Re: Hex error code interpreter?

2024-04-27 Thread Colin Paice
See gsk_strerror() On Fri, 26 Apr 2024 at 23:16, Phil Smith III wrote: > Did I dream it, or is there some utility that can take an error such as > gsk_encrypt_tls13_record(): AES GCM Encryption failed: Error 0x03353084 > and

Re: Big LPAR vs small LPAR and DataSharing.

2024-04-21 Thread Colin Paice
perdispatch do what it is there to do, which, by design, maximises > > efficiency. > > > > We have smallish CECs for our Development which have loads of LPARs and > > with the significantly bigger engine sizes these days, even on 5xx > models, > > we struggle

Re: Big LPAR vs small LPAR and DataSharing.

2024-04-20 Thread Colin Paice
IBM provides tables of the cpu available with different processors and different numbers of engines. Search for LSPR . https://www.ibm.com/support/pages/ibm-z-lspr-itr-zosv2r4#ibmz16A02 gives 1 CPU 13 MSU 2 25

Re: IBM key management products

2024-04-12 Thread Colin Paice
ction. > > Dave Jousma > Vice President | Director, Technology Engineering > > > > > > From: IBM Mainframe Discussion List on behalf > of Colin Paice <059d4daca697-dmarc-requ...@listserv.ua.edu> > Date: Friday, April 12, 2024 at 12:28 PM > To: IBM-MAIN@LI

Re: IBM key management products

2024-04-12 Thread Colin Paice
I too struggled with why we need data set encryption. Someone pointed out data in transit, for example FTPing it or copying it to a non z/OS system Colin On Fri, 12 Apr 2024 at 17:22, Jousma, David < 01a0403c5dc1-dmarc-requ...@listserv.ua.edu> wrote: > To place a bit more focus on what Rick

Re: Slow FTP's

2024-03-28 Thread Colin Paice
The doc says.. Mode B Sets the block mode. In block mode, data is transmitted as a series of data blocks, preceded by one or more header bytes. Block mode preserves the logical record boundaries of the data set or file. When MOde is set to B, the data transfer type must be EBCDIC. Mode S Sets the

Re: Slow FTP's

2024-03-28 Thread Colin Paice
Dave, I've been working on a TCP session monitor. It reports MB/Second + changes to the TCP parameters, such as change in window size, buffer size etc. all of which affect throughput. I can let you have a copy of the program if you are interested. colinpai...@gmail.com it reports //SYSPRINT

Re: CICS suspended wait time increased

2024-03-24 Thread Colin Paice
Ceda ? On Sun, Mar 24, 2024, 13:47 raji ece < 05ff2ba04c83-dmarc-requ...@listserv.ua.edu> wrote: > May I know how to check the string value in file definition? > > Looks like we have wait time for KSDS dataset. > > > > On Sun, Mar 24, 2024, 17:57 Colin Paice <

Re: CICS suspended wait time increased

2024-03-24 Thread Colin Paice
https://www.ibm.com/docs/en/cics-ts/5.6?topic=facility-monitoring-by-using-cics-db2-statistics says In the Db2 Connection statistics, check the field “Peak number of tasks on Pool Readyq”, and also the field “Peak number of Tasks on TCB Readyq”. If the latter is nonzero, tasks were queued waiting

Re: FTP problem

2024-03-19 Thread Colin Paice
It may be interaction with _BPXK_AUTOCVT environment variable, and possibly the FILETAG Colin On Tue, 19 Mar 2024 at 18:02, Phil Smith III wrote: > Cross-posting this to MVS-OE as a fup to earlier note. TL;DR is that > FTPing a text file back to Windows was getting binary (unreadable) no >

Re: Learning one's tools

2024-03-17 Thread Colin Paice
I think code reviews are very useful, especially for not yet experts. It is good education for all levels. We had reviews, and comments like - Do you need a latch across these instructions for when there is concurrent execution? - If it abends here, how will the frr code ... - Would it help

Re: WLM and DDF enclaves

2024-03-14 Thread Colin Paice
You might try to get WLM/RMF reports on response times to get a base line Colin On Thu, 14 Mar 2024 at 14:26, Jaime Fernandez < 05f045ad6641-dmarc-requ...@listserv.ua.edu> wrote: > Hi fellow listers, > > Newcomer here, so... I hope my question makes sense. > > We have some amount of business

Re: EDC8114I Address family not supported

2024-03-12 Thread Colin Paice
See https://www.ibm.com/support/pages/edc8114i-error-cause-concern https://www.ibm.com/support/pages/isklm-zos-will-not-start-correctly may be relevant Have you configured something with IPV6 and IP V6 is not enabled? Colin On Tue, 12 Mar 2024 at 14:05, Peter Ten Eyck <

Re: Can DFSORT assign custom Return Code values?

