcock pisze: > > We have a rescue system that we just brought up on z/OS 2.5. I > > couldn't access SDSF so I defined the appropriate groups, modified > > ISFPRMxx and restarted SDSF, logged off and back on. I could then get > > into SDSF. I could NOT access ANY output whatsoever. I kept getting > > NO DISPLAYABLE DATA. We did not have the JESSPOOL class active on > > that system. Now the SDSF security migration guide says that JESSPOOL > > class activation is not REQUIRED, but until I activated that class, I > > could not access any output. Is the book wrong or did I have > > something not quite set right? > > Do you have any definitions in SDSF class? > Hint: look for GROUP.** > > > > -- > Radoslaw Skorupka > Lodz, Poland > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
SDSF and JESSPOOL
We have a rescue system that we just brought up on z/OS 2.5. I couldn't access SDSF so I defined the appropriate groups, modified ISFPRMxx and restarted SDSF, logged off and back on. I could then get into SDSF. I could NOT access ANY output whatsoever. I kept getting NO DISPLAYABLE DATA. We did not have the JESSPOOL class active on that system. Now the SDSF security migration guide says that JESSPOOL class activation is not REQUIRED, but until I activated that class, I could not access any output. Is the book wrong or did I have something not quite set right? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: [External] : Connect Direct for z/Os Upgrade
Are you using a STEPLIB? If so, make sure ALL libraries in the STEPLIB are APF’d and that they are on the correct volume as your APF list. If not using a STEPLIB use TSO ISRFIND to ensure the exits are not found in another library first. On Mon, Aug 28, 2023 at 8:28 PM Gilson Cesar de Oliveira wrote: > Hi Richard, > > Yes. The dataset where where the exits reside is APF. > > Em seg., 28 de ago. de 2023 às 16:24, Richard McIntosh < > richard.mcint...@oracle.com> escreveu: > > > Is the library authorized that the exits on it? Make sure it is the APF > > list. > > LONG TEXT => The user-written exit program was not found in an > > authorized > > library. > > > > Richard > > > > > > -Original Message- > > From: IBM Mainframe Discussion List On Behalf > > Of Gilson Cesar de Oliveira > > Sent: Monday, August 28, 2023 2:18 PM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: [External] : Connect Direct for z/Os Upgrade > > > > We are upgrading COnnect Direct for z/Os at version 4.8 to 5.1 (this is > > the first step to upgrade to version 6.2) and we are facing issues for > some > > processes when using the new version of the loadlib of Connect Direct. > > SCIB006I SIGNON COMMAND (CONDENSED) => USERID /NODE = > > > > SCIC000I Connect:Direct - RC=0008 MSG=SCBA029I NODE= > @ > > 06:48:51 / 08/25/23 > >SHORT TEXT => SCBA029I The user exit is not in an authorized library. > > > > LONG TEXT => The user-written exit program was not found in an > > authorized > > library. > > > > > > SYSTEM ACTION: Signon fails. > > > > > > RESPONSE: Make sure the exit is in an authorized library > > and > >was assembled non-reentrant and non-reusable. > > > > SCIC013I Terminating before EOF due to error return code (HEX) =0018 > > > > SCIB007I COMMAND => SIGNOFF FORCED BY DMBATCH > > > > SCIC000I Connect:Direct - RC=0010 MSG=SCIA008I NODE= > @ > > 06:48:52 / 08/25/23 > >SHORT TEXT => SCIA008I Syntax Error finding word SIGNON in SIGNON > > command. > > LONG TEXT => C:D was unable to find the word SIGNON in the first > > > > command passed. The SIGNON command MUST NOT have a > > > > label on it, and the word SIGNON MUST be surrounded by > > spaces. Common reasons for this message are: > > 1) A LABEL starting in Column 1 > > 2) The word SIGNON starting in Column 1 > > 3) The word SIGNON not followed by a space. > > > > SYSTEM ACTION: Set Return code to 16, and Fail the signon > > > > We recompiled two exits DGAMGSAF and DGACXSIG and for some processes it's > > working as expected but for this example above we can see errors. > > > > Do you have any idea why this errors are occurring? > > > > As a workaround we created a new version of the proc used by these > > processes but pointing in the STEPLIB the dataset of the version V4.8 > > instead of V5.1. > > > > Thanks for any help. > > > > Regards, > > > > Gilson > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > email > > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: AT-TLS & FTP troubles - cannot get very simple setup working
Set your trace to 255 in the policy, refresh PAGENT and check the Syslog.
I suspect a ciphersuite issue.
On Wed, May 25, 2022 at 8:46 AM Bob wrote:
> I am struggling to get AT-TLS and FTP working on my new z/OS 2.5 system and
> I don’t know why. I’m sure I am
>
> missing something very simple, but I have spent a lot of time over the last
> few weeks trying to figure it out
>
> and I cannot. Note that ftp without encryption does work and I have
> nothing else using PAGENT or AT-TLS.
>
>
>
> I originally started with a configuration created by z/OSMF Network
> Configuration Assistant, but after
>
> numerous attempts to get it working I have pared it down to the very
> minimum configuration below.
>
>
>
> I’m not even sure what info to share.
>
>
>
> When I try to connect using WinSCP I just get this:
>
>
>
> d:\>"c:\Program Files (x86)\WinSCP\WinSCP" /log=d:\WinSCP.log /loglevel=2
> testmvs
>
> Searching for host...
>
> Network error: Connection to "testmvs" refused.
>
> The server rejected SFTP connection, but it listens for FTP connections.
>
> Did you want to use FTP protocol instead of SFTP? Prefer using encryption.
>
> winscp>
>
>
>
> And the WinSCP log doesn’t show much more:
>
>
>
> Looking up host "testmvs" for SSH connection
>
> Connecting to 10.80.63.94 port 22
>
> Failed to connect to 10.80.63.94: Network error: Connection refused
>
>
>
> And here are the related configuration files.
>
>
>
> Here’s the pagent.conf:
>
>
>
> LogLevel 511
>
> TcpImage TCPIP FLUSH
>
> TTLSConfig /etc/TTLSConfig.conf FLUSH
>
>
>
> And here is the TTLSConfig.conf:
>
>
>
> TTLSGroupAction ftp_server_group
>
> {
>
>TTLSEnabled On
>
>Trace 30
>
> }
>
> TTLSEnvironmentAction ftp_server_env
>
> {
>
>HandshakeRole Server
>
>TTLSCipherParmsRef ftp_server_ciphers
>
>TTLSKeyringParms
>
>{
>
> Keyring mtskeyring
>
>}
>
>TTLSEnvironmentAdvancedParms
>
>{
>
> ApplicationControlled On
>
> SecondaryMap On
>
> TLSv1.2 On
>
> TLSv1.3 On
>
>}
>
> }
>
> TTLSCipherParms ftp_server_ciphers
>
> {
>
>V3CipherSuites TLS_RSA_WITH_AES_256_CBC_SHA
>
>V3CipherSuites TLS_RSA_WITH_3DES_EDE_CBC_SHA
>
>V3CipherSuites TLS_RSA_WITH_NULL_SHA
>
> }
>
> TTLSRule ftp_server_rule
>
> {
>
>LocalPortRange 21-22
>
>DirectionInbound
>
>TTLSGroupActionRef ftp_server_group
>
>TTLSEnvironmentActionRef ftp_server_env
>
> }
>
>
>
> Here is a ‘netstat ttls group’ command:
>
>
>
> MVS TCP/IP NETSTAT CS V2R5 TCPIP Name: TCPIP 13:14:46
>
> TTLSGrpAction Group ID Conns
>
> - -
>
> ftp_server_group 0003 0
>
>
>
> Does that Conns=0 mean anything?
>
>
>
> Let me know if there is some other info that might help.
>
>
>
> Thank you VERY MUCH for any suggestions you can offer.
>
>
>
> Bob Lamerand
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: AT-TLS & FTP troubles - cannot get very simple setup working
I can SSH into z/OS USS but I don’t use pagent for port 22. You should
configure SSHD for that. Remove port 22 from PAGENT.
On Wed, May 25, 2022 at 8:46 AM Bob wrote:
> I am struggling to get AT-TLS and FTP working on my new z/OS 2.5 system and
> I don’t know why. I’m sure I am
>
> missing something very simple, but I have spent a lot of time over the last
> few weeks trying to figure it out
>
> and I cannot. Note that ftp without encryption does work and I have
> nothing else using PAGENT or AT-TLS.
>
>
>
> I originally started with a configuration created by z/OSMF Network
> Configuration Assistant, but after
>
> numerous attempts to get it working I have pared it down to the very
> minimum configuration below.
>
>
>
> I’m not even sure what info to share.
>
>
>
> When I try to connect using WinSCP I just get this:
>
>
>
> d:\>"c:\Program Files (x86)\WinSCP\WinSCP" /log=d:\WinSCP.log /loglevel=2
> testmvs
>
> Searching for host...
>
> Network error: Connection to "testmvs" refused.
>
> The server rejected SFTP connection, but it listens for FTP connections.
>
> Did you want to use FTP protocol instead of SFTP? Prefer using encryption.
>
> winscp>
>
>
>
> And the WinSCP log doesn’t show much more:
>
>
>
> Looking up host "testmvs" for SSH connection
>
> Connecting to 10.80.63.94 port 22
>
> Failed to connect to 10.80.63.94: Network error: Connection refused
>
>
>
> And here are the related configuration files.
>
>
>
> Here’s the pagent.conf:
>
>
>
> LogLevel 511
>
> TcpImage TCPIP FLUSH
>
> TTLSConfig /etc/TTLSConfig.conf FLUSH
>
>
>
> And here is the TTLSConfig.conf:
>
>
>
> TTLSGroupAction ftp_server_group
>
> {
>
>TTLSEnabled On
>
>Trace 30
>
> }
>
> TTLSEnvironmentAction ftp_server_env
>
> {
>
>HandshakeRole Server
>
>TTLSCipherParmsRef ftp_server_ciphers
>
>TTLSKeyringParms
>
>{
>
> Keyring mtskeyring
>
>}
>
>TTLSEnvironmentAdvancedParms
>
>{
>
> ApplicationControlled On
>
> SecondaryMap On
>
> TLSv1.2 On
>
> TLSv1.3 On
>
>}
>
> }
>
> TTLSCipherParms ftp_server_ciphers
>
> {
>
>V3CipherSuites TLS_RSA_WITH_AES_256_CBC_SHA
>
>V3CipherSuites TLS_RSA_WITH_3DES_EDE_CBC_SHA
>
>V3CipherSuites TLS_RSA_WITH_NULL_SHA
>
> }
>
> TTLSRule ftp_server_rule
>
> {
>
>LocalPortRange 21-22
>
>DirectionInbound
>
>TTLSGroupActionRef ftp_server_group
>
>TTLSEnvironmentActionRef ftp_server_env
>
> }
>
>
>
> Here is a ‘netstat ttls group’ command:
>
>
>
> MVS TCP/IP NETSTAT CS V2R5 TCPIP Name: TCPIP 13:14:46
>
> TTLSGrpAction Group ID Conns
>
> - -
>
> ftp_server_group 0003 0
>
>
>
> Does that Conns=0 mean anything?
