Re: does anyone recall any details about MVS/XA?

[Brian France]

I kinda remember MVS/XA and later ESA being CBIPO and CBPDO for maint.

SYSGEN I think was still needed for XA and maybe ESA.

I'm not sure what you meant by Optional Source Materials. If by that you 
meant optional source code to install, I think they went the microsloth 
bloat ware option later...


On 12/8/2020 4:00 PM, Joe Monk wrote:

i  thought MVS/XA was CBIPO?

Joe

On Tue, Dec 8, 2020 at 2:04 PM Mark S Waterbury <
01c3f560aac1-dmarc-requ...@listserv.ua.edu> wrote:


Hi, all,

Does anyone recall how MVS/XA was first distributed and installed?  e.g.
was there some kind of  a "starter system"?  If so, what was it? MVS 3.8J,
or MVS/SE or MVS/SP or what?

I seem to recall that someone told me that there was no longer any
"SYSGEN" process used to install MVS/XA?  So, how was this task
accomplished?

Also, does anyone recall whether IBM made available any "optional source
materials" for MVS/XA, either machine readable, on magnetic tape, or was
that only available on microfiche, if it was available at all?

Thanks in advance for any details anyone can provide.

All the best,

Mark S. Waterbury

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: TSO logon terminated

[Brian France]

A google search of the string below got me to an ibm manual that shows 
this for a 216 -


216 The Pre-prompt EXIT returned a DEST userid that was not defined to 
the subsystem.


Hope this helps...

On 8/24/2020 1:58 PM, Edgington, Jerry wrote:

I am having some troubles with logging on to TSO on a newly built z/OS.  I keep 
getting this error and not sure where to look:

IKJ603I TSOLOGON TERMINATED. INSTALLATION EXIT ERROR 216

Any help would be great.  We are an ACF2 shop

Thanks,
Jerry Edgington

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Question

[Brian France]

Our initial login is two factor to NCPASS, then to TPX. All of our 
TN3270 connections use PAGENT.


On 6/30/2020 5:09 PM, Steve Beaver wrote:

Is anyone using CA-TPX, CL/SuperSession, Etc  and enabled PAGENT?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: dfdss equivalent to fdr map

[Brian France]

Many thanks to all the responses!!!

David,

    Thank you!!! This is exactly what we are looking for. I just 
changed a sort to be "volume,a" and pretty much have the report we use 
via fdr compaktor.


   Someone asked did this really matter for raid... we use it to recall 
data sets got deleted within the last month but are found to be needed 
as we back up weekly all volumes to tape and run fdr map at that time. 
We can then find the volume it's on so we know which tape to call for.


On 6/18/2020 10:13 AM, David Spiegel wrote:

Hi Brian,
Please discard all of those other weak-kneed potential solutions. This 
one is the Cadillac!
Here is a JCL sample that will not only map 1 volume, but, will also 
include maps of all volumes with a common prefix (think SMS Storage 
Group):

//STEP001 EXEC PGM=IKJEFT01
//STEPLIB  DD DISP=SHR,DSN=FILE135.PDS
//SYSTSPRT DD SYSOUT=*
//SYSTSIN  DD *
  VTOC STG0 -
   CAT -
   LIM(CAT NE C) -
  PRINT(NEW (CAT ALLOC  UNUSED PCT EX DSO RFM LRECL BLKSZ CDATE REFDT -
  VOLUME DSNAME))
//STEP002 EXEC PGM=IKJEFT01
//STEPLIB  DD DISP=SHR,DSN=FILE135.PDS
//SYSTSPRT DD SYSOUT=*
//SYSTSIN  DD *
  VTOC STG0 -
   CAT -
    /* LIM(CAT NE C) */ -
  PRINT(NEW (CAT ALLOC  UNUSED PCT EX DSO RFM LRECL BLKSZ CDATE REFDT -
  VOLUME DSNAME))
//STEP003 EXEC PGM=IKJEFT01
//STEPLIB  DD DISP=SHR,DSN=FILE135.PDS
//SYSTSPRT DD SYSOUT=*
//SYSTSIN  DD *
  VTOC STG0 -
   CAT -
    /* LIM(CAT NE C) */ -
    SORT(ALLOC,D) -
  PRINT(NEW (CAT ALLOC  UNUSED PCT EX DSO RFM LRECL BLKSZ CDATE REFDT -
  VOLUME DSNAME))
//STEP004 EXEC PGM=IKJEFT01
//STEPLIB  DD DISP=SHR,DSN=FILE135.PDS
//SYSTSPRT DD SYSOUT=*
//SYSTSIN  DD *
  VTOC STG0 -
   CAT -
    /* LIM(CAT NE C) */ -
    SORT(UNUSED,D) -
  PRINT(NEW (CAT ALLOC  UNUSED PCT EX DSO RFM LRECL BLKSZ CDATE REFDT -
  VOLUME DSNAME))

STEP001 - Find all Datasets on all volumes whose VOLSER starts with 
STG0 that are not Cataloged or are Catalog Entries with no actual Dataset
STEP002 - Find all Datasets on all volumes whose VOLSER starts with 
STG0 that are Cataloged
STEP003 - Find all Datasets on all volumes whose VOLSER starts with 
STG0 that are Cataloged. Print output by descending sort of Allocated 
space
STEP004 - Find all Datasets on all volumes whose VOLSER starts with 
STG0 that are Cataloged. Print output by descending sort of Unused space


Please also note that you can search a volume (or range of volumes) 
for partial DSNAMEs, even when the partial DSNAME does not contain an 
HLQ. (This may take a while and should be used with caution.)

VTOC runs in TSO interactively or batch.

Regards,
David

On 2020-06-18 09:46, Brian France wrote:

Howdy Dave,

   I will have a look at it. Thanks...

On 6/18/2020 9:01 AM, David Spiegel wrote:

Hi Brian,
You may be interested in File 112 on the "CBT Tape" (cbttape.org) . 
I've been using it for more than 35 years and it has many filtering 
and print options.


Regards,
David

On 2020-06-18 08:53, Brian France wrote:
 I can't find a dfdss equivalent to fdr's map. I see the print 
command but can't seem to get a whole volume list of data sets as 
we do with fdr's map. If it exists would someone please point me to 
it... THANX!!!




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [External] Re: dfdss equivalent to fdr map

[Brian France]

No that's what I get for not being clearer in what I was looking for 
this early in the morning. :-)


On 6/18/2020 9:56 AM, Pommier, Rex wrote:

In John's defense, when I saw "volume map" and "dfdss" in the same sentence, I 
thought like John did, that you wanted a tape volume map.  That's what I get for thinking this 
early in the morning.  :-)

Rex

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
David Spiegel
Sent: Thursday, June 18, 2020 8:49 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [External] Re: dfdss equivalent to fdr map

Hi John,
I am well aware of this capability, and I really do not want to appear to be 
overly chauvinistic, BUT, VTOC (File 112 on the CBT Tape) beats the pants off 
of your solution.

Regards,
David

On 2020-06-18 09:36, John McKown wrote:

On Thu, Jun 18, 2020 at 7:53 AM Brian France  wrote:


I can't find a dfdss equivalent to fdr's map. I see the print
command but can't seem to get a whole volume list of data sets as we
do with fdr's map. If it exists would someone please point me to it... THANX!!!


I don't know what an FDR MAP does. but if you need to know what
datasets are on a DFDSS dump tape, then run a RESTORE with PARM='TYPRUN=NORUN'

Something like:

//JS010EXEC  PGM=ADRDSSU,PARM='TYPRUN=NORUN',
// REGION=0M
//SYSPRINT DD  SYSOUT=*
//TAPE1DD  DSN=JES2DISK.ADRDSSU,
// DISP=OLD
//SYSINDD  *
   RESTORE  -
  DATASET( -
INCL( -
 **-
  ) -
 ) -
  IDD(TAPE1) -
  ADMINISTRATOR -
  TOL(ENQF) WAIT(0,0)





--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC Rm 25 Shields Bldg., University
Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

-
- For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO
IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN


The information contained in this message is confidential, protected from 
disclosure and may be legally privileged.  If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful.  If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format.  Thank you.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: dfdss equivalent to fdr map

[Brian France]

Howdy Dave,

   I will have a look at it. Thanks...

On 6/18/2020 9:01 AM, David Spiegel wrote:

Hi Brian,
You may be interested in File 112 on the "CBT Tape" (cbttape.org) . 
I've been using it for more than 35 years and it has many filtering 
and print options.


Regards,
David

On 2020-06-18 08:53, Brian France wrote:
 I can't find a dfdss equivalent to fdr's map. I see the print 
command but can't seem to get a whole volume list of data sets as we 
do with fdr's map. If it exists would someone please point me to 
it... THANX!!!




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: dfdss equivalent to fdr map

[Brian France]

That's what we're looking for and DFDSS does not seem to have the 
equivalent


On 6/18/2020 9:42 AM, Vernooij, Kees (ITOP NM) - KLM wrote:

FDR MAP produces a physical map of the volume, with from-to CCHHR for each 
dataset and their extents.