2024-03-04 Thread Colin Paice
I think I did what you want, many years ago. A very small C program something like int main(argc,argv) { if (strcmp(argv[1],argv[2]) == 0 return 0 else return 4; } //S1 EXEC PGM=IFPROG,PARM="DEV," // if S1.RC == 0 they are the same Colin On Mon, 4 Mar 2024 at 16:02, Cameron Conacher <

Re: RACF, external password management

2024-03-04 Thread Colin Paice
I wrote One minute MVS: What is IBM Multi Factor Authentication on z/OS? and a series of implementation posts starting with Multi Factor Authentication(MFA): Planning.

Re: Nanosecond resolution timestamps for HLL's?

2024-02-22 Thread Colin Paice
The C header file has#pragma map(clock_gettime, "\174\174CGTIME") which is @@CGTIME My 64 bit binder has * IMPORT CODE64,CELQV003,'clock_gettime',DADIMPORT CODE64,CELQV003,'@@CGTIME',DAD * IMPORT CODE64,CELQV003,'dup3',DAE IMPORT CODE64,CELQV003,'@@DUP3',DAE Colin On Thu, 22

Re: Nanosecond resolution timestamps for HLL's?

2024-02-19 Thread Colin Paice
___ > From: IBM Mainframe Discussion List on behalf > of Colin Paice <059d4daca697-dmarc-requ...@listserv.ua.edu> > Sent: Monday, February 19, 2024 10:54 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Nanosecond resolution timestamps

Re: Nanosecond resolution timestamps for HLL's?

2024-02-19 Thread Colin Paice
our J.) Metz > http://mason.gmu.edu/~smetz3 > עַם יִשְׂרָאֵל חַי > נֵ֣צַח יִשְׂרָאֵ֔ל לֹ֥א יְשַׁקֵּ֖ר > > > From: IBM Mainframe Discussion List on behalf > of Colin Paice <059d4daca697-dmarc-requ...@listserv.ua.edu> > Sent: Mo

Re: Nanosecond resolution timestamps for HLL's?

2024-02-19 Thread Colin Paice
Another example of these timing type problems are having two instances(A and B) doing a database insert. - Instance A inserts data record a - not visible because commit not yet done - Instance B inserts data record b - not visible because commit not yet done. - B gets dispatched

Re: Query - do you have access to GitHub from your z/OS system? And do you have git on your z/OS system?

2024-02-15 Thread Colin Paice
Is there a guide to installing and using github on z/OS? Or perhaps any gotchas? On Thu, 15 Feb 2024 at 09:09, Rob Scott wrote: > We use git on z/OS extensively throughout the company and it is one of > those tools where you end up thinking "how on earth did I function > effectively without

Re: SDSF PS Command column

2024-02-05 Thread Colin Paice
One customer told me that some of their applications are run once a year - such as end of year accounts and tax. Some applications (a few) were kept around for 4 years before they were finaly killed off. Colin On Mon, 5 Feb 2024 at 17:28, Farley, Peter <

Re: Where are Unix reason codes over 7371 documented

2024-02-03 Thread Colin Paice
tso command bpxmtext 7663730c JRNetAccessDenied: The user is not permitted to communicate with the specified network. Action: If access to the specified network is required, the user must be permitted to the appropriate SAF resource On Sat, 3 Feb 2024 at 17:13, Lennie Dymoke-Bradshaw <

Re: pax and extended attributes

2024-01-25 Thread Colin Paice
Someone told me to use the following to get all the attributes You create a file using pax -o saveext -wf *pax_file_name files_to_add* and pax -ppx -rf *pax_file_name* to extract the files. On Thu, 25 Jan 2024 at 13:49, Styles, Andy (CIO GS - Core Infrastructure & IT Operations )

Re: Encryption and decryption - processor or TCPIP

2024-01-24 Thread Colin Paice
It would be worth looking at the RMF report on the crypto processing and seeing if they are running hot. Does the PAGENT address space a lot of CPU - is it delayed? The code may execute on your CICS TCB - executing cross memory (via PC) in the TCPIP address space(s).I don't recall seeing