>
>
>
> Let me know if there is some other info that might help.
>
>
>
> Thank you VERY MUCH for any suggestions you can offer.
>
>
>
> Bob Lamerand
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: AT-TLS & FTP troubles - cannot get very simple setup working
I don’t think you can use PAGENT for port 22 (not 100% sure on that). If
using port 22 configure SSHD.
Did you set the trace parm in PAGENT to 255? You will get much more info
in SYSLOG by doing that.
On Wed, May 25, 2022 at 10:05 AM Bob wrote:
> That's one I have changed back and forth 21 ... 22 ... 21 .. 22 ... 21
> &22. The config I started with had 21 in it, but the WinSCP references 22
> so I have been trying both ... without success. I changed it back to 21
> now. Still fails.
>
> I just added an ftp configuration parameter of FTPLOGGING TRUE and received
> this message:
>
> EZYFS51I ID=FTPD10 CONN fails Reason=3 Text=getpeername failed
>
> Now I'm trying to figure out what that is telling me.
>
> On Wed, May 25, 2022 at 8:46 AM Michael Babcock
> wrote:
>
> > I can SSH into z/OS USS but I don’t use pagent for port 22. You should
> > configure SSHD for that. Remove port 22 from PAGENT.
> >
> > On Wed, May 25, 2022 at 8:46 AM Bob wrote:
> >
> > > I am struggling to get AT-TLS and FTP working on my new z/OS 2.5 system
> > and
> > > I don’t know why. I’m sure I am
> > >
> > > missing something very simple, but I have spent a lot of time over the
> > last
> > > few weeks trying to figure it out
> > >
> > > and I cannot. Note that ftp without encryption does work and I have
> > > nothing else using PAGENT or AT-TLS.
> > >
> > >
> > >
> > > I originally started with a configuration created by z/OSMF Network
> > > Configuration Assistant, but after
> > >
> > > numerous attempts to get it working I have pared it down to the very
> > > minimum configuration below.
> > >
> > >
> > >
> > > I’m not even sure what info to share.
> > >
> > >
> > >
> > > When I try to connect using WinSCP I just get this:
> > >
> > >
> > >
> > > d:\>"c:\Program Files (x86)\WinSCP\WinSCP" /log=d:\WinSCP.log
> /loglevel=2
> > > testmvs
> > >
> > > Searching for host...
> > >
> > > Network error: Connection to "testmvs" refused.
> > >
> > > The server rejected SFTP connection, but it listens for FTP
> connections.
> > >
> > > Did you want to use FTP protocol instead of SFTP? Prefer using
> > encryption.
> > >
> > > winscp>
> > >
> > >
> > >
> > > And the WinSCP log doesn’t show much more:
> > >
> > >
> > >
> > > Looking up host "testmvs" for SSH connection
> > >
> > > Connecting to 10.80.63.94 port 22
> > >
> > > Failed to connect to 10.80.63.94: Network error: Connection refused
> > >
> > >
> > >
> > > And here are the related configuration files.
> > >
> > >
> > >
> > > Here’s the pagent.conf:
> > >
> > >
> > >
> > > LogLevel 511
> > >
> > > TcpImage TCPIP FLUSH
> > >
> > > TTLSConfig /etc/TTLSConfig.conf FLUSH
> > >
> > >
> > >
> > > And here is the TTLSConfig.conf:
> > >
> > >
> > >
> > > TTLSGroupAction ftp_server_group
> > >
> > > {
> > >
> > >TTLSEnabled On
> > >
> > >Trace 30
> > >
> > > }
> > >
> > > TTLSEnvironmentAction ftp_server_env
> > >
> > > {
> > >
> > >HandshakeRole Server
> > >
> > >TTLSCipherParmsRef ftp_server_ciphers
> > >
> > >TTLSKeyringParms
> > >
> > >{
> > >
> > > Keyring mtskeyring
> > >
> > >}
> > >
> > >TTLSEnvironmentAdvancedParms
> > >
> > >{
> > >
> > > ApplicationControlled On
> > >
> > > SecondaryMap On
> > >
> > > TLSv1.2 On
> > >
> > > TLSv1.3 On
> > >
> > >}
> > >
> > > }
> > >
> > > TTLSCipherParms ftp_server_ciphers
> > >
> > > {
> > >
> > >V3CipherSuites TLS_RSA_WITH_AES_256_CBC_SHA
> > >
> > >V3CipherSuites TLS_RSA_WITH_3DES_EDE_CBC_SHA
> > >
> > >V3CipherSuites TLS_RSA_WITH_NULL_SHA
> > >
> > > }
> > >
> > > TTLSRule ftp_server_rule
> >
Re: Some questions on SYSCALL
I vaguely remember ADDRESS having a default.
You can find the current environment by specifying ADDRESS().
On Tue, Jun 28, 2022 at 6:19 PM Charles Mills wrote:
> There is no ADDRESS in the Rexx other than ADDRESS SYSCALL. Yes, I would
> expect ADDRESS FOO to make ADDRESS SYSCALL go away.
>
> The HLASM routine is invoked with
>
> Rslt = CONDELAY(TimeToSleep * 100)
>
> Where, FWIW, TimeToSleep is a value between 1 and 900, inclusive.
>
> CONDELAY is an alias in a load module in STEPLIB.
>
> Charles
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Paul Gilmartin
> Sent: Tuesday, June 28, 2022 4:05 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Some questions on SYSCALL
>
> On Tue, 28 Jun 2022 15:55:20 -0700, Ed Jaffe wrote:
>
> >On 6/28/2022 3:50 PM, Charles Mills wrote:
> >> And another question: what makes ADDRESS SYSCALL "go away"?
> >
> >Years ago on MVS-OE we were advised by Bill Schoen not to attempt
> >SYSCALLS("OFF").
> >
> >Once you turn it on, leave it on...
> >
> Good memory, but wrong question.
>
> address TSO /* makes ADDRESS SYSCALL "go away". */
>
> ----------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Receive from Network failed
IBM has been sending out notices that IP and/or host names were changing. Has this change taken effect already? On Tue, Jun 7, 2022 at 8:35 AM Richards, Robert B. (CTR) < 01c91f408b9e-dmarc-requ...@listserv.ua.edu> wrote: > All of the sudden yesterday, I started getting failures trying to get PTFs > from IBM. I saw this problem five years ago and do not remember what caused > it. Retries failed with same error. Anyone recognize this and have > suggestions? > > Bob > > SET BOUNDARY (GLOBAL). > RECEIVE SYSMODS HOLDDATA SOURCEID(.DB22158) > ORDER( > ORDERSERVER(ORDRSRVR) > CLIENT(MYCLIENT) > CONTENT( > PTFS( >UI80740 UI80743 > ) ) > ) > DELETEPKG. > > TLS security mechanism negotiation failed - data connection closed > 425 Unable to build data connection: Not owner > Std Return Code = 16425, Error Code = 00017 > >>> QUIT > 221 Goodbye. > > GIM69233I FTP FAILED, ATTEMPT 01 OF 10. FTP WILL BE RETRIED IN 60 SECONDS. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SLIP IF not working
Issue D SLIP=SLP1 to see if the slip is enabled but inactive. This could mean a few things such as the module was not loaded or the offset is incorrect, etc. On Tue, Jun 7, 2022 at 8:19 AM Robin Atwood wrote: > I wanted to get a dump of my server when the instruction at 001234 in > module > MOD1 gets executed, so I entered: > > > > SLIP SET,IF,J=SRV1,PVTMOD=(MOD1,001234),ID=SLP1,END > > > > I made a transaction that drove MOD1 but no dump was taken. So, OK, the > offset maybe incorrect (there are lots of csects in MOD1) and I adjusted > the > offset, but to no avail. So just to see if the trap worked at all, I > entered: > > > > SLIP SET,IF,J=SRV1,PVTMOD=(MOD1),ID=SLP1,END > > > > but still no dump. So I must be missing something basic; I was recently > doing a lot of SLIP SA traps and didn't have this > > trouble. MOD1 is definitely in memory at the time the SLIP command is > issued. Any advice much appreciated. > > > > Thanks > > Robin > > > > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
New SHARE App on iOS?
There’s supposed to be a new SHARE app on iOS but the App Store cannot find it. Anyone know when it will be available in the US?-- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Finding uncatalogued datasets
> VOLSERs but I really would like to use a more standard > approach. > > I > > > > > > > seem to remember, from another age, that FDRABR could do it. > > > > > > > However > > > > > Dr. > > > > > > Google has > > > > > > > not been able to find me anything to that effect using only > > > > > > > IBM > > > > tools. > > > > > > > Do you have any ideas how to go about this? > > > > > > > Your help will be, as always, greatly appreciated. > > > > > > > Regards, > > > > > > > Jack > > > > > > > > > > > > > > > > -- > > > > > > > -- > > > > > > > -- For IBM-MAIN subscribe / signoff / archive access > > instructions, > > > > > > > send email to lists...@listserv.ua.edu with the message: > > > > > > > INFO IBM-MAIN > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > Mike A Schwab, Springfield IL USA Where do Forest Rangers go > > > > > > to get away from it all? > > > > > > > > > > > > > > > > > > > > -- For IBM-MAIN subscribe / signoff / archive access > > > > > > instructions, send email to lists...@listserv.ua.edu with the > > > > > > message: INFO IBM-MAIN > > > > > > > > > > > > -- > > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > > > send email to lists...@listserv.ua.edu with the message: INFO > > > > > IBM-MAIN > > > > > > > > > > > > -- > > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > > > send email to lists...@listserv.ua.edu with the message: INFO > > > > > IBM-MAIN > > > > > > > > > > > > > -- > > > > For IBM-MAIN subscribe / signoff / archive access > > > > instructions, send > > email > > > > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > > > > > -- > > > > For IBM-MAIN subscribe / signoff / archive access > > > > instructions, send email to lists...@listserv.ua.edu with the > > > > message: INFO IBM-MAIN > > > > > > > > > > > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO > > > IBM-MAIN > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: EXTERNAL EMAIL: General Query --- Any comments on thin clients as mainframe consoles.