Kees


-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
John McKown
Sent: 18 June 2020 15:36
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: dfdss equivalent to fdr map

On Thu, Jun 18, 2020 at 7:53 AM Brian France  wrote:


   I can't find a dfdss equivalent to fdr's map. I see the print command
but can't seem to get a whole volume list of data sets as we do with
fdr's map. If it exists would someone please point me to it... THANX!!!


I don't know what an FDR MAP does. but if you need to know what datasets
are on a DFDSS dump tape, then run a RESTORE with PARM='TYPRUN=NORUN'

Something like:

//JS010EXEC  PGM=ADRDSSU,PARM='TYPRUN=NORUN',
// REGION=0M
//SYSPRINT DD  SYSOUT=*
//TAPE1DD  DSN=JES2DISK.ADRDSSU,
// DISP=OLD
//SYSINDD  *
  RESTORE  -
 DATASET( -
   INCL( -
**-
 ) -
) -
 IDD(TAPE1) -
 ADMINISTRATOR -
 TOL(ENQF) WAIT(0,0)





--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

dfdss equivalent to fdr map

[Brian France]

 I can't find a dfdss equivalent to fdr's map. I see the print command 
but can't seem to get a whole volume list of data sets as we do with 
fdr's map. If it exists would someone please point me to it... THANX!!!


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

There's no such thing as The Cloud - it's just someone else's computer...

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: JES2 - stopping users from sending output to specific outputclass

[Brian France]

Sorry can't help ya. I have no ide'er... Maybe check broadcom's ( soon 
to be bmc ) website's knowledge center.


On 3/3/2020 9:40 AM, Paul Gilmartin wrote:

On Tue, 3 Mar 2020 08:48:43 -0500, Brian France wrote:


We too are an ACF2 shop and I don't know of a way to do this using ACF2
tho I have not really researched that since we've used IEFUV exit to
perform jcl validation while the job is being interpreted in my time
here and before.


What can you do about dynamically allocated SYSOUT?


On 3/2/2020 5:03 PM, Keith Costley wrote:

We are having an issue with users using a restricted output class based on 
standards. We are looking for a way to prevent this from happening by canceling 
the job if the JCL contains SYSOUT=X.   We are an ACF2 shop but I am unaware if 
ACF2 security can limit this through a security definition. The other option is 
a possible exit.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: JES2 - stopping users from sending output to specific outputclass

[Brian France]

We too are an ACF2 shop and I don't know of a way to do this using ACF2 
tho I have not really researched that since we've used IEFUV exit to 
perform jcl validation while the job is being interpreted in my time 
here and before.


On 3/2/2020 5:03 PM, Keith Costley wrote:

We are having an issue with users using a restricted output class based on 
standards. We are looking for a way to prevent this from happening by canceling 
the job if the JCL contains SYSOUT=X.   We are an ACF2 shop but I am unaware if 
ACF2 security can limit this through a security definition. The other option is 
a possible exit.

Has anyone done this in the past and has a suggestion on the best approach?

Thanks,
Keith Costley

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Penn State IT - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SSL FTP....

[Brian France]

NEVER MIND They did something on their end to set ports and fix the 
firewall to allow for them.


On 6/27/2019 2:08 PM, Brian France wrote:
Trying to establish a SSL FTP over port 990 with a winders servers. 
Have done this in the past with no issues but now it seems with a 
newer version of winders maybe combined with FW rules I can't obtain a 
data channel. Connection over port 990, cert navigation, passing of 
userid and password even issuing a cd command all work fine. BUT when 
I try to list the directory or do data transfer I don't get the data 
channel due I believe how they've secured it. I thought I found the 
answer in PASSIVEDATAPORTS setting and tried it only to see it not 
work and then I came to understand it's a z/OS ftp server option only. 
Can't seem to find one for the client. Anyone got any ide'ers they can 
share?



--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SSL FTP....

[Brian France]

Trying to establish a SSL FTP over port 990 with a winders servers. Have 
done this in the past with no issues but now it seems with a newer 
version of winders maybe combined with FW rules I can't obtain a data 
channel. Connection over port 990, cert navigation, passing of userid 
and password even issuing a cd command all work fine. BUT when I try to 
list the directory or do data transfer I don't get the data channel due 
I believe how they've secured it. I thought I found the answer in 
PASSIVEDATAPORTS setting and tried it only to see it not work and then I 
came to understand it's a z/OS ftp server option only. Can't seem to 
find one for the client. Anyone got any ide'ers they can share?


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Service Announcement

[Brian France]

A little over a year later I started here as an entry level sys prog.

Can't remember when I joined IBM-Main, thinking it was like 92 or so...

Thank you Darren...

On 6/6/19 8:01 PM, Edward Finnell wrote:
> Happy Birthday Ibm-main established 6 June 1986.  Thanks Darren...
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

-- 
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Numerous notifications from Broadcom...

[Brian France]

Anyone else out there getting numerous notifications, around 300 now,
from Broadcom regarding the release of CAIRIM 2.2? I've contacted them
but I really don't think the person on the other end understands that
something happened yesterday around 11am and hasn't stopped. Got bug
somewhere they do.

On 5/24/19 10:14 AM, Richards, Robert B. wrote:
> Kurt,
>
> Speaking of RSUs, is there a way to provide an inventory of PTFs already 
> received so that I don't end up reordering and transmitting gigabytes of PTFs 
> that have already been ordered, downloaded and received? As it is now, I am 
> forced to run the RSU job on the weekend so that I stop getting the "17 of 
> 20" failures after hours of wall clock time.
>
> And while I am thinking of enhancements, how about an optional check of a 
> mask against a mask of the DDDEF volser that would flag a difference? Yeah, I 
> know, the file allocation report is supposed to be the last line of defense, 
> but sometimes it is tough to spot a one character difference. Ask me how I 
> know. Still not sure why a coworker changed it without letting others know.  
>
> Bob
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On 
> Behalf Of Kurt Quackenbush
> Sent: Friday, May 24, 2019 9:38 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSUs
>
> On 5/23/2019 10:18 AM, Styles, Andy , ITS zPlatform Services wrote:
>
>> We did a RECEIVE ORDER CONTENT(RECOMMENDED) in early April (just after the 
>> "New Service Levels" email), and got a number of fixes for RSU1903. Over the 
>> last couple of days, it's been discovered that we are missing a few PTFs 
>> that would be part of RSU1903 - or earlier.
>>
>> Yesterday, I therefore as an exercise did another RECEIVE ORDER 
>> CONTENT(RECOMMENDED), and this time got more fixes for RSU1903.
>>
>> Do IBM assign RSU numbers retrospectively to PTFs, after the published RSU 
>> date?
> No, IBM does NOT assign RSU sourceids to PTFs retroactively after the 
> published RSU date.  At least its not supposed to work that way.  Are 
> you sure on your second RECEIVE ORDER one or more ASSIGN statements for 
> RSU1903 were received?  Or did you specify the RSU1903 SOURCEID on the 
> RECEIVE command your self?  If you did receive such ASSIGN statements, 
> and if you still have it, I'd like to see the RECEIVE command output for 
> both jobs please.
>
> BTW, as already mentioned, consider using CONTENT(ALL) instead of 
> CONTENT(RECOMMENDED) in the future.  I'm hard pressed to think of a good 
> reason to only obtain recommended PTFs these days.
>
> Kurt Quackenbush -- IBM, SMP/E Development
> Chuck Norris never uses CHECK when he applies PTFs.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

-- 
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: JES2 shutdown failure

[Brian France]

init's drained?   lines drained? omvs shutdown?

On 5/14/19 5:32 PM, Tony Thigpen wrote:
> I am testing on a DR box, and I am seeing a shutdown problem with JES2.
>
> Here is the console log:
> $da
> $HASP612 NO ACTIVE JOBS
> $P JES2
> IEA964I HARDCOPY SUSPENDED, REASON=HCSW
> $da
> IEE707I $DA  NOT EXECUTED
> D A,L
>     JOBS M/S    TS USERS    SYSAS    INITS   ACTIVE/MAX VTAM OAS
>    0    2    0  00025    0    0/0   1
>     JES2 JES2 IEFPROC  NSW  S  SHUTHUP1 SHUTHUP1 COMAND00 OWT  S
>
> At this point, JES2 never seems to shut down. (The only job running is
> SHUTHUP1 which is the automated shutdown procedure that runs outside
> of JES2.)
>
> Thoughts?
>
-- 
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Extract certificate data from z/OS

[Brian France]

We're an ACF2 shop and have not placed our certs there. They are only in 
an omvs file that we use gskkyman to manage them.


On 3/12/2019 10:32 AM, Peter wrote:

Hi

Apology if it is a silly or it doesn't makes any sense.

Is it possible to extract certificate data from z/OS without going through
RACF ?

This is just a small POC our developers they wanted to know

Peter

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ISF452E on SDSF using MACRO ISFPARMS only on z/OS V2.3.

[Brian France]

Update - We converted from ISFPARMS to ISFPRMxx.  SDSF and SDSFAUX 
address spaces running. Message isf452e of course is no longer appearing 
upon entry into sdsf. Well at least that version of it. There are quite 
a few new commands that wont function. So we now get a version of 
isf452e but with and 0806, query apf not authorized.