Re: ADRDSSU COMPRESS and enq

2024-01-19 Thread Colin Paice
Try TOL(ENQ) for tolerate enqueue failure https://www.ibm.com/docs/en/zos/2.4.0?topic=keywords-tolerate On Fri, 19 Jan 2024 at 12:27, Radoslaw Skorupka < 0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote: > I want to compress some system datasets like SYS1.LINKLIB, but *not* > real "live",

Re: I hate to be a pain (Cross-Posted)

2024-01-18 Thread Colin Paice
My H'penth Files in Unix are pretty unsecure. I feel that any keystore in Unix is an exposure. With ICSF you can define a public/private key pair, and protect them with a SAF profile such as RDEFINE CSFKEYS label... You then give people access to the label, and hence to the key(s). I think

Re: I hate to be a pain (Cross-Posted)

2024-01-17 Thread Colin Paice
I use keyrings - but not every product supports these. I think you can Java programs in USS. You need to know what your application/server supports Colin On Wed, 17 Jan 2024 at 18:32, Steve Beaver < 050e0c375a14-dmarc-requ...@listserv.ua.edu> wrote: > This is not may area of expertise, and

Re: Direct branch entry to ICSF routines

2024-01-14 Thread Colin Paice
Is this to reduce the elapsed time, or that you are doing this a million times a second and want to save CPU? I expect any elapsed time impact is going to be at the sub microsecond level. I would have thought that there are other areas which you might address which might give you a bigger

Re: How to configure using PDS members in JCL.

2024-01-11 Thread Colin Paice
Jon Perryman wrote: > On Wed, 10 Jan 2024 08:47:38 -0600, Paul Gilmartin > wrote: > > >On Wed, 10 Jan 2024 11:41:16 +, Colin Paice wrote: > > > >>I think all products should use this technique, instead of asking users > to > >>make the same ch

Re: How to configure using PDS members in JCL.

2024-01-10 Thread Colin Paice
Thanks for all the suggestions. The best one ( thank you Charles) is //IBMUSERT JOB 1,MSGCLASS=H // JCLLIB ORDER=COLIN.MFA.JCL2 // EXPORT SYMLIST=(*) // SET OWNER='IBMUSER' // SET ADMIN='IBMUSER' // SET TOKEN='MFATOKEN' // SET STC='START1' // SET USERID='CERTID' //S1 EXEC

How to configure using PDS members in JCL.

2024-01-08 Thread Colin Paice
I have a PDS with configuration definitions in it and want to make it easy to configure. I want to have PDS members with content like PERMIT ... ACCESS(READ) CLASS(...) ID() and want the to be substituted for example in JCL // SET ID=COLIN, and be able to change the value on each run. However

Re: Digital Certificates -- Site Certificate

2024-01-05 Thread Colin Paice
IBM doc says Site certificateA certificate that is associated with an off-platform server or other network entity, such as a peer VPN server. This category of certificate can also be used to share a single certificate and its private key among multiple RACF user IDs. When used for sharing, a

Re: RACF and Encryption (Cross Posted

2024-01-05 Thread Colin Paice
I wrote One minute MVS – Using individual data set encryption on z/OS which may help you get started. For example you'll need ICSF. Colin On Thu, 4 Jan 2024 at 20:36, Steve Beaver <

Re: LE C growing heap issue

2024-01-05 Thread Colin Paice
Have you tried heappools? One problem with storage managers is that you get fragmentation. By using heap pools - so you get pools of say 2KB, 4KB, 16KB, 64KB etc you use a bit more space overall, but the storage can be reused better. Turn on heappools - look at the reports and it recommends new

Re: What is the PDS command?

2024-01-04 Thread Colin Paice
I remember (45 years ago, before IPCS) someone from CICS getting a paper dump from a US secret government department - with some of the sensitive data cut out of the EBCDIC translation on the right ( so it had holes in the printout). Clearly the people with scissors did not realise the data was

Re: SMF Interval

2023-12-30 Thread Colin Paice
to a CF stream, and splitting by smf record type solved that problem Colin On Fri, 29 Dec 2023 at 21:06, Ed Jaffe wrote: > On 12/29/2023 1:46 AM, Colin Paice wrote: > > With MQ some customers would set the interval to one minute for a period > to > > get granular statistics and

Re: SSH tunneling for unattended process.

2023-12-29 Thread Colin Paice
Frank, What do you have on the z/OS end? If the back end supports it, it can map from a certificate to a userid. See Using certificates to logon to z/OS andWhat’s the difference between RACDCERT MAP and RACMAP?