I can vouch for the Visara boxes. We have console concentrators and they have been very stable. We use Rocket’s TE software for the consoles. Works great. On Wed, Apr 27, 2022 at 3:10 PM Jerry Whitteridge < jerry.whitteri...@albertsons.com> wrote: > Talk to the Visara folks - they have solutions that would work for you > > Jerry Whitteridge > jerry.whitteri...@albertsons.com > Sr. Manager Managed Services > Albertsons Companies > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Tom Longfellow > Sent: Wednesday, April 27, 2022 1:04 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: EXTERNAL EMAIL: General Query --- Any comments on thin clients as > mainframe consoles. > > We are looking at retiring the coax connected consoles and terminals at > our site. > > The obvious answer is an OSA-ICC with ethernet connected tn3270 devices. > > Anybody have a glowing recommendation for the replacement device for the > classic 3270 "green screen" workstation console? > > I am trying to avoid any full blown PC workstation with external internet > connectivity issues. I want an 'appliance' that we plug-in, configure and > come back in a few years. > These leads me away from windows based solutions because of their constant > cycle of reboots to install mandatory and recommended maintenance. And if > a full function PC is provided, I know that the operators will swap screens > and miss that one important message that just highlighted on the console. > I have some Linux appliances for other purposes that have a 2+ year uptime > and don't wake me up at night with failures. I reboot THEM when I get an > itch. > > My urge is to set up a hub between the OSA-ICC and the workstation > devices. Air-gapped from the rest of the world. Again, any other > suggestions are welcomed. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > Warning: All e-mail sent to this address will be received by the > corporate e-mail system, and is subject to archival and review by someone > other than the recipient. This e-mail may contain proprietary information > and is intended only for the use of the intended recipient(s). If the > reader of this message is not the intended recipient(s), you are notified > that you have received this message in error and that any review, > dissemination, distribution or copying of this message is strictly > prohibited. If you have received this message in error, please notify the > sender immediately. > > > ---------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: General Query --- Any comments on thin clients as mainframe consoles.
For our OSA-ICC consoles, we use Visara LX-500 units. These have a TN3270 emulator. OSA-ICC is on a private network with no connection to the outside world. On Fri, Apr 29, 2022 at 10:36 AM Dana Mitchell wrote: > At my previous site, they had windows PCs for consoles on a dedicated > network connected to the ICC ports. Since the PCs don't have access to the > outside world, they don't get updates automatically so they don't reboot > unexpectedly. The PC folks just have to connect them to the network for > updates periodically. > > On Fri, 29 Apr 2022 02:28:49 -0500, Brian Westerman < > brian_wester...@syzygyinc.com> wrote: > > >There is no real reason that your ICC consoles need to be on the rest of > your network. However, there are people who set it up with a VPN so they > can operate consoles from home. > > > >-- > >For IBM-MAIN subscribe / signoff / archive access instructions, > >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Serialization of PDSE Questions
I can attest to that. I once updated a shared JES2 PDSE outside of a plex and toasted the thing. Required a restore. On Mon, May 2, 2022 at 3:21 PM Doug wrote: > You can't use PDSE's across SYSPLEX boundaries. Period. Read works most > of the time, but no guarantees. > Write really not at all. > > Doug Fuerst > d...@bkassociates.net > > -- Original Message -- > From: "Petersen, David" <041cefae9839-dmarc-requ...@listserv.ua.edu> > To: IBM-MAIN@listserv.ua.edu > Sent: 02-May-22 15:32:06 > Subject: Serialization of PDSE Questions > > >HI, > > > >We are a MIM Shop that does not use GRS. Our shop has a two LPAR SYSPLEX > and a MONOPLEX that shares DASD/Datasets/Master Catalog. We are a little > behind installing z/OS2.4 and the necessary push to move to PDSE. > > > >Does anyone have experience with using MIM to sequence/serialize PDSE > access across LPARs and SYSPLEX/MOMOPLEX? > > > >I'm assuming it's the updates that will cause the issues while sharing > PDSE in other LPARs but any experiences advice would be greatly > appreciated. > > > >Thanks.. > >Dave Petersen > > > >The information contained in this e-mail, including any attachment(s), is > intended solely for use by the named addressee(s). If you are not the > intended recipient, or a person designated as responsible for delivering > such messages to the intended recipient, you are not authorized to > disclose, copy, distribute or retain this message, in whole or in part, > without written authorization from PSEG. This e-mail may contain > proprietary, confidential or privileged information. If you have received > this message in error, please notify the sender immediately. This notice is > included in all e-mail messages leaving PSEG. Thank you for your > cooperation. > > > >-- > >For IBM-MAIN subscribe / signoff / archive access instructions, > >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do you Prove that you no longer need a working SKLM server or started task.
We had DS8886 boxes and used a AP1 appliance with SKLM installed. These are no longer offered by IBM. We just upgraded to DS8950s and it has the option to do key management within the HMCs on the DS8950s. We went this route. On Mon, May 9, 2022 at 11:37 AM Tom Longfellow < 03e29b607131-dmarc-requ...@listserv.ua.edu> wrote: > We have been doing hardware based tape and disk encryption for a very long > time. So long in fact that I think we have 'upgraded' ourselves out of the > SKLM (or EKM) business. > > The standalone servers were installed way back in our early years of > DS8000 technology (before they started offering the standalone feature code > for a dedicated box to handle keys). In the meantime we have gone through > a few upgrades and we are currently at the DS8884 technology. I cannot > find any config info in the DS8884 on 'how to access' an external SKLM > server. I think we have gone internal somehow. > > The SKLM address spaces under z/OS were setup in our days of 3592 tapes > with encryption labels on the tapes themselves. 3592 is another technology > no longer present in our current data center. A TS7760 grid with encrypted > virtual tape disk cache handled the encryption requirement. Our SKLM > setup had two lpars, each backing the other in a primary/secondary > relationship across an internal hipersockets link. > > My gut reaction is to just turn them off and lets the chips fall where > they may, but that is not the 'professional' way to handle it. > > Does anyone know how to prove the negative: That I do not need these > servers. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: [EXTERNAL] Re: How do you Prove that you no longer need a working SKLM server or started task.
I’m not sure but I can try to find out from our storage guys. On Mon, May 9, 2022 at 12:18 PM Pommier, Rex wrote: > Mike, > > Does the 8950 HMC based encryption require an ISKLM license? We are > currently replicating from an 8910 to an 8884 and the 8884 is falling off > support at the end of the year so we'll be replacing it with another 8910 > most likely. I'm wondering if I'll still need ISKLM for disk if we move > our encryption key serving to the HMCs. > > Thanks, > > Rex > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Michael Babcock > Sent: Monday, May 9, 2022 12:10 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: [EXTERNAL] Re: How do you Prove that you no longer need a working > SKLM server or started task. > > We had DS8886 boxes and used a AP1 appliance with SKLM installed. These > are no longer offered by IBM. We just upgraded to DS8950s and it has the > option to do key management within the HMCs on the DS8950s. We went this > route. > > On Mon, May 9, 2022 at 11:37 AM Tom Longfellow < > 03e29b607131-dmarc-requ...@listserv.ua.edu> wrote: > > > We have been doing hardware based tape and disk encryption for a very > > long time. So long in fact that I think we have 'upgraded' ourselves > > out of the SKLM (or EKM) business. > > > > The standalone servers were installed way back in our early years of > > DS8000 technology (before they started offering the standalone feature > code > > for a dedicated box to handle keys). In the meantime we have gone > through > > a few upgrades and we are currently at the DS8884 technology. I > cannot > > find any config info in the DS8884 on 'how to access' an external SKLM > > server. I think we have gone internal somehow. > > > > The SKLM address spaces under z/OS were setup in our days of 3592 > > tapes with encryption labels on the tapes themselves. 3592 is another > > technology no longer present in our current data center. A TS7760 grid > with encrypted > > virtual tape disk cache handled the encryption requirement. Our SKLM > > setup had two lpars, each backing the other in a primary/secondary > > relationship across an internal hipersockets link. > > > > My gut reaction is to just turn them off and lets the chips fall where > > they may, but that is not the 'professional' way to handle it. > > > > Does anyone know how to prove the negative: That I do not need these > > servers. > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > -- > Michael Babcock > OneMain Financial > z/OS Systems Programmer, Lead > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > The information contained in this message is confidential, protected from > disclosure and may be legally privileged. If the reader of this message is > not the intended recipient or an employee or agent responsible for > delivering this message to the intended recipient, you are hereby notified > that any disclosure, distribution, copying, or any action taken or action > omitted in reliance on it, is strictly prohibited and may be unlawful. If > you have received this communication in error, please notify us immediately > by replying to this message and destroy the material in its entirety, > whether in electronic or hard copy format. Thank you. > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: [EXTERNAL] Re: How do you Prove that you no longer need a working SKLM server or started task.