It's our opinion that if one was to remain with ISFPARMS then one would 
have to live with the message. SDSF will work with the commands like 
init, log, etc it's just that every initial entry into sdsf would 
present that message of SDSFAUX not running cause indeed it's not.



Thanx all


On 10/10/2018 9:07 AM, Brian France wrote:



On 10/10/2018 8:52 AM, Tom Marchant wrote:

On Wed, 10 Oct 2018 08:36:52 -0400, Brian France  wrote:


Yes we did. That was my thread as we both posted thinking the
other wasn't. According to ACF2 doc and from what I see by dumping my
ACF2 logs calls are NOT being made to SERVER.NOPARM as ACF2 ignores 
them
by default. I even coded a SERVER.NOPARM rule to allow us access in 
case

I was missing something. And according to their doc they state the same
in that IF the call is ignored the fallback is to ISFPARMS data set.

According to the ACF2 doc? Or the SDSF doc?
   The ACF2 doc. So really both the SDSF doc AND the ACF2 doc 
seem to indicate that IF no SDSF address space then fallback to 
ISFPARMS data set.



We
really don't want to go thru the whole SAF/ACF2 setup.

All I know about this is what I saw in Rob's post.
"The user must have READ access to the SERVER.NOPARM resource in the
SDSF class so that ISFPARMS can be used instead of ISFPRMxx."
That sounds pretty clear to me. I read "must" as a requirement.
    I agree. So possibly I do need to try to make that call active in 
ACF2 land even tho their doc states not needed.



I'm hoping
*MAYBE* we can just implement SDSF/SDSFAUX with the ISFPRMxx member
after we try the convert of our current ISFPARMS.

"To connect to the SDSF server, the user must have READ access to the
ISF.CONNECT.system resource in the SDSF class."
There is another pesky "must".
 Ya I saw that. Wonder how many more "pesky musts" will 
rear their head. LOL...




--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ISF452E on SDSF using MACRO ISFPARMS only on z/OS V2.3.

[Brian France]

On 10/10/2018 8:52 AM, Tom Marchant wrote:

On Wed, 10 Oct 2018 08:36:52 -0400, Brian France  wrote:


Yes we did. That was my thread as we both posted thinking the
other wasn't. According to ACF2 doc and from what I see by dumping my
ACF2 logs calls are NOT being made to SERVER.NOPARM as ACF2 ignores them
by default. I even coded a SERVER.NOPARM rule to allow us access in case
I was missing something. And according to their doc they state the same
in that IF the call is ignored the fallback is to ISFPARMS data set.

According to the ACF2 doc? Or the SDSF doc?
   The ACF2 doc. So really both the SDSF doc AND the ACF2 doc 
seem to indicate that IF no SDSF address space then fallback to ISFPARMS 
data set.



We
really don't want to go thru the whole SAF/ACF2 setup.

All I know about this is what I saw in Rob's post.
"The user must have READ access to the SERVER.NOPARM resource in the
SDSF class so that ISFPARMS can be used instead of ISFPRMxx."
That sounds pretty clear to me. I read "must" as a requirement.
    I agree. So possibly I do need to try to make that call active in 
ACF2 land even tho their doc states not needed.



I'm hoping
*MAYBE* we can just implement SDSF/SDSFAUX with the ISFPRMxx member
after we try the convert of our current ISFPARMS.

"To connect to the SDSF server, the user must have READ access to the
ISF.CONNECT.system resource in the SDSF class."
There is another pesky "must".
 Ya I saw that. Wonder how many more "pesky musts" will 
rear their head. LOL...


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ISF452E on SDSF using MACRO ISFPARMS only on z/OS V2.3.

[Brian France]

Howdy Tom,

 Yes we did. That was my thread as we both posted thinking the 
other wasn't. According to ACF2 doc and from what I see by dumping my 
ACF2 logs calls are NOT being made to SERVER.NOPARM as ACF2 ignores them 
by default. I even coded a SERVER.NOPARM rule to allow us access in case 
I was missing something. And according to their doc they state the same 
in that IF the call is ignored the fallback is to ISFPARMS data set. We 
really don't want to go thru the whole SAF/ACF2 setup. I'm hoping 
*MAYBE* we can just implement SDSF/SDSFAUX with the ISFPRMxx member 
after we try the convert of our current ISFPARMS. Might be able to 
activate in ACF2 just the SDSF piece and not the commands and such. Tho 
having this work as documented would be nice.



On 10/10/2018 8:09 AM, Tom Marchant wrote:

On Tue, 9 Oct 2018 18:02:39 +, Dunlap, Curtis L wrote:


Thanks, but I've checked with our ACF2 admin and he says SDSF class is not 
activated.

Did you read the append from Rob Scott yesterday on a related thread?



--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS 2.3, SDSFAUX missing message...

[Brian France]

We do not use ISFPRMxx. We're still using the assembled mac version. 
Might be our issue even tho the manual states it's acceptable.



On 10/9/2018 11:29 AM, Rob Scott wrote:

 From the "Summary of changes" section in the SDSF 2.3 manual :

As of z/OS V2R3, SDSF requires the SDSF and SDSFAUX address spaces to be active 
for full functionality.
The SDSF address space manages connections, processes ISFPRMxx statements, 
handles operator commands, and starts and stops SDSFAUX.
The SDSFAUX address space is used for data gathering requests.
Typically, the SDSF address space is started during IPL using COMMNDxx.
During SDSF initialization, the SDSFAUX address space is started.

When a user accesses SDSF, the SDSF client program attempts to connect to the 
SDSF address space. To connect to the SDSF server, the user must have READ 
access to the ISF.CONNECT.system resource in the SDSF class.

If the SDSF address space is not active, SDSF provides limited functionality.
The user must have READ access to the SERVER.NOPARM resource in the SDSF class 
so that ISFPARMS can be used instead of ISFPRMxx.
Panels that require the use of the SDSFAUX data gatherers (such as APF, LPA, 
and LNK) are not available.

If the SDSF address is active, but no ISFPRMxx is in effect (such as a syntax 
error during startup), SDSFAUX is not started.
The user requires access to the SERVER.NOPARM resource to fall back to ISFPARMS 
and requires READ access to the ISF.CONNECT.system resource to continue.
Panels that require the use of SDSFAUX are not available.

Hope that helps
Rob Scott
Rocket Software

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Brian France
Sent: Tuesday, October 9, 2018 4:09 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: z/OS 2.3, SDSFAUX missing message...

We're in process of upgrading from z/OS 2.1 to 2.3 On our test lpar when we 
enter sdsf we see the following message -

ISF452E SDSFAUX communications failed, return code 0x0008,, reason code 0x00370801, 
function "connect". SDSFAUX not available, or function not supported,

Indeed we have never run SDSFAUX nor the SDSF server. So any ide'ers as to why 
this now coming up? Anyone else see it?

--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC Rm 25 Shields 
Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ 
Main Office Toll Free Number: +1 855.577.4323
Contact Customer Support: 
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmy.rocketsoftware.com%2FRocketCommunity%2FRCEmailSupportdata=02%7C01%7Cbwf2%40psu.edu%7Cfe0f8db547334794f3ba08d62dfc032e%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636746957753832204sdata=DshSQRRIE%2FKV0UM4vZRVSIcjCLGxiLlc13%2BEDLP1M5Q%3Dreserved=0
Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.rocketsoftware.com%2Fmanage-your-email-preferencesdata=02%7C01%7Cbwf2%40psu.edu%7Cfe0f8db547334794f3ba08d62dfc032e%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636746957753832204sdata=k5wtawOCiuOTacJ%2BYPRiP5iuigHnKZQ4a7P9mfoKZzE%3Dreserved=0
Privacy Policy - 
https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.rocketsoftware.com%2Fcompany%2Flegal%2Fprivacy-policydata=02%7C01%7Cbwf2%40psu.edu%7Cfe0f8db547334794f3ba08d62dfc032e%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636746957753832204sdata=zSeMabeus96Uu7AX4WKdbvepzrPwrii94lP%2Bn0CpMgM%3Dreserved=0


This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

z/OS 2.3, SDSFAUX missing message...

[Brian France]

We're in process of upgrading from z/OS 2.1 to 2.3 On our test lpar when 
we enter sdsf we see the following message -


ISF452E SDSFAUX communications failed, return code 0x0008,,
reason code 0x00370801, function "connect". SDSFAUX not available,
or function not supported,

Indeed we have never run SDSFAUX nor the SDSF server. So any ide'ers as 
to why this now coming up? Anyone else see it?


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Where did IBM hide TASID?

[Brian France]

On 08/02/2018 06:22 PM, Tom Conley wrote:
> On 8/2/2018 11:44 AM, Srivastava, Rajesh K wrote:
>> https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww-01.ibm.com%2Fsupport%2Fdocview.wss%3Fuid%3Dswg24009131data=02%7C01%7Cbwf2%40psu.edu%7C077d97a2c7ec45aab1d108d5f8c67187%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636688453560736718sdata=62qVcT5MnglHH4mUeOlM1G7wdwcTObRyqWIi8aI%2FbNg%3Dreserved=0
>>
>>
>>
>> -Original Message-
>
> You, sir, are a steely-eyed missile man. 
    Ya one of THEE best movie lines... AND so true here as I thought IBM
put TASID to bed years ago.
>
> Regards,
> Tom Conley
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

-- 
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ADABAS tuning

[Brian France]

How about from a WLM perspective or use RMF to view the times they run 
as it might show the problems. RMF III you can watch it live.