Re: SMF Interval

2023-12-29 Thread Colin Paice
With MQ some customers would set the interval to one minute for a period to get granular statistics and accounting to help with problem determination. The MQ accounting would report maximum response time for the interval. If you have a "spiky" problem, being able to identify the minute it

Re: RETRY - was ARR and CSVQUERY

2023-12-23 Thread Colin Paice
Expanding on what Peter said. It is horses for courses. If you are writing a program which can be running for months before restart you need to clean up everything - for example ensure any storage obtained is released. Someone gave me some guidance if you open it - close it if you get it - free

Re: TCPPING for z/OS

2023-12-20 Thread Colin Paice
https://github.com/deajan/tcpping/blob/master/tcpping is a shell script which uses traceroute (or tracerte on z/OS) You could try tracerte 10.1.1.2 try 1 port 12345 See https://www.ibm.com/docs/en/zos/3.1.0?topic=traceroute-tso-tracerte-command-debug-network-problems Colin On Wed, 20 Dec

Re: Z/OS Survey - Unusuall system commands

2023-12-19 Thread Colin Paice
Ive always thought the TCPIP OBEY command was a security exposure. Someone could reconfigure TCPIP using their private data set. Yes you can lock down the command. I think VTAM is better, you can only activate a member which is in the VTAM VTAMLST dataset concatenation - and so you have to use

Re: SSL Error

2023-11-29 Thread Colin Paice
Check your keyring/keystore. The desired record may not exit You may not have access to it You may be able to get a trace of the problem Set environment variables GSK_TRACE=0xff GSK_TRACE_FILE= ... if this is not specified it defaults to /tmp/gskssl.%.trc the trace file is a binary. use the

Re: Python on zOS

2023-11-27 Thread Colin Paice
I've written many posts on this.. see https://colinpaice.blog/category/python/ On Sun, 26 Nov 2023 at 23:56, Samuel Alejandro Díaz Chávez < 054e78aaa484-dmarc-requ...@listserv.ua.edu> wrote: > Good afternoon > > Does anyone have any documentation on using Python on z/OS? And some >

Re: External Functions in C on z/OS

2023-11-15 Thread Colin Paice
I'll send you an xmit file offline. Ftp to z/OS as bin then use tso receive Colin On Wed, 15 Nov 2023 at 16:57, Eric Erickson wrote: > I've written quite a few callable external functions for Rexx over the > years. On z/OS I've always used assembler as we needed to access system > services

Re: How turn on GSK trace for batch job that is controlled by PAGENT?

2023-10-09 Thread Colin Paice
le GSK_TRACE. At least > judging from the meanings of the bit flags -- which are fairly similar but > not identical -- that is a different trace than the one turned on with > TTLSConnectionAction trace nn. > > Charles > > On Mon, 9 Oct 2023 08:18:32 +0100, Colin Paice > wro

Re: How turn on GSK trace for batch job that is controlled by PAGENT?

2023-10-09 Thread Colin Paice
For the command, see the IP admin commands book page 184 in old money or online f pagent,refresh You can set up a pagent definition just for your batch FTPjob with its trace configured Ive used this for RSE You can

Re: USS Environment variables

2023-10-02 Thread Colin Paice
See getenv() . I dont know about assembler. On Mon, 2 Oct 2023 at 08:27, David Cole wrote: > We are beginning to write support for USS. I personally don't know > much at all about USS (there are

Re: Can anyone explain this OCSP error?

2023-09-29 Thread Colin Paice
Charles, What AIA info does your certificate have, for example authorityInfoAccess = OCSP;URI:http://10.1.0.2:2000 Is your OCSP server running with the URL in the AIA info? Colin On Fri, 29 Sept 2023 at 00:34, Charles Mills wrote: > X-Posted IBM-MAIN and RACF-L. It’s not really a RACF issue,

Re: Test site for certificate revocation?