Here's what our DS8K storage expert (from Mainline) said: The DS8k’s need to be at code level 9.2 and have internal encryption licensed. Any of your DS8886’s would still need SKLM, the new DS8900’s can have internal encryption (no ISKLM needed). On 5/9/2022 12:18 PM, Pommier, Rex wrote: Mike, Does the 8950 HMC based encryption require an ISKLM license? We are currently replicating from an 8910 to an 8884 and the 8884 is falling off support at the end of the year so we'll be replacing it with another 8910 most likely. I'm wondering if I'll still need ISKLM for disk if we move our encryption key serving to the HMCs. Thanks, Rex -Original Message- From: IBM Mainframe Discussion List On Behalf Of Michael Babcock Sent: Monday, May 9, 2022 12:10 PM To:IBM-MAIN@LISTSERV.UA.EDU Subject: [EXTERNAL] Re: How do you Prove that you no longer need a working SKLM server or started task. We had DS8886 boxes and used a AP1 appliance with SKLM installed. These are no longer offered by IBM. We just upgraded to DS8950s and it has the option to do key management within the HMCs on the DS8950s. We went this route. On Mon, May 9, 2022 at 11:37 AM Tom Longfellow <03e29b607131-dmarc-requ...@listserv.ua.edu> wrote: We have been doing hardware based tape and disk encryption for a very long time. So long in fact that I think we have 'upgraded' ourselves out of the SKLM (or EKM) business. The standalone servers were installed way back in our early years of DS8000 technology (before they started offering the standalone feature code for a dedicated box to handle keys). In the meantime we have gone through a few upgrades and we are currently at the DS8884 technology. I cannot find any config info in the DS8884 on 'how to access' an external SKLM server. I think we have gone internal somehow. The SKLM address spaces under z/OS were setup in our days of 3592 tapes with encryption labels on the tapes themselves. 3592 is another technology no longer present in our current data center. A TS7760 grid with encrypted virtual tape disk cache handled the encryption requirement. Our SKLM setup had two lpars, each backing the other in a primary/secondary relationship across an internal hipersockets link. My gut reaction is to just turn them off and lets the chips fall where they may, but that is not the 'professional' way to handle it. Does anyone know how to prove the negative: That I do not need these servers. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email tolists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email tolists...@listserv.ua.edu with the message: INFO IBM-MAIN -- The information contained in this message is confidential, protected from disclosure and may be legally privileged. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, distribution, copying, or any action taken or action omitted in reliance on it, is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to this message and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email tolists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
GLOBAL OPERCMDS ACTIVATION
I’m trying to define the MVS.MCSOPER.*/READ profile global class. I issued the following in batch: RDEF GLOBAL OPERCMDS OWNER(PXX) UACC(NONE) ADDMEM(MVS.MCSOPER.*/READ) READY SETROPTS GLOBAL(OPERCMDS) REFRESH ICH14016I CANNOT REFRESH OPERCMDS, GLOBAL ACCESS CHECKING INACTIVE. OPERCMDS doesn’t show up in the GLOBAL CHECKING CLASSES either. I do have the GLOBAL DATASET class active What am I doing wrong? -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How to use LISTDSI from Rexx under Unix shell?
Off the top of my head, you might also look at the catalog search
interface. Examples in SYS1.SAMPLIB I believe.
On Wed, Aug 24, 2022 at 10:47 PM Farley, Peter x23353 <
031df298a9da-dmarc-requ...@listserv.ua.edu> wrote:
> Posted earlier today on MVS-OE but got no responses there.
>
> I know this has probably been discussed previously but I can't seem to get
> the Marist MVS-OE archive search to work for me.
>
> Is there any way to use the LISTDSI TSO external function from "address
> tso" in a Rexx program run under the Unix shell?
>
> I can only get it to return RC = -3, "routine not found". Sample code
> below.
>
> RTFM seems to indicate that "address tso" in a REXX program run under the
> Unix shell will run a TSO TMP in a separate address space, which is OK, I
> can capture the output from that as needed, but I am not getting any
> execution of LISTDSI at all.
>
> Peter
>
> Sample code to get LISTDSI information on 'profilename.EXEC':
>
> /* Rexx */
> Address tso
> Myrc = LISTDSI('EXEC')
> Say 'RC='Myrc',reason='SYSREASON
>
>
> This message and any attachments are intended only for the use of the
> addressee and may contain information that is privileged and confidential.
> If the reader of the message is not the intended recipient or an authorized
> representative of the intended recipient, you are hereby notified that any
> dissemination of this communication is strictly prohibited. If you have
> received this communication in error, please notify us immediately by
> e-mail and delete the message and any attachments from your system.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Defining a new Class in JES
It depends. Do you have some sort of WRITER or SYSOUT Archival tool or product sweeping output of certain (or all) classes or jobs? SAR, RMDS, products like that. On Wed, Aug 24, 2022 at 11:20 PM Peter wrote: > Hello > > I am trying to understand if it is possible to define a new JES class which > can allow the output to remain in the queue for few minutes or an hour ? > > Is it possible? Or if someone has already attempted and can we do this > without an IPL ? > > Peter > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
ISYS and OWNER in ISFPRMxx
The SDSF Security Migration guide says OWNER, GPLEN and ISYS are not applicable to SAF but the “clean up ISFPRMxx” section show them being removed from ISFPRMxx. If they are not applicable to SAF why are they being removed after conversion to SAF? The ISYS seems to be controlled by the SYSNAME command, thus via the ISFCMD.FILTER.SYSNAME profile.Same with OWNER and the ISFCMD.FILTER.OWNER profile. GPLEN is a little different since what’s displayed is controlled by other profiles. I would argue that all of these are applicable to SAF. Does the doc need to be updated or am I not understanding something? -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SDSF z/OS 2.5
Do you have a SDSF class GROUP.groupname.servername profile? With 2.5, you must have this to control who falls into which group. On Mon, Aug 22, 2022 at 8:56 AM James, Joseph L. (CTR) < 04326c675d2d-dmarc-requ...@listserv.ua.edu> wrote: > What is missing here? Ran SDSF in 2.2, 2.3 and 2.4 with full SAF > configuration. No issues in prior releases but getting the following with > z/OS 2.5 and can't see where the issue is with group assignment. > > ISF024I USER xxx NOT AUTHORIZED TO SDSF, NO GROUP ASSIGNMENT > > Stc SDSF and SDSFAUX up and running looks fine, no errors STCs look > the same as the others that are defined in z/OS 2.4 LPAR configurations. > Migration Guide, Installation and Operation docs has provided a solution as > to why group assignments aren't being made. Anyone else experienced this > issue with assigning groups? > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Calculate deltas using DFSORT
ity > > Sugar,2022/08/01,100 > > Sugar,2022/08/02,97 > > Sugar,2022/08/03,93 > > > > I need to get to this: > > > > Product,Date,Sold > > Sugar,2022/08/01,N/A (No daily delta for the first record) > > Sugar,2022/08/02,3(100 - 97) > > Sugar,2022/08/03,4(97 - 93) > > > > May I use bultin DFSORT functions to calculate deltas from the > > previous record and the current one? > > > > I had a look at the OUTREC statement in the Application Programming > > Manual, but as far as I can see arithmetic expressions can only use > > input fields from the current record or decimal constants. > > > > It believe I can achieve the above result using an E35 exit, just > > wanted to be sure that's the only way. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Minor disaster
Do you have an HSM backup of the PDSE? Or a volume backup? Otherwise I don’t know. BTW, I always have prompting turned on so that if I accidentally hit D, I get a prompt verifying I really want to delete it. On Wed, Sep 28, 2022 at 7:02 AM Lennie Dymoke-Bradshaw < 032fff1be9b4-dmarc-requ...@listserv.ua.edu> wrote: > Aaargghhh! > > I just pressed "D" next to a PDSe member I was editing, instead of "S". > > I have generations set up for this PDSe, but I cannot see how to get to the > member I just accidentally deleted. > > Is there a way to recover the member? > > > > > > Lennie Dymoke-Bradshaw > > <https://rsclweb.com/> https://rsclweb.com > > > 'Dance like no one is watching. Encrypt like everyone is.' > > > > > > > > > > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
Okay, more issues. As I stated, we use a permanent maintenance volume/system. With ServerPac, we could define an SSA and have the SYSRES datasets cataloged in our maintenance systems master cat then ServerPac would allocate the dataset using an SSA. later it would generate jobs to remove the SSA. Unless I’m missing something, this doesn’t seem possible with z/OSMF because the Modify Catalog section doesn’t let us change the master cat (even though it says it will). The only way I see around that is to rename the SYSRES dataset with the SSA. Of course we would then need to create our own rename job to remove the SSA. Jeez, COME ON PEOPLE! We were told z/OSMF would provide the same functionality as ServerPac but I guess not. On Wed, Sep 21, 2022 at 3:28 PM Michael Babcock wrote: > We are installing z/OS 2.5 via z/OSMF and are using the Modify Deployment > screens. We can easily change the volumes, HLQs, etc, but wanted to modify > the Primary and/or secondary allocation and don’t see a way to do that. > > We have a case opened with IBM and have been told there is no way to do > that and no plans for it in the future. What?We could do that with > the ServerPac, why not with z/OSMF? I was under the impression that > z/OSMF would provide most functions that ServerPac provided. > > So, is that capability not going to be provided? > > > -- > Michael Babcock > OneMain Financial > z/OS Systems Programmer, Lead > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