I believe ADABAS has info in it's address space that shows file usage. 
Now that might only show when the address space is shutdown.



On 8/2/2018 11:13 AM, Tony Thigpen wrote:
Is there anyone that would be willing to give me some guidance to 
solve some ADABAS issues. Something is causing a performance problem 
and nobody seems to even know where to start looking.


We have several Natural programs that run in minutes one night, then 
take an hour on other nights. We also have some RPG programs (using 
the VSAM bridge) that have similar problems.


The programmers don't think it has to do with daily work-load changes. 
They want to point the finger at Systems. We (systems) are not making 
changes.


The 'DBA' belongs to the programmer group, and to be honest, I don't 
think he has a clue concerning performance, just how to define the 
databases.


At this point, I just need a better idea of where the problem really 
is so I can attempt to throw it back to the DBA.




--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Syncsort to DFSort Migration

[Brian France]

On 05/17/2018 01:25 PM, Edward Gould wrote:
>> On May 17, 2018, at 11:21 AM, Sri h Kolusu  wrote:
>>
 in IBM sort you have to specify equals this seemed to be the hardest
>> Edward,
>>
>> You can set EQUALS as default at the installation level for DFSORT. There
>> is a slight overhead with EQUALS option which increases the time needed for
>> comparison of records and for data transfer.  DFSORT team provides
>> documentation of how Syncsort SYNCMAC installation options relate to DFSORT
>> ICEMAC installation options, based on our best current knowledge of the two
>> products.  It's meant to be used as a guideline to help you determine how
>> to set your DFSORT ICEMAC options for easier migration
>>
>>
>> Thanks,
>> Kolusu
>> DFSORT Development
>> IBM Corporation
>
> Yes I knew that. It was more of an issue with SYNCSORT defaulting to it and 
> not highlighting the fact. What we did in this one specific instance was to 
> allow them to specify equals. 
> Those few extra say milliseconds add up over a week/month/year  I will say it 
> was hell to debug until the programmer gave us a hint. That and the fact that 
> was the *ONLY* glitch in that conversion. I got a stubbed toe in my 
> reputation from management. Up until that my reputation was excellent and no 
> one ever questioned me, after it was Hmmm…
    And just how many stubbed toes have they had? Damn I hate hearing
stuff like this.
>
> Ed
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

-- 
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: AW: CA7 with service now

[Brian France]

Here we use CA-OPS to do this. There's rexx code that looks for certain 
items, can exclude jobs if need be and creates an email that goes to our 
circus now system.



On 6/29/2017 7:11 AM, Werner Kuehnel wrote:

Nathan,
I don't know ServiceNow, but we create automatically tickets for abending jobs or 
jobs with RC > 4 in JIRA ticketing system.
This is done with REST services and cURL from a REXX (started by NetView). 
Probably ServiceNow offers also a REST API you can use.
If you need more information please contact me offline.

Regards,
Werner

-Ursprüngliche Nachricht-
Von: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] Im Auftrag 
von Nathan Astle
Gesendet: Donnerstag, 29. Juni 2017 10:06
An: IBM-MAIN@LISTSERV.UA.EDU
Betreff: CA7 with service now

Hi,


Is there anyone in the List who have integrated CA7 with Service Now(Ticketing 
Tool). Basically whenever the CA7 jobs Abend it must automatically create a 
incident in service now.

Could you please share your experience  ? So that It can help me to build a 
similar Solution in my Shop.

Nathan

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RMDS for reporting on Mainframe

[Brian France]

We moved from RMDS more years ago than I can remember. We use JSF from 
Mackinney.



On 4/10/2017 5:27 AM, SrinivasG wrote:

Hi,

Is anyone using RMDS on Mainframe?
Since its being discontinued , I am interested in knowing what other shops are 
doing.
Please share your solutions as far as RMDS is concerned.

Thanks in advance.

Regards,
Srinivas G

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Wlm and adabas\complete

[Brian France]

Howdy Tim,

 We run all that here. Not sure what you're looking for but I can 
tell you how we use WLM here in conjunction with them. As you can 
imagine there's all sorts of schools of thoughts that work. Take this as 
it works here but not maybe not somewhere else.


Importance of 1, execution velocity of 40 for ADABAS, GBP

Importance of 1, execution velocity of 17 for COMPLETE, ETB ( broker )

Importance of 1, execution velocity of 8 for RPC servers

Resource group based on SU's - Day - 5k, Night - 7k for ADABAS, GBP

Resource group based on SU's - 4k COMPLETE, ETB

Resource group based on SU's - 3k


On 2/17/2017 2:57 PM, Neil Duffee wrote:

Caveat:  list digestion leads to delayed responses...

I'm surprised Lizette hasn't piped up already but I'll pass along that you 
would probably get a better response via sa...@listserv.uark.edu which is where 
the SAG clients hang out.  I've cc:'d them in this message.

Since we were DB2, Adabas (for Predict) was not a specialized WLM case for us.  
Perhaps others have done more detailed work.   We were using Transaction Goals for 
CICS especially to weed out the long-running transactions ie. OmegaMon, & Cics 
system tasks, so they didn't pollute the response times collection.  They were 
given 5-10% CPU goals but got carried along by the Transaction Goals since CICS is 
adjusted by WLM as an entire region.  I seem to recall there was some discussion in 
the SysProg WLM Guide Redbook to this effect.  [1]  I re-read the guide many times 
and found new insights [2] even after a few years had elapsed.

[1]  I created a 'medium' Goal with more relaxed response times intended for 
the lessor-preferred transactions but we never got around to making any 
distinction.
[2]  The biggest being that the goals should not be specified as 'What you want'.  Instead, they should be 
more, "when the stuff starts flying, I'd like these (acceptable) minimums, plz."  For example, 
instead of "I'd like this to get 80% CPU", you should say, "if things are bad, this could 
survive on 40% CPU.  I won't like it but we'll stay processing."  If you're not constrained, WLM will 
let you over-perform but if you artificially constrain it, it can't steal from other processes to smooth 
things out.  I especially like how WLM will temporarily boost a low-goal process that's holding 
up/enqueing/locking a higher process.  It shows up in the RMF report as below:

--PROMOTED--
BLK0.000
ENQ0.502
CRM0.000
LCK  230.133
SUP0.000

>  signature = 8 lines follows  <
Neil Duffee, Joe Sysprog, uOttawa, Ottawa, Ont, Canada
telephone:1 613 562 5800 x4585  fax:1 613 562 5161
mailto:NDuffee of uOttawa.ca http:/ /aix1.uOttawa.ca/ ~nduffee
"How *do* you plan for something like that?"  Guardian Bob, Reboot
"For every action, there is an equal and opposite criticism."
"Systems Programming: Guilty, until proven innocent"  John Norgauer 2004
"Schrodinger's backup: The condition of any backup is unknown until a restore is 
attempted."  John McKown 2015


-Original Message-
From: Tim Brown [mailto:tbr...@cenhud.com]
Sent: February 15, 2017 19:58
Subject: Wlm and adabas\complete

Does anyone have experience with Adabas 8.3.3 and Sags complete product (Cics 
like) And wlm ?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Layout CPC serial number z13S

[Brian France]

We just installed this past Monday. No key issues sans working with SAG 
to get rid of a message of one product that thinks it's on our D/R 
machine but is running fine. See below the D M=CPU. I believe it to be 
the same as it was.


D M=CPU
IEE174I 08.20.55 DISPLAY M 090
PROCESSOR STATUS
ID  CPU  SERIAL
00  + xx2965
01  +Ixx2965

xx = lpar id
 = last 4 of 5 digits of serial number


On 2/15/2017 8:02 AM, Ron van der Zande wrote:

LS;
does somebody has an example of the D m=CPU display on a z13S?
Got serial numbers from the  new to be installed machines but serial numbers 
setup seems to be changed and not as I expected. Layout and values important 
for our software suppliers to deliver new software keys.
Regards Ron

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Capping information

[Brian France]

Uh, when you say sysplex are asking about many lpars over many different 
physical frames or if not then take a look at RMF III, Overview, CPC. 
This will show both capping's for all LPAR's on a given frame.



On 10/31/2016 12:36 PM, Peter wrote:

Hi

I am just looking some way to take a snapshot of the entire sysplex which
can say the hard capped and soft capped LPARs.

Any rexx tool that can help ?

Peter

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM Education Assistance for z/OS - Useful??

[Brian France]

On 10/12/2016 4:35 PM, Marna WALLE wrote:

Hello IBM-MAINers,
I wanted to ask about the usefulness of the IBM Education Assistance (IEA) for 
z/OS.

A little background:  IEA is found here:  
http://www.redbooks.ibm.com/redbooks.nsf/pages/IBMIEAV22avail?Open and provides concise 
and technical information about a specific function introduced in z/OS.  For instance, 
there is a module there for Dynamic Logrec in z/OS V2.2.It is intended to be a 
"one stop shopping" location for new enhancements in a z/OS release.  Of 
course, all information can also be found in the appropriate z/OS books.  We've had IEA 
for both z/OS V2.1 and V2.2.