2023-09-20 Thread Colin Paice
You could try openssl s_server I use this script on Linux *cert=" -cert ./docec384.pem -certform pem -key docec384.key.pem -keyform pem" CA="-chainCAfile ./docca256.pem"* *debug="-trace "* *port="-port 4433 "* *openssl s_server $port $cert $CA $debug -www * and a web browser to

Re: Error messages (a rant and an idea)

2023-09-19 Thread Colin Paice
Could someone/IBM provide a Wiki so that people can update messages and so we build up a profile of common messages, problems, and solutions. If you find the documentation is insufficient then you create an entry and expand any response. If it fixes your problem then +1 the relevant topic. For

Re: Building AMODE 31 Assembler DLL

2023-09-16 Thread Colin Paice
Here is a shell program I use to compile C programs- it may help, i1="//'COLIN.MQ924.SCSQC370'" ls="LSEARCH('COLIN.MQ924.SCSQC370',./)" ss="NOOE,NOSEARCH,SEARCH(/usr/include,'COLIN.MQ924.SCSQC370')" wc31="-Wc,SO,SHOWINC,LIST(lst31),XREF,ILP32,DLL,SSCOM,${ls},DEFINE(MVS),LANGLVL(EXTENDED) -I./

Re: Commands from systsin

2023-09-14 Thread Colin Paice
Would a *home-address-space-level name/token pair* name token work? On Thu, 14 Sept 2023 at 11:24, David Cole wrote: > At 9/13/2023 11:12 AM, Joe wrote: > >Seems then the only to do what I want is schedule an IRB with the

Re: extracting "*.pax.Z" without USS

2023-09-09 Thread Colin Paice
On Linux *pax -r -z -f Downloads/HAMB3B0.nonsmpe.pax.Z* unzipped it for me. Some of the z/OS pax options set the attribute bits - such as APF authorised etc, so this may not work if you unzip off z/OS and FTP them up. Colin On Sat, 9 Sept 2023 at 14:50, william giannelli wrote: > I

Re: Is the IBM Assembler List still alive - Dumps - Early days

2023-09-06 Thread Colin Paice
Please can this conversation be moved to the assembler list (and so give it usage!) Thank you Colin On Wed, 6 Sept 2023 at 14:35, Phil Smith III wrote: > Clem, I've never heard of CLEO. Should I assume it's NOT the same CLEO > that comes up when I search "cleo programming language"? That one

Re: Is the IBM Assembler List still alive

2023-09-06 Thread Colin Paice
I remember going to a customer to discuss a deep technical problem. Before they let us into the inner sanctum were given a dump and were asked "what's the problem?" My colleague looked at it and said there is a program check at this address, and this is fixed in ptf uy " come on in you've

Re: Is the IBM Assembler List still alive

2023-09-05 Thread Colin Paice
I heard that IEFBR14 had the highest "bug rate" per line of code 1) There was no CSECT statement 2) It was not reentrant 3) It did not clear R15 prior to exit 4) It was missing an end statement I was told this over 40 years ago... and may not be true On Tue, 5 Sept 2023 at 13:53, Bob Bridges

Re: RACF for using SDSF

2023-09-04 Thread Colin Paice
did you logoff and logon again? On Mon, 4 Sept 2023 at 15:19, Joseph Reichman wrote: > Hi > > > > I am getting the following message on my ADCD system > > > > ISF024I USER ADCDANOT AUTHORIZED TO SDSF, NO GROUP ASSIGNMENT > > > > I tried ALU ADCDA GROUP(SYS1) this is the group that my other

Re: Firefox and HMC self-signed cert

2023-08-29 Thread Colin Paice
I thought that signing a certificate meant the CA encrypted the checksum of the certificate. For me to validate the certificate I need the CAs public certificate to be able to decrypt the check sum, and compare it with what I calculated. If I do not have the CA's public certificate I cannot do

Re: EXTERNAL EMAIL: Re: Retrieving Certificate details from a server

2023-08-27 Thread Colin Paice
See Collecting a tcpip packet trace on z/OS. and how to export it to a wireshark format - which you can then use wireshark to process. On Sun, 27 Aug 2023 at 00:59, Gibney, Dave <

Re: Is SMP/E needed for installs?

2023-08-25 Thread Colin Paice
Kurt, Is there a demo Portable Software Instance that could used to try out the Z/OSMF stuff, for example a HelloWorld program Colin On Thu, 24 Aug 2023 at 21:47, Kurt Quackenbush wrote: > > Yes. As I wrote before, there's way too much "take this job > and find the 27 places that say XYZZY and

Re: Is SMP/E needed for installs?

2023-08-24 Thread Colin Paice
an > > updated Portable Software Instance in 3 months as you suggest. > > > > Kurt Quackenbush > > IBM | z/OS SMP/E and z/OSMF Software Management | ku...@us.ibm.com > > > > Chuck Norris never uses CHECK when he applies PTFs. > > > > -Origin

Is SMP/E needed for installs?