Another issue. PSWI uses GIMUNZIP which invokes DFSMSDSS via API. We make all of our ZFS data sets VSAM Extended (EA and REQUIRED). Yes, this isn't necessary I know but we do have a few that are larger than the 4GB limit. Anyway, DFSMSDSS does not invoke the DATACLASS, so there is no way to assign a DATACLASS. So how in the world do we make our ZFS data sets VSAM Extended? What's going to happen when the root filesystem grows beyond the 4 GB limit in the future? So far z/OSMF PSWI is not helping. First, I couldn't select a Target system but tell it to use a different, existing master cat (like we could with ServerPac), now this? On 10/6/2022 10:15 AM, Kurt J. Quackenbush wrote: As I understand your scenario, you have two z/OS systems, a driving system (call it A) where the z/OSMF server is running and a target system (call it B), and you want to install z/OS 2.5 into the existing master catalog for system B. Currently you have selected A as the target system for the deployment. Unfortunately Software Management does not have support for installing into an existing alternate master catalog. Yes it can install into the driving system's master catalog, or create and install into a brand new master catalog, but it does not install into an existing master catalog that is not the driving system's active master catalog. As a circumvention, is B IPL’d? Is a z/OSMF server running on B? If so, then define system B in the z/OSMF Systems task and select it as the target system for the deployment instead of selecting A. Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management Chuck Norris never uses CHECK when he applies PTFs. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Michael Babcock Sent: Wednesday, September 28, 2022 3:40 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: [EXTERNAL] Re: z/OSMF PSWI Okay, more issues. As I stated, we use a permanent maintenance volume/system. With ServerPac, we could define an SSA and have the SYSRES datasets cataloged in our maintenance systems master cat then ServerPac would allocate the dataset using an SSA. later it would generate jobs to remove the SSA. Unless I’m missing something, this doesn’t seem possible with z/OSMF because the Modify Catalog section doesn’t let us change the master cat (even though it says it will). The only way I see around that is to rename the SYSRES dataset with the SSA. Of course we would then need to create our own rename job to remove the SSA. Jeez, COME ON PEOPLE! We were told z/OSMF would provide the same functionality as ServerPac but I guess not. On Wed, Sep 21, 2022 at 3:28 PM Michael Babcock wrote: We are installing z/OS 2.5 via z/OSMF and are using the Modify Deployment screens. We can easily change the volumes, HLQs, etc, but wanted to modify the Primary and/or secondary allocation and don’t see a way to do that. We have a case opened with IBM and have been told there is no way to do that and no plans for it in the future. What?We could do that with the ServerPac, why not with z/OSMF? I was under the impression that z/OSMF would provide most functions that ServerPac provided. So, is that capability not going to be provided? -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
There is a PTF for that. I can’t remember off the top of my head what it is though. I had opened a problem on that very thing and IBM did create the fix for it. On Fri, Oct 21, 2022 at 8:18 AM Carmen Vitullo wrote: > Friday rant > > I've been having problems with JES2EDS on 2 other systems in my PLEX, > once I install maint, or IPL JES2EDS gets the 'JES2EDS cannot locate the > zosmf server, what ? it was working fine before, so why can't I IPL a > system and JES2EDS locate the server again? > > I'm so tired of opening up cases, and researching something for days, > sometimes weeks, I usually just let it fail or ignore these messages any > more, yesterday, I re cycled zosmf on my production LPAR, once back up, > JES2EDS connected, well not by itself, but I had to cancel JES2EDS on > that system, a $SEDS did nothing. who builds stuff like this ? > > Rant off > > Carmen > > On 10/19/2022 7:27 AM, Michael Babcock wrote: > > > Another issue. PSWI uses GIMUNZIP which invokes DFSMSDSS via API. We > > make all of our ZFS data sets VSAM Extended (EA and REQUIRED). Yes, > > this isn't necessary I know but we do have a few that are larger than > > the 4GB limit. Anyway, DFSMSDSS does not invoke the DATACLASS, so > > there is no way to assign a DATACLASS.So how in the world do we > > make our ZFS data sets VSAM Extended? What's going to happen when > > the root filesystem grows beyond the 4 GB limit in the future? > > > > So far z/OSMF PSWI is not helping. First, I couldn't select a Target > > system but tell it to use a different, existing master cat (like we > > could with ServerPac), now this? > > > > On 10/6/2022 10:15 AM, Kurt J. Quackenbush wrote: > >> As I understand your scenario, you have two z/OS systems, a driving > >> system (call it A) where the z/OSMF server is running and a target > >> system (call it B), and you want to install z/OS 2.5 into the > >> existing master catalog for system B. Currently you have selected A > >> as the target system for the deployment. Unfortunately Software > >> Management does not have support for installing into an existing > >> alternate master catalog. Yes it can install into the driving > >> system's master catalog, or create and install into a brand new > >> master catalog, but it does not install into an existing master > >> catalog that is not the driving system's active master catalog. As a > >> circumvention, is B IPL’d? Is a z/OSMF server running on B? If so, > >> then define system B in the z/OSMF Systems task and select it as the > >> target system for the deployment instead of selecting A. > >> > >> Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management > >> > >> Chuck Norris never uses CHECK when he applies PTFs. > >> > >> -Original Message- > >> From: IBM Mainframe Discussion List On > >> Behalf Of Michael Babcock > >> Sent: Wednesday, September 28, 2022 3:40 PM > >> To: IBM-MAIN@LISTSERV.UA.EDU > >> Subject: [EXTERNAL] Re: z/OSMF PSWI > >> > >> Okay, more issues. As I stated, we use a permanent maintenance > >> volume/system. With ServerPac, we could define an SSA and have the > >> SYSRES datasets cataloged in our maintenance systems master cat then > >> ServerPac would allocate the dataset using an SSA. later it would > >> generate jobs to remove the SSA. > >> > >> Unless I’m missing something, this doesn’t seem possible with z/OSMF > >> because the Modify Catalog section doesn’t let us change the master cat > >> (even though it says it will). The only way I see around that is to > >> rename the SYSRES dataset with the SSA. Of course we would then need to > >> create our own rename job to remove the SSA. Jeez, COME ON PEOPLE! > >> > >> We were told z/OSMF would provide the same functionality as ServerPac > >> but I guess not. > >> > >> On Wed, Sep 21, 2022 at 3:28 PM Michael Babcock > >> wrote: > >> > >>> We are installing z/OS 2.5 via z/OSMF and are using the Modify > >>> Deployment screens. We can easily change the volumes, HLQs, etc, but > >>> wanted to modify the Primary and/or secondary allocation and don’t > >>> see a way to do that. > >>> > >>> We have a case opened with IBM and have been told there is no way to do > >>> that and no plans for it in the future. What?We could do that > >>> with > &g
Re: What is the preferred way of starting PAGENT
I’m not in front of my computer right now but I believe our automation product starts and stops PAGENT. On Mon, Sep 19, 2022 at 4:10 AM Jantje. < 033acf17e42f-dmarc-requ...@listserv.ua.edu> wrote: > On Fri, 16 Sep 2022 13:04:26 -0500, Michael Babcock > wrote: > > >I was under the impression that if PAGENT isn't running, then no new > >connections can start. > > > Well, in our set-up, with PAGENT stopped after the TCIP stack has come up > (and PAGENT having had the chance to install the policy), we can still > start new TN3270 connections. > > We did specify NOPURGE NOFLUSH... > > Still we would have a far more warm and comfy feeling if PAGENT would > remain up, being restarted whenever it stops unscheduled... > > Any recommendations? > > Cheers, > > Jantje. > > > > >> > >> Thanks and very best regards, > >> > >> Jantje. > >> > >> -- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > >-- > >For IBM-MAIN subscribe / signoff / archive access instructions, > >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: PSP for Crypto Express 8s
I don’t use PSP buckets anymore. I download the latest holddata and run SMPE MISSINGFIX. Do you have access to download the holddata? On Wed, Sep 21, 2022 at 6:26 AM Eric D Rossman wrote: > That's unfortunate (that you don't get any access to the IBM support > center). That sounds like a hole in our zPDT support to me. > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Lennie Dymoke-Bradshaw > Sent: Monday, September 19, 2022 6:42 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: [EXTERNAL] Re: PSP for Crypto Express 8s > > Eric, > Many thanks for taking the trouble to post this. > I was hoping there was a PSP for the Crypto Express 8 itself (or possibly > for 4769Device), but I cannot find that. > I have an ADCD system running on a zPDT machine. As such I am not allowed > access to the IBM support centre, so I have to research things elsewhere. > ADCD does give me access to PTFs but I only have those up to PUT2207. > The ADCD is at level ZOS25B but this does not include support for the > Crypto Express 8 (although it does include FMID HCR77D2). I was hoping the > PSP would guide me to the necessary maintenance. However, I discovered that > the latest ICSF manuals include details I need. I need the PTF for APAR > OA61609. > So I have used that as a base and installed fixes to allow Crypto Express > 8 to be installed. At the moment my ICSF is working with the Crypto devices > recognised as CEX8s devices. > There is a PSP for "Upgrade ZOSV2R5, Subset ICSF77D2" but this does not > tell me what I need. > Regards > > Lennie Dymoke-Bradshaw > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: PSP for Crypto Express 8s
I use this as input: REPORT MISSINGFIX ZONES(MVST100) FIXCAT(IBM.*) . And it will report something like this (edited for length): MISSING FIXCAT SYSMOD REPORT FOR ZONE MVST100 HOLD MISSING HELD RESOLVING SYSMOD_ FIX CATEGORY FMID CLASSAPAR SYSMOD NAME STATUS RECEIVED ___ ___ ___ ___ ___ ___ __ IBM.Device.Disk.DS8000-2107 HDZ2240 CA56267 HDZ2240 UJ08763 GOOD YES CA57768 HDZ2240 UJ08744 GOOD YES CA61492 HDZ2240 UJ07885 HELD YES CA61494 HDZ2240 UJ07877 HELD YES CA62423 HDZ2240 UJ08550 GOOD YES CA62506 HDZ2240 UJ07862 GOOD YES CA62651 HDZ2240 UJ08973 GOOD YES CA63552 HDZ2240 UJ09056 GOODYES IBM.Device.Server.zBC12-2828.zHighPerformanceFICON HSM1P00 CH42336 HSM1P00 UI80637 GOOD YES IBM.Device.Server.zEC12-2827.zHighPerformanceFICON HSM1P00 CH42336 HSM1P00 UI80637 GOOD YES IBM.Device.Server.z10-BC-2098.zHighPerformanceFICON HSM1P00 CH42336 HSM1P00 UI80637 GOOD YES IBM.Function.zEDC HBB77C0 CA62239 HBB77C0 UJ08657 GOODYES CA62721 HBB77C0 UJ08708 GOODYES IBM.Function.zHighPerformanceFICON HSM1P00 CH42336 HSM1P00 UI80637 GOODYES IBM.Function.zHyperLink HDZ2240 CA61737 HDZ2240 UJ08978 GOODYES CA62068 HDZ2240 UJ08922 GOODYES On Wed, Sep 21, 2022 at 1:09 PM Lennie Dymoke-Bradshaw < 032fff1be9b4-dmarc-requ...@listserv.ua.edu> wrote: > I may have been able to do that. My SMPE skills are a little old and I > don't recall that. > Yes, I think HOLDDATA is available freely from IBM. > https://www.ibm.com/support/pages/enhanced-holddata-zos > > So if you need new device support (for example) how does the MISSINGFIX > work? What does the report tell you? > Do I have to have all the PTFs received? One of my problems was the disk > space needed for the SMPPTS spill files. > > Lennie Dymoke-Bradshaw > https://rsclweb.com > ‘Dance like no one is watching. Encrypt like everyone is.’ > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Michael Babcock > Sent: 21 September 2022 16:31 > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: PSP for Crypto Express 8s > > I don’t use PSP buckets anymore. I download the latest holddata and run > SMPE MISSINGFIX. Do you have access to download the holddata? > > On Wed, Sep 21, 2022 at 6:26 AM Eric D Rossman > wrote: > > > That's unfortunate (that you don't get any access to the IBM support > > center). That sounds like a hole in our zPDT support to me. > > > > -Original Message- > > From: IBM Mainframe Discussion List On > > Behalf Of Lennie Dymoke-Bradshaw > > Sent: Monday, September 19, 2022 6:42 PM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: [EXTERNAL] Re: PSP for Crypto Express 8s > > > > Eric, > > Many thanks for taking the trouble to post this. > > I was hoping there was a PSP for the Crypto Express 8 itself (or > > possibly for 4769Device), but I cannot find that. > > I have an ADCD system running on a zPDT machine. As such I am not > > allowed access to the IBM support centre, so I have to research things > elsewhere. > > ADCD does give me access to PTFs but I only have those up to PUT2207. > > The ADCD is at level ZOS25B but this does not include support for the > > Crypto Express 8 (although it does include FMID HCR77D2). I was hoping > > the PSP would guide me to the necessary maintenance. However, I > > discovered that the latest ICSF manuals include details I need. I need > > the PTF for APAR OA61609. > > So I have used that as a base and installed fixes to allow Crypto > > Express > > 8 to be installed. At the moment my ICSF is working with the Crypto > > devices recognised as CEX8s devices. > > There is a PSP for "Upgrade ZOSV2R5, Subset ICSF77D2" but this does > > not tell me what I need. > > Regards > > > > Lennie Dymoke-Bradshaw > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to lists...@listserv.ua.edu with the messa
