Re: Calling idcams

2012-06-20 Thread Walt Farrell
On Wed, 20 Jun 2012 10:46:43 -0400, Scott Ford scott_j_f...@yahoo.com wrote: I am in the process of wanting to call idcams, principally, a define and delete alias function in Assembler. I have looked at IGGCSI00 and various examples, it doesn't appear I can use IGGCSI00 for this purpose. Can

Re: Calling idcams

2012-06-20 Thread Walt Farrell
On Wed, 20 Jun 2012 09:58:58 -0500, McKown, John john.mck...@healthmarkets.com wrote: Another possibility (not sure) is to set up a TSO environment in your code using IKJTSOEV and then invoking a REXX program to issue the TSO commands. I don't know if this will work. And, IMO, it is

Re: SMF Type 80 relocation section detail mapping macro

2012-06-28 Thread Walt Farrell
On Thu, 28 Jun 2012 05:44:37 -0500, Donald Likens dlik...@infosecinc.com wrote: I've been looking through the books but have not found a detail mapping macro for the RACF SMF type 80 relocation sections. I'll keep looking but in the mean time, does anyone know what and where they are? Note: I

Re: Searching for a cross=reference list of manuals ...

2012-07-06 Thread Walt Farrell
On Thu, 5 Jul 2012 08:18:11 -0700, Mark Yuhas mark.yu...@paccar.com wrote: Prior to Windows 7, the VIEW tab had a detail setting that would dispay the title. Windows 7 doesn't work that way for me. Have you made sure that in Windows Explorer, View-Show Details, that you have selected the

Re: RACF question

2012-07-10 Thread Walt Farrell
On Sat, 7 Jul 2012 16:49:13 -0400, Scott Ford scott_j_f...@yahoo.com wrote: Joel, Hers the exact error: 11.51.03 STC00472 CSV025I PROGRAM CONTROLLED MODULE ADDUSER NOT ACCESSED, USE 11.51.03 STC00472 IEF196I CSV025I PROGRAM CONTROLLED MODULE ADDUSER NOT ACCES 11.51.03 STC00472 IEF196I

Re: IGGCSI to retrieve tape volume serial

2012-07-23 Thread Walt Farrell
On Mon, 23 Jul 2012 08:41:57 -0500, Victor Zhang victor_wor...@yahoo.com.cn wrote: Can I interpret this to get non-vsam used or allocated size? DSCBTTR TTR of format-1 DSCB for non-VSAM data set No. IGGCSI00 simply returns information from the catalog. DSCBs are in the VTOC, not the catalog.

Re: Authorized Rexx Assembler Function

2012-07-24 Thread Walt Farrell
On Tue, 24 Jul 2012 10:51:33 -0500, McKown, John john.mck...@healthmarkets.com wrote: Also, remember that we are talking about TSO. An archaic piece of software, which IBM has just seeming lost interest in. Imagine what could be done if the non-APF user code ran in a subspace, like CICS uses.

Re: zFS auditfid support

2012-08-21 Thread Walt Farrell
On Mon, 20 Aug 2012 13:53:01 -0700, retired mainframer retired-mainfra...@q.com wrote: Both MXG (which requires SAS) and RACFICE (from SAMPLIB) provide the capability to adjust the selection criteria to anything you wish. But this assumes the data of interest is actually recorded. I found

Re: ADDRESS LINKMVS - +IRX0250E System abend code 047, reason code 00000000

2012-09-05 Thread Walt Farrell
On Wed, 5 Sep 2012 01:05:26 -0500, Paul Gilmartin paulgboul...@aim.com wrote: On Wed, 5 Sep 2012 00:25:32 -0500, Kenneth J. Kripke wrote: DATA AT PSW 0001CE48 - 58101000 0A6B5023 Data shows a MODESET SVC which does require authorization. Check the AUTHPGM specifications in IKJTSOxx in

Re: 047 in TSO command processor

2012-10-01 Thread Walt Farrell
On Sun, 30 Sep 2012 00:43:21 -0400, micheal butz michealb...@optonline.net wrote: Hi, I am running a TSO command processor which needs to be APF authorized The load library is in PROG00 marked as APF authorized The command name is both in AUTHPGM and AUTHNAMES in IKJTSO00 I know that

Re: IKJ56500I COMMAND BURN NOT FOUND/ Which loadlib should command processor be located in

2012-10-22 Thread Walt Farrell
On Sun, 21 Oct 2012 09:19:48 -0400, micheal butz michealb...@optonline.net wrote: TSOLIB activate myloadlb I remember once debugging ISPF programs the way I should you in the example TESTAUTH 'LOADLIB(ISPF)' CP then Load myloadlib(commandprocessor) set breakpoints on commandprocessor type

Re: RACF

2013-10-16 Thread Walt Farrell
On Thu, 10 Oct 2013 12:45:22 -0500, Ron Wells ron.we...@slfs.com wrote: Used DSS to backup the RACF databasefrom TEST lpar.. If that RACF database is active then you should not use DSS to do the backup. Only IRRUT200 will make a copy using the appropriate serialization to guarantee you get