2023-08-24 Thread Colin Paice
This week, I did my first SMP/E install since my previous one over 40 years ago! The process hasn't changed much. It took me about half a day to download the files and configure the jobs - making the same changes in several jobs. For people new to z/OS "installation" is hard to get into,

Re: Creating an SMP install tape

2023-08-23 Thread Colin Paice
Ive blogged about using DFDSS to backup datasets. You may then want to use AMATERSE to terse it. I have some JCL to restore an MQ package //S1 EXEC PGM=AMATERSE,PARM=UNPACK //SYSPRINT DD SYSOUT=* //SYSUT1 DD

Use of shared library region for Unix System Services.

2023-08-18 Thread Colin Paice
By setting attribute +l onto .so files (and dlls) you can load them into common shared storage. So once it has been loaded, it is available to everyone. I can see this would be great for Java .so files at application startup. I can find little documentation on doing this. Is it recommended? Is

Re: ransomware on z

2023-08-15 Thread Colin Paice
They say the great wall of China was breached because the hordes bribed the gate keeper to let them through! Humans - the weakest part of any system. On Tue, 15 Aug 2023 at 07:09, Tom Brennan wrote: > Thanks Timothy. I've been saying this for years but this might be the > first time I've

Re: IBM-MAIN@LISTSERV.UA.EDU

2023-08-11 Thread Colin Paice
The doc says *The APPLname filter is valid only with TELnet. *Are you using telnet? On Fri, 11 Aug 2023 at 13:43, esst...@juno.com wrote: > NETSTAT TELNET (APPLNAME AWTSTDP3 did not reurn any useful data > It only returned > > -- Original Message -- > From: Peter Vels

Re: z/OS performance question

2023-08-07 Thread Colin Paice
The RMF Work Delay monitor (monitor3) can show you why each task is delayed, and what resource is holding it up eg /f rmf,start III TSO RMFWDM option *2* (2 JOBSAll information about job delays Enter your TSO userid selection 8 for delays by processor or go back to home screen, 3

Re: Separation of Duties RACF Security Admins/Systems Programmers - Sarbanes-Oxley

2023-08-07 Thread Colin Paice
One of the Nordic banks had decentralised security admin. The main person for giving access to the abc data, was a manager in the abc group. For annual userid/access validation the abc manager had to review the access lists, and report back. That way every manager suffered a little, rather

Re: Liberty Server on zOS

2023-08-03 Thread Colin Paice
Hi, Yes Liberty can be installed on z/OS. It came installed on my system, and the documentation is pretty good (just look for it). Eg Installing Liberty on z/OS It is the basis for z/OS SMF, Z/OS explorer, z/OS

Re: z/OS performance question

2023-08-03 Thread Colin Paice
Check all the DB2 address spaces. What may be happening is something like 1. Restore job reads a record, and calls DB2 to update the database, reads next record calls db2... 2. DB2 buffer pools start filling up, so DB2 starts writing data out to the page sets 3. DB2 may also be

Re: Question about RMF III Device Resource Delay

2023-08-03 Thread Colin Paice
I presume you are using the devr report... See Pending, disconnect and other gobbledegook. for some info on what the IO wait times mean. It might be Disconnect – Time spent accessing the disks. This could be

Re: Definition of mainframe? Was: Ars Technica

2023-08-01 Thread Colin Paice
DB2 and MQ, read the logs and reapply all of the updates. On Tue, 1 Aug 2023 at 03:06, Grant Taylor < 023065957af1-dmarc-requ...@listserv.ua.edu> wrote: > On 7/31/23 12:45 PM, Colin Paice wrote: > > A volume is a convenient picture - they no longer exist on modern DASD. > > A

Re: Definition of mainframe? Was: Ars Technica

2023-07-31 Thread Colin Paice
A volume is a convenient picture - they no longer exist on modern DASD. Data is spread across many different PC sized disks. We have extended volumes which are bigger than traditional volumes. It gives more space for the same number of volumes. A "track" is mapped to one PC sized disk, and block

Re: AT-TLS and CSSMTP setup

2023-07-30 Thread Colin Paice
Getting a GSK trace is non trivial. See here for instructions On Sun, 30 Jul 2023 at 05:36, Peter Vels wrote: > That is OK. But I need to see the output from the GSKSRVR trace to get to > the bottom of

Re: AT-TLS and CSSMTP setup

2023-07-29 Thread Colin Paice
Please paste the messages you get. You can configure an ATTLS traceI tend to use TRACE(2) This can be configured in TTLSGroupAction TTLSEnvironmentAction and TTLSConnectionAction If syslogd is not running I get messages on the system log EZD1286I TTLS Error GRPID: 0007 ENVID: 0002

Re: How does chineez banks runs their IT?

2023-07-28 Thread Colin Paice
Linkedin is a western system.I'm sure the Chinese have their own version, and the great Chinese firewall may stop access to linkedin. 10 years ago the Chinese had WeChat, better than WhatsApp. You could split a bill between people. On Thu, 27 Jul 2023 at 20:51, ITschak Mugzach wrote: >

Re: How does Chinese banks runs their IT?

2023-07-28 Thread Colin Paice
Before I retired I had many trips to Chinese banks to help them migrate to the next level of MQ. At the time I would say that some of them were leading edge, for example a sysplex in Beijing, and a sysplex in SHanghai, with replication both ways, so the DB2 databases were kept in sync within a

Re: Subject: Re: [EXT] Ars Technica: The IBM mainframe: How it runs and why it survives

2023-07-27 Thread Colin Paice
In the days when 3270-2 was the best available, and 3279s with colour were just announced, a team from a bank came round to see these new machines. One of the executives asked "why do we need colour?" The reply from a quick thinking developer was "so you can display overdrawn accounts in red!" -

Re: Network question

2023-07-27 Thread Colin Paice
Gadi, I was not sure of the problem, and where the specific started task comes in. Can you ping the RHEL server from z/OS? If the ping fails it could be due to two reasons 1. z/OS does not know about the RHEL address 2. The ping request got to RHEL, but RHEL does not know the route to get back

Re: TCPIP Device/Link to Interface question???

2023-07-27 Thread Colin Paice
Terri, The HOME is only used for DEVICE/LINK. You specify the "home address-es" on the interface. For example INTERFACE IFPORTCP6 DEFINE IPAQENET6 CHPIDTYPE OSD PORTNAME PORTA INTFID 2:2:2:2 * IPADDR FC00:2::2:2:2 * INTERFACE IFPORTCP6 ADDADDR 2001:DB8::9 The doc also says

Re: [EXT] Ars Technica: The IBM mainframe: How it runs and why it survives

2023-07-26 Thread Colin Paice
CICS was "common code" between VS1 and DOS/VS(E) DOS/VS (I used to build it for CICS development), with AIF.. ANOP statements around VS1/DOS specific code. DOS/VS did not have the same facilities as VS1, so CICS had to be written to the lowest level of code. On Wed, 26 Jul 2023 at 14:45,

Re: Ars Technica: The IBM mainframe: How it runs and why it survives

2023-07-24 Thread Colin Paice
And if you start comparing the number of data managers, and people responsible for keeping the systems upto date, and security... z/OS comes out quite well. We had one person (lowly grade) whose job it was to go round and touch each laptop/workstation and put a sticker on it saying "Audit July

Re: Problem running GIMUNZIP job.

2023-07-20 Thread Colin Paice
I do not see //SYSOUT or //SYSPRINT in your JCL... try adding them. //SYSPRINT DD SYSOUT=* etc You might try adding ECHO 'BLAH' to the script so you know something will be displayed Colin On Thu, 20 Jul 2023 at 08:46, Gadi Ben-Avi wrote: > Hi, > We are in the process of installing z/OS v2.5

Re: RSU Maintenance: Asking For a Friend

2023-07-18 Thread Colin Paice
I know of one very large customer with many hundred of LPARs, changed they way they did maintenance. If they had MVSA, MVSB,MCSC,MVSD, they created a new LPAR MVSE, with all the maintenance of all products on it. They added it to the sysplex, and when it proved to work, they removed(killed)

Re: How to set a SLIP to catch S0C4 in OMVS separate AS

2023-07-15 Thread Colin Paice
How about SLIP SET,COMP=0c4,ACTION=SVCD and do not specify any address space etc Colin On Sat, 15 Jul 2023 at 01:17, Farley, Peter < 031df298a9da-dmarc-requ...@listserv.ua.edu> wrote: > Hi All, > > I am trying to help the python ibmdb team help me solve an S0C4 abend > issue with (we think

Re: Userid schemes

2023-07-14 Thread Colin Paice
Some of the UK banks use your D.O.B as an account number - such as 601225JC12 ! which exposes sensitive information. At one point some of us had two userids. SYSPROG1 ... for sysprog stuff, and a personal ID. When anyone moved on they just reallocated SYSPROG1 to a new user, and all the

Re: A question about IXGLOGR and RRS CPU usage

2023-07-13 Thread Colin Paice
Like many subsystems, it may be that the applications do a PC to RRS, and so any work they do gets charged to the application's address space. The CPU used by RRS would be for housekeeping and startup/shutdown. Colin On Wed, 12 Jul 2023 at 23:53, Jason Cai wrote: > Dear all, > > I have a

Re: Python 3.11 on z/OS - UTF-8 errors

2023-07-08 Thread Colin Paice
Was it this package https://github.com/giampaolo/psutil/blob/master/INSTALL.rst? On Sat, 8 Jul 2023 at 11:22, Frank Allan Rasmussen wrote: > Hi > > I am trying to get a python package (psutil) to run on z/OS. > > I downloaded the package from github and then tar'ed it and uploaded it > binary

Re: Counting EXIT invocations

2023-06-28 Thread Colin Paice
uld be no lost > data. > > > From: IBM Mainframe Discussion List on behalf > of Colin Paice > Sent: Wednesday, June 28, 2023 10:41 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Counting EXIT invocations > > Having a W

Re: Counting EXIT invocations

2023-06-28 Thread Colin Paice
Having a WTO depends on how many exit calls there are per second. 100 a second might cause a problem. Depending on where your exit runs, and what state it is in, a system level name token pair might be a good compromise. On first use - allocate a name token, set use count = 0; do a STCK and add

Re: Trace XL C Preprocessor input

2023-06-24 Thread Colin Paice
See here SKIPS(SHOW|HIDE) The SKIPS(HIDE) also known as SKIPSRC shows you what is used, and suppresses text which is not used. I found this useful trying to find the combination of #define … to get the

Re: z/OSMF

2023-06-20 Thread Colin Paice
Would a documented curl interface into z/OSMF be a good compromise? I could write scripts to do most of the end user work and use the z/OSMF backend? Im currently using a couple of 3270 ISPF sessions, and a Linux command window to do some stuff. Colin On Tue, 20 Jun 2023 at 12:30, David

Re: Unix file system ownership

2023-06-15 Thread Colin Paice
I know someone like that - he was profoundly red/green colour blind. He had to mark things in the laboratory, for example one mark or two marks, so he could tell the difference. He enjoyed sailing, and was glad that navigational marks are different shapes as well as different colours so he

Re: Personal certificate Connect direct secure plus

2023-06-14 Thread Colin Paice
The normal generalised TLS flow is 1. Client sends stuff to the server initiating the handshake. 2. Server sends stuff to the client, and can include the server's certificate. 3. Client can be configured to check the server's certificate. Eg check the signer's CA is in the

Re: RACF passphrase support

2023-06-14 Thread Colin Paice
My logon screen only has space for an 8 char password. See Activating password phrase support on how to change it. On Wed, 14 Jun 2023 at 15:30, Chicklon, Thomas <

Re: Char to Hex

2023-06-14 Thread Colin Paice
I blogged this recently Easy question – hard answer, how to I convert a hex string to hex byte string in C . The C sscanf

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-13 Thread Colin Paice
You might try RACDCERT CHECKCERT('') and see what RACF thinks in the certificate. If there were funny chars, it should show up Colin On Tue, 13 Jun 2023 at 14:40, Peter Vander Woude wrote: > I open the file created by the export, using notepad. Select all the text > in the file, copy and

Re: Certificate differences between Z/VM and Z/OS?

2023-06-11 Thread Colin Paice
Are you saying... 1. You have your own CA (myCA) 2. You have a certificate (mycertificate) signed by myCA 3. If you use this certificate you can work with a server not on z/OS or z/VM. This server has its own certificate signed by myCA. 1. I expect your z/OS has the CA in its

Re: Searching for a process to clean my VTS

2023-06-01 Thread Colin Paice
It sounds like a good topic to write a blog post on. Colin On Thu, 1 Jun 2023 at 17:15, Sri h Kolusu wrote: > >> Bottom Line is I need a cookbook with the series of events to get tapes > in categories 0012 and 001F into an EJECT category (FFxx?) for removal from > the VTS. Has anyone else

Re: [EXTERNAL] Re: zOSMF

2023-05-30 Thread Colin Paice
t; Sure, occasionally they get stranded, but by and large, it Just Works. > > On the flip side, I was switching phones and the migration failed. I did a > reset of the new phone and restarted it, and it worked the second time. Did > I understand the process? No. Did I need to? No. Am I

  1   2   3   4   >