z/OSMF PSWI
We are installing z/OS 2.5 via z/OSMF and are using the Modify Deployment screens. We can easily change the volumes, HLQs, etc, but wanted to modify the Primary and/or secondary allocation and don’t see a way to do that. We have a case opened with IBM and have been told there is no way to do that and no plans for it in the future. What?We could do that with the ServerPac, why not with z/OSMF? I was under the impression that z/OSMF would provide most functions that ServerPac provided. So, is that capability not going to be provided? -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: refresh system symbols
You can specify a dataset name and volser. SETLOAD 02,IEASYM,DSN=sys2.relson,VOL=123456 On Sat, Sep 10, 2022 at 5:42 AM Colin Paice wrote: > I've been trying to refresh the system symbols, and have hit a problem. > There is the setload command, which you can use to refresh IPL or IEASYM - > but only if the LOADxx member is in the PARMLIB concatenation. > > My LOADxx (from the ADCD system) is in SYS1.IPLPARM, and setload does not > pick the changes up from there. > > For example > > 05.34.10 setload 00,ieasym > > 05.34.10 IEF764I MSTJCL00 RESOLVER IEFPARM SETLOAD_LOAD00 PARMLIB > READ FAILED - MEMBER LOAD00 NOT FOUND. > 05.34.10 IEF901I SYSTEM SYMBOLS WERE NOT UPDATED FROM LOAD00. > > IEFPRMLB RETURN CODE=000C REASON=0001 > > If I copy load00 to user.z25a.parmlib and repeat it I get > SETLOAD 00,IEASYM > IEF900I SYSTEM SYMBOLS WERE UPDATED FROM LOAD00 > > > Is there another command I should be using, or do I need to set up a dummy > member in user.z25a.parmlib to do it? > > Colin > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: refresh system symbols
The 02 was just an example straight from the doc. On Sat, Sep 10, 2022 at 11:15 AM Colin Paice wrote: > SETLOAD 02,IEASYM,DSN=sys2.relson,VOL=123456 > only works if you have a load02 in the dataset. > I do not - my LOADxx's are in SYS.IPLPARM - that's the problem. > I can create a LOAD02 just for refreshing the symbols, but that feels like > working round the problem (no real hardship) > I've raised a doc comment on this. > Colin > > On Sat, 10 Sept 2022 at 14:46, Michael Babcock > wrote: > > > You can specify a dataset name and volser. > > > > SETLOAD 02,IEASYM,DSN=sys2.relson,VOL=123456 > > > > On Sat, Sep 10, 2022 at 5:42 AM Colin Paice > wrote: > > > > > I've been trying to refresh the system symbols, and have hit a problem. > > > There is the setload command, which you can use to refresh IPL or > IEASYM > > - > > > but only if the LOADxx member is in the PARMLIB concatenation. > > > > > > My LOADxx (from the ADCD system) is in SYS1.IPLPARM, and setload does > not > > > pick the changes up from there. > > > > > > For example > > > > > > 05.34.10 setload 00,ieasym > > > > > > 05.34.10 IEF764I MSTJCL00 RESOLVER IEFPARM SETLOAD_LOAD00 > > PARMLIB > > > READ FAILED - MEMBER LOAD00 NOT FOUND. > > > 05.34.10 IEF901I SYSTEM SYMBOLS WERE NOT UPDATED FROM LOAD00. > > > > > > IEFPRMLB RETURN CODE=000C REASON=0001 > > > > > > If I copy load00 to user.z25a.parmlib and repeat it I get > > > SETLOAD 00,IEASYM > > > IEF900I SYSTEM SYMBOLS WERE UPDATED FROM LOAD00 > > > > > > > > > Is there another command I should be using, or do I need to set up a > > dummy > > > member in user.z25a.parmlib to do it? > > > > > > Colin > > > > > > -- > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > > -- > > Michael Babcock > > OneMain Financial > > z/OS Systems Programmer, Lead > > > > ---------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: What is the preferred way of starting PAGENT
I was under the impression that if PAGENT isn't running, then no new connections can start. On 9/16/2022 10:44 AM, Jantje. wrote: On Fri, 16 Sep 2022 09:03:23 -0500, Matthew Stitt wrote: Here are my AUTOLOG statements from the TCP/IP profile: AUTOLOG 5 PAGENT ; AT-TLS Policy server GPMSERVE DELAYSTART TTLS ; RMF Server ... Dear Matthew, This is very similar to what we now have in our sandbox set-up. And it does indeed start the PAGENT when the stack is started. The DELAYSTART servers only fire up when the AT-TLS is readily configured and available with all policies installed. So, the happy-days scenario is covered well. What is worrying us is that with this set-up is that when, for whatever reason the PAGENT stops, it is not restarted automatically. As I said before: that does not seem to hamper neither the ongoing, nor the new TN3270 connections. But then why the Redpaper says that the PAGENT should remain up? Any comments welcome. Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Strange FTP behavior
Jake, did you add TRACE to the PARM on the EXEC PGM=FTP statement? On Sat, Sep 17, 2022 at 6:27 AM Jake Anderson wrote: > Hello > > Cross posted > > I was able to create the user with RESTRICTED attribute > > I have given a surrogate access to a STC owner is to the ID which I created > with RESTRICTED attribute > > Here when we submit job with USER=EXTBATCH > It internally does a FTP to a Linux server. For connecting the Linux using > FTP we are using ID created in Linux which is wmMF01 > > The FTP logon is successful but when it tries to do a get operation on an > existing file in Linux to mainframe then it doesn't transfer instead it > gives zero bytes transferred > > To isolate the issue I tried to run the same batch using my own Mainframe > ID and wmMF01 but I was able to transfer the ID fron Linux to mainframe > without any problem. > > Unfortunately this is not even throwing any error message to debug and I > know that this is due to the RESTRICTED ATTRIBUTE > > There were some more case studies I did > > 1 ) When I submit the JCL with USER=EXTBATCH the transfer works > perfectly fine > > I did enable FTP DEBUG ALL but no message is displayed about zero bytes > getting transferred > > I hope I am missing some BPX racf profile for which the started task owner > is supposed to be permitted and I am not sure what BPX profile will allow > the FTP to take place > > EXTBATCH has OMVS segment, Started task owner too has OMVS segment and it's > default groups too have GID > > Could someone please point to a right direction on troubleshooting this in > detail > > Jake > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: omvs man pages
I added the rocket stuff to my MANPATH in my global profile. On Thu, Sep 15, 2022 at 1:57 PM Lionel B. Dyck wrote: > This explains how to enable the man pages in omvs > https://www.ibm.com/docs/en/zos/2.1.0?topic=utilities-enabling-man-pages > > BUT - is there a way to update this with additional man pages - say some > from Rocket (i.e. curl) ? > > Thanks > > > Lionel B. Dyck <>< > Website: https://www.lbdsoftware.com > Github: https://github.com/lbdyck > > “Worry more about your character than your reputation. Character is what > you > are, reputation merely what others think you are.” - - - John Wooden > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
Yes, agree, I typically over allocate the Linklisted data sets and have zero secondary and increase DIR BLKS as well (if it’s a PDS). I can do this when the jobs are built but would be MUCH easier in the MODIFY screens. On Thu, Sep 22, 2022 at 6:25 AM Seymour J Metz wrote: > What about modifying directory blocks for whatever is still PDS? > > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > > From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf > of Michael Babcock [bigironp...@gmail.com] > Sent: Wednesday, September 21, 2022 4:28 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: z/OSMF PSWI > > We are installing z/OS 2.5 via z/OSMF and are using the Modify Deployment > screens. We can easily change the volumes, HLQs, etc, but wanted to modify > the Primary and/or secondary allocation and don’t see a way to do that. > > We have a case opened with IBM and have been told there is no way to do > that and no plans for it in the future. What?We could do that with > the ServerPac, why not with z/OSMF? I was under the impression that > z/OSMF would provide most functions that ServerPac provided. > > So, is that capability not going to be provided? > > > -- > Michael Babcock > OneMain Financial > z/OS Systems Programmer, Lead > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
We use a permanent maintenance volume that isn’t generally IPL’d from. I triple the space and increase dirblks and use no secondaries. We use mod 27s and could use mod 54s if needed. So space isn’t an issue for me. That res is copied to the other systems during rollout. On Thu, Sep 22, 2022 at 3:13 PM Mark Zelden wrote: > On Thu, 22 Sep 2022 13:49:50 -0500, Carmen Vitullo > wrote: > > >I've been doing this on my ServerPac for a while, I've even called out > >the ServerPac folks about the issue of, why deliver linklist lpalist > >datasets with secondary allocation if the linkist does not support it, > > Secondary extents are certainly supported in the LNKLST. What you can't > do is > take a secondary to the "live" LNKLST for a PDS, but you can for PDSE and > pick up the change with an LLA REFRESH or UPDATE. For LPA libs it doesn't > matter ever since that is only read in at IPL time. > > The number of extents in the LNKLST used to be a problem for some systems, > but when > the rules changed in DFSMS/MVS 1.3 to be "255 total extents or less" with > PDSE always > counting as 1 extent, that helped a lot. I personally want secondary > extents, at > least for some data sets to support applying maintenance. I always run > SMP/E apply > with COMPRESS(ALL) anyway so it's not going to continually increase and > I'd rather > get a secondary on a few libraries than have the apply blow up, have > allocate a new > larger DSN, copy old to new, rename and restart my apply. I'm pretty sure > this is > why ServerPac allocations came with secondary extents going back in > history. > > Due to 3390-9s geometry being my main sysres volume still, over allocation > from ServerPac (or now z/OSMF) has been more of a problem for me than > under allocation, so when building my local maintenance sysres after > install I have > had to free space on some larger PDS or PDSE files to get everything to > fit and > have spare space on the sysres for maintenance. Then if something takes a > secondary during apply, I don't care. The prod LNKLSTs have secondaries on > some data sets on the sysres, but again I don't care. No one better be > updating > the live sysres anyway except under extreme circumstances. > > As usual YMMV and if you are in a shop with 220 LNKLST data sets you > probably > have a very good reason for never wanting any secondary extents even in > your > maintenance environment. > > > Best Regards, > > Mark > -- > Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS > ITIL v3 Foundation Certified > mailto:m...@mzelden.com > Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html > > ---------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: omvs man pages