My questions are:
1)  is this is still a good way to provide this information to you?
   I had NO idea this existed until your email. From a quick 
look this appears to be great site.

2) with all the other ways to learn about new functions, is IEA still needed by 
you?

  I'm now book marking it so yes.

3) are there particular topics in IEA that you like and want to continue to see 
in the future?  if so, which ones?
   Can't answer yet as I need to spend some quality time at 
this site.


Thanks in advance for any opinions you'd like to share.
-Marna WALLE
z/OS Installation, IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ACF2 SMF Record Question

[Brian France]

ACFRPTPW - A report that can be run against the SMF data. This will show 
many different reasons as to why a logon wasn't any good. ie - password 
not matched, invalid syntax, password expired. There is a pre-processor 
utility as generally ACF2 logs to a SMF record ( we're 230 ) and the 
pre-processor breaks them out for the various reports. This can be done 
via the ISPF panels as well as batch jobs. That I know of, and we have 
users timing out here all the time, ACF2 does not cut an entry for that.


On 5/12/2016 2:48 PM, Donald Likens wrote:

I am sure this is not the correct place to ask this question but I hope someone 
can help me (or at least direct me to the correct place to ask this question). 
Note: We are supporting a client with ACF2... We do not have an ACF2 license at 
our shop.

We are assisting a customer in trying to determine why they are getting so many ‘Invalid 
Password\Authority’ ("P") ACF2 SMF records.  It seems like most of these records are 
being written when there is no invalid passwords by the user. It appears after a successful login 
after idle timeout, ACF2 is cutting an ‘Invalid Password\Authority’ ("P") SMF record.  
Can anyone help us to identify a field and values in the SMF record that would allow us to 
distinguish between a true “invalid password” and a false-positive after a user is timed out?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PLEASE HELP TLS 1.2

[Brian France]

Check your list of ciphers. There are ciphers specific to tls 1.2.

On 3/24/2016 11:37 AM, Lopez, Sharon wrote:

A federal agency changed to TLS v1.2 over the weekend and now we are not able 
to connect to them via CICS 5.2.  We have on the TLS V1.2 ptf for z/OS 1.13 and 
we are starting with the correct SIT within CICS.  We are missing something but 
cannot figure this out.  Anyone else experiencing this?  Are there parameters 
somewhere else that we need to specifiy TLS 1.2.  We appreciate any help that 
you can give us.
Thank you.





Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Sharing of consoles

[Brian France]

Visara

On 1/6/2016 11:18 AM, Lopez, Sharon wrote:

What console controllers does everyone use to share consoles across multiple 
data centers?  Are most people using OSA, Visara controllers, etc?

Thank you.

Sharon Lopez



Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Big Blue’s big storage iron gets bigger: DS8880 array uncloaked

[Brian France]

Here's a link with some info. It's not an announcement letter but

http://www-03.ibm.com/systems/storage/disk/ds8000/

On 10/15/2015 10:46 AM, Staller, Allan wrote:

Newest I can find in the IBM Offerings is DS8870.

HTH,


Any one has url for IBM announcement letter of DS8880? I can´t find it and 
didn´t remember to see annoucement in last letters.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Unicode Red Alert

[Brian France]

Yes and the same results

On 10/1/2015 8:48 AM, Chris Hoelscher wrote:

I experienced the same symptoms as did you!

Chris hoelscher
Technology Architect
Database Infrastructure Services
Technology Solution Services

123 East Main Street
Louisville, KY 40202
choelsc...@humana.com
Humana.com
(502) 714-8615
(502) 476-2538

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mike Shorkend
Sent: Thursday, October 01, 2015 2:38 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [IBM-MAIN] Unicode Red Alert

Last night , I received the following red alert:


Dear Subscriber

Here are your bulletin email notifications for your subscriptions at IBM My 
notifications.

Visit the recently updated IBM Electronic Support site to get connected with 
our powerful online tools, tips, and resources.
Your support notifications display in English by default. Machine translation 
based on your IBM profile language setting is added if you specify this option 
in My defaults within My notifications.
(Note: Not all languages are available at this time, and the English version 
always takes precedence over the machine translated version.)

z/OS family - all hardware, OS, and related software: Red Alerts

•
z/OS Unicode Services Conversion Information Service fails after 12-15-20 
http://www14.software.ibm.com/webapp/set2/sas/f/redAlerts?myns=z000=OCHW188=OCHW18N=OCHW19Y=OCHW20L=OCHW22D=OCHW23D=OCHW25D=OCHW30D=OCSWG90=OCSWG80=OCSWGA0=OCSWGB0=E_sp=z000-_-OCHW188-OCHW18N-OCHW19Y-OCHW20L-OCHW22D-OCHW23D-OCHW25D-OCHW30D-OCSWG90-OCSWG80-OCSWGA0-OCSWGB0-_-E


Unicode Services conversion information service on all current z/OS releases 
will return incorrect return code on systems IPLed on or after December 15,
2015
affecting many system services and applications. Action is required to prevent 
failures

To read the complete text of this Red Alert as well as previous Red Alerts 
please use the above link.






When I try to follow the link, the page crashes. When I try to access the IBM 
red alert page

https://www14.software.ibm.com/webapp/set2/sas/f/redAlerts/home.html

the browser times out.


Has anyone else received this alert? Managed to access it online?

I have contacted IBM and I am wating for an answer from them.


Thanks


Mike



--
Mike Shorkend
m...@shorkend.com
www.shorkend.com
Tel: +972524208743
Fax: +97239772196

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material.  If you receive this 
material/information in error,
please contact the sender and delete or destroy the material/information.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

AT/TLS, TN3270E....

[Brian France]

CROSS POSTED - IBM-MAIN, IBMTCP...

We're at z/OS 2.1 trying to move to TLSV1.1 and or TLSV1.2 for our 
TN3270E connections. Currently we are
SSLV3 and TLSV1. On our TEST systems I have TLSV1 in my PAGENT rules as 
well as TLSV1.1 and TLSV1.2 with
sslv2/sslv3 off. Our client does not have a TLS option. So we have to 
code sslv2/sslv3 and then TLSV1 happens.
But when I turn off TLSV1 in hopes of using TLSv1.1 and/or TLSV1.2 I 
receive a 412 error code.

Upon reading I find this -

412 	Connection Init 	A common SSL protocol type cannot be agreed upon 
by both partners. This disagreement occurs if both partners do not 
support the same SSL protocol, as when the client supports only SSLv2 
and the server supports only TLSv1. AT-TLS supports only SSLv2, SSLv3, 
and TLSv1




Am I reading and understanding this correctly in that I can not move to 
TLSV1.1 or 1.2 using AT-TLS?
If so I'm cornfused as why then would PAGENT have the ability to select 
TLSV1.1 or 1.2?


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

LPR error code = 60...

[Brian France]

I have cross posted this to both IBM-MAIN and IBMTCP-L.

Since we upgraded to z/OS 2.1 we've been receiving ( sporadically and by 
that I mean out of 55 batch jobs a day we'll have 3-4 failures where 
that would be a weeks total for failures prior to the upgrade) the 
following error -


EZB1051E Failed to Open connection to Port Number = 515.  Return Code = -1.   
Error Number = 60.  Port Number = 721.   Remote IP Add
 r =

I for the life of me can not find what Error Number = 60 is. We use the 
following command in a batch job -

 ISPSTART CMD(LPR 'XPAF.SURP002.JOB09366.D15062.T024955.STD' (AT ???.??.??.??? 
PRINTER mainframewhite FILTER  L USER CLS48 NAME SBRP002  BINARY ))

There could be several of these batch route print jobs and only one will get it 
or none will. We submit a rerun and it work just fine.

Someone please point me to the manual that would contain the description of the 
error.

THANX

--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Does z/OS V1R13 CSF support TLS v1.2?

[Brian France]

For z/OS 1.13 there's a PTF. Sorry off hand I do not know it.

On 11/21/2014 3:43 PM, Charles Mills wrote:

I call gsk_attribute_set_enum(env_handle, GSK_PROTOCOL_TLSV1_2,
GSK_PROTOCOL_TLSV1_2_ON) and get RC 701 Attribute identifier is not valid.

The same code works on V2R1 so either the answer to my question is Yes, or
else something is hosed up on my V1R13 system. I'd like to know which it is.

Charles

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RMDS

[Brian France]

Way back machine started.

Once upon a time we ran RMDS with ACF2. ACF2 versions woulda been like 6 
and 8. I have no idea anymore what RMDS version we had.


There were exits in RMDS that we utilized with ACF2. They would take the 
report name ( the one you see when you're in RMDS, not the data set name 
) and pass it to the exit were we would make a data set like call to 
grant access. We had to write code utilizing the sample exit to do this. 
Think we placed standard HLQ  on the report name when we built the data 
set like call to write rules against.


There was a sign on exit as well.

I looked for my exits but alas I musta cleaned house when RMDS went the 
way of the dino here...



On 7/29/2014 8:27 AM, Roff, Donna wrote:

Thanks Koluso and Lizette

Ive gone through the manuals already and cant seem to find what I need.

We are z/OS 1.13, RMDS is 2.3 (this hasn't changed in eons) and ACF2 is V15.