Re: 0C4 reason code 4 TSO command processor returning from verify exit

2013-10-16 Thread Walt Farrell
On Tue, 15 Oct 2013 23:24:54 -0400, Micheal Butz michealb...@optonline.net wrote: The documentation for the verify exit Is shoddy to say the least I don't know what the registers are entry to the exit. I assume 15 entry point 14 return and that TSO supplies me with 72 word save are pointed to

Re: smf records for updating racf profiles

2013-11-21 Thread Walt Farrell
On Thu, 21 Nov 2013 08:32:32 -0600, Elardus Engelbrecht elardus.engelbre...@sita.co.za wrote: Tim Brown wrote: Which smf records will give detail on creates/updates/deletes for racf discrete/generic profiles Others said SMF record type 80, but there are some caveats. By default, you will see

Re: 047 Abend

2013-11-24 Thread Walt Farrell
On Sun, 24 Nov 2013 01:03:00 -0500, MichealButz michealb...@optonline.net wrote: I am running a TSO command processor that has authorized code the load library is APF authorized. I set it to the beginning of the search chain with TSOLIB I also have the ISPF library ISP.SISPLPA apf

Re: Un-authorized caller calling authorized services.

2013-12-01 Thread Walt Farrell
On Sat, 30 Nov 2013 20:25:36 -0600, Jim Thomas j...@thethomasresidence.us wrote: My service is a SRB and given, SRBPARM, will be executing some code that I am given. That sounds extremely unsafe, from a system integrity perspective. In general you cannot depend on an unauthorized caller to

Re: COBOL IN SRB Mode (Was Un-authorized caller)

2013-12-15 Thread Walt Farrell
On Thu, 12 Dec 2013 23:38:54 -0600, Russ Teubner r...@hostbridge.com wrote: As a result of writing this bit of infrastructure, I would offer the following observation: The conceptual/theoretical discussions related to zIIP enablement and SRB authorization are interesting. However, the

Re: OMVS UID display

2013-12-15 Thread Walt Farrell
On Sun, 15 Dec 2013 20:11:27 +0530, venkat kulkarni venkatkulkarn...@gmail.com wrote: IRR66017I The system is currently operating in stage 1. If you're at AIM stage 1, then you need to consider whether you have the UNIXMAP class active, and if so whether the UNIXMAP profiles are correct and

Re: Major, Minor CDE

2013-12-30 Thread Walt Farrell
On Mon, 30 Dec 2013 17:15:23 -0500, Micheal Butz michealb...@optonline.net wrote: I have been chaining the CDE entries looking for the executing program of the job step. As Ed indicated, RBCDE from the oldest PRB in the jobstep TCB would be the CDE you want, but I'm a bit puzzled why your

Re: Invoking CSVLLIX1

2014-01-02 Thread Walt Farrell
Why are you undefining and defining the exit point, Michael? You don't own it, and should not be messing around with its definition. Adding an exit module to the existing exit point is appropriate and expected, of course. But CSV is the component that owns the exit point, and CSV would be the

Re: TSO FULL SCREEN MODE UNDER ISPF

2014-01-06 Thread Walt Farrell
On Sun, 5 Jan 2014 22:01:40 -0800, Ed Jaffe edja...@phoenixsoftware.com wrote: On 1/5/2014 6:39 PM, Paul Gilmartin wrote: *And* I believe SDSF stays in its split. *And* I believe it allows SWAP to another split. But that's not fair; SDSF is somehow ISPF-savvy, not just a plain ol' TSO

Re: Error Adding CSVLLIX1 using CSVDYNEX with modaddr paramter

2014-01-08 Thread Walt Farrell
On Wed, 8 Jan 2014 11:45:58 -0500, MichealButz michealb...@optonline.net wrote: I am getting the following return code when try to add CSVLLIX1 with the moaddr parameter of CSVDYNEX The AMODE of the program is correct = 31 As The high order bit of the address is one With the dsname parameter

Re: Spawned Address Space Control in tcsh shell

2014-01-09 Thread Walt Farrell
On Thu, 9 Jan 2014 11:34:13 -0600, Paul Gilmartin paulgboul...@aim.com wrote: On Wed, 8 Jan 2014 23:01:56 -0800, Henry Willard wrote: I believe init (pid 1) becomes the parent. ... I stand corrected, according to experiment with all of OS X, Linux, Solaris, and z/OS. But still, it could

Re: RUN detaches the TSO TEST/TESTAUTH TCB

2014-01-15 Thread Walt Farrell
On Wed, 15 Jan 2014 14:46:27 -0500, Micheal Butz michealb...@optonline.net wrote: Ill rephrase after run PSATOLD is equal to the TCB that was displayed By listtcb That depends on who's looking at it, and when, Micheal. PSATOLD is always equal to the address of the active TCB. So, if you have

Re: With What macros Can the DCB specified by TCBJLB be used for

2014-01-27 Thread Walt Farrell
On Sun, 26 Jan 2014 10:32:55 -0500, MichealButz michealb...@optonline.net wrote: I have tried a whole slew of macros with DCB specified by TCBJLB and none give a clean return code from OPEN, CLOSE FIND,BLDL It's somewhat odd to think it might work for OPEN, Micheal, as that DCB is already