Yes exactly what I did. I added the rocket paths to the MANPATH in /etc/profile. On Thu, Sep 15, 2022 at 3:10 PM Peter Sylvester wrote: > Yes, the rocket anaconda stuff has man files that you can add to MANPATH. > > in OMVS /etc/profile > > # == > #MANPATH environment variable > # > # Specifies the list of directories that the system searches for man > # pages (help files). The %L represents the language currently set by > # the LANG environment variable. > # == > MANPATH=/usr/man/%L > export MANPATH > > > And you can activate you current conda environment, or well, assuming you > have the rocket software in a file system in $RSOFT and your current > conda environment is xyz, then add > > $RSOFT/envs/xyz/share/man into MANPATH wherever you may want it. > > There are other man for IBM products. > > Peter > > > > // > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: omvs man pages
I was thinking that EPH datasets are no longer shipped with z/OS. They are not on my z/OS 2.4 system. On Fri, Sep 16, 2022 at 6:24 AM Lionel B. Dyck wrote: > The issue isn't with MANPATH - when you issue the command: man -k . > > It reports a summary of 'all available' man pages. > > And when you issue: man -k xxx > > It will report 'all' the man pages that have xxx > > The OMVS man command does *not* search the MANPATH but the information in > the EPH.SEPHTAB dataset. > > Thus Rocket, Co:Z, etc. man pages will never be found. > > Using the command man xxx apparently does use the MANPATH as it will > display other man pages (e.g. curl). > > What I'd like is the ability to update the EPH.SEPHTAB, or .? > > > Lionel B. Dyck <>< > Website: https://www.lbdsoftware.com > Github: https://github.com/lbdyck > > “Worry more about your character than your reputation. Character is what > you are, reputation merely what others think you are.” - - - John Wooden > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Paul Gilmartin > Sent: Thursday, September 15, 2022 2:19 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: omvs man pages > > On Thu, 15 Sep 2022 13:56:38 -0500, Lionel B. Dyck wrote: > > >This explains how to enable the man pages in omvs > >https://www.ibm.com/docs/en/zos/2.1.0?topic=utilities-enabling-man-page > >s > > > A more recent edition: < > https://www.ibm.com/docs/en/zos/2.3.0?topic=utilities-enabling-man-pages> > > >BUT - is there a way to update this with additional man pages - say > >some from Rocket (i.e. curl) ? > > > Alas, I see: < > https://pubs.opengroup.org/onlinepubs/9699919799.2008edition/utilities/man.html > >: > ... > The historical MANPATH variable is not included in POSIX because no > attempt is > made to specify naming conventions for reference page files, nor even > to mandate > that they are files at all. > > Bummer. I would have hoped for something such as > MANPATH=/usr/man/%L:/usr/lpp/com.rocketsoftward/man > > Are the Bookie pages formatted on-the-fly or are formatted versions cached? > > >Lionel B. Dyck <>< > >Website: https://www.lbdsoftware.com > >Github: https://github.com/lbdyck > > -- > gil > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
Yes. And I vaguely remember IBM saying something about providing the same functionality that ServerPac provided. Of course, at my age, the parity errors occur at an increasing rate! On Thu, Sep 22, 2022 at 11:11 PM Brian Westerman < brian_wester...@syzygyinc.com> wrote: > I have maintained for quite a while now that z/OSMF is not ready to exist > as the sole installation method. I have complained here, and directly to > IBM and directly to the z/OSMF advocates at IBM about the myriad of > problems that need to be resolved, but IBM's view seems to be damn the > torpedoes, and full speed ahead, even if it's not exactly the right > direction. It's very sad, and it will elongate my install from a trivial > couple hours to several times longer just to make up for the parts that > need to be addressed to make the system ready for use at a "real" site and > not someones euphemistic idea of what a site "should" be. > > That said, I had absolutely no problem with making it an "option" to > select it as the install method, but I was told that given the choice, that > very few people would use z/OSMF for installation, and that's not where > they wanted to find themselves. At the time, I mentioned that there might > be a reason why systems programmers might want ServerPac instead of z/OSMF, > but I kept being reminded of what it's like to talk to a very young child > who wants their Umpa Lumpa now. > > Brian > > On Thu, 22 Sep 2022 13:49:50 -0500, Carmen Vitullo > wrote: > > >I've been doing this on my ServerPac for a while, I've even called out > >the ServerPac folks about the issue of, why deliver linklist lpalist > >datasets with secondary allocation if the linkist does not support it, > >why are they so under allocated, it wasn't until I started to work for > >IBM GS that I realized, even the global services folks do not know what > >the customer issues are, if GS is building a system for a client we do > >not use a ServerPac, most older, seasoned IBM GS folks don't know what a > >ServerPac is, or the one's I worked with did not. > > > >my main issue, ongoing with z/OSMF is these incoherent error messages, > >and help is no help, when a field is required there's not help prompt > >telling me the format or syntax, or what's expected, just, it's not valid. > > > >so many cases open with support I really didn't need to if the help > >dialog was actually helpful. > > > >I hate to keep bashing IBM but we, as customers are forced to use a tool > >that's not really ready for prime time IMHO > > > >Carmen > > > > > > > >On 9/22/2022 1:13 PM, Michael Babcock wrote: > > > >> Yes, agree, I typically over allocate the Linklisted data sets and have > >> zero secondary and increase DIR BLKS as well (if it’s a PDS). I can do > >> this when the jobs are built but would be MUCH easier in the MODIFY > >> screens. > >> > >> On Thu, Sep 22, 2022 at 6:25 AM Seymour J Metz wrote: > >> > >>> What about modifying directory blocks for whatever is still PDS? > >>> > >>> > >>> -- > >>> Shmuel (Seymour J.) Metz > >>> http://mason.gmu.edu/~smetz3 > >>> > >>> > >>> From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on > behalf > >>> of Michael Babcock [bigironp...@gmail.com] > >>> Sent: Wednesday, September 21, 2022 4:28 PM > >>> To: IBM-MAIN@LISTSERV.UA.EDU > >>> Subject: z/OSMF PSWI > >>> > >>> We are installing z/OS 2.5 via z/OSMF and are using the Modify > Deployment > >>> screens. We can easily change the volumes, HLQs, etc, but wanted to > modify > >>> the Primary and/or secondary allocation and don’t see a way to do that. > >>> > >>> We have a case opened with IBM and have been told there is no way to do > >>> that and no plans for it in the future. What?We could do that > with > >>> the ServerPac, why not with z/OSMF? I was under the impression that > >>> z/OSMF would provide most functions that ServerPac provided. > >>> > >>> So, is that capability not going to be provided? > >>> > >>> > >>> -- > >>> Michael Babcock > >>> OneMain Financial > >>> z/OS Systems Programmer, Lead > >>> > >>> -- > >>> For IBM-MAIN subscribe / signoff / archive access instructions, > >>> s
Re: z/OSMF PSWI
I’m not using a new master cat. We use our sandbox as the driving system and our target is our maintenance system. We do IPL the maintenance system just to ensure it comes up cleanly. On Thu, Sep 29, 2022 at 7:44 AM Marna WALLE wrote: > Michael, > Have you verified that you have all the correct Driving System PTFs > installed, as indicated with FIXCAT IBM.DrivingSystem-RequiredService ?. > > Check out slide 33 onwards in this presentation that KurtQ did for the Z > Exchange, https://www.newera-info.com/KQ1.html. It explains how a new > master catalog can be used, including how the SSA (now called Temporary > Catalog Alias) is to be specified and used. > > -Marna WALLE > z/OS System Install and Upgrade > IBM Poughkeepsie > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
We are missing two, PH45201 and PH46392. After reading them, they don’t really seem to match our situation unless there are things fixed that are not doc’d. On Thu, Sep 29, 2022 at 7:44 AM Marna WALLE wrote: > Michael, > Have you verified that you have all the correct Driving System PTFs > installed, as indicated with FIXCAT IBM.DrivingSystem-RequiredService ?. > > Check out slide 33 onwards in this presentation that KurtQ did for the Z > Exchange, https://www.newera-info.com/KQ1.html. It explains how a new > master catalog can be used, including how the SSA (now called Temporary > Catalog Alias) is to be specified and used. > > -Marna WALLE > z/OS System Install and Upgrade > IBM Poughkeepsie > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
I have applied the two missing PTFs and will IPL them in. But do we need to restart our PSWI of z/OS 2.5 to pick up the changes? The hold data says it's just a restart to pick up the changes but doesn't mention restarting the installation process for z/OS 2.5 PSWI. On 9/29/2022 7:44 AM, Marna WALLE wrote: Michael, Have you verified that you have all the correct Driving System PTFs installed, as indicated with FIXCAT IBM.DrivingSystem-RequiredService ?. Check out slide 33 onwards in this presentation that KurtQ did for the Z Exchange, https://www.newera-info.com/KQ1.html. It explains how a new master catalog can be used, including how the SSA (now called Temporary Catalog Alias) is to be specified and used. -Marna WALLE z/OS System Install and Upgrade IBM Poughkeepsie -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF PSWI
Unfortunately, that system is not up and z/OSMF is set to "connect" to our sandbox. I IPL'd that system but the IZU* tasks do not start (no RACF Started class profile defined either). On 10/6/2022 10:15 AM, Kurt J. Quackenbush wrote: As I understand your scenario, you have two z/OS systems, a driving system (call it A) where the z/OSMF server is running and a target system (call it B), and you want to install z/OS 2.5 into the existing master catalog for system B. Currently you have selected A as the target system for the deployment. Unfortunately Software Management does not have support for installing into an existing alternate master catalog. Yes it can install into the driving system's master catalog, or create and install into a brand new master catalog, but it does not install into an existing master catalog that is not the driving system's active master catalog. As a circumvention, is B IPL’d? Is a z/OSMF server running on B? If so, then define system B in the z/OSMF Systems task and select it as the target system for the deployment instead of selecting A. Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management Chuck Norris never uses CHECK when he applies PTFs. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Michael Babcock Sent: Wednesday, September 28, 2022 3:40 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: [EXTERNAL] Re: z/OSMF PSWI Okay, more issues. As I stated, we use a permanent maintenance volume/system. With ServerPac, we could define an SSA and have the SYSRES datasets cataloged in our maintenance systems master cat then ServerPac would allocate the dataset using an SSA. later it would generate jobs to remove the SSA. Unless I’m missing something, this doesn’t seem possible with z/OSMF because the Modify Catalog section doesn’t let us change the master cat (even though it says it will). The only way I see around that is to rename the SYSRES dataset with the SSA. Of course we would then need to create our own rename job to remove the SSA. Jeez, COME ON PEOPLE! We were told z/OSMF would provide the same functionality as ServerPac but I guess not. On Wed, Sep 21, 2022 at 3:28 PM Michael Babcock wrote: We are installing z/OS 2.5 via z/OSMF and are using the Modify Deployment screens. We can easily change the volumes, HLQs, etc, but wanted to modify the Primary and/or secondary allocation and don’t see a way to do that. We have a case opened with IBM and have been told there is no way to do that and no plans for it in the future. What?We could do that with the ServerPac, why not with z/OSMF? I was under the impression that z/OSMF would provide most functions that ServerPac provided. So, is that capability not going to be provided? -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISFACR and GROUPs