This is the problem which we just recently discovered after decades:

The RMDS administrator does set up something to determine who can browse which 
reports.  However, once you get into DISPLAY mode on a report, theres a whole 
series of commands available - CAP, COLS, F(IND) etc.  Fairly inoculous.  
However, there is also an ERASE command, which does not seem to have any 
restriction on it.

This is on the report level, not the dsname level.  A user that does not have 
ACF2 authority to delete the vsam cluster corresponding to the report can still 
delete the report by issuing ERASE. The report is no longer viewable and  When 
the PURGE jobs runs, PURGE deletes the cluster.

Ive been working with both IBM and CA on this but to no avail.  It seems that 
once in RMDS, ACF2 is out of the picture.  So I think this has to be controlled 
within RMDS.  But we cant figure out how.

Thanks,
Donna

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Sri h Kolusu
Sent: Monday, July 28, 2014 3:31 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RMDS

May be this will help

Chapter 16 in Administration Guide

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DBNA3000

or this one

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DBNC3000


Kolusu

IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu wrote on
07/28/2014 12:08:10 PM:


From: Roff, Donna dr...@fisa.nyc.gov
To: IBM-MAIN@listserv.ua.edu
Date: 07/28/2014 12:19 PM
Subject: RMDS
Sent by: IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu

Hi,

Is anyone here familiar with RMDS (Report Management Distribution

System) ?

We have a question about security on one of the RMDS commands
available against a report.  ACF2 protects the MVS datasets but this
is for the actual report.

(This is my first post.  I don't know if I need to put any

introduction.)

Thanks,
Donna

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS FTPS Client Linux FTP server

[Brian France]

I saw this same message before. We had a guy here that ran a tcp trace 
during the connection process, moved it to a linux workstation and used 
TCPDUMP? on it. What he determined was the windows server we were trying 
to connect to had a checkpoint firewall and it actually was re-writting 
the first two byes of the cert. There was a setting that had to change. 
I know you said no firewalls BUT is it possible that something else is 
doing this on the linux server? A setting in VSFTP maybe? He left doc 
somewhere and if you're interested I'll dig it up.


On 5/7/2014 10:38 AM, Mark Pace wrote:

Trying to turn on some DEBUG information
DEBUG FLO

FC1003 authServer: secure_socket_init failed with rc = 410 (SSL message
format is incorrect)

So not to try to figure out where to find this error message.


On Wed, May 7, 2014 at 10:19 AM, Mark Pace pacemainl...@gmail.com wrote:


I remember setting up something very similar to connect to IBM.   So I
added the GoDady cert to the same keyring.

sr cla(digtring)
IBMUSER.smpemaint
*IBMUSER.FtpSecur *
IBMUSER.IBMRing
IBMUSER.SecureFTPKeyRing
IBMUSER.SMPEMAINT
TN3270.TNRING
***



racdcert id(ibmuser) listring(*FtpSecur*)
Digital ring information for user IBMUSER:

   Ring:
FtpSecur
   Certificate Label Name Cert Owner USAGE  DEFAULT
            ---
   GeoTrust Global CA CERTAUTH   CERTAUTH NO
  * Go Daddy Class 2   CERTAUTH   CERTAUTH YES*


So I added to my ftp.data
KEYRING  IBMUSER/FtpSecur

But that still isn't the final answer

EZA2897I Authentication negotiation failed
EZA2898I Unable to successfully negotiate required authentication
EZA1735I Std Return Code = 1, Error Code = 00017



On Wed, May 7, 2014 at 9:44 AM, Chase, John jch...@ussco.com wrote:


If you're authorized to issue RACF commands, try SR CLA(DIGTRING) to list
defined key rings (format is userid.ringname), then RACDCERT ID(userid)
LISTRING(ringname or *) to see the ring(s) contents.

Also ensure that the root cert you're interested in has TRUST status
(default is NOTRUST).

   -jc-


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]

On Behalf Of Mark Pace

Sent: Wednesday, May 07, 2014 8:34 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS FTPS Client  Linux FTP server

The cipher was one of my early problems.  But I figured that one out.
vsftpd -  ssl_ciphers=RC4-SHA
z/OS - CIPHERSUITE SSL_RC4_SHA

I'm certain that this Keyring  is (part of) my problem.   Stumbling

through

RACF I have found that the GoDaddy Root CA is already defined in z/OS,

but still trying to determine

if it is part of a keyring.



On Wed, May 7, 2014 at 8:57 AM, Donald J. dona...@4email.net wrote:


Make sure client and server have a common cipher.
SSL_AES_128_SHA and SSL_AES_256_SHA are probably more commonly used
than SSL_RC4_SHA.

Make sure the linus root certificate is in your z/OS client keyring.

--
   Donald J.




--
http://www.fastmail.fm - A no graphics, no pop-ups email service

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
The postings on this site are my own and don’t necessarily represent

Mainline’s positions or opinions

Mark D Pace
Senior Systems Engineer
Mainline Information Systems

--
For IBM-MAIN subscribe / signoff / archive access instructions, send

email to lists...@listserv.ua.edu

with the message: INFO IBM-MAIN

**
Information contained in this e-mail message and in any attachments
thereto is confidential. If you are not the intended recipient, please
destroy this message, delete any copies held on your systems, notify the
sender immediately, and refrain from using or disclosing all or any part of
its content to any other person.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
The postings on this site are my own and don’t necessarily represent
Mainline’s positions or opinions

Mark D Pace
Senior Systems Engineer
Mainline Information Systems








--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO 

Re: z/OS FTPS Client Linux FTP server

[Brian France]

I see you have pasv_enable=yes

I think there's a setting in z/OS parms maybe related. EPSV4 True

On 5/7/2014 3:36 PM, Mark Pace wrote:

I had looked at that also.  The vsftpd config -  comments removed for
brevity.
listen=YES
max_clients=20
use_localtime=YES
log_ftp_protocol=YES
# enable FTPS
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
force_local_logins_ssl=NO
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
ssl_request_cert=NO
rsa_cert_file=/etc/vsftpd/mainline-wc-2011.crt
rsa_private_key_file=/etc/vsftpd/mainline-wc-2011.key
ssl_ciphers=RC4-SHA
debug_ssl=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
anon_umask=666
anon_upload_enable=NO
dirmessage_enable=YES
message_file=.message
xferlog_enable=YES
connect_from_port_20=YES
xferlog_file=/var/log/vsftpd.log
banner_file=/etc/vsftpd.banner
deny_email_enable=YES
banned_email_file=/etc/vsftpd.banned_emails
chroot_local_user=YES

pasv_enable=YES
listen_ipv6=NO



On Wed, May 7, 2014 at 3:20 PM, Gibney, Dave gib...@wsu.edu wrote:


I am now reminded of a difficulty I had with this once. My plea to the
list(s) resulted in this:

Skip to site navigation (Press enter)
Re: FTP TLS Handshake Fails with SSL RC 410 Cal McCracken Thu, 10 Mar 2011
07:44:54 -0800

Thanks to a private responder, I was able to get this resolved. I don't
know if the SSL RC 410 covers other error situations, but in my case, the
resolution was to set configuration parm, ssl_request_cert to NO (defaults
to YES). This is a config parm for the vsftpd FTP server on our Linux
system.

My humble thanks to the responder.




-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
On Behalf Of Mark Pace
Sent: Wednesday, May 07, 2014 12:02 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS FTPS Client  Linux FTP server

And for giggles I setup another Linux FTP server - this one pure-ftpd -

again no

issues connecting with a windows FTPS client - still no connection with

z/OS.


On Wed, May 7, 2014 at 2:39 PM, Mark Pace pacemainl...@gmail.com
wrote:


Yes - it was at that time.  Since I started working on the RACF
certs/keyring stuff the ftp.data has been updated as I go along.

  Currently.

SECURE_CTRLCONN  CLEAR
SECURE_DATACONN  PRIVATE
SECURE_FTP   REQUIRED
SECURE_HOSTNAME  OPTIONAL
SECURE_MECHANISM TLS
KEYRING  IBMUSER/FtpSecur
TLSPORT  21
TLSRFCLEVEL  CCCNONOTIFY
TLSTIMEOUT 10
;
;CTRLCONN 7BIT
SECUREIMPLICITZOS FALSE
TLSMECHANISM  FTP
CIPHERSUITE   SSL_RC4_SHA
;
DEBUG SEC


On Wed, May 7, 2014 at 2:06 PM, Gibney, Dave gib...@wsu.edu wrote:


You said latest, so maybe you have tried others. In the parms listed
here, your keyring is commented out.


-Original Message-
From: IBM Mainframe Discussion List
[mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace
Sent: Wednesday, May 07, 2014 5:26 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: z/OS FTPS Client  Linux FTP server

Has anyone successfully sent data to a Linux FTP server using TLS

security

from the z/OS FTP client?

I have a Linux server running vsftpd - I've been using it for years
to

send SMF

data.  I've added TLS support to this server.  I've verified that
the

Secure

connect works via a Filezilla client,

So now I would like to be able to send SMF data to the server.  But
I

always

get an authentication failure.  I've tried every combination of
Security parameters I can come up with.

These are the latest parms in my ftp.data file.