Re: With What macros Can the DCB specified by TCBJLB be used for

2014-01-27 Thread Walt Farrell
What's in AA.NAME at the time of the FIND? You didn't show us that. -- Walt On Sun, 26 Jan 2014 15:58:10 -0500, MichealButz michealb...@optonline.net wrote: First TSOLIB ACTIVATE DATASET('IBMUSER.TEST.LOAD') READY Then BROWSEIBMUSER.TEST.LOAD Browse

Re: What TCB or TCBJLB is reprinted by TSOLIB

2014-01-29 Thread Walt Farrell
On Wed, 29 Jan 2014 13:38:46 -0500, Micheal Butz michealb...@optonline.net wrote: Once you enter ISPF, however it is still part of the search chain for MVS/CSV so I thought I could find Where the program was found. Joblib/steplib/TSOLIB or link list That last list is a bit too simple. If

Re: What TCB or TCBJLB is reprinted by TSOLIB

2014-02-01 Thread Walt Farrell
On Fri, 31 Jan 2014 15:09:02 +, Rob Scott rsc...@rocketsoftware.com wrote: The OP was discussing using TCBJLB as the input to a FIND macro. If TCBJLB contains an ISPF TASKLIB then a FIND for a module in a TSOLIB declared dataset will not succeed. Correct. As I mentioned earlier the OP

Re: RACF AIM Stage 3 Issue

2014-02-17 Thread Walt Farrell
On Mon, 17 Feb 2014 07:54:35 +0530, venkat kulkarni venkatkulkarn...@gmail.com wrote: Initially my RACF DB was at AIM stage 1 but as the steps to converting BPX.UNIQUE.USER, I converted AIM stage 1 to AIM stage 3. As I have mentioned earlier as well, that along with z/OS 2.1, we have down level

Re: RACF AIM Stage 3 Issue

2014-02-17 Thread Walt Farrell
On Mon, 17 Feb 2014 17:19:32 +0530, venkat kulkarni venkatkulkarn...@gmail.com wrote: Hello, Thanks for reply. But as per IBM link, it says it we have down level system well sharing RACF then older system will use BPX.DEFAULT.USER if, they are not supported by BPX.UNIQUE.USER.

Re: Duplicate Batch Job

2013-05-08 Thread Walt Farrell
On Tue, 7 May 2013 12:49:32 -0500, Paul Gilmartin paulgboul...@aim.com wrote: On Tue, 7 May 2013 13:34:07 -0400, Gerhard Postpischil wrote: On 5/7/2013 5:02 AM, Lizette Koehler wrote: The only way I can think of restricting is an exit in JES2. Or if this is a TSO User you may wish to look at

Re: Rather interesting article on hacking the mainframe using ftp

2013-05-19 Thread Walt Farrell
On Sat, 18 May 2013 15:17:22 -0500, John McKown john.archie.mck...@gmail.com wrote: http://mainframed767.tumblr.com/post/50574743147/big-iron-back-door-maintp-part-two basically the person must be able to ftp into a UNIX subdirectory and to submit a job. They upload a program called netcat into

Re: Getting DD DISP

2013-05-29 Thread Walt Farrell
On Wed, 29 May 2013 16:54:49 -0500, Kirk Wolf k...@dovetail.com wrote: Is there an easy way for a program to get the DISP (NEW/MOD/SHR/OLD) of a DD from the TIOT, or do you have to do a RDJFCB? I'm somewhat curious why you'd want to know, from a program, Kirk. But however you get it, I'll

Re: System abend 800 reason code 4

2013-05-30 Thread Walt Farrell
On Thu, 30 May 2013 15:56:39 -0400, Micheal Butz michealb...@optonline.net wrote: For reason code 4 the explanation says A program issued a SVC 114 the EXCPVR macro That may be a possible clue to your problem. It says you're using EXCPVR, and from z/OS V1R13.0 DFSMSdfp Advanced Services we can

Re: To Backup or Not to Backup Data - That is the question

2013-05-30 Thread Walt Farrell
On Thu, 30 May 2013 16:15:42 -0500, Tom Marchant m42tom-ibmm...@yahoo.com wrote: On Thu, 30 May 2013 11:44:32 -0700, Lizette Koehler wrote: So do I have overkill? . Software disasters can be the hardest ones to plan for. What do you do if one of your critical applications has a program

Re: REXX Socket Calls

2013-06-24 Thread Walt Farrell
On Mon, 24 Jun 2013 10:22:34 -0500, Doug Henry doug_he...@usbank.com wrote: On Mon, 24 Jun 2013 09:29:57 -0500, John McKown john.archie.mck...@gmail.com wrote: I am not very knowledgeable on this sort of thing. Is AT-TLS something different from SSL? I don't really know. In the z/OS 1.12 Comm

Re: Is There A List Of Who Plays The IFAPRDxx Game?

2013-07-01 Thread Walt Farrell
On Mon, 1 Jul 2013 07:11:46 -0500, Andrew Metcalfe andrew.metca...@barclays.com wrote: The product I'm looking at (OGL 5688- 191) pre-dates IFAPRDxx so I suspect that I am wasting my time looking. I tried putting a generic entry in IFAPRDxx only specifying: PRODUCT ID(5688-191)

Re: Dynamic LPA Services

2013-07-08 Thread Walt Farrell
On Mon, 8 Jul 2013 07:55:46 -0500, Kenneth Wilkerson redb...@austin.rr.com wrote: And it doesn't matter what the AC= is for a LPA program. MVS is going to treat it as authorized simply because it's in the LPA. I discovered that the hard way. That's not true, Kenneth. MVS will certainly

Re: Benchmark of Relative instructions vers Base+displacement ones

2013-07-09 Thread Walt Farrell
On Tue, 9 Jul 2013 16:11:51 -0500, John McKown john.archie.mck...@gmail.com wrote: Well, I tried JR's link and it got me the -09 version of the manual. LGFI is on the top of page 7-219. I don't know how I could have goofed up my link. Your link was to -08, so either you used a site that has a

Re: Dynamic LPA Services

2013-07-11 Thread Walt Farrell
On Thu, 11 Jul 2013 09:03:33 -0400, John Gilmore jwgli...@gmail.com wrote: As I read Kenneth Wilkerson's post he is arranging things so that an RMODE(64) routine that needs system services unavailable to it as such arranges to have a different, associated RMODE(31) routine request them and make

Re: PASSWORD clause

2013-07-12 Thread Walt Farrell
On Fri, 12 Jul 2013 20:05:16 +0200, R.S. r.skoru...@bremultibank.com.pl wrote: I just found the PASSWORD clause in Enterprise COBOL for z/OS V4.2 Reference, as a part of file specification. Now the question: what password can be specified in the clause? My guess would be that it's for the

Re: RACF User ID resumed without an SMF record?

2013-08-07 Thread Walt Farrell
On Wed, 7 Aug 2013 11:33:24 -0500, Greg Shirey wgshi...@benekeith.com wrote: Does anyone know of a method to resume a RACF revoked ID without having an SMF record be written? An APF-authorized program can use ICHEINTY or RACROUTE REQUEST=EXTRACT,TYPE=REPLACE to resume a user ID, and neither

Re: MVS ROUTE command is a bad influence on DB2 ERLY code

2013-08-14 Thread Walt Farrell
On Tue, 13 Aug 2013 19:17:49 -0400, Peter Relson rel...@us.ibm.com wrote: Route does little more than send the command to another system. On that system that command may be processed by some number of system address spaces (such as master, consoles). Each will use whatever its lnklst is. I don't

Re: RACF Database protection

2013-08-17 Thread Walt Farrell
On Sat, 17 Aug 2013 10:30:57 -0700, Skip Robinson jo.skip.robin...@sce.com wrote: This exposure has been known--and discussed publicly--for several years. It is NOT true that 'passwords are not stored'. If they weren't 'stored' at all, then how could RACF validate the password you supply? They

Re: ISPF storage protection

2014-03-03 Thread Walt Farrell
On Mon, 3 Mar 2014 18:14:00 -0600, Paul Gilmartin paulgboul...@aim.com wrote: On Mon, 3 Mar 2014 19:05:29 -0500, Micheal Butz wrote: Is your program in a APF authorized library link edit with AC=1 You can also use the SPKA instruction if the The only thing you desire to do is change the PSW

Re: Validation of a resource name

2014-03-05 Thread Walt Farrell
On Wed, 5 Mar 2014 19:05:52 +0100, jan de decker jan.je...@gmail.com wrote: Hi list, I am building a small web application that interfaces with RACF. On the client side I only have the IBM default supplied classes. I want validate as much as possible on the client before sending it to the

Re: RC 24 from ISRSUPC (Was 0C4 from TSOEXEC IEBCOMPR)

2014-03-08 Thread Walt Farrell
On Fri, 7 Mar 2014 17:56:05 -0600, Paul Gilmartin paulgboul...@aim.com wrote: On Fri, 7 Mar 2014 22:41:44 +, Hansen, Dave L - Eagan, MN wrote: 44 *-* /* CALL *(ISRSUPC) */ 45 *-* CALL *(ISRSUPC) 'FILECMP,DELTAL' L CALL *(ISRSUPC) 'FILECMP,DELTAL' I was told by IBM I

Re: Another reason to hate the time change

2014-03-10 Thread Walt Farrell
On Mon, 10 Mar 2014 19:34:19 +, Chase, John jch...@ussco.com wrote: -Original Message- From: IBM Mainframe Discussion List On Behalf Of John Gilmore Every American who has been in the military has perforce mastered and used the 24-hour clock. Adopt it for your report,

Re: z/OS PKI Services HostIDMapping format

2014-03-11 Thread Walt Farrell
On Tue, 11 Mar 2014 05:54:24 -0700, Donald J. dona...@4email.net wrote: I am currently using openssl to create certificates for use with CICS Web Services that work fine. I haven't read anywhere that CICS Web Services supports authentication using HostIDMapping. I associate the certificate

Re: S0C1 TSO TESTAUTH

2014-03-13 Thread Walt Farrell
On Wed, 12 Mar 2014 11:54:35 -0400, MichealButz michealb...@optonline.net wrote: I am setting a breakpoint at offset +0 in my program and getting a S0C1 at location +E The following is my scenario TESTAUTH �ISP.SISPLPA(ISPF)� CP LOAD �MYLOAD.LIBRARY(MYMOD)� Q MYMO.MYMOD.+0 AT +0 GO �

Re: z/OS PKI Services HostIDMapping format

2014-03-13 Thread Walt Farrell
On Wed, 12 Mar 2014 10:18:04 -0700, Donald J. dona...@4email.net wrote: But I could not get HostIDMapping to work with FTP Server. You would think the RACF interface would be the same for all applications. RACF provides many interfaces, and the application chooses which one to use. Then the

Re: FREE DDNAME with concatenated datasets?

2014-04-02 Thread Walt Farrell
As far as I know, gil, that's the way that FREEing a concatenation has always worked. It truly frees the first one, but merely deconcatenates the others. So, yes, I believe you'll need to remember them if you want to be able to truly free them later. -- Walt On Mon, 31 Mar 2014 17:03:30

Re: S0C4 abend on old assembler program when upgrading to z/OS 1.13

2014-04-10 Thread Walt Farrell
On Thu, 10 Apr 2014 09:42:44 -0400, John Gilmore jwgli...@gmail.com wrote: Is it the case, as now seems all but certain, that the CP check explains the different behavior in your production and non-production environments? And if so, how and why is this a new problem? It's new to them because

Re: IEBGENER PARM='SDB=?????'

2014-04-13 Thread Walt Farrell
On Sat, 12 Apr 2014 09:13:17 -0700, Lizette Koehler stars...@mindspring.com wrote: Does any of this apply? You can code a value like: PARM='SDB=x' on the EXEC statement. This value is effective only if the output block size is not supplied by any source. Isn't the block size of the input

Re: Using C or C++ for System exits

2014-04-28 Thread Walt Farrell
You say several exits, which has me a bit concerned, Scott. Which exits, exactly? IRREVX01 may well work work if coded in C, and even if coded LE-enabled. But for many other RACF exits I would be very surprised if they would work in C, unless it's Metal C. And for those other exits I would be

Re: Using C or C++ for System exits

2014-04-29 Thread Walt Farrell
On Tue, 29 Apr 2014 15:13:49 +, Scott Ford scott_j_f...@yahoo.com wrote: Its surprising that IBM hasn't thought about using C in exits , like RACF or other components. Considering Linux has been writing their Kernel in it for a few years. Not bashing IBM, curious why they haven't

Re: Android TN3270 client

2014-04-30 Thread Walt Farrell
On Wed, 30 Apr 2014 10:04:15 +0100, Jim McAlpine jim.mcalp...@gmail.com wrote: Has anyone come across any other Android TN3270 clients other than the one from Mocha. Searching he Google Play store for tn3270 should find 3 more for you to consider. -- Walt

Re: 378-14 Abend In TSO Verify exit

2014-05-12 Thread Walt Farrell
On Mon, 12 May 2014 09:51:55 -0400, MichealButz michealb...@comcast.net wrote: * LOAD PROGRAM * * LOAD EP=AAALLIX1 SLL R1,8 Get rid of auth code SRL R1,5 Length is in double words I can't comment on the ABEND

Re: 378-14 Abend In TSO Verify exit

2014-05-12 Thread Walt Farrell
On Mon, 12 May 2014 11:35:44 -0700, Ed Jaffe edja...@phoenixsoftware.com wrote: On 5/12/2014 11:08 AM, Walt Farrell wrote: With your SRL R1,5 you end up with multiplying the original doubleword length by 8. I assumed that was the intent, based on the comment in the code about the returned

Re: LOAD DE= generates the CSV019I abend

2014-05-29 Thread Walt Farrell
On Thu, 29 May 2014 10:15:37 -0400, Micheal Butz michealb...@comcast.net wrote: It seems anytime I use the load using the directory entry format I get the CSV019I abend load ep= works fine Have you investigated the possibility that your DE information may be incorrect? If so, what have you

Re: Trying to set an FRR in AMODE64 + AR

2014-05-29 Thread Walt Farrell
On Thu, 29 May 2014 21:34:37 +0300, Binyamin Dissen bdis...@dissensoftware.com wrote: I would suggest changing the MNOTE as well. Why? It seems correctly worded to me. :+ 12,SETFRR A CANNOT BE ISSUED IN AMODE 64 PRIOR TO Z/OS 1.8 :OR IN AR ASC MODE. PLEASE CHANGE TO BE IN AMODE 31 OR

Re: IEE345I AUTHORITY INVALID, FAILED BY MVS

2014-05-29 Thread Walt Farrell
If I remember correctly, Failed by MVS should indicate that: (a) you do not have the MVS.LIBRARY command protected by your security product, because if it was protected and you had authority it would work, or if you did not have authority it would say Failed by Security Product and there would

Re: LOAD DE= generates the CSV019I abend

2014-05-30 Thread Walt Farrell
On Thu, 29 May 2014 22:25:51 -0400, Micheal Butz michealb...@comcast.net wrote: I point to the name field I am going to try eploc and see what happens You didn't answer my question. Have you investigated the possibility that your DE information may be incorrect? If so, what have you done to

Re: CA Common Services (and RACF too?) hook into Master Scheduler Initialization (UNCLASSIFIED)

2014-05-30 Thread Walt Farrell
On Fri, 30 May 2014 20:22:29 +, Staller, Allan allan.stal...@kbmg.com wrote: I believe ACF2 is started as a subsystem. I know RACF is. Look in SYS1.PARMLIB(IEFSSN**). RACF -has- a subsystem, Allan, but it is not part of the basic security processing (RACROUTE REQUEST=VERIFY, AUTH,

Re: CSVQUERY Anomaly

2014-06-09 Thread Walt Farrell
On Mon, 9 Jun 2014 05:43:29 -0400, MichealButz michealb...@comcast.net wrote: It still is referenced by common below is my PROG01 entry LPA ADD MODNAME(USERMOD) DSNAME(USER.TEST.LOAD) FIXED So, did you add it via a SETPROG command or not? -- Walt

Re: setprog command RACF issue

2014-06-24 Thread Walt Farrell
On Tue, 24 Jun 2014 11:28:26 +0530, Mainframe Mainframe mainframe1...@gmail.com wrote: 3) Do I have to make any changes in RACF to avoid these issues. As another list member indicated, you should look up the ICH70007I message and take the actions indicated in the book. -- Walt

Re: error invoking IKJEFTSR from Authotized progam

2014-06-24 Thread Walt Farrell
On Tue, 24 Jun 2014 13:51:27 -0400, Micheal Butz michealb...@comcast.net wrote: The first explanation fits my scenario My program is in the AUTHPGM section of IKJTSOxx the command profile nowtpmsg Is unauthorized command but so What does that mean because my Program is in the authcmd/PGM I

Re: Address space puzzle

2014-06-25 Thread Walt Farrell
On Wed, 25 Jun 2014 15:52:35 +, Rob Scott rsc...@rocketsoftware.com wrote: Be careful to ensure that you always use correctly primed AR when accessing storage in either HOME or SECONDARY - it is *VERY* easy to overlook and end up with misleading address pointers or bad data. For example,

Re: Address space puzzle

2014-06-25 Thread Walt Farrell
On Wed, 25 Jun 2014 15:59:11 +, Rob Scott rsc...@rocketsoftware.com wrote: I'm fuzzy on this, but it seems like that *might* not be the case, since it was DB2 that called You need to capture the cross-memory environment when you get called from DB2 (you can extract the HASN, SASN and

Re: Address space puzzle

2014-06-25 Thread Walt Farrell
On Wed, 25 Jun 2014 16:14:32 -0700, Phil Smith p...@voltage.com wrote: Walt Farrell wrote: Generally DB2 will either have the client ACEE in its own address space, or will have a valid cross-memory environment between itself and its client. Whenever DB2 is calling RACF to perform a security

Re: Address space puzzle

2014-06-26 Thread Walt Farrell
On Thu, 26 Jun 2014 08:53:35 -0700, Phil Smith p...@voltage.com wrote: * In the first module, soon after the PC: ESAR R1 Get secondary ASID STH R1,SRQESASN And remember that MVI SRQERSVA+8,X'37' Set a magic value STH R1,SRQERSVA+9

Re: Address space puzzle

2014-06-26 Thread Walt Farrell
On Thu, 26 Jun 2014 16:17:56 -0700, Phil Smith p...@voltage.com wrote: Walt Farrell wrote: (It is also not clear where you got the ACEE address from in the first place; that is also important, and often done incorrectly in cross-memory code, and it would be good to see that code.) Good

Re: IKJTSOxx Auth pgm cmds PC rtns

2014-06-27 Thread Walt Farrell
On Fri, 27 Jun 2014 15:55:17 +, Rob Scott rsc...@rocketsoftware.com wrote: As far as NOWTPMSG, it might be useful to investigate if it is *supported* to change the UPT settings manually - see UPTWTP and UPTNCOM in IKJUPT. They are documented as being part of the programming interface,

Re: IKJTSOxx Auth pgm cmds PC rtns

2014-06-27 Thread Walt Farrell
On Fri, 27 Jun 2014 11:29:01 -0400, MichealButz michealb...@comcast.net wrote: Why cant I issue simple TSO command via IKJEFTSR because my code is authorized I don't understand the idea behind it I would like to keep everything local to my TSO address space I am not trying to do anything kooky I

Re: IKJTSOxx Auth pgm cmds PC rtns

2014-06-27 Thread Walt Farrell
On Fri, 27 Jun 2014 11:01:36 -0400, MichealButz michealb...@comcast.net wrote: Rob,, I can't use the TSO service facility IKJEFTSR ( I would like issue certain non-authorized TSO commands) because my program is in IKJEFTSOxx AUTHPGM/CMD I know that PC rtn's are separate entities so I am

Re: IKJTSOxx Auth pgm cmds PC rtns

2014-06-27 Thread Walt Farrell
On Fri, 27 Jun 2014 15:39:10 -0400, Micheal Butz michealb...@comcast.net wrote: Okay thanks It still doesn't make sense to me If inadvertently did something I am already authorized Yes, but you're trying to run code that is not yours, is not supposed to run authorized, and has not been

Re: Help with Public/Private Key Pairs

2014-06-27 Thread Walt Farrell
On Fri, 27 Jun 2014 21:29:30 +, Ward, Mike S mw...@ssfcu.org wrote: Hello all, I am trying to learn more about crypto, so I am reading the manual on generating certificates and public/private key pairs. The manual says that if I specify ICSF in the RACDCERT GENCERT command the key pair is

Re: IKJPOSIT question

2014-06-30 Thread Walt Farrell
On Mon, 30 Jun 2014 06:59:49 -0400, Micheal Butz michealb...@comcast.net wrote: The whole scenario was interactive Bottom line why when I use IKJPOSIT with DSNAME operand And I enter a 8 character load module does it come back with invalid keyword Because, I believe, positional operands must

Re: IKJPOSIT question

2014-06-30 Thread Walt Farrell
On Mon, 30 Jun 2014 11:19:40 -0400, John Gilmore jwgli...@gmail.com wrote: No! Positional and keyword arguments may be freely interspersed in macro instructions. We're not talking about macro instruction operands. We're talking about the macro instructions that define operands of TSO commands,

Re: TSO Test does not support 65-bit debugging?

2014-07-04 Thread Walt Farrell
On Thu, 3 Jul 2014 20:13:59 -0400, John Gilmore jwgli...@gmail.com wrote: This is yet another example of the typo-in-the-subject-line syndrome that will make this entire thread moot in the archives. No one who would benefit from finding and reading it will be able to do so. A formal search of

Re: SVC 99 APF Authorized Library

2014-07-07 Thread Walt Farrell
On Mon, 7 Jul 2014 02:50:11 -0400, Micheal Butz michealb...@comcast.net wrote: I am getting a 306-0C as i was trying to load from steplib when one of the libs in the concatenation was not authorized to remedy the situation in my recovery routine I intercept the abend and prompt the user for a

Re: SVC 99 APF Authorized Library

2014-07-08 Thread Walt Farrell
On Tue, 8 Jul 2014 08:03:19 -0500, Elardus Engelbrecht elardus.engelbre...@sita.co.za wrote: Walter Farrell wrote: I really wish we knew what ISV he works for so everyone could avoid their products, or perhaps contact their management and tell them he's a seriously dangerous programmer. And

Re: TSO Test does not support 65-bit (actually 64-bit) debugging?

2014-07-09 Thread Walt Farrell
On Wed, 9 Jul 2014 14:26:59 -0400, Micheal Butz michealb...@comcast.net wrote: I tried L AR(0) It gives me a error message invalid address L 0. AR(0) on the right side will show contents of Alet in r0 If you read the manual, starting with the perhaps most obvious one, TSO/E Command

Re: Anyone out there running ISKLM under ACF2?

2014-07-22 Thread Walt Farrell
On Mon, 21 Jul 2014 13:58:57 -0400, Ken Smith featse...@gmail.com wrote: ISKLM = IBM Security Key Life Cycle Manager - used for Tape (and DASD subsystem) encryption. Working fine except the piece that can create SMF audit records type 83/6 - security events isn't working. IBM Level 2 stumped.

Re: z/OS physical memory usage with multiple copies of same load module at different virtual addresses

2014-07-28 Thread Walt Farrell
On Mon, 28 Jul 2014 09:07:16 -0500, Paul Gilmartin paulgboul...@aim.com wrote: On Sun, 27 Jul 2014 22:01:02 -0400, Jim Mulder wrote: There is some sharing across address spaces via z/OS Unix of program objects that live in the file system, using what I think of as shared private. Peter

Re: Dynamic Alocation question

2014-08-04 Thread Walt Farrell
On Mon, 4 Aug 2014 12:55:10 -0400, Micheal Butz michealb...@comcast.net wrote: Wait open at step initiation I am talking about TSOLIB which I Believe I can load am APF authorized program from Yes, you can load APF-authorized programs from TSOLIB, _if_ all the data sets in the TSOLIB

Re: RACF Class PROGRAM

2012-12-07 Thread Walt Farrell
On Fri, 7 Dec 2012 08:20:28 +0100, R.S. r.skoru...@bremultibank.com.pl wrote: BTW: IMHO BASIC mode is quite good mode, you don't have to move to EHANCED mode just because such mode exists. Sorry, Radoslaw, but even though I'm not an IBMer any more, I have to disagree with you. As the

Re: RACF Class PROGRAM

2012-12-07 Thread Walt Farrell
On Fri, 7 Dec 2012 12:08:32 +0100, ibmmain nitz-...@gmx.net wrote: RACF use the best match principle. If it can't find a matching profile/member, it will move on to profiles with wildcards: So, for example, it will move from profile XYZ to XY* to X* to *. If no match are found, a default

Re: RACF Class PROGRAM

2012-12-09 Thread Walt Farrell
On Fri, 7 Dec 2012 16:05:10 +0100, R.S. r.skoru...@bremultibank.com.pl wrote: In general you are 100% right. However many people use PROGRAM class only to fulfill requirements of TCPIP setup and other stuff. In this case they define CL(PROGRAM) ** profile and and several IBM-z/OS-provided

Re: RACF Class PROGRAM

2012-12-09 Thread Walt Farrell
On Fri, 7 Dec 2012 13:46:22 +0100, ibmmain nitz-...@gmx.net wrote: thanks for the confirmation. But: I have no clue how to run an experiment on this. I guess I'll be keeping what's left in the program class. (The * profile with certain data sets that I have shown). The experiment is simple,

Re: Storage Obtained By an SRB

2012-12-10 Thread Walt Farrell
On Mon, 10 Dec 2012 01:33:00 -0500, micheal butz michealb...@optonline.net wrote: SRB's are documented in CHapter 9 of The Authorized Assembler Guide I did a search using keyword subpool and came up with no hits for chapter 9 search on keyword storage yielded 3 hits for chapter 9 none of which

Re: Common Data Space Basics

2012-12-10 Thread Walt Farrell
On Mon, 10 Dec 2012 10:30:11 -0600, Donald Likens dlik...@infosecinc.com wrote: My memory objects are much smaller than 1M and I do not want to do my own storage management (braking up the megabyte of storage). How were you planning on handling storage management within the data space you

Re: BPXWDYN missing dynalloc key.

2012-12-11 Thread Walt Farrell
On Mon, 10 Dec 2012 12:04:00 -0600, McKown, John john.mck...@healthmarkets.com wrote: I double checked and SVC 99 has two keys, DALEXPDT DALEXPDL, to assign expiration dates. It would be very helpful to me if BPXWDYN could use these as well because I want the equivalent of EXPDT=99000 for

Re: BCPII and activation profile

2012-12-17 Thread Walt Farrell
On Sun, 16 Dec 2012 11:30:24 -0800, Skip Robinson jo.skip.robin...@sce.com wrote: I never saw a reply to Lizette's post. We also have an interest in the same topic. We want to encourage members of the technical staff to manage our sandbox LPARs rather than pester--er, request--Operations to shut

Re: BCPII and activation profile

2012-12-17 Thread Walt Farrell
On Mon, 17 Dec 2012 10:16:06 -0800, Skip Robinson jo.skip.robin...@sce.com wrote: As for the need to check SAF: if HMC provided full granularity of access control, we wouldn't even need BCPii. We could just let all Tech Support folks get to HMC and let him enforce the rules: allow Tech Support

Re: BPXP024I BPXAS INITIATOR STARTED ON BEHALF OF... ( was: JVMDUMP032I message)

2012-12-29 Thread Walt Farrell
On Sat, 29 Dec 2012 07:42:34 +0100, ibmmain nitz-...@gmx.net wrote: I have also seen this happen with IBMUSER, and the colleague doing the ftp swears that he didn't use IBMUSER for his ftp. If this was for an inbound FTP session, do you have the FTP server configured to run as IBMUSER? --

Re: Security vulnerability in IBM HTTP Server for z/OS Version 5.3 (PM79239)

2013-01-03 Thread Walt Farrell
On Thu, 3 Jan 2013 13:38:14 -0600, Robert Carballo robert.carba...@officedepot.com wrote: Does anyone have any thoughts on this? Here is the link explaining the issue: https://www-304.ibm.com/support/docview.wss?uid=swg21620945 I did some searching but can't seem to really find details about

Re: Security vulnerability in IBM HTTP Server for z/OS Version 5.3 (PM79239)

2013-01-05 Thread Walt Farrell
On Sat, 5 Jan 2013 16:24:34 +0100, R.S. r.skoru...@bremultibank.com.pl wrote: BTW: I'm signed to both portals. Redalert is better, because it notifies me by email about news (no details in the mail AFAIR), but security portal does not send notifications. Maybe this is matter of some

Re: Break a dataset into new record boundaries?

2013-01-15 Thread Walt Farrell
On Tue, 15 Jan 2013 09:04:30 -0800, Charles Mills charl...@mcn.org wrote: I've got a dataset that has been mangled through some misguided efforts such that original record boundaries have been lost. It used to be RECFM=V and now it is RECFM=F You did not say how it was mangled, and that can be

Re: ICSF Symmetric Key being sent to a non-zOS system

2013-01-17 Thread Walt Farrell
On Thu, 17 Jan 2013 12:39:11 -0800, Phil Smith p...@voltage.com wrote: Mark Jacobs wrote: I've been reading the ICSF Applications Programmers guide and I understand the process on how to transport ICSF keys to another zOS system using importer/exporter keys, but I have no idea on how it would

  1   2   3   4   5   >