Yes, I have the 2.5 version of that doc. But the doc says the utility should work. I’ve opened a case with IBM. On Thu, Aug 4, 2022 at 2:37 PM Sri h Kolusu wrote: > > Is the ISFACR exec supposed to look at the IUID parm and connect those > users to the appropriate group? > > Michael > > You may want to read upon the "z/OS SDSF Security Migration Guide". Here > is an old topic that discusses about it > > > https://groups.google.com/g/bit.listserv.ibm-main/c/I4mYzyTSkDE/m/Ojo3tG-kAgAJ > > > Thanks, > Kolusu > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: JES2EDS not started
I was thinking it didn’t start unless there was email to send. On Wed, Aug 10, 2022 at 6:39 AM Gadi Ben-Avi wrote: > I installed many JES2 ptf's because of some messages on our production > system. > $S EDS doesn't help. Nothing happens. > > JES2EDS starts with JES2 on our production systems, but doesn't start on > the test system. > > Gadi > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Michael Babcock > Sent: Wednesday, August 10, 2022 2:13 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: JES2EDS not started > > Check for fixes to JES2EDS. There is at least one fix recently. You can > start it manually using $S EDS (from my memory, which may have parity > errors!). If you see HASP1522/HASP153 errors, it may mean you need the > PTF. Don’t remember the PTF right now. > > On Wed, Aug 10, 2022 at 3:04 AM Gadi Ben-Avi wrote: > > > Hi, > > I am trying to get JES2EDS to work. > > On our production systems, it is started automagically during IPL. > > On the test system, it's not started, and I can't find an attempt to > > start it. > > > > The z/OSMF started tasks (IZUANG1 and IZUSVR1) are started. > > > > What causes JES2EDS to start? > > > > We are running z/OS v2.3 > > > > Gadi > > > > > > ------ > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > -- > Michael Babcock > OneMain Financial > z/OS Systems Programmer, Lead > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > Email secured by Check Point > > ------ > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: JES2EDS not started
Check for fixes to JES2EDS. There is at least one fix recently. You can start it manually using $S EDS (from my memory, which may have parity errors!). If you see HASP1522/HASP153 errors, it may mean you need the PTF. Don’t remember the PTF right now. On Wed, Aug 10, 2022 at 3:04 AM Gadi Ben-Avi wrote: > Hi, > I am trying to get JES2EDS to work. > On our production systems, it is started automagically during IPL. > On the test system, it's not started, and I can't find an attempt to > start it. > > The z/OSMF started tasks (IZUANG1 and IZUSVR1) are started. > > What causes JES2EDS to start? > > We are running z/OS v2.3 > > Gadi > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Shopz Links Broken?
That link did work for me on my phone. I’ll try from within the company network. Thanks! On Mon, Aug 15, 2022 at 9:33 AM Carmen Vitullo wrote: > Hi Mike, the link I have is > > https://www.ibm.com/software/shopzseries/ShopzSeries.wss?action=login > > my company uses Single user or single sign on so once I verify my email > I just get taken there > > HTH's > > > Carmen > > > On 8/15/2022 9:22 AM, Michael Babcock wrote: > > All links that I have tried don’t take me to the traditional Shopz > website. > >Has IBM broken or changed something? > > > > It takes me to the IBM Software landing page and I don’t see how to get > to > > Shopz. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Shopz Links Broken?
All links that I have tried don’t take me to the traditional Shopz website. Has IBM broken or changed something? It takes me to the IBM Software landing page and I don’t see how to get to Shopz. -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Shopz Links Broken?
Must be something in our network. That same link did not work from within our network. On Mon, Aug 15, 2022 at 9:38 AM Michael Babcock wrote: > That link did work for me on my phone. I’ll try from within the company > network. Thanks! > > On Mon, Aug 15, 2022 at 9:33 AM Carmen Vitullo > wrote: > >> Hi Mike, the link I have is >> >> https://www.ibm.com/software/shopzseries/ShopzSeries.wss?action=login >> >> my company uses Single user or single sign on so once I verify my email >> I just get taken there >> >> HTH's >> >> >> Carmen >> >> >> On 8/15/2022 9:22 AM, Michael Babcock wrote: >> > All links that I have tried don’t take me to the traditional Shopz >> website. >> >Has IBM broken or changed something? >> > >> > It takes me to the IBM Software landing page and I don’t see how to get >> to >> > Shopz. >> >> ---------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN >> > -- > Michael Babcock > OneMain Financial > z/OS Systems Programmer, Lead > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Problems caused by Health Checker?
I’ve never seen anything like that in our shop. On Mon, Aug 15, 2022 at 5:09 PM Pew, Curtis G wrote: > We’ve occasionally had problems with our production z/OS LPAR that seem to > be caused by HZSPROC, and I was wondering if anyone else has seen anything > like this. > > One problem we’ve seen is that sometimes when HZSPROC starts during an > IPL, it for some reason seems to try to access a migrated dataset (we use > FDRABR for dataset migration) and since DFRMM hasn’t started yet the recall > fails. (We don’t know what dataset it is trying to access; none of the > datasets explicitly in the PROC ever migrate.) Everything seems to freeze > until we reply “CANCEL” to the EDG4012D message. > > This is annoying enough, but last Thursday one of my coworkers stopped > HZSPROC because it was repeatedly issuing the message that ECSA usage was > high. (We’d already scheduled an emergency IPL for Sunday to fix that.) > Then Friday another coworker tried to restart HZSPROC to see if he could > figure out the migration issue, and our system stopped working well. It > looked like batch jobs were stuck in allocation or deallocation from what > was described to me. (I’m semi-retired and don’t work on Fridays.) They > decided to go ahead with the emergency IPL then and there, but without > HZSPROC starting. That IPL went fine and we haven't seen any issues since > then, but we’re afraid to try to start HZSPROC. > > Has anyone had issues like this with Health Checker? Any suggestions for > how to resolve this? > > Thanks. > > > > -- > Curtis Pew > ITS Campus Solutions > curtis@austin.utexas.edu > > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ADRDSSU DUMP PATH
Is the case sensitivity correct for the working directory? And is the
source directory a subdirectory of the working directory?
On Thu, Aug 11, 2022 at 7:39 AM Mark Jacobs <
0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:
> I'm trying to use ADRDSSU to backup a directory and all files and
> subdirectories under it. Unless I'm missing something it doesn't look like
> it's supported.
>
> DUMP PATH(INC('sourcedir')) WORKINGDIRECTORY('/service') OUTDD(OUTDD)
>
> ADRDSSU is only backing up the directory itself, nothing under it.
>
> Mark Jacobs
>
> Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted
> email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ADRDSSU DUMP PATH
According to z/OS 2.4 EF086028 is:
“A required name entry in a directory was not found”.
And I’m looking at the 2.5 doc I have, it says “DFSMSdss does not support
the use of UNIX wildcard characters” and in a note says “DFSMSdss does not
provide wildcard support when processing UNIX files”
On Thu, Aug 11, 2022 at 11:59 AM Michael Babcock
wrote:
> Is the case sensitivity correct for the working directory? And is the
> source directory a subdirectory of the working directory?
>
> On Thu, Aug 11, 2022 at 7:39 AM Mark Jacobs <
> 0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:
>
>> I'm trying to use ADRDSSU to backup a directory and all files and
>> subdirectories under it. Unless I'm missing something it doesn't look like
>> it's supported.
>>
>> DUMP PATH(INC('sourcedir')) WORKINGDIRECTORY('/service') OUTDD(OUTDD)
>>
>> ADRDSSU is only backing up the directory itself, nothing under it.
>>
>> Mark Jacobs
>>
>> Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted
>> email.
>>
>> GPG Public Key -
>> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>>
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>>
> --
> Michael Babcock
> OneMain Financial
> z/OS Systems Programmer, Lead
>
--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ADRDSSU DUMP PATH
Sorry to keep posting. The 2.5 doc also states that if a pathname resolves
to a directory, only the attributes for the directory are processed. None
of its members are processed. Recursion is not supported.
On Thu, Aug 11, 2022 at 12:14 PM Michael Babcock
wrote:
> According to z/OS 2.4 EF086028 is:
>
> “A required name entry in a directory was not found”.
>
> And I’m looking at the 2.5 doc I have, it says “DFSMSdss does not support
> the use of UNIX wildcard characters” and in a note says “DFSMSdss does not
> provide wildcard support when processing UNIX files”
>
>
> On Thu, Aug 11, 2022 at 11:59 AM Michael Babcock
> wrote:
>
>> Is the case sensitivity correct for the working directory? And is the
>> source directory a subdirectory of the working directory?
>>
>> On Thu, Aug 11, 2022 at 7:39 AM Mark Jacobs <
>> 0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:
>>
>>> I'm trying to use ADRDSSU to backup a directory and all files and
>>> subdirectories under it. Unless I'm missing something it doesn't look like
>>> it's supported.
>>>
>>> DUMP PATH(INC('sourcedir')) WORKINGDIRECTORY('/service') OUTDD(OUTDD)
>>>
>>> ADRDSSU is only backing up the directory itself, nothing under it.
>>>
>>> Mark Jacobs
>>>
>>> Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted
>>> email.
>>>
>>> GPG Public Key -
>>> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>>>
>>> ----------
>>> For IBM-MAIN subscribe / signoff / archive access instructions,
>>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>>>
>> --
>> Michael Babcock
>> OneMain Financial
>> z/OS Systems Programmer, Lead
>>
> --
> Michael Babcock
> OneMain Financial
> z/OS Systems Programmer, Lead
>
--
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