;SECURE_CTRLCONN SAFE
SECURE_DATACONN CLEAR
SECURE_FTP REQUIRED
SECURE_HOSTNAME OPTIONAL
SECURE_MECHANISM TLS
SECUREIMPLICITZOS FALSE
CIPHERSUITE SSL_RC4_SHA
;KEYRING IBMUSER/SecureFTPKeyRing
TLSPORT 21
TLSRFCLEVEL CCCNONOTIFY
TLSTIMEOUT 10
;SECURE_PBSZ 16384
;
;CTRLCONN 7BIT

I'm beginning to think I am doing something fundamentally wrong
instead

of

it being a matter of wrong parameters.

//FTP  EXEC PGM=FTP,REGION=5M,PARM='(EXIT'
//SYSPRINT  DD  SYSOUT=*
//SYSFTPD   DD  DISP=SHR,DSN=MARPACE.JCL.CNTL(FTPSDATA)
//OUTPUTDD  SYSOUT=*
//INPUT DD  *  USE LOWER CASE BELOW
ftp.s390.mainline.com
userid password
dir
quit


EZA1736I FTP
(EXIT

EZY2640I Using dd:SYSFTPD=MARPACE.JCL.CNTL(FTPSDATA) for local site
configuration parameters.
EZA1450I IBM FTP CS
V2R1
EZA1772I FTP: EXIT has been
set.
EZA1456I Connect to
?
EZA1736I ftp.s390.mainline.com

EZA1554I Connecting to: ftp.s390.mainline.com 10.6.0.10 port:
21.
EZA2897I Authentication negotiation failed EZA2898I Unable to
successfully negotiate required authentication

EZA1735I

Std Return Code = 1, Error Code =
00017








--
The postings on this site are my own and don’t necessarily
represent Mainline’s positions or opinions

Mark D Pace
Senior Systems Engineer
Mainline Information Systems

---
--- For IBM-MAIN subscribe / signoff / archive access instructions,
send

email to

lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: MIH Question

[Brian France]

We did this so long ago I disremember a lot of it. BUT I can state that 
there are no MIH values coded in our IOS member. Just Hyperpav...


Oh and we are a basic sysplex shop

On 2/20/2014 10:08 AM, Lizette Koehler wrote:

There should be something documented in the manuals for your DS8870 to state
what they want.

Or you can ask you friendly IBMer.

Lizette



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Dazzo, Matt
Sent: Thursday, February 20, 2014 7:50 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: MIH Question

We recently migrated from a IBM shark dasd device to a IBM DS8870 device,

we

are zos 1.13 monoplex shop. In the IECIOS000 member was the following

entry for

the shark devices MIH DEV=(2000-2BFF),TIME=02:00. Is there a way to

determine

if an entry is needed and what it should be for the new devices?  The old

entry was

added before my time and I do not know why.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: The z/OS V2.1 Migration PDF available

[Brian France]

Howdy Marna,
  I like it so far. I thru the chapter 1 and 2, starting 3. Did not 
even print out chapter 4. Saved some trees that way.


  And yes, sorry, I still need to print, highlite and note take 
with pen and highlighter.


On 8/8/2013 5:51 PM, Marna WALLE wrote:

Hi All,
Since you mentioned the z/OS V2,1 Migration book being available, I thought I 
would bring to your attention something.  It's different.

We've tried a new format for the book, which I'm hoping will make it easier to read.  
We've divided up the chapters into which migration path you are on (R12- V2.1,  
or  R13- V2.1).  You read only the chapters that apply to you.

Here's the layout:
Chapter 1:  Introduction   for all users
Chapter 2:  General migration actionsfor all users
Chapter 3:  Migration from z/OS R13 for R13 - V2.1 users
Chapter 4:  Migration from z/OS R12 for R12 - V2.1 users

R13-V2R1 :  Read Chapters 1, 2, and 3.  Skip Chapter 4.
R12 - V2R1:  Read Chapter 1,2, and 4.  Skip chapter 3.

Any feedback on this format is welcome!
-Marna WALLE
z/OS System Installation

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zIIP Enabler for Natural

[Brian France]

We are looking at it. We pulled together a month of SMF data for them to 
analyze to assess is we're a good candidate or not. Now awaiting those 
results. In our initial meetings SAG believed we may indeed be a good 
candidate due to our heavy batch environment.


On 6/6/2013 7:30 PM, Longnecker, Dennis wrote:

Just ran across this that enables Natural to utilize the zIIP processor.

https://www.softwareag.com/us/images/SAG_zIIP_Enabler_FS_May12_web_tcm89-98519.pdf

Wondering if anyone is using it or has more details they can share.

Thanks,

Dennis

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zIIP Enabler for Natural

[Brian France]

I believe there is an additional charge.

On 6/7/2013 8:23 AM, Bob Shannon wrote:

Is this an additional charge feature or just a startup option?

Bob Shannon
Rocket Software

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SYNCSORT vs. DFSORT configuration for LE?

[Brian France]

gil,
  SS13CEEM I believe is a Syncsort module, not a DFSORT module which is 
why DFSORT works.  Syncsort uses that naming convention for their 
modules. In your case it would be Syncsort 1.3 or 3.1 as I think they 
have some reverse thing going.


On 2/25/2013 6:46 PM, Paul Gilmartin wrote:

SYNCSORT is failing for me with:

16.33.50 JOB03864  CSV003I REQUESTED MODULE SS13CEEM NOT FOUND
16.33.50 JOB03864  CSV028I ABEND806-04  JOBNAME=SORTA STEPNAME=STEP1

DFSORT works fine.  I assume SS13CEEM is an LE module that
might be found if I provided a suitable STEPLIB.  How do I find
out where DFSORT is getting that module?  There's nothing in
SYSOUT that seems promising.

Thanks,
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: increased CPU usage z/os v1r13

[Brian France]

Migrated back in October, z/OS 1.11 to 1.13. Saw nothing of the like. 
For some reason I kinda remember another email on this subject sometime 
in the last 6 months or so. Please don't hold me this to this but an 
exit may have needed reassembled and I wanna say it was iefactrt that 
was not working right. You might be able to search the archives for it. 
Sorry best this feeble brain can do.


On 1/7/2013 2:09 PM, Crabtree, Anne D wrote:

Since bringing up z/os v1r13 in late October, our CPU stays at 100%, batch jobs 
are backing up and people are complaining.  (Migrated from z/os v1r11)

I've looked for information on increased CPU for 1.13 but haven't found much.  
I see now that there is a product you can download to predict increased CPU 
when migrating, but, unfortunately, I didn't realize that until now.  I can't 
say for sure what kind of percentage the  CPU was peaking at for 1.11, but I 
know that we did not get these phone calls complaining about response time!

I just wondered if anyone else experienced a significant increase in CPU usage 
going to 1.13?

Anne D. Crabtree
System Programmer
WV Office of Technology Data Center
1900 Kanawha Blvd East
Bldg 6, Room B-110
Charleston, WV  25305
(304)558-5914 ext 58292
(304)558-1441 fax


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Security vulnerability in IBM HTTP Server for z/OS Version 5.3 (PM79239)

[Brian France]

My manager got the same call the day before xmas from our rep ( at IBM's 
insistance ). I too was not ( still am not ) registered for this site. 
BUT I am registered for red alerts. IF this was that serious should that 
not be the vehicle to get this info out. I do not want to register 
somewhere else for something that already is in place.  I was able to 
get enough info from our rep to find out that one apar dealt with the 
HTTP server and the other two dealt with Tivoli Netview. At the time, 
the day after xmas, the PTF's did NOT exist at the www.ibm.com/support 
site. I have not looked since as we do not run either of those 
components but found it strange I could not successfully search for the 
PTF's. From the limited viewing of the Security portal, I did not see 
much in value.


On 1/3/2013 3:44 PM, Clifford McNeill wrote:

I received a phone call from my sales rep (at IBM's insistence) stressing the 
severity of this and 2 other APARs.  I suspect that others have received 
similar phone calls.  I am not registered (yet) for the 'System z Security 
Portal' but I suspect the APAR's details are in there.
Cliff McNeill
  


Date: Thu, 3 Jan 2013 13:38:14 -0600
From: robert.carba...@officedepot.com
Subject: Security vulnerability in IBM HTTP Server for z/OS Version 5.3 
(PM79239)
To: IBM-MAIN@LISTSERV.UA.EDU

Does anyone have any thoughts on this?

Here is the link explaining the issue:
https://www-304.ibm.com/support/docview.wss?uid=swg21620945

I did some searching but can't seem to really find details about the exploit.

How serious is this?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM, id's to open pmr's, lot$a $$$$ now involved?...

[Brian France]

Howdy Barb,
 See imbedded below...

On 10/16/2012 12:59 PM, ibmmain wrote:

Brian,


Well we had such a pleasant phone call on Friday with IBM reps on this
subject. Much to our DISMAY, they maintain that this access was never
free and that promoting web sites costs money.

I think what you're seeing here is that someone at IBM screwed up royally. It 
all comes out because IBM now 'consolidates' their many tools on different 
platforms into one (named SR), and SR is built on assumptions that IBM came up 
with in their ivory tower. SR exposes that most of the customer data bases are 
equally screwed up. New customer numbers are assigned sometimes on a 
product-by-product basis, and it is sufficient for one manager at your site 
signing off on something like this six years ago for you now to have a binding 
contract that does not include opening problems electronically.
 Yes, I do believe you're totally correct on this. I kinda 
had been thinking that especially since we had the meeting Friday and I 
kept hearing the same over and over, IBMLINK is what I know, not the 
other URL's. And it continues to highly urinate me that they don't have 
the guts, nads, choose your optimum word here, to admit it OR even more 
importantly, notify upfront. Somewhere in there I have to think breach 
of contract when you take away access without notification...




I have seen this when IBM forced session manager on us (instead of NetView 
Access) by the simple expedient of silently terminating the NVAS licence in our 
contract and substituting session manager instead. We had never agreed to that, 
but my boss had signed off on it when the contract was up for renewal and there 
we were. More recently, when Sterling was bought by IBM, IBM was incapable of 
putting the NDM licence under the same contract we have always had opened PMRs 
under. IBM silently opened a new customer number just for NDM and made a 
colleague of mine admin for it. Need I mention that none of us could access 
that customer number?

I feel your pain. This is certainly NO customer service at all. In the long 
run, it is one more nail in z/OSs coffin
   Yes the pounding of nails at IBM is just astounding. A bigot of 
them I've been, but no more...

.

Barbara Nitz

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--

--

Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu mailto:b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM, id's to open pmr's, lot$a $$$$ now involved?...

[Brian France]

I deal with other vendors like CA for ACF2 and MIM, and Syncsort. 
NEITHER charges me for electronic support. It comes with the product as 
it should. Support has been stellar whether it be an actual bug in the 
code or a fubar on my part. The people in tech support I've worked with 
in IBM the same can be said. The same can not be said for IBM and what 
they want to and now are going to charge for versus CA or Syncsort.  I'm 
10 years out on retirement and sure do hope to see this new IBM thinking 
go by the way side or I'm afraid there wont be an IBM left. I never 
thought I'd see the day that my favorite platform is being killed from 
within.



On 10/16/2012 6:00 PM, Scott Ford wrote:

I don't disagree with either of you. Customer service is lacking with a lot of 
vendors. But on the flip side I will tell you from experience a lot of 
customers are lacking talent in the systems arena. This isn't a big surprise a 
lot of guys my age are retiring or retired. We go above and beyond usually in 
service on our products because of our size.

Scott ford
www.identityforge.com

Tell me and I'll forget; show me and I may remember; involve me and I'll 
understand. - Chinese Proverb


On Oct 16, 2012, at 1:26 PM, Brian France b...@psu.edu wrote:


Howdy Barb,
 See imbedded below...

On 10/16/2012 12:59 PM, ibmmain wrote:

Brian,


Well we had such a pleasant phone call on Friday with IBM reps on this
subject. Much to our DISMAY, they maintain that this access was never
free and that promoting web sites costs money.

I think what you're seeing here is that someone at IBM screwed up royally. It 
all comes out because IBM now 'consolidates' their many tools on different 
platforms into one (named SR), and SR is built on assumptions that IBM came up 
with in their ivory tower. SR exposes that most of the customer data bases are 
equally screwed up. New customer numbers are assigned sometimes on a 
product-by-product basis, and it is sufficient for one manager at your site 
signing off on something like this six years ago for you now to have a binding 
contract that does not include opening problems electronically.

 Yes, I do believe you're totally correct on this. I kinda had been 
thinking that especially since we had the meeting Friday and I kept hearing the 
same over and over, IBMLINK is what I know, not the other URL's. And it 
continues to highly urinate me that they don't have the guts, nads, choose your 
optimum word here, to admit it OR even more importantly, notify upfront. 
Somewhere in there I have to think breach of contract when you take away access 
without notification...


I have seen this when IBM forced session manager on us (instead of NetView 
Access) by the simple expedient of silently terminating the NVAS licence in our 
contract and substituting session manager instead. We had never agreed to that, 
but my boss had signed off on it when the contract was up for renewal and there 
we were. More recently, when Sterling was bought by IBM, IBM was incapable of 
putting the NDM licence under the same contract we have always had opened PMRs 
under. IBM silently opened a new customer number just for NDM and made a 
colleague of mine admin for it. Need I mention that none of us could access 
that customer number?

I feel your pain. This is certainly NO customer service at all. In the long 
run, it is one more nail in z/OSs coffin

   Yes the pounding of nails at IBM is just astounding. A bigot of them 
I've been, but no more...

.

Barbara Nitz

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--

--

Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu mailto:b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--

--

Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu mailto:b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu

IBM, id's to open pmr's, lot$a $$$$ now involved?...

[Brian France]

All,
 I'm surmising that y'all, like us, have multiple user id's for 
support at www.ibm.com/support. We have several people here that have 
opened PMR's over the past many many years. A couple of weeks back I 
went in to open an issue and found that I was no longer entitled to 
z/OS. What I found out was that only one person in my group could open a 
z/OS related PMR. After some questions to many IBM'ers my id was set 
back, no one knowing why the change had occurred. In trying to get the 
rest of my colleagues their access back I'm told that we will have to 
pay. That only my ID has Software Xcel and it's the basic. Well, yes, we 
knew that. Several years ago we opted to take it as the only id that 
could ask HOW to Support questions. Now I'm told that if all my 
colleagues are to have id's to open PMR's, which is 7 of us, that we 
would have to move to SoftwareXcel Enterprise and the quote is quite an 
eye popper.  So, long story short, I'm interested in the rest of ya... 
Any one seen this yet? Hell, even CA doesn't charge for userid's to open 
problem support records for software we are already paying support on.

--

--

Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu mailto:b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM, id's to open pmr's, lot$a $$$$ now involved?...

[Brian France]

Well I continue to push. I'm asking for documentation as to when this 
change went into effect. Clarification on the dollar$ cause, WOW!!  
Still am being told we never should've been able to do what we've been 
doing. I state back there's a hell of a lot of others in the world doing 
this and you mean to tell me you've left us all go for 10-12 years. 
Absurd...  I want the documentation on the new policy...  To change ones 
user id WITHOUT giving them notification is beyond ludicrous. To change 
every ones at a site and not notify them is totally unacceptable. If 
this does pan out to be no wonder people are leaving. NOT one other 
vendor does this. IBM, you are $ad...



 To answer gil's question.

SoftwareXcel basic - is a per user id job that aparently doesn't have 
some features of the the. We picked up basic say 5 or so years back just 
to ask How To questions.


SoftwareXcel enterprise - to my understanding as many id's as you'd 
like. When I got to 7 this is were I was told I should be. Based on the 
quote, it was indeed cheaper.


On 10/11/2012 11:59 AM, Joel C. Ewing wrote:

On 10/11/2012 08:37 AM, Paul Gilmartin wrote:

On Thu, 11 Oct 2012 06:07:35 -0700, Phil Smith wrote:
So it sounds like they've lost the distinction between HOWTO and bug 
reports. That would be a big step backward, and indeed irritating. I 
do understand the *theory* behind this: if every Tom, Dick, and Jane 
at every IBM customer can open PMRs, they'll be swamped with Stupid 
User questions, and not get any real bugs fixed. But that doesn't 
justify forcing it all through one ID: if they're going to do that, 
they're basically encouraging shared IDs, which is a bad idea (and 
likely prohibited by their TOS, but that's another issue). Limiting 
it to some reasonable number - maybe ten - IDs per installation 
might make sense, but we all know that in large shops, the DB2 guys 
and the sysprogs may not even know each other's names, so one is 
ludicrous.



Is this per user x per product?

per user x per product x per licensed system?

-- gil


At least in the past it was the case that chargeable on-line service 
support costs were purely based on number of authorized users at the 
installation, without regard for number of product licenses or 
systems.   The product licenses only entered into consideration in 
that one instance of the product under maintenance license was 
sufficient to allow the installation to open PMRs against the product.


If you didn't have the required on-line access to report a PMR on a 
licensed product, the alternative was to telephone the Support 
Center.  I would think reporting problems by phone would have to be 
more labor intensive and more costly for IBM, not just an irritant for 
the customer having to wait around for phone queue call-backs and 
trying to explain verbally something best illustrated by cut and paste 
or digital documentation. It makes absolutely no sense to me that IBM 
would think it a good idea to discourage PMR reporting by erecting 
financial barriers to the most efficient reporting methods, as the end 
result is that their knowledge of problems and problem resolution will 
be delayed, causing their product quality to suffer if installations 
are discouraged from reporting problems in a timely fashion.  When an 
installation reports a problem, the resolution of that problem doesn't 
just benefit that installation, but potentially all other 
installations using that product.  The reporting installation is 
actually performing a service for IBM, so the ease of reporting and 
the costs that IBM expects the installation to incur for that process 
should reflect that fact!


In the spirit of SHARE, we would even occasionally report a problem 
for which we already had found a circumvention, especially if the 
resolution had taken a significant effort on our part and finding an 
APAR resolution would be an obvious benefit for others (and if we 
didn't want to fight the same problem in the next product release).




--

--

Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu mailto:b...@psu.edu

To make an apple pie from scratch, you must first invent the universe.

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN