Re: RACF - SDSF question

[Shaffer, Terri]

Thanks Rob.  That showed what rules I was hitting.

I think I might have fixed it, but will have to see.  What I found was there 
was an *.* rule and an actual JESNODE.**, which was more specific and allowed 
all users ALTER ac cess

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Wednesday, April 17, 2024 11:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

[You don't often get email from 0618c90e6fdf-dmarc-requ...@listserv.ua.edu. 
Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


You can check what security activity is going on behind the scenes in SDSF, by 
doing the following :


  1.  Invoke SDSF and get to the point just before the user issues the action
  2.  Issue "SET SECTRACE ON"
  3.  Issue the "C" action
  4.  Issue "SET SECTRACE OFF"
  5.  Go into SDSF ULOG and there will new numerous security trace messages 
showing the resources checked by SDSF and the SAF result from each.

They look something like :

ISF051I SAF Access allowed SAFRC=0 ACCESS=ALTER CLASS=JESSPOOL 
RESOURCE=node.owner.jobnameetc

In your specific case, SDSF will do a JESSPOOL profile check and require UPDATE 
or UPDATE access for CANCEL style actions.

Note that this is a "value add" thing that SDSF does and might not be reflected 
in the behaviour of other products/methods that can issue MVS and JES2 commands.

Rob Scott
Rocket Software

From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, April 17, 2024 1:28 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL



Hi,
I would like to resurrect this question again, because my issue is back but not 
sure if by design or my RACF setup...

Because we are a development shop, we allow our developers to start/stop and 
issue modify commands to shutdown their CICS regions that run as batch Jobs.

They are the owners/notify of said regions, However, what I would like to 
prevent to them Cancelling the regions, due to possible file corruption, etc.

They put a C beside a jobname which then issues a $CJ, which then translates 
into a CANCEL ,A=xx command.

$CJ(5138)
CANCEL C30TCIE2,A=0051
IEE301I C30TCIE2 CANCEL COMMAND ACCEPTED
$HASP890 JOB(C30TCIE2) 288
$HASP890 JOB(C30TCIE2) STATUS=(EXECUTING/SPS1),CLASS=Y,
$HASP890 PRIORITY=9,SYSAFF=(ANY),HOLD=(NONE
$HASP890 CANCEL=YES

So my question becomes is it even possible to stop this because technically 
they are the owners?

In RACF.
My JESSPOOL class has.
*.*.C30TCI*.** (G)

My OPERCMDS class has
JES2.CANCEL.BAT with them having UPDATE access

MVS.CANCEL.JOB.C30TCI* (G) NO access

So not sure this is possible or not?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of 
Shaffer, Terri
Sent: Wednesday, February 8, 2023 9:09 AM
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Thank you, with your input and Robs, I now know the order of the checks, which 
was the piece I didn't fully understand.

I have now cleaned up my extra rules and added rules under jesspool and they 
are now stopped.

Rob, thanks for the slides!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of Robert 
S. Hansel (RSH)
Sent: Wednesday, February 8, 2023 8:00 AM
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Hi Terri,

Here are a couple of thoughts to add to what others have mentioned.

Since SDSF is issuing a JES2 cancel job $CJ command, the name of the OPERCMDS 
resource being checked is JES2.CANCEL.BAT. Profile JES2.CANCEL.BAT.C30TCI* is 
superfluous since the resource name never includes the jobname, so you can 
delete it. Profile JES2.CANCEL.BAT.** is guarding JES2.CANCEL.BAT because the 
.** generic suffix applies to zero or more qualifiers, and in this case it is 
zero qualifiers. The suggestions to lock down MVS cancel job commands won't 
help in this situation because SDSF is issuing JES2 commands inst

Re: RACF - SDSF question

[Shaffer, Terri]

Hi,
  I would like to resurrect this question again, because my issue is back but 
not sure if by design or my RACF setup...

Because we are a development shop, we allow our developers to start/stop and 
issue modify commands to shutdown their CICS regions that run as batch Jobs.

They are the owners/notify of said regions, However, what I would like to 
prevent to them Cancelling the regions, due to possible file corruption, etc.

They put a C beside a jobname which then issues a $CJ, which then translates 
into a CANCEL ,A=xx  command.

$CJ(5138)
CANCEL   C30TCIE2,A=0051
IEE301I C30TCIE2  CANCEL COMMAND ACCEPTED
$HASP890 JOB(C30TCIE2) 288
$HASP890 JOB(C30TCIE2)  STATUS=(EXECUTING/SPS1),CLASS=Y,
$HASP890PRIORITY=9,SYSAFF=(ANY),HOLD=(NONE
$HASP890CANCEL=YES

So my question becomes is it even possible to stop this because technically 
they are the owners?

In RACF.
My JESSPOOL class has.
*.*.C30TCI*.** (G)

My OPERCMDS class has
JES2.CANCEL.BAT with them having UPDATE access

MVS.CANCEL.JOB.C30TCI* (G)  NO access

So not sure this is possible or not?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, February 8, 2023 9:09 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Thank you, with your input and Robs, I now know the order of the checks, which 
was the piece I didn't fully understand.

I have now cleaned up my extra rules and added rules under jesspool and they 
are now stopped.

Rob, thanks for the slides!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Robert S. Hansel (RSH)
Sent: Wednesday, February 8, 2023 8:00 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Hi Terri,

Here are a couple of thoughts to add to what others have mentioned.

Since SDSF is issuing a JES2 cancel job $CJ command, the name of the OPERCMDS 
resource being checked is JES2.CANCEL.BAT. Profile JES2.CANCEL.BAT.C30TCI* is 
superfluous since the resource name never includes the jobname, so you can 
delete it. Profile JES2.CANCEL.BAT.** is guarding JES2.CANCEL.BAT because the 
.** generic suffix applies to zero or more qualifiers, and in this case it is 
zero qualifiers. The suggestions to lock down MVS cancel job commands won't 
help in this situation because SDSF is issuing JES2 commands instead of MVS 
commands, so the OPERCMDS MVS.CANCEL.JOB.jobname resources won't be checked.

As was mentioned, to cancel a job typically also requires ALTER access to the 
JESSPOOL resource guarding the job. Look into setting up appropriate JESSPOOL 
profiles to isolate and restrict ALTER access to these jobs. Also consider 
whether users have been (inadvertently) set up as Destination Operators. If 
they have READ access to SDSF resource ISFOPER.DEST.JES2 and ALTER access to 
SDSF resources prefixed ISFAUTH.DEST., they can cancel jobs while bypassing 
JESSPOOL profile checks.

If the CONSOLE class is active, you can permit ID(*) UPDATE access to 
JES2.CANCEL.BAT.** conditionally by adding operand WHEN(CONSOLE(SDSF)) to the 
PERMIT command so that users can only issue JES2 cancel job commands from 
within SDSF panels. This would prevent them from cancelling jobs outside of 
SDSF, to include when using the SDSF / command. You would need to remove 
UACC(UPDATE) or ID(*) UPDATE permission, whichever applies, for the conditional 
permission to take effect. Operations and Tech Support staff will need 
'regular' UPDATE access permission. (CONSOLE is a Default Return Code 8 class, 
so don't activate it without first creating a ** profile with UACC(READ).)

To see exactly what resource names are being checked that are allowing the 
unwanted job cancellations, issue the SDSF command SET SECTRACE ON, cancel the 
job, and then issue the SDSF command ULOG. ULOG will show you all the access 
checks SDSF is making along with the results of each of these checks. SECTRACE 
is a phenomenal diagnostic tool that we use often.

Regards, Bob

Robert S. Hansel
Lead RACF Specialist
RSH Consulting, Inc.  *** Celebrating our 30th Anniversary ***
617-969-8211
http://www.linkedin.com/in/roberthansel
http://www.rshconsulting.com/

-Original Message-
Date:Tue, 7 Feb 2023 13:31:41 +
From:"Shaffer, Terri" 
Subject: RACF - SDSF question

Hi,
 I know there is a RACF group, but hopefully this is simple and I am just 
missing something I have done 100 times over with no issues.

RACF/DB2 Search Question?

[Shaffer, Terri]

Hi,
  One wondering if the RACF experts could answer something?

We are in the process of upgrading our DB2 from V8 to V13.1, which is actually 
working great, but they have a PC application that uses JDBC drivers to talk to 
DB2.

Everything works, Except a create tablespace command.  So in looking at things 
I found, I made sure the userid being passed has access to .sysadm rule, 
which is all it had before, but still failed with SQL -551.

Anyhow what I did to fix it was add the DBA group to that userid and everything 
started to work. However because that is more authority than I would like to 
give out, is there a way thru a RACF search or something other command I can 
find all the rules that has this specific GROUP specified? So maybe I can 
narrow down what Rule or MDSNxx or DSNADM Class that group has access to so I 
can narrow down that userid access to just what it needs?

We are a development shop, and its developers DB2, but I still don’t like 
giving more access than whats actually required.

Thanks.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: How to unzip my Rocket MAKE 4.3 file

[Shaffer, Terri]

Thanks this is what I needed, but the file I downloaded from rocket was .zip??

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Matthew Stitt
Sent: Tuesday, March 19, 2024 12:30 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: How to unzip my Rocket MAKE 4.3 file

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


I've used something like this:

//BPX10A  EXEC PGM=BPXBATCH,REGION=8M,
//  PARM='sh tar -xvfo /u/sysprogr/make-4.0_b0003.160302.tar'
//STDOUT  DD  PATH='/tmp/sysprogr.pr10',
//PATHOPTS=(OWRONLY,OCREAT,OTRUNC),
//PATHMODE=SIRWXU
//STDERR  DD  PATH='/tmp/sysprogr.pr10a',
//PATHOPTS=(OWRONLY,OCREAT,OTRUNC),
//PATHMODE=SIRWXU
//STDINDD PATH='/dev/null'

Matthew

On Tue, 19 Mar 2024 15:38:24 +, Shaffer, Terri 
 wrote:

>Hi,
>  So I am like a bull in a china closet when it comes to commands in USS.  And 
> looking for the Rocket Read-me apparently, I missed.
>
>So I have my make4.3 zip file in my USS directory, but how do I explode it?
>
>Ms Terri E Shaffer
>Senior Systems Engineer,
>z/OS Support:
>ACIWorldwide - Telecommuter
>H(412-766-2697) C(412-519-2592)
>terri.shaf...@aciworldwide.com

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

How to unzip my Rocket MAKE 4.3 file

[Shaffer, Terri]

Hi,
  So I am like a bull in a china closet when it comes to commands in USS.  And 
looking for the Rocket Read-me apparently, I missed.

So I have my make4.3 zip file in my USS directory, but how do I explode it?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: VolCat - Reallocate ?

[Shaffer, Terri]

Thanks, That link didn't work for me as looked for it before this post.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Brian Westerman
Sent: Wednesday, January 17, 2024 1:50 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: VolCat - Reallocate ?

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


You should stop all tape processing, (RMM or CA-1, or whatever you have), 
because while the VOLCAT is not available no changes will work correctly.
Actually IBM says:

Quiesce tape library management with console command V 
SMS,LIBRARY(libname),ALL,OFFLINE for each library sharing the volume catalog to 
be moved.



Even if your volcat is really-really big, it should take no longer than a 
minute or two.

Don't skip steps in the example.

For a site that volsers all start with "V" you will probably have to do both.  
If you have multiple Volser ranges you might have more.

SYS1.VOLCAT.VGENERAL
SYS1.VOLCAT.VV   (this is called a specific volcat,  hlq.VOLCAT.Vx ('x' 
being first character of a volser))

Library records reside in the general VOLCAT Volume records may reside in 
either the general or specific VOLCAT - specific VOLCAT searched first.

If one is created with imbed and replicate, the other will likely be as well.

You can run the diagnose and examine ahead of time and get them out of the way 
(and to make sure you don't have anything to fix).

When you export the catalog(s), do it twice as in the suggestion within step 3 
because you can never have too many backups.  Don't worry about the info apars 
for making it faster, because unless you have millions of volumes the time 
saved will not really be measurable

You will need to skip step 4 because you are changing the attributes of your 
new catalog.

There are some special directions if you have multiple master catalogs that you 
can skip if you have just one master catalog.

Incidentally if you ever want to just move the volcat and not change anything, 
IBM has another page at 
https://www.ibm.com/support/pages/how-move-volcat-new-volume that covers it.

Let me know if you need help building the JCL,  It seems like a lot of work, 
but it's actually quite straightforward if you read the directions.

Brian

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

VolCat - Reallocate ?

[Shaffer, Terri]

Hi,
  So I need to reallocate my VOLCAT, due to IMBED and REPLICATE present.

So my question is what steps to perform? Like This maybe?

Stop OAM?
Export VOLCAT?
Delete VOLCAT
ALLOCATE new VOLCAT.
IMPORT from Exported copy?
Start OAM?

Is this right, anyone have JCL example of EXP/IMPORT of a volcat?

Or anything I am missing?
Thanks

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM APAR Names

[Shaffer, Terri]

So in looking at the causer report and below.

The ones with an identified fixing APAR, can go after and pull, However

UJ08845  HBB77C0  GIM35901I 21   ERROR HOLD CA64112 WAS NOT RESOLVED.

UJ09109  HCPT440  GIM35901I 22   ERROR HOLD EA63853 WAS NOT RESOLVED.

UJ09110  JCPT441  GIM35901I 22   ERROR HOLD FA63853 WAS NOT RESOLVED.

HOLD MISSING  HELD RESOLVING  RESOLVER
TYPEFMID CLASSAPAR SYSMOD   SYSMOD STATUS
--  ---  ---  ---  ---  -  
ERROR   HBB77C0  PE  CA62016  UJ90013  UJ07269NOGO(E)
 CA63421  UJ90024  UJ08912NOGO(E)
 CA64112  UJ08845  UJ09743MISSING
 CA65388  UJ07918


++HOLD(UJ07918) FMID(HJE77C0) REASON(CA65388) ERROR DATE(23228)
 COMMENT(SMRTDATA(CHGDT(230816))) CLASS(PE).

So I am trying to apply maintenance and want to know the actual APAR to look up 
to see if its open closed, or what?


-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Radoslaw Skorupka
Sent: Sunday, November 5, 2023 5:16 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IBM APAR Names

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


YMMV
In my 25 years career I have seen a lot of PTFs, web deliverables, but only one 
APAR fix.
AFAIR I have read in some SMP/E course, the APAR fixes are not widely available 
and cannot be downloaded from ShopzSeries. APAR fixes are available directly to 
the customer who claimed the error in the software. And this is my case.
However in some other cases we submitted PMR and APAR was created, but we got 
information about PTF available in (near) future, no mention about APAR fix.

Of course it is only my humble experience, others can have different one.

--
Radoslaw Skorupka
Lodz, Poland



W dniu 05.11.2023 o 05:10, Bruce Hewson pisze:
> Hello Jon,
>
> As a customer I currently have 638 ++APARs installed across my product base. 
> We regularly get test fixes, as in ++APAR,  provided by vendors.
>
> I wouldn't really call them RARE.
>
> On Sat, 4 Nov 2023 13:31:17 -0500, Jon Perryman  wrote:
>
>> On Sat, 4 Nov 2023 07:19:49 -0500, Bruce Hewson  
>> wrote:
>>
>>> APARs for me are OAx or PHx - these are the entries describing a 
>>> problem, and may be associates as Error Holds to existing  PTFs.
>> The broader point that needs to be addressed is the purpose of an APAR. 
>> Since ++APAR are rarely seen by vendor staff and customers, there must be a 
>> much bigger use for vendors otherwise why do they bother with describe the 
>> problem in the APAR.
>>
> Regards
> Bruce

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

IBM APAR Names

[Shaffer, Terri]

Hi,
  So I should know this but apparently I missed the memo along the way, Can 
anyone give me the secret decoder

I know AHx went to PHx

But what do I search for CA and EA  APARs?



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Obscure Websphere question

[Shaffer, Terri]

Thanks for your help, but I think I found my issue. Massive port conflicts, 
like I didn't realize there were like 100, between DCS, ORB, bootstrap and many 
other listeners.

I really need a WAS expert first.

I am only supporting 2 nodes on this lpar. The agent and Server are technically 
redundant.

nodeagent
server1
ES_QZ43
ES_QZ44

So does anyone know if it just possible to move my 2 - ES_QZ43/44 to my NodeA 
that has 10 other ES_QZ's already running on ACWA,  that eliminates the issue.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, September 27, 2023 7:21 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Obscure Websphere question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Websphere Deployment task W9DMGR as is my name, W9AGNT8 and W9SER1 are the 3 
tasks.

If I run the WSADMIN and change the w9dmnode and wsnode8 hostname I can get the 
W9DMGR up on ACWA, and I can access the console.

But everything I try for W9AGNT8 and W9SER1 fail.

I just went back and looked at my messages.  And I had 2 problems, the first 
was Hostname, I think I can resolve that.

But I have 2 ports that conflict with another Websphere instance  2810 and 9353.

So I edited the serverindex.xml file to change them to 2818 and 9358, and 
that's when I got this..

  ExtendedMessage: BBOO0220E: HMGR0031E: A conflicting IP address and port has 
been detected for the DCS_UNICAST_ADDRESS end point.
[w90cell\w9node8\nodeagent, w90cell\w9nodea\ES_QZ30] members are configured to 
use the IP address and port combination of  10.5.23.232::9358.

So I backed out, until I can understand what I am doing or really needs to 
change/happen, PS, my websphere experience is OLD z/OSMF deep only, and I have 
scars!!

Thanks

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Jon 
Perryman
Sent: Wednesday, September 27, 2023 6:26 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Obscure Websphere question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


On Wed, 27 Sep 2023 13:26:09 +, Shaffer, Terri 
 wrote:

>WebSphere however deployment, Agent and Server, said NOPE not doing
>this

WebSphere (like z/OS) is a combination of products (e.g. MQ, HTTPD and others). 
You successfully moved Websphere MQ. Which component / components are you 
asking about?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN 
  
[https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com> This email message and any attachments may 
contain confidential, proprietary or non-public information. The information is 
intended solely for the designated recipient(s). If an addressing or 
transmission error has misdirected this email, please notify the sender 
immediately and destroy this email. Any review, dissemination, use or reliance 
upon this information by unintended recipients is prohibited. Any opinions 
expressed in this email are those of the author personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Obscure Websphere question

[Shaffer, Terri]

Websphere Deployment task W9DMGR as is my name, W9AGNT8 and W9SER1 are the 3 
tasks.

If I run the WSADMIN and change the w9dmnode and wsnode8 hostname I can get the 
W9DMGR up on ACWA, and I can access the console.

But everything I try for W9AGNT8 and W9SER1 fail.

I just went back and looked at my messages.  And I had 2 problems, the first 
was Hostname, I think I can resolve that.

But I have 2 ports that conflict with another Websphere instance  2810 and 9353.

So I edited the serverindex.xml file to change them to 2818 and 9358, and 
that’s when I got this..

  ExtendedMessage: BBOO0220E: HMGR0031E: A conflicting IP address and port has 
been detected for the DCS_UNICAST_ADDRESS end point.
[w90cell\w9node8\nodeagent, w90cell\w9nodea\ES_QZ30] members are configured to 
use the IP address and port combination of  10.5.23.232::9358.

So I backed out, until I can understand what I am doing or really needs to 
change/happen, PS, my websphere experience is OLD z/OSMF deep only, and I have 
scars!!

Thanks

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Jon 
Perryman
Sent: Wednesday, September 27, 2023 6:26 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Obscure Websphere question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


On Wed, 27 Sep 2023 13:26:09 +, Shaffer, Terri 
 wrote:

>WebSphere however deployment, Agent and Server, said NOPE not doing
>this

WebSphere (like z/OS) is a combination of products (e.g. MQ, HTTPD and others). 
You successfully moved Websphere MQ. Which component / components are you 
asking about?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Obscure Websphere question

[Shaffer, Terri]

So asking this here as there is a wealth of information contained.

I am trying to collapse my LPARS from 4 to 2 and I was able to move my DB2 and 
MQ, subsystems with no issues.  I defined the subsystems with all shared DASD 
and moved no issues.

WebSphere however deployment, Agent and Server, said NOPE not doing this, as 
that instance was built on LPAR ACW8 and Cant move to ACWA.

Not those exact words but the messages basically stated that.

What we need to do is actually hire a contractor for 2 weeks, but that might be 
easier said than done..

Anyhow does anyone know if this is possible without a whole new install?

If so, can you give me a little direction I need to look at?  I know I can run 
WSADMIN and change hostname, but what about the other things that reference the 
old lpar?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: System Symbolic and SET JCL

[Shaffer, Terri]

Nevermind, I answered my own question, all I had to do was pass the WASID 
symbol on my start command.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Monday, September 18, 2023 8:15 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: System Symbolic and SET JCL

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


So I am trying to move one of my WAS subsystems from 1 lpar to another.  We had 
setup a WASID (sysname(4:1) variable for the system name (Ie, ACWA/8 etc).

This then gets resolved in setting up the root PATH= variable, so what I would 
like to do is the following:

//BBO9ACR  PROC ENV=W90CELL.W9NODE8.W9AGNT8
// SET WASID = (15:1)   Add something like this?? 
But this doesn't work...
// SET ROOT='/wasv90config/w90cell/w9node'
// SET FOUT='properties/service/logs/applyPTF.out'
// SET FOUT2='properties/service/logs/parmsRec.out'
// SET WSDIR='AppServer'
//*
//* Test that OMVS can successfully launch a shell and return *
//*
//TOMVS   EXEC PGM=BPXBATCH,REGION=0M,
// PARM='SH exit 13'
//STDERR   DD PATH='//',
// PATHOPTS=(OWRONLY,OCREAT,OAPPEND),PATHMODE=(SIRWXU,SIRWXG)
//STDOUT   DD PATH='//',
// PATHOPTS=(OWRONLY,OCREAT,OAPPEND),PATHMODE=(SIRWXU,SIRWXG)

This way I could still pull the 8 in this case and the region would start 
correctly on ACWA

Any ideas how I could handle this?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com> This email message and any attachments may 
contain confidential, proprietary or non-public information. The information is 
intended solely for the designated recipient(s). If an addressing or 
transmission error has misdirected this email, please notify the sender 
immediately and destroy this email. Any review, dissemination, use or reliance 
upon this information by unintended recipients is prohibited. Any opinions 
expressed in this email are those of the author personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

System Symbolic and SET JCL

[Shaffer, Terri]

So I am trying to move one of my WAS subsystems from 1 lpar to another.  We had 
setup a WASID (sysname(4:1) variable for the system name (Ie, ACWA/8 etc).

This then gets resolved in setting up the root PATH= variable, so what I would 
like to do is the following:

//BBO9ACR  PROC ENV=W90CELL.W9NODE8.W9AGNT8
// SET WASID = (15:1)   Add something like this?? 
But this doesn’t work...
// SET ROOT='/wasv90config/w90cell/w9node'
// SET FOUT='properties/service/logs/applyPTF.out'
// SET FOUT2='properties/service/logs/parmsRec.out'
// SET WSDIR='AppServer'
//*
//* Test that OMVS can successfully launch a shell and return *
//*
//TOMVS   EXEC PGM=BPXBATCH,REGION=0M,
// PARM='SH exit 13'
//STDERR   DD PATH='//',
// PATHOPTS=(OWRONLY,OCREAT,OAPPEND),PATHMODE=(SIRWXU,SIRWXG)
//STDOUT   DD PATH='//',
// PATHOPTS=(OWRONLY,OCREAT,OAPPEND),PATHMODE=(SIRWXU,SIRWXG)

This way I could still pull the 8 in this case and the region would start 
correctly on ACWA

Any ideas how I could handle this?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: CICS Question

[Shaffer, Terri]

Thank You Everyone!!

Brad that link helped for the DB2 stuff...

What I eventually found was apparently it never matter where the DB2CONN was 
for the DB2ENTRY, or it figured it out somehow.

That doesn't work anymore,  What I had to do was change the order of my group 
installs, within the list, so that the DB2Conn's are first.

I am a happy camper again!!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Wissink, Brad
Sent: Friday, September 8, 2023 11:40 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: CICS Question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Try this link for the CICS manual that talks about setting up DB2.

https://www.ibm.com/docs/en/SSGMCP_5.6.0/pdf/db2_pdf.pdf<-- 
CICS Transaction Server for z/OS 5.6

it tells you how to automatically connect CICS and DB2 at startup.  How to 
create and define the DB2CONN entry, etc.

Brad Wissink| Sr. Systems Programmer
Sammons(r) Financial Group Member Companies
8300 Mills Civic Parkway, West Des Moines, Ia 50266 Phone 515-267-2735 | ext. 
33735 | Cell: 515-231-1511

bwiss...@sfgmembers.com  | http://www.sammonsfinancialgroup.com/


-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, September 8, 2023 10:01 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: CICS Question

Bingo.  I had screerun2 and sceerun in my linklst, but forgot they had to be in 
the DFRPL.  So that problem is fixed..

Any ideas about the DB2CONN and TCBLIMIT?   Could that be a bad definition 
caused from the 3.1 definitions?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Pommier, Rex
Sent: Friday, September 8, 2023 10:48 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: CICS Question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Hi Terri,

At first blush the LE issue appears to be a "not found" type error.  What LE 
libraries are in your DFHRPL?  We're 5.6 and have

CEE.SCEECICS
CEE.SCEERUN2
CEE.SCEERUN


I also managed to find the 0011020 - it's in the LE runtime messages manual.  
Here's the explanation for what it's worth..

11020

Last Updated: 2022-12-14
Explanation

Unable to load Language Environment(r) modules in order to initialize Language 
Environment for the CICS(r) region.
System action

CICS continues system initialization with Language Environment inactive.
Programmer response

Make sure the CSD definitions are correct for Language Environment. Also, make 
sure that the CICS region size is large enough to run Language Environment.



Rex




-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, September 8, 2023 9:24 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] CICS Question

I know there is a CICS forum, But I hope someone can answer a quick question, 
or I hope its quick.

I am trying to upgrade my CICS regions from 3.1 (don't ask)  to newer.

And I am having 2 issues, that I have searched the manuals but must be missing 
something simple.

You use to add CEE group and then add that to a list and poof, LE programs, etc 
got installed.

Now I get, for which I cant find the 0011020 RC?

DFHAP1203I A03CICGS Language Environment is being initialized.
DFHAP1200 A03CICGS A CICS request to the Language Environment has failed. 
Reason code '0011020'.
DFHAP1208 A03CICGS Language Environment cannot support the Cobol language.
DFHAP1209 A03CICGS Language Environment cannot support the C/C++ languages.
DFHAP1210 A03CICGS Language Environment cannot support the PL/I language.

 Did I miss a library or Parm someplace or what?

Lastly and not sure if this is caused by another issue but getting the 
following message

DFHAM4837 E A03CICGS Install of DB2ENTRY ACIENTRY failed because a DB2CONN is 
Not installed
DFHAM4837 E A03CICGS Install of DB2ENTRY ACQENTRY failed because a DB2CONN is 
Not installed

Then I get.

DFHDB2110I 08/09/2023 15:11:25 A03CICGS The total number of threads exceeds 
TCBLIMIT.

Thanks!!!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 
[https://urldefense.com/v3/__https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg__;!!KjMRP1Ixj6eLE0Fj!qAux-JyNcCjPaig4pI1vBF8g7my6WFvIFaixqe2WiAcsVmMRjk7kEUfk29EEDkejKWZutIbOp3d0oV2IQyyJbW0ImB26Jpc5tsqs$
 ] 
<https://urldefense.com/v3/__http://www.aciworldwide.com__;!!KjMRP1Ixj6eLE0Fj!qAux-JyNcCjPaig4pI1vBF8g7my6WFvIFaixqe2WiAcsVmMRjk7kEUfk29EEDkejKWZutIbOp3d0oV2IQyyJ

Re: CICS Question

[Shaffer, Terri]

Bingo.  I had screerun2 and sceerun in my linklst, but forgot they had to be in 
the DFRPL.  So that problem is fixed..

Any ideas about the DB2CONN and TCBLIMIT?   Could that be a bad definition 
caused from the 3.1 definitions?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Pommier, Rex
Sent: Friday, September 8, 2023 10:48 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: CICS Question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Hi Terri,

At first blush the LE issue appears to be a "not found" type error.  What LE 
libraries are in your DFHRPL?  We're 5.6 and have

CEE.SCEECICS
CEE.SCEERUN2
CEE.SCEERUN


I also managed to find the 0011020 - it's in the LE runtime messages manual.  
Here's the explanation for what it's worth..

11020

Last Updated: 2022-12-14
Explanation

Unable to load Language Environment® modules in order to initialize Language 
Environment for the CICS® region.
System action

CICS continues system initialization with Language Environment inactive.
Programmer response

Make sure the CSD definitions are correct for Language Environment. Also, make 
sure that the CICS region size is large enough to run Language Environment.



Rex




-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, September 8, 2023 9:24 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] CICS Question

I know there is a CICS forum, But I hope someone can answer a quick question, 
or I hope its quick.

I am trying to upgrade my CICS regions from 3.1 (don't ask)  to newer.

And I am having 2 issues, that I have searched the manuals but must be missing 
something simple.

You use to add CEE group and then add that to a list and poof, LE programs, etc 
got installed.

Now I get, for which I cant find the 0011020 RC?

DFHAP1203I A03CICGS Language Environment is being initialized.
DFHAP1200 A03CICGS A CICS request to the Language Environment has failed. 
Reason code '0011020'.
DFHAP1208 A03CICGS Language Environment cannot support the Cobol language.
DFHAP1209 A03CICGS Language Environment cannot support the C/C++ languages.
DFHAP1210 A03CICGS Language Environment cannot support the PL/I language.

 Did I miss a library or Parm someplace or what?

Lastly and not sure if this is caused by another issue but getting the 
following message

DFHAM4837 E A03CICGS Install of DB2ENTRY ACIENTRY failed because a DB2CONN is 
Not installed
DFHAM4837 E A03CICGS Install of DB2ENTRY ACQENTRY failed because a DB2CONN is 
Not installed

Then I get.

DFHDB2110I 08/09/2023 15:11:25 A03CICGS The total number of threads exceeds 
TCBLIMIT.

Thanks!!!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 
[https://urldefense.com/v3/__https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg__;!!KjMRP1Ixj6eLE0Fj!qAux-JyNcCjPaig4pI1vBF8g7my6WFvIFaixqe2WiAcsVmMRjk7kEUfk29EEDkejKWZutIbOp3d0oV2IQyyJbW0ImB26Jpc5tsqs$
 ] 
<https://urldefense.com/v3/__http://www.aciworldwide.com__;!!KjMRP1Ixj6eLE0Fj!qAux-JyNcCjPaig4pI1vBF8g7my6WFvIFaixqe2WiAcsVmMRjk7kEUfk29EEDkejKWZutIbOp3d0oV2IQyyJbW0ImB26JlIGOgac$
 > This email message and any attachments may contain confidential, proprietary 
or non-public information. The information is intended solely for the 
designated recipient(s). If an addressing or transmission error has misdirected 
this email, please notify the sender immediately and destroy this email. Any 
review, dissemination, use or reliance upon this information by unintended 
recipients is prohibited. Any opinions expressed in this email are those of the 
author personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.


--
For IBM-MAIN subscribe / signoff / archive access instruct

Re: CICS Question

[Shaffer, Terri]

Thanks, I am using RACF on z/OS 2.5

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Sri 
h Kolusu
Sent: Friday, September 8, 2023 10:43 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: CICS Question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


>> DFHAP1200 A03CICGS A CICS request to the Language Environment has failed. 
>> Reason code '0011020'.

Sherri,

Is your shop using ACF2?   Since you are upgrading CICS, you may need to 
specify the correct CICSREL parameter.

Thanks,
Kolusu

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

CICS Question

[Shaffer, Terri]

I know there is a CICS forum, But I hope someone can answer a quick question, 
or I hope its quick.

I am trying to upgrade my CICS regions from 3.1 (don’t ask)  to newer.

And I am having 2 issues, that I have searched the manuals but must be missing 
something simple.

You use to add CEE group and then add that to a list and poof, LE programs, etc 
got installed.

Now I get, for which I cant find the 0011020 RC?

DFHAP1203I A03CICGS Language Environment is being initialized.
DFHAP1200 A03CICGS A CICS request to the Language Environment has failed. 
Reason code '0011020'.
DFHAP1208 A03CICGS Language Environment cannot support the Cobol language.
DFHAP1209 A03CICGS Language Environment cannot support the C/C++ languages.
DFHAP1210 A03CICGS Language Environment cannot support the PL/I language.

 Did I miss a library or Parm someplace or what?

Lastly and not sure if this is caused by another issue but getting the 
following message

DFHAM4837 E A03CICGS Install of DB2ENTRY ACIENTRY failed because a DB2CONN is 
Not installed
DFHAM4837 E A03CICGS Install of DB2ENTRY ACQENTRY failed because a DB2CONN is 
Not installed

Then I get.

DFHDB2110I 08/09/2023 15:11:25 A03CICGS The total number of threads exceeds 
TCBLIMIT.

Thanks!!!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: TCPIP Device/Link to Interface question???

[Shaffer, Terri]

Thanks.  I think what I have is correct, its just looks different now, because 
a plain hometest, shows loopback first, but if you NETSTAT HOME under FLG is my 
primary INTERFACE.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Colin Paice
Sent: Thursday, July 27, 2023 3:54 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TCPIP Device/Link to Interface question???

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Terri,

The HOME is only used for DEVICE/LINK.  You specify the "home address-es"
on the interface.
For example
INTERFACE IFPORTCP6
DEFINE IPAQENET6
CHPIDTYPE OSD
PORTNAME PORTA
INTFID 2:2:2:2

* IPADDR FC00:2::2:2:2 *

INTERFACE IFPORTCP6
ADDADDR 2001:DB8::9

The doc also says
*PRIMARYINTERFACE*






*Restriction: The PRIMARYINTERFACE statement applies to IPv4 only.Use the 
PRIMARYINTERFACE statement to specify which interface is to be designated as 
default localhost for use by the GETHOSTID() functionIf the 
PRIMARYINTERFACE statement is not specified, then the first address in the HOME 
list isdesignated as the default local host. If no HOME statements are defined 
in the profile,PRIMARYINTERFACE defaults to the first IPv4 INTERFACE statement 
listed in the profile.*

Which sounds like changing the statement to point to your interface should 
work.  If PRIMARYINTERFACE is not specified it will point to one of your HOME 
statements (if any)

Colin


On Wed, 26 Jul 2023 at 17:02, Shaffer, Terri < 
017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:

> Hi,
>   Was wondering if someone could answer a question?
>
> I am converting my DEVICE/LINK statements to INTERFACE in my TCPIP
> configuration on my test lpar.
>
> I recycled my TCPIP and everything works, except I tripped an error on
> my HOME statement, because I think it uses LINK name, not Interface name?
>
> My PRIMARYINTERFACE is my primary INTERFACE statement , again
> everything seems to work.
>
> However, when I did a hometest, it looked okay with my primary IPADDR
> first, then Secondary and then loopback address which it should be.
>
> But to stop the error from my HOME link name from occurring, I
> commented my HOME statement out.
>
> That fixed my error message, but now LOOPBACK is first, then Primary
> IPADDRESS and then Secondary.
>
> So my question is do I need the HOME STATEMENT, or what replaces it,
> if anything when using INTERFACE statement?
>
> And/or how do I get the PRIMARY IPADDRESS first again?
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
>
> 
>  [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] <
> http://www.aciworldwide.com> This email message and any attachments
> may contain confidential, proprietary or non-public information. The
> information is intended solely for the designated recipient(s). If an
> addressing or transmission error has misdirected this email, please
> notify the sender immediately and destroy this email. Any review,
> dissemination, use or reliance upon this information by unintended
> recipients is prohibited. Any opinions expressed in this email are
> those of the author personally.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: TCPIP Device/Link to Interface question???

[Shaffer, Terri]

Thanks.

I don't use VIPA here, but I think I am okay, as I did a NETSTAT  HOME

And my PRIMARY is designated correctly with the FLG  P

EZZ2350I MVS TCP/IP NETSTAT CS V2R5   TCPIP Name: TCPIP   17:09:31
EZZ2700I Home address list:
EZZ2701I Address  Link Flg
EZZ2702I ---   ---
EZZ2703I 127.0.0.1LOOPBACK

EZZ2704I Address  InterfaceFlg
EZZ2704I ---  ----
EZZ2703I 10.5.23.231  OSA0F0QDIP
EZZ2703I 10.5.23.240  OSA180QDI

But not sure if I can change this order of not, because it displays differently 
with just HOMETEST

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marshall Stone
Sent: Wednesday, July 26, 2023 12:36 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TCPIP Device/Link to Interface question???

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


We have a static VIPA first with the same IP as the old HOME IP. Then the rest 
of the interfaces: OSA, Hipersockets, VIPA's DVIPA's . Comment out the HOME 
statement. Make sure your start statements are correct.  The OBEY file the 
whole updated profile.

Marshall Stone
Mainframe Engineer, Technical Services
-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, July 26, 2023 12:02 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: TCPIP Device/Link to Interface question???

Hi,
  Was wondering if someone could answer a question?

I am converting my DEVICE/LINK statements to INTERFACE in my TCPIP 
configuration on my test lpar.

I recycled my TCPIP and everything works, except I tripped an error on my HOME 
statement, because I think it uses LINK name, not Interface name?

My PRIMARYINTERFACE is my primary INTERFACE statement , again everything seems 
to work.

However, when I did a hometest, it looked okay with my primary IPADDR first, 
then Secondary and then loopback address which it should be.

But to stop the error from my HOME link name from occurring, I commented my 
HOME statement out.

That fixed my error message, but now LOOPBACK is first, then Primary IPADDRESS 
and then Secondary.

So my question is do I need the HOME STATEMENT, or what replaces it, if 
anything when using INTERFACE statement?

And/or how do I get the PRIMARY IPADDRESS first again?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com> This email message and any attachments may 
contain confidential, proprietary or non-public information. The information is 
intended solely for the designated recipient(s). If an addressing or 
transmission error has misdirected this email, please notify the sender 
immediately and destroy this email. Any review, dissemination, use or reliance 
upon this information by unintended recipients is prohibited. Any opinions 
expressed in this email are those of the author personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

TCPIP Device/Link to Interface question???

[Shaffer, Terri]

Hi,
  Was wondering if someone could answer a question?

I am converting my DEVICE/LINK statements to INTERFACE in my TCPIP 
configuration on my test lpar.

I recycled my TCPIP and everything works, except I tripped an error on my HOME 
statement, because I think it uses LINK name, not Interface name?

My PRIMARYINTERFACE is my primary INTERFACE statement , again everything seems 
to work.

However, when I did a hometest, it looked okay with my primary IPADDR first, 
then Secondary and then loopback address which it should be.

But to stop the error from my HOME link name from occurring, I commented my 
HOME statement out.

That fixed my error message, but now LOOPBACK is first, then Primary IPADDRESS 
and then Secondary.

So my question is do I need the HOME STATEMENT, or what replaces it, if 
anything when using INTERFACE statement?

And/or how do I get the PRIMARY IPADDRESS first again?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF

[Shaffer, Terri]

Amazing for 38 years, I have never used anything bigger than 14" PC monitor. My 
24x80 saves my eyes at age 60, that I don't need glasses.. So that's a poor 
excuse.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
David Spiegel
Sent: Sunday, July 2, 2023 8:24 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Hi Terri,
If you have a 14 inch monitor, it is time to invest in your career and get a 
proper monitor (e.g. 27 inch minimum).
If you're seeing 3-4 lines, it also means that you're probably using Model 2 
emulation (24x80). Model 2 for a SysProg wastes a lot of time with 
unnecessarily scrolling, plus your context is not useful.
You should be running (minimum) Model 4 emulation (43x80) and preferably
3290 emulation (62x160).

Regards,
David

On 2023-07-02 19:50, Shaffer, Terri wrote:
> Besides having ServerPac back, I want no background checking down.
>
> I want batch jobs built to allocate everything, IF a newbie want to trust the 
> process awesome.  But in my 38 years, opps doesn't cut it.
>
> Again, just give me a switch.  Allow the scripts to build the batch jobs and 
> I will verify everything exists, if a conflict arises in dataset names, flag 
> them and I will resolve in batch.
>
> Then too many headers, Tabs, etc, in workflows means you only see about 3-4 
> lines on a 14" monitor. I should not have to acquire a new monitor to run/see 
> them with ease.
>
> Again I hate, anything that runs remote to the lpar, it's the first thing 
> that doesn't respond, besides using way too much CPU overall, just to screen 
> flip.
>
> Serverpac hardly ever got out of period 1, TSO.
>
> Just a bad design overall
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> -Original Message-
> From: IBM Mainframe Discussion List  On
> Behalf Of kekronbekron
> Sent: Friday, June 30, 2023 11:39 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: z/OSMF
>
> EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
> content is safe.
>
>
> In an attempt to steer this to a brainstorming thing...
>
> What are the components of zOSMF, and what are the warts people have noticed?
> Apart from the UI or that a UI itself exists.
>
> Websphere Liberty,... what else?
> What parts are tunable, what capabilities are needed, etc?
>
>
> - KB
>
> --- Original Message ---
> On Saturday, July 1st, 2023 at 2:38 AM, Tom Marchant 
> <000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote:
>
>
>> I don't see why, and that wouldn't be consistent with what they have done in 
>> the past.
>> Some examples:
>> z/OS 2.1 was available September 2013. It was not supported on a z990
>> or a Z890. Support for those were dropped in 2014 and 2016 z/OS 2.2 was 
>> available in 2015. It was not supported on a z9. z9 EC was supported until 
>> 2017. z9 BC was supported until 2019.
>> z/OS 2.3 was available in 2017. It was not supported on a z196 (support 
>> dropped 2021) or z114 (supported until 2022).
>> z/OS 2.5 was available in 2021. It was not supported on a zEC12 or a zBC12. 
>> AFAIK, support for those have not yet been dropped.
>>
>> I'm not sure, but I think that what IBM has done is to support a level of 
>> hardware until the last release of z/OS that is supported on that machine is 
>> off support, or at least withdrawn from marketing. Not to support a new 
>> release of the operating system on all processors that are currently 
>> supported at GA.
>>
>> --
>> Tom Marchant
>>
>> On Fri, 30 Jun 2023 01:01:21 -0500, Brian Westerman 
>> brian_wester...@syzygyinc.com wrote:
>>
>>> So is IBM definitely dropping support for the z13s BEFORE z/OS 3.1 is 
>>> officially out? If not, then it should be supported by z/OS 3.1. . . .
>>
>> -
>> - For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO
>> IBM-MAIN
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN 
> 
>   [https://go.aciworldwide.com/rs/030-ROK-804/images/aci

Re: z/OSMF

[Shaffer, Terri]

Besides having ServerPac back, I want no background checking down.

I want batch jobs built to allocate everything, IF a newbie want to trust the 
process awesome.  But in my 38 years, opps doesn’t cut it.

Again, just give me a switch.  Allow the scripts to build the batch jobs and I 
will verify everything exists, if a conflict arises in dataset names, flag them 
and I will resolve in batch.

Then too many headers, Tabs, etc, in workflows means you only see about 3-4 
lines on a 14" monitor. I should not have to acquire a new monitor to run/see 
them with ease.

Again I hate, anything that runs remote to the lpar, it’s the first thing that 
doesn’t respond, besides using way too much CPU overall, just to screen flip.

Serverpac hardly ever got out of period 1, TSO.

Just a bad design overall

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
kekronbekron
Sent: Friday, June 30, 2023 11:39 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


In an attempt to steer this to a brainstorming thing...

What are the components of zOSMF, and what are the warts people have noticed?
Apart from the UI or that a UI itself exists.

Websphere Liberty,... what else?
What parts are tunable, what capabilities are needed, etc?


- KB

--- Original Message ---
On Saturday, July 1st, 2023 at 2:38 AM, Tom Marchant 
<000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote:


> I don't see why, and that wouldn't be consistent with what they have done in 
> the past.
> Some examples:
> z/OS 2.1 was available September 2013. It was not supported on a z990
> or a Z890. Support for those were dropped in 2014 and 2016 z/OS 2.2 was 
> available in 2015. It was not supported on a z9. z9 EC was supported until 
> 2017. z9 BC was supported until 2019.
> z/OS 2.3 was available in 2017. It was not supported on a z196 (support 
> dropped 2021) or z114 (supported until 2022).
> z/OS 2.5 was available in 2021. It was not supported on a zEC12 or a zBC12. 
> AFAIK, support for those have not yet been dropped.
>
> I'm not sure, but I think that what IBM has done is to support a level of 
> hardware until the last release of z/OS that is supported on that machine is 
> off support, or at least withdrawn from marketing. Not to support a new 
> release of the operating system on all processors that are currently 
> supported at GA.
>
> --
> Tom Marchant
>
> On Fri, 30 Jun 2023 01:01:21 -0500, Brian Westerman 
> brian_wester...@syzygyinc.com wrote:
>
> > So is IBM definitely dropping support for the z13s BEFORE z/OS 3.1 is 
> > officially out? If not, then it should be supported by z/OS 3.1. . . .
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF

[Shaffer, Terri]

So I have been a WFH person for the last 6 years and very productive. I live in 
Pittsburgh, my Office is in Omaha, NE.

The point of all my posts, is I shouldn't have to do that!  In-fact when I 
installed z/OS 2.5 I gave up on the workflows as only seeing 2 lines was 
impossible!.

I found and XML conversion I could covert and print form and was able to 
perform any steps needed for my upgrade.

And to tell the truth I loved the migration manual!!! It took me 30 
minutes, documented anything applicable and DONE!.

Yes I know, save a tree, but we have made things complicated, not easier.

Remember when SERVERPAC forced operational datasets to a certain pack and 
name!!  Guess  who zapped the SLIB to change so I could use the change command, 
before IBM woke up and added that capability!!!

This is what z/OSMF needs. And expert switch!  Do background checks, or if it 
does find an inconsistency allow us the use a bypass!!

My life would immediately get easier on installs.  I have been doing this for 
38 years, I can build z/OS with my eyes closed if allowed.  Not forced into 
some configuration

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Gord Tomlin
Sent: Friday, June 16, 2023 11:01 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


On 2023-06-15 08:24 AM, Shaffer, Terri wrote:
> Lastly is the available screen usage, THIS IS MY biggest ISSUE!!!  On my 14" 
> laptop, z/SOMF software installation is almost impossible, because you can 
> only see a few lines.  Maybe if I had a Mod-5 and 32" monitor, life would be 
> easier, but yeah not gona happen.

I sympathize with your predicament, but there are steps you could take to 
mitigate it. If you do your work in the office, request a larger monitor for 
productivity reasons. If you do your work remotely, get a monitor, or get a 
HDMI cable and connect your laptop to a TV.

--

Regards, Gord Tomlin
Action Software International
(a division of Mazda Computer Corporation)
Tel: (905) 470-7113, Fax: (905) 470-6507
Support: https://actionsoftware.com/support/

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com/>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF

[Shaffer, Terri]

No it was Chase bank, When I left in 2016, I think we where at 105 lpars, So 
not sure how many there are today.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Bob 
Bridges
Sent: Thursday, June 15, 2023 9:05 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


117 LPARs?  Would that be State Farm in Bloomington IL, by any chance?  I don't 
remember the exact number when I was there, but I think it was on that order.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* As mere biological entities, each with its separate will to live and to 
expand, we are apparently of no account; we are cross-fodder.  But as organs in 
the Body of Christ, as stones and pillars in the temple, we are assured of our 
eternal self-identity and shall live to remember the galaxies as an old tale.  
-C S Lewis, "The Weight of Glory" */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Thursday, June 15, 2023 08:25

It’s a lot deeper than what you identified,  I have been in shops as large as 
117 lpars and a 12-way sysplex to just 1-2 lpars, so the size of the complex 
really doesn’t matter.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF

[Shaffer, Terri]

It’s a lot deeper than what you identified,  I have been in shops as large as 
117 lpars and a 12-way sysplex to just 1-2 lpars, so the size of the complex 
really doesn’t matter.

Many things bother me about z/OSMF besides being as slow as molasses, but it’s 
the behind the scenes actions on what it thinks its validating.

You may have hated Serverpac, but after 25 years it was slick from coping the 
old layout/config.  All it did was build the jobs,  There was many times what 
jobs it build, didn’t quite run, because of a configuration issue, but you 
could modify the JCL and move on, no behind the scenes processing you cant 
bypass, at least in my experience.

I love new things, IF they make my life easier.  Considering where MVS/SP was 
and were I started 38 years ago and were z/OS is today is S Much easier and 
less things to remember all the horror stories.

Lastly is the available screen usage, THIS IS MY biggest ISSUE!!!  On my 14" 
laptop, z/SOMF software installation is almost impossible, because you can only 
see a few lines.  Maybe if I had a Mod-5 and 32" monitor, life would be easier, 
but yeah not gona happen. This is especially important for the workflow tasks 
that are generated

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of VER 
Z038
Sent: Tuesday, May 30, 2023 8:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: z/OSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Why so much hate for z/OSMF? We sound like a bunch of grumpy old boomers 
resistant to change. 

I always found ServerPac clunky and unnecessarily complicated. Longing for that 
is not a hill I would choose to die on. 

I have been supporting a 4 LPAR organisation since 2018 using z/OSMF Software 
Management and I think it's OK. It has its quirks but so does anything. It 
suits how I like to work.

I like having an automated inventory of what I deployed where and when. I also 
like being able to model a new deployment on an old one so the bulk of 
definitions do not need to happen from scratch. I also like how the integrated 
workflow for a new software level forces you to eyeball and action anything 
that is needed for the upgrade.

Using z/OSMF Software Management does not mean you have to turn your brain off. 
You can still augment or change how things happen if you need to. Jobs are 
generated that you can look at before submission. Job output is captured so you 
can look at it after it executes.

In my 4 LPAR environment, when building a new SYSRES, I only use z/OSMF to 
construct the first system. After that I choose to ADRDSSU full dump restore it 
the other 3 LPARs because I think redoing the z/OSMF work is simply too tedious 
to be worth doing over and over. But that is OK. I am sure IBM will get there 
eventually fixing things that need fixing. That has been happening consistently 
throughout the life of z/OSMF from the early days where simply starting it 
would completely paralyse your system.

Neil.



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zOSMF

[Shaffer, Terri]

Not sure I agree with you Kurt,

 My z/OS installs are less than 2 years old, my res volume/s and Dlibs, even 
operational datasets don't move around.

And even if I did, it is a very small number of them, which is why the RECATLG2 
job with indirect or volsers, I could correct anything flagged different.

I used the last offering of Serverpac to install my z/OS 2.5 and had everything 
ready in a few hours, because I just loaded my last saved configuration, 
modified anything new and started running jobs.

When I went and then re-ordered for z/OSMF, it was cumbersome, like extremely!  
z/OSMF did checking in the background, that I could not circumvent and failed 
multiple times.  I eventually gave up and said for the next release I hope 
someone find a cheat way to simplify this again!  Because z/OSMF isn't it.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Tuesday, May 30, 2023 2:43 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


> > Is there anything easy we/IBM could do to move in the right direction?
>
> Examine the current system,
> create a script to set the equivalent values for z/OSMF?

Oh, so just like the Model function in z/OSMF Software Management?

When you install software, like z/OS, using z/OSMF, during the Configuration 
step of the Deployment action in Software Management you have the option to 
model the configuration on your existing installed software.  For example, if 
you're installing z/OS 2.5, you can initialize the configuration to look a lot 
like your existing z/OS 2.4 or 2.3 system.  In my opinion this is better than 
the CustomPac saved configuration function since that configuration is dated 
and stale, whereas your existing z/OS 2.4 or 2.3 is most likely something you 
actively service and use in some capacity.

If you want to learn more about installing software using z/OSMF Software 
Management you can check out this video tutorial series.
https://mediacenter.ibm.com/playlist/dedicated/101043781/1_mzzf31vy/1_f1qhec1j
In particular, at 57 seconds into the fourth video I describe the Model 
function.

Kurt Quackenbush
IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com

Chuck Norris never uses CHECK when he applies PTFs.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: zOSMF

[Shaffer, Terri]

Kids can install, because basically one FMID, and if it doesn’t work, good luck.

How many FMID components make up core z/OS?  Maybe if IBM made it one FMID you 
could install like android.

I can use ISRFIND or ISRDDN, to find many things out in Seconds, no more 
hunting thru libraries.

z/OS is complex, period, its why I can run 4 flavors of many components, I can 
run X number of LPARS at different z/OS versions, even look at SDSF with 
SDSFAUX now, tons of information is known in seconds, but change z/OS release 
and not all were available yet, SO what assumptions are you will to concede to, 
for z/OSMF to work, with out adding to the headaches.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Tom 
Brennan
Sent: Tuesday, May 30, 2023 11:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: [EXTERNAL] Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


So how come my kids can install apps and updates to their Windows and Mac 
machines, and I can work with Linux with no formal training?  For example, I 
don't need to hunt down SYS3.MY2013.PARMLIB(PROG46), I look in /etc and parms 
are in standard directories.  Even my Android (while
annoying) updates itself from time to time.

z/OSMF isn't the cure though.  System standardization might be, but that would 
still include IBM dictating how things are done.  We accept that on the other 
platforms and it seems to solve a lot of problems.

On 5/30/2023 7:24 AM, Shaffer, Terri wrote:
> I have to disagree.
>
> First lets talk about the migration guide and how many products an average 
> customer runs for a z/OS upgrade?
> Then how many of the hundreds of actions does any one customer need to 
> actually perform?
> Then, I know many customers, who may apply one RSU once per year and just add 
> 1-2 PTF for break fix, why would I ever want IBM to supply libraries past an 
> RSU level?
>
> One stop shopping doesn’t allow the flexibility the mainframe has always 
> provided, IBM should not dictate how I setup my shop.
>
> Lastly, isn’t the actual issue, no-one takes any initiative to learn anymore.
>
> Use the analogy of back in the 80's, how much with IOGENs and everything else 
> IBM has done over the years to simplify the system programmers tasks.
>
> But now they want GUI/Clicky and removed the interface from the mainframe.  
> Sorry but I have seen too many lockouts for this to work effectively
>
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide – Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> -Original Message-
> From: IBM Mainframe Discussion List  On
> Behalf Of Mike Schwab
> Sent: Tuesday, May 30, 2023 10:11 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: [EXTERNAL] Re: zOSMF
>
> EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
> content is safe.
>
>
> On Tue, May 30, 2023 at 9:04 AM Colin Paice  wrote:
>>
>> People feel that z/OSMF is not meeting their needs. Looking at the
>> positive sideIf we wanted to get future z/OS newbies up to speed
>> very quickly (1
>> month)  What should IBM and us users be doing?
>>
>> 1. Making better use of existing tools?  Eclipse ?
>> 2. Simplify the installation process (perhaps download the CST level of
>> code including SMP/E libraries - so we users do not need to use SMP/E -
>> just copy the libraries?)
>> 3. Simplify the configuration? (How many configuration parameters are no
>> longer needed and could just be set to "default")
>> 4. Drive everything from off-platform through Curl?
>> 5. Setting up Racf definitions for a new product can be challenging ...
>> how can we simplify this - for example products should provide members of
>> the definitions.  It is easier to delete unwanted lines - than type in
>> definitions.
>> 6. 
>>
>> Is there anything easy we/IBM could do to move in the right direction?
>>
>> Colin
>>
> Examine the current system,
> create a script to set the equivalent values for z/OSMF?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN 
> 
>   [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg]
> <http://www.aciworldwide.com> This email message and any attachments may 
> contain confidential, prop

Re: [EXTERNAL] Re: zOSMF

[Shaffer, Terri]

I have to disagree.

First lets talk about the migration guide and how many products an average 
customer runs for a z/OS upgrade?
Then how many of the hundreds of actions does any one customer need to actually 
perform?
Then, I know many customers, who may apply one RSU once per year and just add 
1-2 PTF for break fix, why would I ever want IBM to supply libraries past an 
RSU level?

One stop shopping doesn’t allow the flexibility the mainframe has always 
provided, IBM should not dictate how I setup my shop.

Lastly, isn’t the actual issue, no-one takes any initiative to learn anymore.

Use the analogy of back in the 80's, how much with IOGENs and everything else 
IBM has done over the years to simplify the system programmers tasks.

But now they want GUI/Clicky and removed the interface from the mainframe.  
Sorry but I have seen too many lockouts for this to work effectively


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Mike Schwab
Sent: Tuesday, May 30, 2023 10:11 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: [EXTERNAL] Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


On Tue, May 30, 2023 at 9:04 AM Colin Paice  wrote:
>
> People feel that z/OSMF is not meeting their needs. Looking at the
> positive sideIf we wanted to get future z/OS newbies up to speed
> very quickly (1
> month)  What should IBM and us users be doing?
>
>1. Making better use of existing tools?  Eclipse ?
>2. Simplify the installation process (perhaps download the CST level of
>code including SMP/E libraries - so we users do not need to use SMP/E -
>just copy the libraries?)
>3. Simplify the configuration? (How many configuration parameters are no
>longer needed and could just be set to "default")
>4. Drive everything from off-platform through Curl?
>5. Setting up Racf definitions for a new product can be challenging ...
>how can we simplify this - for example products should provide members of
>the definitions.  It is easier to delete unwanted lines - than type in
>definitions.
>6. 
>
> Is there anything easy we/IBM could do to move in the right direction?
>
> Colin
>
Examine the current system,
create a script to set the equivalent values for z/OSMF?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: zOSMF

[Shaffer, Terri]

While I see where you went with your thought process, the mainframe I don’t 
think will ever get to a windows or Android mentality.

I mean I know IBM wants to make the mainframe less complex, but by design that 
can only go so far.

For example, How many SMPE environments does a company have? How many Catalogs> 
How are the volumes laid out?  RES, DLIB, CATALOG, Paging, ETC...

Can you sort of automate the day to day management, or operations, yes.  Or how 
about how is maintenance applied, If I use your examples of windows/Android. 
Its live update, not sure that would fly in any company.  And whats my backout 
if something doesn’t work? Think of what you said, your reset your phone and 
started again.. H

z/OSMF is the IBM forced method here, and they have taken a process that has 
worked for 25+ years,  like I want to copy the old config settings from a 
previous z/OS install.  Why should I have to re-invent that wheel every time I 
install z/OS?  I use to be able to do a serverpac in a few hours, now with the 
z/OSMF response time and issues, that isn’t possible.

I still like the option that was mentioned, 2 switches, Novice, which forces 
you do everything and advanced, which would allow me to bypass steps or under 
the cover processes, IBM is forcing!!  Its just like windows, when I select 
advanced install option.

In a way I am glad I have only 7 more years left until retirement.  I love the 
mainframe and z/OS, but I avoid z/OSMF like the plague, I will only use it for 
z/OS installs only because I am forced too..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Phil Smith III
Sent: Friday, May 26, 2023 12:38 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: [EXTERNAL] Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Jack Zukt wrote, in part:
>The real problem, as I see it, is that drag and drop interfaces move
>you away from the need to know what you are doing.

That’s the *goal*. Do you know what the Windows installer is doing? Android? 
iOS? No you do not, beyond the high-level “putting  in places” and “making 
it bootable”. While it makes me nervous because, like you, I’ve been doing this 
for too long, most people see this as a good thing, and I can’t really dispute 
it.

In 1920, if you had a car, you understood air/fuel mixture, how to do oil and 
tire changes, etc. Most people don’t now, and that’s not a bad thing. Sure, 
occasionally they get stranded, but by and large, it Just Works.

On the flip side, I was switching phones and the migration failed. I did a 
reset of the new phone and restarted it, and it worked the second time. Did I 
understand the process? No. Did I need to? No. Am I happy that I couldn’t tell 
what failed? Not really, but, again, I really didn’t need to. And 99.44% of 
people wouldn’t care, as long as it worked the second try.

and Colin Paice asked:
>Would it help if we moved to standard configurations?

That’s the point I made before: with Windows, you’re forced into a fairly 
standard configuration. With z/OS, it’s a bit late (by almost six decades): 
sites aren’t going to rearrange everything. For new installs (all handful of 
them), sure. But that doesn’t really help at this point, alas.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: zOSMF

[Shaffer, Terri]

Completely agree with the overhead and complicatedness!

You know what's sad, is when I started in mainframes 39 years ago, The old IBM 
SE sat with me gave me the basics, etc and said go for it on a test system. And 
you learned actually what each process did.  I have seen even today system 
programmers that are clueless, all they were told was follow steps 1 thru 10, 
and if it fails in step x, they have no clue what to do.  This is the problem 
with z/OSMF and especially the new software instance install BS, its trying to 
make it idiot proof, but everyones SMS, volumes, catalogs, etc are all 
different and it doesn't work, or not easily.

Us old timers, are the only ones that really understand z/OS, could build a 
system from scratch, understand NIP, NET, JES2 and how everything works 
together.  I have worked at 7 different companies in my 39 years and 
maintenance was pretty much always done the same way.  Build the jobs once, 
change Volsers, zones, etc and submit.

No GUI clicky BS, processor intensive, certificate ridden process, that's 
removed from the actual LPAR.  And when z/OSMF doesn't work, then deer in 
headlights start to occur!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Pommier, Rex
Sent: Tuesday, March 7, 2023 10:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: [EXTERNAL] Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Hi Rob and Terri,

I'll weigh in here from the opposite end of the spectrum.  From my POV, z/OSMF 
is nothing but overhead for us.  We have a very small system.  2 LPARs, no 
sysplex, nothing difficult about it.  We build a new OS on one of them and 
clone it to the other and we're done.  All z/OSMF is going to do for us is add 
complexity to a simple system.  And I agree with Terri and Barbara that the 
next gen of sysprog won't have a clue where to go looking when z/OSMF breaks.

Rex

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Schramm
Sent: Monday, March 6, 2023 9:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: zOSMF

See you are missing the point.

If you have 117 lpars, of course you going to work on making the process 
actually work.  Because every minute you save in that process is worth 2 hours. 
The point is is that for each institution that's done that there's a bunch that 
haven't or they've got some jammed together process that breaks every single 
time that somebody new touches it.  And it's not standardized then it's not 
maintained and it's poorly documented and it's... you know...
ad infinitum ad nauseam.  So for you ... I agree it's probably more of a pain 
in the neck.  And there will probably be some sort of compromise eventually.  
But for all the people that have these other processes, I think the 
standardization that is going to come from this will ultimately make this a lot 
easier. And the dealing with the myriad of ISP software and IBM non server pack 
software or stuff that could be on the server pack but doesn't actually belong 
there... This should help immeasurably so once again I will disagree with your 
disagreement.

Rob

On Mon, Mar 6, 2023, 20:12 Shaffer, Terri < 
017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:

> When I worked at Chase bank, We had 117 LPARS and maintenance/clone
> was a
> 30 minute task. So adding z/OSMF was never even brought up as a
> consideration.
>
> So while I understand the direction IBM is headed, its adding LOTS of
> layers to something that sound not be hard.   Running thru screens vs
> submitting a canned job, is hours vs minutes.
>
> As much as I love my job and starting with MVS 1.3.8 to now z/OS 2.5
> and even OS/390, they have added a layer of complexity that eliminated
> the KISS principle, sadly.
>
> So I have to disagree..
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> -Original Message-
> From: IBM Mainframe Discussion List  On
> Behalf Of Rob Schramm
> Sent: Monday, March 6, 2023 4:27 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: zOSMF
>
> EXTERNAL EMAIL: Do not click links or open attachments unless you know
> the content is safe.
>
>
> I think the promise of zosmf is far beyond just a server pack replacement.
> Yeah server pack was great for what it was but when it comes to the
> grind of installing over and over and over again and the customization
> the workflow features I believe really hold the promise to fixing what
> is a continuously pain in the butt situation.  And hopefully they'll
> continue to make it lighter and lighter.  But the oth

GPMSERVE Certificate/Ring define....

[Shaffer, Terri]

Hi,
  So my certificate knowledge is lacking and I can normally find samples to 
change the text and define them.

So I was trying a few more functions out in z/OSMF and System Status Failed due 
to GPMSERVE 5003 errors.

I found the pagent definitions and added them but apparently I never defined 
the Keyring or certificates required.

I already have a CA defined that I can use. But need the Server and Server 
private key definitions?

I was wondering if anyone could send me a sample job for the RACDCERT commands 
needed?

According to the manual.

TTLSKeyringParms: Keyring
Specifies the key ring name of the RMF DDS server, which is DDSServerKeyring in 
the example. The key ring must contain the server certificate, the associated 
server private key, and the certificate of the trusted Certificate Authority 
(CA).

Thank You

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zOSMF

[Shaffer, Terri]

Wow, nothing like being exact, except my memory.. lol

So I started on a Honeywell L66 with GCOS in 1983, Then my company bought a IBM 
3090-150, in 1986.  So yes it could have been MVS/SP 1.3.6

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
rpinion865
Sent: Wednesday, March 8, 2023 2:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


We were MVS/SP 1.3.6, which was installed in 1987.  While is has been a very 
long time, I remember going from MVS/SP 1.3.6 to XA 2.2.




Sent with Proton Mail secure email.

--- Original Message ---
On Wednesday, March 8th, 2023 at 2:46 PM, Mike Schwab  
wrote:


> https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> ibm.com%2Fcommon%2Fssi%2FShowDoc.wss%3FdocURL%3D%2Fcommon%2Fssi%2Frep_
> ca%2F1%2F897%2FENUS283-141%2Findex.html%26request_locale%3Den=05%
> 7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7C3838efab059249e3191c08db200f
> 020b%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C638139021059824332%7
> CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1
> haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=ZlMweaQo4i2DKWzCrNLntPIyz%2B
> MdKFi%2FlV%2Fg7QQDJe4%3D=0
>
> Shows quite a few steps required to get to MVS/XA from MVS/370 3.8.
>
> On Wed, Mar 8, 2023 at 1:26 PM rpinion865
> 042a019916dd-dmarc-requ...@listserv.ua.edu wrote:
>
> > The last MVS/SP I ran was 1.3.6. That was in the 1987 time frame. The next 
> > leap I made was to MVS/XA 2.2, and that was in 1988.
> >
> > Sent with Proton Mail secure email.
> >
> > --- Original Message ---
> > On Wednesday, March 8th, 2023 at 2:13 PM, Mike Schwab 
> > mike.a.sch...@gmail.com wrote:
> >
> > > > > MVS/SP Version 1.3.8 (for MVS/370)
> > >
> > > MVS/SP is for running 24 bit programs on 17-64MB real memory.
> > > Copyrighted and not available currently.
> > > MVS 3.8 is what is freely available, limited to 16MB real memory.
> > >
> > > On Wed, Mar 8, 2023 at 12:59 PM Tom Marchant
> > > 000a2a8c2020-dmarc-requ...@listserv.ua.edu wrote:
> > >
> > > > Maybe she means what she said. MVS/SP Version 1.3.8 is referenced as a 
> > > > supported operating environment in this:
> > > > https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%
> > > > 2Fwww.ibm.com%2Fcommon%2Fssi%2Fcgi-bin%2Fssialias%3Finfotype%3Dd
> > > > d%26subtype%3Dsm%26appname%3DShopzSeries%26htmlfid%3D897%2FENUS5
> > > > 695-002=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7C3838ef
> > > > ab059249e3191c08db200f020b%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C
> > > > 1%7C0%7C638139021059824332%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wL
> > > > jAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%
> > > > 7C%7C=zgB7%2F96EInGNvEDlOVRKqsT%2Fk1wc3TpwaHPpTQgMeLg%3D
> > > > eserved=0
> > > >
> > > > --
> > > > Tom Marchant
> > > >
> > > > On Tue, 7 Mar 2023 16:03:13 -0500, David Spiegel 
> > > > dspiegel...@hotmail.com wrote:
> > > >
> > > > > Hi Terri,
> > > > > Maybe you mean OS2/MVS 3.8(J)?
> > > > > That could've been circa 1986.
> > > > > (I also have a similar progression, but, did VS1 7D with BPE
> > > > > before MVS.)
> > > > >
> > > > > Regards,
> > > > > David
> > > > >
> > > > > On 2023-03-07 15:25, Shaffer, Terri wrote:
> > > > >
> > > > > > It was 1984/1985, maybe 1986 even, as my memory is foggy..
> > > > > > yes mvs/sp 3.8 I added the 1. Then XA/ESA/OS390/z-OS
> > > > > >
> > > > > > Ms Terri E Shaffer
> > > > > > Senior Systems Engineer,
> > > > > > z/OS Support:
> > > > > > ACIWorldwide - Telecommuter
> > > > > > H(412-766-2697) C(412-519-2592)
> > > > > > terri.shaf...@aciworldwide.com
> > > >
> > > > 
> > > > -- For IBM-MAIN subscribe / signoff / archive access
> > > > instructions, send email to lists...@listserv.ua.edu with the
> > > > message: INFO IBM-MAIN
> > >
> > > --
> > > Mike A Schwab, Springfield IL USA
> > > Where do F

Re: zOSMF

[Shaffer, Terri]

It was 1984/1985, maybe 1986 even, as my memory is foggy..  yes mvs/sp 3.8 I 
added the 1.  Then XA/ESA/OS390/z-OS

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
David Spiegel
Sent: Monday, March 6, 2023 9:47 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Hi Terri,
"...MVS 1.3.8..." I don't remember 1.3.8. Which year was this?
(I've heard of MVS 3.8 and MVS/SP 1.3, though.)

Regards,
David

On 2023-03-06 20:12, Shaffer, Terri wrote:
> When I worked at Chase bank, We had 117 LPARS and maintenance/clone was a 30 
> minute task. So adding z/OSMF was never even brought up as a consideration.
>
> So while I understand the direction IBM is headed, its adding LOTS of layers 
> to something that sound not be hard.   Running thru screens vs submitting a 
> canned job, is hours vs minutes.
>
> As much as I love my job and starting with MVS 1.3.8 to now z/OS 2.5 and even 
> OS/390, they have added a layer of complexity that eliminated the KISS 
> principle, sadly.
>
> So I have to disagree..
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> -Original Message-
> From: IBM Mainframe Discussion List  On
> Behalf Of Rob Schramm
> Sent: Monday, March 6, 2023 4:27 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: zOSMF
>
> EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
> content is safe.
>
>
> I think the promise of zosmf is far beyond just a server pack replacement.
> Yeah server pack was great for what it was but when it comes to the grind of 
> installing over and over and over again and the customization the workflow 
> features I believe really hold the promise to fixing what is a continuously 
> pain in the butt situation.  And hopefully they'll continue to make it 
> lighter and lighter.  But the other part is the distribution points and the 
> packaging for distribution.  Yeah I don't really care how it happens whether 
> it's a GUI or not.  But in my view this is steps in the right direction.
>
> I would point you to Ed's presentation on the workflow features that were 
> incorporated to E/JES2 installation.  I really think there's something here.
>
> Just my two cents.
>
> Rob Schramm
>
> On Mon, Mar 6, 2023, 12:06 Michael Babcock  wrote:
>
>> I agree.   We use a permanent maintenance LPAR which is generally not up.
>> With ServerPac, it didn't matter we could select it as the target from our
>> driving system.   With z/OSMF, if run on the driving system, z/OSMF wanted
>> the target up and wanted to communicate with it via z/OSMF.  Not good
>> for us.
>>
>> Further, PSWI uses DSS to restore the datasets and ignores any
>> DATACLAS parameters.  Our OMVS datasets are all EXTADDR so we had to
>> build a REXX EXEC to copy the OMVS datasets to a newly allocated OMVS 
>> dataset with the
>> EXTADDR attribute.   Which by the way, what happens when the ROOT grows
>> beyond 4GB?
>>
>> There were a number of other things we ran into which escape me at
>> the moment.
>>
>> On Mon, Mar 6, 2023 at 10:15 AM Shaffer, Terri <
>> 017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:
>>
>>> Randy,
>>>I completely agree, This will be my 40th year working on z/OS and
>>> at least another 7 years to go.
>>>
>>> I find z/OSMF cumbersome.  I prefer to do things close to the source.
>> Not
>>> a tool to add layers of complexity and places to go wrong with yet
>>> more strange messages.
>>>
>>> I installed z/OS 2.5 before they eliminated SERVERPAC.  I then
>>> ordered it again to try it thru z/OSMF, it added a lot more time,
>>> the SSA's, my SMS ACS routines and how things got built added to the
>>> complexity.  Plus
>> there
>>> are many times I would bypass steps in serverpac, that because
>>> z/OSMF is performing what they call checks, think idiot proofing,
>>> makes this even more difficult.
>>>
>>> More to come, but if I find work arounds, I will bypass in the
>>> future
>> what
>>> I can in z/OSMF software installs.
>>>
>>>
>>> Ms Terri E Shaffer
>>> Senior Systems Engineer,
>>> z/OS Support:
>>> ACIWorldwide - Telecommuter
>>> H(412-766-2697) C(412-519-2592)
>>

Re: zOSMF

[Shaffer, Terri]

Not exactly sure what you mean by 300?

But for example I never use or logon to z/OSMF and this is it usage since Oct 
last year, my last IPL

Jobname   REAL  EXCP's  CPU-TIME
IZUSVR1 , 125T   0.00   0.00   0.00   87 0057   112642169   14774.64

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Mike Schwab
Sent: Monday, March 6, 2023 8:44 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Did you increase the tasks to 300?  Otherwise the tasks keep swapping in and 
out.

On Mon, Mar 6, 2023 at 7:40 PM Shaffer, Terri 
<017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:
>
> And this doesn't begin to address the CPU MIPS required to even run thru the 
> screens.
>
> When I IPL and z/OSMF starts it takes over the LPAR for a few minutes.  When 
> I logon and try to do anything its slow as molasses.
>
> Whereas in ISPF and ServerPAC dialogs I hardly ever left TSO PERIOD 1, 
> response times.
>
> I have no choice but, having a hard time seeing the plus's.
>
> Even the migration guide is difficult on a 14" monitor, and because of the 
> tabs, screen space available its very difficult.
>
> When I did my z/OS 2.5, I found the XML and did it manually in an hour or so.
>
> Sorry 
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> -Original Message-
> From: IBM Mainframe Discussion List  On
> Behalf Of Bill Johnson
> Sent: Monday, March 6, 2023 8:16 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: zOSMF
>
> EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
> content is safe.
>
>
> I have to agree with this. Once I had my JCL created for just about any 
> upgrade task, it was simple to make small changes to rerun the same process 
> for the next upgrade. That goes for zOS, DB2, CICS, IMS, MQ, and most third 
> party software.
>
>
> Sent from Yahoo Mail for iPhone
>
>
> On Monday, March 6, 2023, 8:12 PM, Shaffer, Terri 
> <017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:
>
> When I worked at Chase bank, We had 117 LPARS and maintenance/clone was a 30 
> minute task. So adding z/OSMF was never even brought up as a consideration.
>
> So while I understand the direction IBM is headed, its adding LOTS of layers 
> to something that sound not be hard.  Running thru screens vs submitting a 
> canned job, is hours vs minutes.
>
> As much as I love my job and starting with MVS 1.3.8 to now z/OS 2.5 and even 
> OS/390, they have added a layer of complexity that eliminated the KISS 
> principle, sadly.
>
> So I have to disagree..
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> -Original Message-
> From: IBM Mainframe Discussion List  On
> Behalf Of Rob Schramm
> Sent: Monday, March 6, 2023 4:27 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: zOSMF
>
> EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
> content is safe.
>
>
> I think the promise of zosmf is far beyond just a server pack replacement.
> Yeah server pack was great for what it was but when it comes to the grind of 
> installing over and over and over again and the customization the workflow 
> features I believe really hold the promise to fixing what is a continuously 
> pain in the butt situation.  And hopefully they'll continue to make it 
> lighter and lighter.  But the other part is the distribution points and the 
> packaging for distribution.  Yeah I don't really care how it happens whether 
> it's a GUI or not.  But in my view this is steps in the right direction.
>
> I would point you to Ed's presentation on the workflow features that were 
> incorporated to E/JES2 installation.  I really think there's something here.
>
> Just my two cents.
>
> Rob Schramm
>
> On Mon, Mar 6, 2023, 12:06 Michael Babcock  wrote:
>
> > I agree.  We use a permanent maintenance LPAR which is generally not up.
> > With ServerPac, it didn't matter we could select it as the target
> > from our driving system.  With z/OSMF, if run on the driving system,
> > z/OSMF wanted the target up and wanted to communicate with it via z/OSMF.
> > Not good for us.
> >
> > Further, PSWI uses DSS to restore the datasets and ign

Re: zOSMF

[Shaffer, Terri]

And this doesn't begin to address the CPU MIPS required to even run thru the 
screens.

When I IPL and z/OSMF starts it takes over the LPAR for a few minutes.  When I 
logon and try to do anything its slow as molasses.

Whereas in ISPF and ServerPAC dialogs I hardly ever left TSO PERIOD 1, response 
times.

I have no choice but, having a hard time seeing the plus's.

Even the migration guide is difficult on a 14" monitor, and because of the 
tabs, screen space available its very difficult.

When I did my z/OS 2.5, I found the XML and did it manually in an hour or so.

Sorry 

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Bill Johnson
Sent: Monday, March 6, 2023 8:16 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


I have to agree with this. Once I had my JCL created for just about any upgrade 
task, it was simple to make small changes to rerun the same process for the 
next upgrade. That goes for zOS, DB2, CICS, IMS, MQ, and most third party 
software.


Sent from Yahoo Mail for iPhone


On Monday, March 6, 2023, 8:12 PM, Shaffer, Terri 
<017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:

When I worked at Chase bank, We had 117 LPARS and maintenance/clone was a 30 
minute task. So adding z/OSMF was never even brought up as a consideration.

So while I understand the direction IBM is headed, its adding LOTS of layers to 
something that sound not be hard.  Running thru screens vs submitting a canned 
job, is hours vs minutes.

As much as I love my job and starting with MVS 1.3.8 to now z/OS 2.5 and even 
OS/390, they have added a layer of complexity that eliminated the KISS 
principle, sadly.

So I have to disagree..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Schramm
Sent: Monday, March 6, 2023 4:27 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


I think the promise of zosmf is far beyond just a server pack replacement.
Yeah server pack was great for what it was but when it comes to the grind of 
installing over and over and over again and the customization the workflow 
features I believe really hold the promise to fixing what is a continuously 
pain in the butt situation.  And hopefully they'll continue to make it lighter 
and lighter.  But the other part is the distribution points and the packaging 
for distribution.  Yeah I don't really care how it happens whether it's a GUI 
or not.  But in my view this is steps in the right direction.

I would point you to Ed's presentation on the workflow features that were 
incorporated to E/JES2 installation.  I really think there's something here.

Just my two cents.

Rob Schramm

On Mon, Mar 6, 2023, 12:06 Michael Babcock  wrote:

> I agree.  We use a permanent maintenance LPAR which is generally not up.
> With ServerPac, it didn't matter we could select it as the target from
> our driving system.  With z/OSMF, if run on the driving system, z/OSMF
> wanted the target up and wanted to communicate with it via z/OSMF.
> Not good for us.
>
> Further, PSWI uses DSS to restore the datasets and ignores any
> DATACLAS parameters.  Our OMVS datasets are all EXTADDR so we had to
> build a REXX EXEC to copy the OMVS datasets to a newly allocated OMVS
> dataset with the EXTADDR attribute.  Which by the way, what happens
> when the ROOT grows beyond 4GB?
>
> There were a number of other things we ran into which escape me at the
> moment.
>
> On Mon, Mar 6, 2023 at 10:15 AM Shaffer, Terri <
> 017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:
>
> > Randy,
> >  I completely agree, This will be my 40th year working on z/OS and
> >at least another 7 years to go.
> >
> > I find z/OSMF cumbersome.  I prefer to do things close to the source.
> Not
> > a tool to add layers of complexity and places to go wrong with yet
> > more strange messages.
> >
> > I installed z/OS 2.5 before they eliminated SERVERPAC.  I then
> > ordered it again to try it thru z/OSMF, it added a lot more time,
> > the SSA's, my SMS ACS routines and how things got built added to the
> > complexity.  Plus
> there
> > are many times I would bypass steps in serverpac, that because
> > z/OSMF is performing what they call checks, think idiot proofing,
> > makes this even more difficult.
> >
> > More to come, but if I find work arounds, I will bypass in the
> >

Re: zOSMF

[Shaffer, Terri]

When I worked at Chase bank, We had 117 LPARS and maintenance/clone was a 30 
minute task. So adding z/OSMF was never even brought up as a consideration.

So while I understand the direction IBM is headed, its adding LOTS of layers to 
something that sound not be hard.   Running thru screens vs submitting a canned 
job, is hours vs minutes.

As much as I love my job and starting with MVS 1.3.8 to now z/OS 2.5 and even 
OS/390, they have added a layer of complexity that eliminated the KISS 
principle, sadly.

So I have to disagree..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Schramm
Sent: Monday, March 6, 2023 4:27 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


I think the promise of zosmf is far beyond just a server pack replacement.
Yeah server pack was great for what it was but when it comes to the grind of 
installing over and over and over again and the customization the workflow 
features I believe really hold the promise to fixing what is a continuously 
pain in the butt situation.  And hopefully they'll continue to make it lighter 
and lighter.  But the other part is the distribution points and the packaging 
for distribution.  Yeah I don't really care how it happens whether it's a GUI 
or not.  But in my view this is steps in the right direction.

I would point you to Ed's presentation on the workflow features that were 
incorporated to E/JES2 installation.  I really think there's something here.

Just my two cents.

Rob Schramm

On Mon, Mar 6, 2023, 12:06 Michael Babcock  wrote:

> I agree.   We use a permanent maintenance LPAR which is generally not up.
> With ServerPac, it didn't matter we could select it as the target from our
> driving system.   With z/OSMF, if run on the driving system, z/OSMF wanted
> the target up and wanted to communicate with it via z/OSMF.  Not good
> for us.
>
> Further, PSWI uses DSS to restore the datasets and ignores any
> DATACLAS parameters.  Our OMVS datasets are all EXTADDR so we had to
> build a REXX EXEC to copy the OMVS datasets to a newly allocated OMVS dataset 
> with the
> EXTADDR attribute.   Which by the way, what happens when the ROOT grows
> beyond 4GB?
>
> There were a number of other things we ran into which escape me at the
> moment.
>
> On Mon, Mar 6, 2023 at 10:15 AM Shaffer, Terri <
> 017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:
>
> > Randy,
> >   I completely agree, This will be my 40th year working on z/OS and
> > at least another 7 years to go.
> >
> > I find z/OSMF cumbersome.  I prefer to do things close to the source.
> Not
> > a tool to add layers of complexity and places to go wrong with yet
> > more strange messages.
> >
> > I installed z/OS 2.5 before they eliminated SERVERPAC.  I then
> > ordered it again to try it thru z/OSMF, it added a lot more time,
> > the SSA's, my SMS ACS routines and how things got built added to the
> > complexity.  Plus
> there
> > are many times I would bypass steps in serverpac, that because
> > z/OSMF is performing what they call checks, think idiot proofing,
> > makes this even more difficult.
> >
> > More to come, but if I find work arounds, I will bypass in the
> > future
> what
> > I can in z/OSMF software installs.
> >
> >
> > Ms Terri E Shaffer
> > Senior Systems Engineer,
> > z/OS Support:
> > ACIWorldwide - Telecommuter
> > H(412-766-2697) C(412-519-2592)
> > terri.shaf...@aciworldwide.com
> >
> > -Original Message-
> > From: IBM Mainframe Discussion List  On
> > Behalf Of Harris Randy - Nashville
> > Sent: Friday, March 3, 2023 9:03 AM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Re: zOSMF
> >
> > EXTERNAL EMAIL: Do not click links or open attachments unless you
> > know
> the
> > content is safe.
> >
> >
> > I'm sure my complaints don't do any good, but I've been doing this
> > for 25 years (I know many of you a lot longer).
> > I don't understand why IBM wants to force everyone to use z/OSMF.
> > Maybe it's an attempt to attract a younger group of System Programmers.
> > That's fine. However, I am not a GUI fan. I like the green screen.
> > Serverpac works great. I am running into issues trying to learn z/OSMF.
> > It's a waste of my time when I already know how to use Serverpac.
> >
> > Randy Harris
> > P 615-344-3244
> > C 662-401-8552
> > james.harr...@hcahealthcare.com
> >
> > -Orig

Re: zOSMF

[Shaffer, Terri]

Randy,
  I completely agree, This will be my 40th year working on z/OS and at least 
another 7 years to go.

I find z/OSMF cumbersome.  I prefer to do things close to the source.  Not a 
tool to add layers of complexity and places to go wrong with yet more strange 
messages.

I installed z/OS 2.5 before they eliminated SERVERPAC.  I then ordered it again 
to try it thru z/OSMF, it added a lot more time,  the SSA's, my SMS ACS 
routines and how things got built added to the complexity.  Plus there are many 
times I would bypass steps in serverpac, that because z/OSMF is performing what 
they call checks, think idiot proofing, makes this even more difficult.

More to come, but if I find work arounds, I will bypass in the future what I 
can in z/OSMF software installs.


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Harris Randy - Nashville
Sent: Friday, March 3, 2023 9:03 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


I'm sure my complaints don't do any good, but I've been doing this for 25 years 
(I know many of you a lot longer).
I don't understand why IBM wants to force everyone to use z/OSMF.
Maybe it's an attempt to attract a younger group of System Programmers.
That's fine. However, I am not a GUI fan. I like the green screen.
Serverpac works great. I am running into issues trying to learn z/OSMF.
It's a waste of my time when I already know how to use Serverpac.

Randy Harris
P 615-344-3244
C 662-401-8552
james.harr...@hcahealthcare.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
rpinion865
Sent: Thursday, February 16, 2023 9:37 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: {EXTERNAL} zOSMF

CAUTION! This email originated from outside of our organization. DO NOT CLICK 
links or open attachments unless you recognize the sender and know the content 
is safe.

Running zOSMF under z/OS 2.4. In attempting to load the Portable Software 
Instance, retrieving the contents from the directory, that was used when the 
order was retrieved to our system, I get the following error.

An error was found in file "/u/pinionr/TDMF/IZUD00DF.json". Error: "The file 
contains data that is not supported by the current level of z/OSMF. The version 
= 8."IZUD277E Feb 16, 2023, 10:14:02 AM

I have no idea how to proceed. If I need to apply maintenance to zOSMF, how 
would I be able to proceed?

Sent with [Proton 
Mail](https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fproton.me%2F__%3B!!LgPfcEISpGU!vlU0iqbugIfvV7HijMEm4JcqCCtIGOVes01SZ-URq4XEkFMGC84ma_3q1ruW8IaDqiRE%24=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7C7c6559691d4f400dd02408db1bf16baa%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C638134495951840874%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C=frZbhW%2Fe88DA%2ByIeH1r7X4qhEDYZ36MicX6PONjb12k%3D=0
 ) secure email.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: zOSMF

[Shaffer, Terri]

So I am guessing you looked at the IZUSRV1 logs and see an issue with the 
certificate?

Not sure about opera, but did you download and install that certificate into 
the stores in OPERA?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
rpinion865
Sent: Tuesday, February 14, 2023 3:40 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: zOSMF

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


I'm attempting to use the Portable Software Instance dialog to retrieve an IBM 
order. This is for a z/OS 2.4 system. I've reached a point where I don't know 
where to look to correct the problem I am having.

I'm receiving IZUG1040E when I attempt to submit the generated job. I've run 
the sample JCL IZUNUSEC to create zOSMF's certificates. I'm connecting to the 
zOSMF instance using the Opera browser.

Any help would be greatly appreciated.

sent with [Proton 
Mail](https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fproton.me%2F=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7Cf2d7a334666c43b69b8a08db0ecbb5f4%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C638120040322626485%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=mHvCtWd9PaB4RFbs6Q%2FmyOaTuFggNF7Cq0Wpt900IHY%3D=0)
 secure email.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RACF - SDSF question

[Shaffer, Terri]

Thank you, with your input and Robs, I now know the order of the checks, which 
was the piece I didn't fully understand.

I have now cleaned up my extra rules and added rules under jesspool and they 
are now stopped.

Rob, thanks for the slides!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Robert S. Hansel (RSH)
Sent: Wednesday, February 8, 2023 8:00 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Hi Terri,

Here are a couple of thoughts to add to what others have mentioned.

Since SDSF is issuing a JES2 cancel job $CJ command, the name of the OPERCMDS 
resource being checked is JES2.CANCEL.BAT. Profile JES2.CANCEL.BAT.C30TCI* is 
superfluous since the resource name never includes the jobname, so you can 
delete it. Profile JES2.CANCEL.BAT.** is guarding JES2.CANCEL.BAT because the 
.** generic suffix applies to zero or more qualifiers, and in this case it is 
zero qualifiers. The suggestions to lock down MVS cancel job commands won't 
help in this situation because SDSF is issuing JES2 commands instead of MVS 
commands, so the OPERCMDS MVS.CANCEL.JOB.jobname resources won't be checked.

As was mentioned, to cancel a job typically also requires ALTER access to the 
JESSPOOL resource guarding the job. Look into setting up appropriate JESSPOOL 
profiles to isolate and restrict ALTER access to these jobs. Also consider 
whether users have been (inadvertently) set up as Destination Operators. If 
they have READ access to SDSF resource ISFOPER.DEST.JES2 and ALTER access to 
SDSF resources prefixed ISFAUTH.DEST., they can cancel jobs while bypassing 
JESSPOOL profile checks.

If the CONSOLE class is active, you can permit ID(*) UPDATE access to 
JES2.CANCEL.BAT.** conditionally by adding operand WHEN(CONSOLE(SDSF)) to the 
PERMIT command so that users can only issue JES2 cancel job commands from 
within SDSF panels. This would prevent them from cancelling jobs outside of 
SDSF, to include when using the SDSF / command. You would need to remove 
UACC(UPDATE) or ID(*) UPDATE permission, whichever applies, for the conditional 
permission to take effect. Operations and Tech Support staff will need 
'regular' UPDATE access permission. (CONSOLE is a Default Return Code 8 class, 
so don't activate it without first creating a ** profile with UACC(READ).)

To see exactly what resource names are being checked that are allowing the 
unwanted job cancellations, issue the SDSF command SET SECTRACE ON, cancel the 
job, and then issue the SDSF command ULOG. ULOG will show you all the access 
checks SDSF is making along with the results of each of these checks. SECTRACE 
is a phenomenal diagnostic tool that we use often.

Regards, Bob

Robert S. Hansel
Lead RACF Specialist
RSH Consulting, Inc.  *** Celebrating our 30th Anniversary ***
617-969-8211
https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.linkedin.com%2Fin%2Froberthansel=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7Ca4b8cc465d9d4ac4987c08db09d46b79%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C638114580161994985%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=Em%2B3BnJ2qLn7XTrRRvmVtmo5gWOhCx2xDk%2FCAaEkZUg%3D=0
https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.rshconsulting.com%2F=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7Ca4b8cc465d9d4ac4987c08db09d46b79%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C638114580161994985%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=NHrWwR8EBpDn81MjpoubOzpQSJr1NGjmwVVmlYYzMjg%3D=0

-Original Message-
Date:Tue, 7 Feb 2023 13:31:41 +
From:"Shaffer, Terri" 
Subject: RACF - SDSF question

Hi,
 I know there is a RACF group, but hopefully this is simple and I am just 
missing something I have done 100 times over with no issues.

We run our CICS regions as batch jobs, and I just found out a user instead of 
them issuing a CEMT PERF SHUT command, they are canceling it.

Which then causing a 100 vsam messages on startup with all the verifies, and if 
something goes wrong they call me...

So I tried to stop this habit, I know they are putting a C beside the CICS and 
a $CJ(x) command

So I have 2 rules in RACF under OPERCMDS

JES2.CANCEL.BAT.C30TCI* (G)
JES2.CANCEL.BAT.** (G)

If I restrict the BAT.**  then they cant cancel even their own batch jobs, So I 
always thought more specific is looked at first?

One of my previous co-workers implemented SDSF-RACF rules converted from 
ISFPARMS.

Lastly, I understand this doesn't stop them from canceling any other jobs, but 
since this is a development shop we allow more access than most.

But I don't want users

Re: RACF - SDSF question

[Shaffer, Terri]

I guess this bring up another question, which is probably why I am confused.

This is for MVS cancel

CANCEL jobname  MVS.CANCEL.JOB.jobname  MVS.CANCEL.**   Update  Medium

And

Table 1. RACF profiles and JES2 commands
JES2 CommandResource Name   Generic Profile Access 
Required1Security Risk
$C JJES2.CANCEL.BAT JES2.CANCEL.BAT.**  
Update  Medium
$C 'jobname'JES2.CANCEL.JOB JES2.CANCEL.**  Update  
Medium

So is the ** a generic but is the only option?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Tuesday, February 7, 2023 3:52 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Note that there is no jobname qualifier on the JES2.CANCEL.BAT profile. This is 
why SDSF has the extra JESSPOOL profile check that goes beyond vanilla JES2 
cancel command security.

This extra check is ONLY performed inside SDSF and is made before we build the 
operator command text.

Coincidentally I gave a presentation at virtual GSE today entitled "SDSF 
Security - How does it work under z/OS 2.5?" and the sequence of SAF checks is 
described with a few examples.

If you want, I can forward you the slide deck.

Rob Scott
Rocket Software

Sent from Samsung Mobile on O2
Sent from Outlook for 
Android<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2FAAb9ysg=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7C10ce6b661eb8413bb00b08db094d48cb%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C638113999777492735%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C=Sdtr7sGuH3Tkti7So%2B2D99AwPzFTNhAjPN8EuNPlHJI%3D=0>

From: IBM Mainframe Discussion List  on behalf of 
Shaffer, Terri <017d5f778222-dmarc-requ...@listserv.ua.edu>
Sent: Tuesday, February 7, 2023 6:10:11 PM
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL




Okay, so not sure I reall understand the way this works?

Under jesspool, checks nodeid.userid.jobname.jobid, so I could add my cics 
jobname like C30TCI* here? Is this the SDSF command like C, P etc?

Or under OPERCMDS I have

JES2.CANCEL.BAT.C30TCI* (G)
JES2.CANCEL.BAT.** (G)

And now.

MVS.CANCEL.BAT.C30TCI*.* (G)
MVS.CANCEL.** (G)

Where does the granularity take place, for certain jobs??

I want the users to be able to cancel some batch jobs and everything they 
submitted, but not CICS, DB2 or other system things.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Tuesday, February 7, 2023 9:54 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Note that one of the "value add" functions of SDSF is that it can check for 
ALTER access to the JESSPOOL profile for the owner and jobname for destructive 
actions like "C" and "P".

Does not stop them using freeform "slash" to issue the raw operator command, 
but removes the convenience of the action character.

Rob Scott
Rocket Software

From: IBM Mainframe Discussion List  On Behalf Of 
Roger W Suhr
Sent: 07 February 2023 14:22
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL



Hi Ms. Terri,

The OPERCMDS JES2.CANCEL.** profiles protect the JES2 ($C...) cancel command.
I believe you also need to use the OPERCMDS MVS.CANCEL.STC.mbrname.id profile 
to protect the MVS CANCEL command.

So in your case, that would be something like this: (if your running CICS as an 
STC!)
MVS.CANCEL.STC.C30TCI* (G)
MVS.CANCEL.STC.** (G)


Roger W. Suhr

suhr...@gmail.com<mailto:suhr...@gmail.com>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of 
Shaffer, Terri
Sent: Tuesday, February 7, 2023 8:32
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: RACF - SDSF question

Hi,
I know there is a RACF group, but hopefully this is simple and I am just 
missing something I have done 100 times over with no issues.

We run our CICS regions as batch jobs, and I just found out a user instead of 
them issuing a CEMT PERF SHUT command, they are canceling it.

Which then causing a 100 vsam messages on startup with all the verifies, and if 
something goes wrong they call me...

So I tried to stop this habit, I know they are putting a C beside th

Re: RACF - SDSF question

[Shaffer, Terri]

Agreed, can you fwd the slide deck?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Tuesday, February 7, 2023 3:52 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Note that there is no jobname qualifier on the JES2.CANCEL.BAT profile. This is 
why SDSF has the extra JESSPOOL profile check that goes beyond vanilla JES2 
cancel command security.

This extra check is ONLY performed inside SDSF and is made before we build the 
operator command text.

Coincidentally I gave a presentation at virtual GSE today entitled "SDSF 
Security - How does it work under z/OS 2.5?" and the sequence of SAF checks is 
described with a few examples.

If you want, I can forward you the slide deck.

Rob Scott
Rocket Software

Sent from Samsung Mobile on O2
Sent from Outlook for 
Android<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2FAAb9ysg=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7C10ce6b661eb8413bb00b08db094d48cb%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C638113999777492735%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C=Sdtr7sGuH3Tkti7So%2B2D99AwPzFTNhAjPN8EuNPlHJI%3D=0>

From: IBM Mainframe Discussion List  on behalf of 
Shaffer, Terri <017d5f778222-dmarc-requ...@listserv.ua.edu>
Sent: Tuesday, February 7, 2023 6:10:11 PM
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL




Okay, so not sure I reall understand the way this works?

Under jesspool, checks nodeid.userid.jobname.jobid, so I could add my cics 
jobname like C30TCI* here? Is this the SDSF command like C, P etc?

Or under OPERCMDS I have

JES2.CANCEL.BAT.C30TCI* (G)
JES2.CANCEL.BAT.** (G)

And now.

MVS.CANCEL.BAT.C30TCI*.* (G)
MVS.CANCEL.** (G)

Where does the granularity take place, for certain jobs??

I want the users to be able to cancel some batch jobs and everything they 
submitted, but not CICS, DB2 or other system things.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Tuesday, February 7, 2023 9:54 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Note that one of the "value add" functions of SDSF is that it can check for 
ALTER access to the JESSPOOL profile for the owner and jobname for destructive 
actions like "C" and "P".

Does not stop them using freeform "slash" to issue the raw operator command, 
but removes the convenience of the action character.

Rob Scott
Rocket Software

From: IBM Mainframe Discussion List  On Behalf Of 
Roger W Suhr
Sent: 07 February 2023 14:22
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL



Hi Ms. Terri,

The OPERCMDS JES2.CANCEL.** profiles protect the JES2 ($C...) cancel command.
I believe you also need to use the OPERCMDS MVS.CANCEL.STC.mbrname.id profile 
to protect the MVS CANCEL command.

So in your case, that would be something like this: (if your running CICS as an 
STC!)
MVS.CANCEL.STC.C30TCI* (G)
MVS.CANCEL.STC.** (G)


Roger W. Suhr

suhr...@gmail.com<mailto:suhr...@gmail.com>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of 
Shaffer, Terri
Sent: Tuesday, February 7, 2023 8:32
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: RACF - SDSF question

Hi,
I know there is a RACF group, but hopefully this is simple and I am just 
missing something I have done 100 times over with no issues.

We run our CICS regions as batch jobs, and I just found out a user instead of 
them issuing a CEMT PERF SHUT command, they are canceling it.

Which then causing a 100 vsam messages on startup with all the verifies, and if 
something goes wrong they call me...

So I tried to stop this habit, I know they are putting a C beside the CICS and 
a $CJ(x) command

So I have 2 rules in RACF under OPERCMDS

JES2.CANCEL.BAT.C30TCI* (G)
JES2.CANCEL.BAT.** (G)

If I restrict the BAT.** then they cant cancel even their own batch jobs, So I 
always thought more specific is looked at first?

One of my previous co-workers implemented SDSF-RACF rules converted from 
ISFPARMS.

Lastly, I understand this doesn't stop them from canceling any other jobs, but 
since this is a development shop we allow more access than most.

But I don't want users canceling a CICS or DB2 etc.

Any ideas how they 

Re: RACF - SDSF question

[Shaffer, Terri]

Okay, so not sure I reall understand the way this works?

Under jesspool, checks nodeid.userid.jobname.jobid, so I could add my cics 
jobname like C30TCI* here?  Is this the SDSF command like C, P etc?

Or under OPERCMDS I have

JES2.CANCEL.BAT.C30TCI* (G)
JES2.CANCEL.BAT.** (G)

And now.

MVS.CANCEL.BAT.C30TCI*.* (G)
MVS.CANCEL.** (G)

Where does the granularity take place, for certain jobs??

I want the users to be able to cancel some batch jobs and everything they 
submitted, but not CICS, DB2 or other system things.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Tuesday, February 7, 2023 9:54 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Note that one of the "value add" functions of SDSF is that it can check for 
ALTER access to the JESSPOOL profile for the owner and jobname for destructive 
actions like "C" and "P".

Does not stop them using freeform "slash" to issue the raw operator command, 
but removes the convenience of the action character.

Rob Scott
Rocket Software

From: IBM Mainframe Discussion List  On Behalf Of 
Roger W Suhr
Sent: 07 February 2023 14:22
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACF - SDSF question

EXTERNAL EMAIL



Hi Ms. Terri,

The OPERCMDS JES2.CANCEL.** profiles protect the JES2 ($C...) cancel command.
I believe you also need to use the OPERCMDS MVS.CANCEL.STC.mbrname.id profile 
to protect the MVS CANCEL command.

So in your case, that would be something like this: (if your running CICS as an 
STC!)
MVS.CANCEL.STC.C30TCI* (G)
MVS.CANCEL.STC.** (G)


Roger W. Suhr

suhr...@gmail.com<mailto:suhr...@gmail.com>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of 
Shaffer, Terri
Sent: Tuesday, February 7, 2023 8:32
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: RACF - SDSF question

Hi,
I know there is a RACF group, but hopefully this is simple and I am just 
missing something I have done 100 times over with no issues.

We run our CICS regions as batch jobs, and I just found out a user instead of 
them issuing a CEMT PERF SHUT command, they are canceling it.

Which then causing a 100 vsam messages on startup with all the verifies, and if 
something goes wrong they call me...

So I tried to stop this habit, I know they are putting a C beside the CICS and 
a $CJ(x) command

So I have 2 rules in RACF under OPERCMDS

JES2.CANCEL.BAT.C30TCI* (G)
JES2.CANCEL.BAT.** (G)

If I restrict the BAT.** then they cant cancel even their own batch jobs, So I 
always thought more specific is looked at first?

One of my previous co-workers implemented SDSF-RACF rules converted from 
ISFPARMS.

Lastly, I understand this doesn't stop them from canceling any other jobs, but 
since this is a development shop we allow more access than most.

But I don't want users canceling a CICS or DB2 etc.

Any ideas how they are getting the access and not stopped with the more 
specific rule??


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com>


[https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg<https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg>]
 <http://www.aciworldwide.com<http://www.aciworldwide.com>> This email message 
and any attachments may contain confidential, proprietary or non-public 
information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with the message: 
INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with the message: 
INFO IBM-MAIN


Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ 
Main Office Toll Free Number: +1 855.577.4323 Contact Customer Support: 
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmy.ro

RACF - SDSF question

[Shaffer, Terri]

Hi,
 I know there is a RACF group, but hopefully this is simple and I am just 
missing something I have done 100 times over with no issues.

We run our CICS regions as batch jobs, and I just found out a user instead of 
them issuing a CEMT PERF SHUT command, they are canceling it.

Which then causing a 100 vsam messages on startup with all the verifies, and if 
something goes wrong they call me...

So I tried to stop this habit, I know they are putting a C beside the CICS and 
a $CJ(x) command

So I have 2 rules in RACF under OPERCMDS

JES2.CANCEL.BAT.C30TCI* (G)
JES2.CANCEL.BAT.** (G)

If I restrict the BAT.**  then they cant cancel even their own batch jobs, So I 
always thought more specific is looked at first?

One of my previous co-workers implemented SDSF-RACF rules converted from 
ISFPARMS.

Lastly, I understand this doesn’t stop them from canceling any other jobs, but 
since this is a development shop we allow more access than most.

But I don’t want users canceling a CICS or DB2 etc.

Any ideas how they are getting the access and not stopped with the more 
specific rule??


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Clist question - edit macro

[Shaffer, Terri]

Thanks.  But I didn’t want to re-event the process wheel.

After many internet searches, I found an example to do it.

ISREDIT (ROW,COL) = CURSOR
ISREDIT (DDATA) = LINE 
SET CUSER = (+9:+17,())
ISREDIT CHANGE <>  FIRST


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Paul Gilmartin
Sent: Wednesday, September 21, 2022 10:54 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Clist question - edit macro

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


On Wed, 21 Sep 2022 13:04:37 +, Shaffer, Terri wrote:
>
>  So I need to change an edit macro to add a function, and most I have figured 
> reading the RTFM, except for this one, if its possible.
>
>If this was REXX, and not in a MACRO, I have done this 100 times, 
>however.
>
Rather than CLIST could you write your MACRO inREXX, which is well supported 
for that purpose?  I realize there are environmental constraints:
existing code base, company policy, etc.

--
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Clist question - edit macro

[Shaffer, Terri]

Hi,

  So I need to change an edit macro to add a function, and most I have figured 
reading the RTFM, except for this one, if its possible.

If this was REXX, and not in a MACRO, I have done this 100 times, 
however.

So I am doing this to find the string, which it does, add I do adds with 
line_after to insert lines, but what I need is, if its actually coded, need 
what its set to?.

ISREDIT FIND 'DFLTUSER=' 1 FIRST

But then is it possible to pull the next 8 characters after DFLTUSER=  and put 
in a variable to use?
   SET DUSER = (9:17,.ZCSR)  Sortof like this but not really?

Then I can use this to change/add what I need
ISREDIT CHANGE <>   FIRST

Normally I would just read lines and interrogate for what I need, but I am not 
sure what I can do after a marco FIND command?

I would think this would be easy, maybe I just need a vacation.

Can someone enlighten me?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Racf userid - CICS started as a job

[Shaffer, Terri]

Thanks, that's probably the simplest way.. Awesome

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Lennie Dymoke-Bradshaw
Sent: Tuesday, September 20, 2022 7:42 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Racf userid - CICS started as a job

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Why not code the userid on the Jobcard and then give the users who submit the 
job READ access to the SURROGAT profile for the userid?
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ibm.com%2Fdocs%2Fen%2Fzos%2F2.5.0%3Ftopic%3Dsubmitted-allowing-surrogate-job-submissiondata=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7Cc74ba509e2e44ccded4708da9b61b79c%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C637993141273312357%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=J5LstzQoYZnX%2FF3AMoU2mgdqrVL7knX0tudIPxs5Y%2Fw%3Dreserved=0


Lennie Dymoke-Bradshaw
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Frsclweb.com%2Fdata=05%7C01%7Cterri.shaffer%40ACIWORLDWIDE.COM%7Cc74ba509e2e44ccded4708da9b61b79c%7Cd1b7f1185cb24d4e85a382e07efb07e9%7C1%7C0%7C637993141273312357%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=cwldOGh4uHCQS7PpVvwIwfsvzQMCBhV%2BpkWboLtUZ04%3Dreserved=0
'Dance like no one is watching. Encrypt like everyone is.'

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: 21 September 2022 00:27
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Racf userid - CICS started as a job

Hi,
I am asking this in the main forum hopefully it will be a simple answer, that I 
just don't see.

So I have lots of experience setting up RACF  STARTED class with STDATA so that 
started tasks run under a certain userid.

Here we run our CICS's as jobs, since we are a development company, the 
programmers, can start/stop their CICS's when they need to.

We are doing WEB pipeline development and I setup the directory structure for 
the CICSDFLT userid and the group is everyone else.

If a batch job submits/starts CICS the CICS userid is picked up and everything 
works great.

If the user needs to recycle the region its picking up their userid and then 
the CICS gets access issues.

Is there a way to force it to use the DFLTUSER for batch jobs like I can setup 
for started tasks?

I think I could use user=DFLTUSER on the jobcard, but then I would have to 
setup those userids as RESTRICTED, because no password. There is a small 
security risk with this, but these userids don't have TSO Segments, so its a 
limited exposure.

Is there any other way to set this up?  Besides as STC's.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com> This email message and any attachments may 
contain confidential, proprietary or non-public information. The information is 
intended solely for the designated recipient(s). If an addressing or 
transmission error has misdirected this email, please notify the sender 
immediately and destroy this email. Any review, dissemination, use or reliance 
upon this information by unintended recipients is prohibited. Any opinions 
expressed in this email are those of the author personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Racf userid - CICS started as a job

[Shaffer, Terri]

Hi,
I am asking this in the main forum hopefully it will be a simple answer, that I 
just don’t see.

So I have lots of experience setting up RACF  STARTED class with STDATA so that 
started tasks run under a certain userid.

Here we run our CICS's as jobs, since we are a development company, the 
programmers, can start/stop their CICS's when they need to.

We are doing WEB pipeline development and I setup the directory structure for 
the CICSDFLT userid and the group is everyone else.

If a batch job submits/starts CICS the CICS userid is picked up and everything 
works great.

If the user needs to recycle the region its picking up their userid and then 
the CICS gets access issues.

Is there a way to force it to use the DFLTUSER for batch jobs like I can setup 
for started tasks?

I think I could use user=DFLTUSER on the jobcard, but then I would have to 
setup those userids as RESTRICTED, because no password. There is a small 
security risk with this, but these userids don’t have TSO Segments, so its a 
limited exposure.

Is there any other way to set this up?  Besides as STC's.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF - again, next issue

[Shaffer, Terri]

Just remember, A CBPDO, doesn’t have to be processed as such, Receive it like 
normal, which will load the REL files, Then just APPLY/ACCEPT the FMID.

If you need the other files/doc they are there.  We seem to have lost the 
basics..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Colin Paice
Sent: Tuesday, August 30, 2022 9:43 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: z/OSMF - again, next issue

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


I used to have to struggle with IBM installation manager - a package for 
installing software on midrange machines.
I remember being in a hotel trying to download a fix - but Installation
Manager(IM) decided it needed to upgrade itself before doing anything.  It took 
over 6 hours to download the new version of the Installation manager, and 
another 2 hours to download the fix I needed!  ( I had to set my alarm for 3 
am, and 5 am to click "go"  on the install)

IBM's argument was you only need to learn one interface (IM) to install 
software ( across Windows and Unix) - not realising I needed to know Windows, 
Unix AND IBM's IM.

z/OSMF is inevitable - Question: where are the skills of today?  Answer:
Java.

Personally I would follow the ADCD approach and download a volume of product 
libraries and its SMP/E  environment (and never use the SMP/E
environment)

Colin

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Visara DASD and Tape

[Shaffer, Terri]

So I am just curious, are there any customers running VISARA   VI8810 (dasd) or 
VTA5990 Tape solutions?

If you do,  any issues, compatibility?

For the 5990, do you have 3490x or 3590 type tapes defined?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

z/OS TWS Late work

[Shaffer, Terri]

I was wondering if anyone can please point me into the right direction for why 
my TWS scheduler stopped scheduling work?

My last IPL was in February and been running perfect until 3 days ago. Now 
everything is waiting.

I have restarted my TWS and same results, so something else happened but not 
sure where to look?

My Daily and LTP are current and I can manually run to extend.  I can see the 
jobs waiting, by they never release?

I can manually release them and they work but not automatically.

I made sure job submission for HZ was active, but something else is wrong and 
not sure where to look.

And the message manual doesn’t give any hints, what else can I look for

EQQE037I JOB BBASPG2 (), OPERATION(0020), IN APPLICATION
EQQE037I ATOSSPGOPR2 , IS LATE, WORK STATION = ATOS, IA = 2207020115
EQQE037I JOB BBASPG2 (), OPERATION(0030), IN APPLICATION
EQQE037I ATOSSPGOPR2 , IS LATE, WORK STATION = ATOS, IA = 2207020115
EQQE037I JOB BBADASD1(), OPERATION(0010), IN APPLICATION
EQQE037I ATOSDSSDAILY1   , IS LATE, WORK STATION = ATOS, IA = 2207020800
EQQE037I JOB BBALOGD2(), OPERATION(0030), IN APPLICATION
EQQE037I ATOSSYSLOG  , IS LATE, WORK STATION = ATOS, IA = 2207020755
EQQE037I JOB BBADASD2(), OPERATION(0010), IN APPLICATION
EQQE037I ATOSDSSDAILY2   , IS LATE, WORK STATION = ATOS, IA = 2207020830

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF Portable Software Instance - Deployment Question

[Shaffer, Terri]

So what I do, is I have 3 different SSASYS1, SSAOMVS and SSASMPE HLQ defined in 
my ACS routines.

And they are related to the catalogs were the end result name will live.

Its my circumvention to duplicates and the nuisances of installs.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Thursday, May 5, 2022 8:51 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF Portable Software Instance - Deployment Question

EXTERNAL EMAIL: Do not click links or open attachments unless you know the 
content is safe.


Thank you!

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Thursday, May 5, 2022 8:49 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF Portable Software Instance - Deployment Question

Bob, I believe the workflow steps refer to the data sets with the ZOS25.OMVS 
names, so wait until after you perform the workflow steps before renaming the 
data sets.  But after that, yeah, sure, you should be fine to rename the zFS 
data sets with your OMVS prefix.

Kurt Quackenbush
IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com Chuck 
Norris never uses CHECK when he applies PTFs.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Thursday, May 5, 2022 7:44 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: z/OSMF Portable Software Instance - Deployment Question

Kurt,

Unfortunately, the desired outcome is the latter that you don't support (new 
mastercat, existing usercat) ☹

So, if I understand you correctly:

1) Fix OMVS on Modify catalog page to result in ZOS25.OMVS
2) Modify ACS routines to allow for creation of ZOS25.OMVS temporarily
3) Let SW MGMT generate the JCL (which should create the required JCL for the 
new ZFS datasets (ZOS25.OMVS.*) with PATH entries, correct?
4) Assuming the above works, proceed to WORKFLOWS and give it a try.
5) If that works and the three workflows are created, do I need the ZOS25.OMVS 
datasets any longer?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: TN3270 message

[Shaffer, Terri]

Perfect THANKS Dave!!!  All fixed

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Dave Jousma
Sent: Monday, November 15, 2021 1:12 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TN3270 message

External Email


On Mon, 15 Nov 2021 15:59:13 +, Shaffer, Terri 
 wrote:

>Hi,
>  Just recently upgraded my test lpar to z/OS 2.5 and Tn3270 is displaying an 
> error.  It still connects and I can logon but this?
>
>$HASP373 TN3270   STARTED
>IEF403I TN3270 - STARTED - TIME=09.13.27 IEE252I MEMBER CTIEZBTN FOUND
>IN SYS1.IBM.PARMLIB
>EZZ6035I TN3270 DEBUG TASK   EXCEPTION 145
>  TASK: COMMAND CNTL   MOD: EZBTMCTL
>  RCODE: 6013-00  CEEPIPI environments could not be initialized.
>

Terri,

This seems to fithttps://www.ibm.com/support/pages/apar/OA61532

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: TN3270 message

[Shaffer, Terri]

Thanks, my original errors was because I didn’t configure TLS correctly in my 
PAGENT profile.. So I fixed the other 3 TN3270 profile issues with TLS and 
Ports.

Lastly I was left with the 6013 error.

I just checked unless there is DD or something, All my users in RACF can READ  
SYS1.SCUNTBL, so back to the drawing board

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Edgington, Jerry
Sent: Monday, November 15, 2021 12:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TN3270 message

External Email


I had something similar to this issue, and it was because the TN3270 Started 
task couldn't access the sys1.scun* datasets, mainly SYS1.SCUNTBL

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Tony Thigpen
Sent: Monday, November 15, 2021 12:11 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TN3270 message

This message was sent from an external source outside of Western & Southern's 
network. Do not click links or open attachments unless you recognize the sender 
and know the contents are safe.


You SSL ports failed because LE could not be initialized. Your regular ports 
will work anyway.

Tony Thigpen

Shaffer, Terri wrote on 11/15/21 10:59 AM:
> Hi,
>Just recently upgraded my test lpar to z/OS 2.5 and Tn3270 is displaying 
> an error.  It still connects and I can logon but this?
>
> $HASP373 TN3270   STARTED
> IEF403I TN3270 - STARTED - TIME=09.13.27 IEE252I MEMBER CTIEZBTN FOUND
> IN SYS1.IBM.PARMLIB
> EZZ6035I TN3270 DEBUG TASK   EXCEPTION 145
>TASK: COMMAND CNTL   MOD: EZBTMCTL
>RCODE: 6013-00  CEEPIPI environments could not be initialized.
>PARM1: 0006 PARM2:  PARM3:  EZZ6001I TN3270
> SERVER STARTED EZZ6044I TN3270 PROFILE PROCESSING BEGINNING FOR FILE
> 147
>  SPRG.PLX1.TCPPARMS(TN3270L9) EZZ6045I TN3270 PROFILE
> PROCESSING COMPLETE FOR FILE
>  SPRG.PLX1.TCPPARMS(TN3270L9)
> EZZ6003I TN3270 LISTENING ON PORT   992
> EZZ6003I TN3270 LISTENING ON PORT23
>
> Has anyone seen this, Maybe I didn’t do something in a previous release?  
> Didn’t see it the migration guide, just the TLS stuff..
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide – Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> 
>   [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg]
> <http://www.aciworldwide.com> This email message and any attachments may 
> contain confidential, proprietary or non-public information. The information 
> is intended solely for the designated recipient(s). If an addressing or 
> transmission error has misdirected this email, please notify the sender 
> immediately and destroy this email. Any review, dissemination, use or 
> reliance upon this information by unintended recipients is prohibited. Any 
> opinions expressed in this email are those of the author personally.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

TN3270 message

[Shaffer, Terri]

Hi,
  Just recently upgraded my test lpar to z/OS 2.5 and Tn3270 is displaying an 
error.  It still connects and I can logon but this?

$HASP373 TN3270   STARTED
IEF403I TN3270 - STARTED - TIME=09.13.27
IEE252I MEMBER CTIEZBTN FOUND IN SYS1.IBM.PARMLIB
EZZ6035I TN3270 DEBUG TASK   EXCEPTION 145
  TASK: COMMAND CNTL   MOD: EZBTMCTL
  RCODE: 6013-00  CEEPIPI environments could not be initialized.
  PARM1: 0006 PARM2:  PARM3: 
EZZ6001I TN3270 SERVER STARTED
EZZ6044I TN3270 PROFILE PROCESSING BEGINNING FOR FILE 147
SPRG.PLX1.TCPPARMS(TN3270L9)
EZZ6045I TN3270 PROFILE PROCESSING COMPLETE FOR FILE
SPRG.PLX1.TCPPARMS(TN3270L9)
EZZ6003I TN3270 LISTENING ON PORT   992
EZZ6003I TN3270 LISTENING ON PORT23

Has anyone seen this, Maybe I didn’t do something in a previous release?  
Didn’t see it the migration guide, just the TLS stuff..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Issues

[Shaffer, Terri]

Hi Marna,
  I think you have captured everything.

Like I have stated.  I don’t like things done , that I cant see whats being 
done in the background, because if there is ever an issue, I would have no idea 
where it failed.  Or I can change JCL to fix.  Because Some IBM messages are 
vague..

Also again a learning curve, But if I am presented 3 options, new mcat, reuse 
old, etc.

It would be nice to understands what each does or expects.

In the 25+ years I have dealt with serverpac I have only did one build of a new 
MCAT because it had lots of garbage from old times past.

Now I just expect the SSA to be added to the beginning, if I am pointing to 
REUSE MCAT, OR added as an alias if I am pointing or going to use a NEW MCAT.

Since you perform a ton of validations and lookups this should be easy to do.  
In the serverpac, like others have stated, I run probably 5-6 jobs total and I 
am done with the serverpac dialogs.   This is the issue with you verifying 
everything in the background.  It might only be a temporary condition that will 
be solved later by me.

 Otherwise its not horrible as expected, once you get past the whole z/OSMF 
setup issues.  But still nuances that would make thing better usability

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Thursday, October 28, 2021 10:27 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues

External Email


Hi all,
Thanks for all the great feedback!  This has been a good conversation to follow 
the past couple of days. We do appreciate it!

From the conversation, I see those here are on the "minimum  installation path" 
that want to:
1.  Use an existing prior configuration to save time when installing a new z/OS 
release. With *absolute minimum* manual renaming or data sets or volume name 
changes.
2.  Use an existing master catalog
3.  Mostly indirectly catalog
4.  Use "non-IPLable" data set names, so that existing deployment tools can be 
used.
5.  Run the minimum amount of jobs.  So that they can immediately lay down 
installed target, dlibs, and SMP/E data sets (and reluctantly, have to take 
some CPAC data sets) *only*, and move on by themselves.
6.  Want to be able to see all the JCL before it is run.
(7.  Want to be able to use multi-level aliasing.)

I think I've captured all the *major* points necessary to get a z/OS system 
laid down in a couple of  hours, with multi-level aliasing perhaps not being 
something used by all the contributers.  I do understand there are some other 
niceties, but I generally think I've got the list above what was discussed to 
pull down an order and get it on DASD quickly.

For doing the installation path above, z/OSMF *does* have that functionality 
today - except for the multi-level aliases. I'm not certain that multi-level 
aliases is critical, but I understand that doing it would be helpful to those 
that have used them for a long time, and want to continue with them.  Yes, the 
functions may not have been "found" immediately while trying out the new 
interface.  Especially when extremely familiar with the CustomPac interface.

What I'd like to understand:  for those that are on that "minimum installation 
path" above and have done their first z/OS portable software instance install, 
after you've gotten the information here (from Kurt, thanks!!), do you think 
you can lay down that z/OS release again using z/OSMF in a couple of hours?  
Keep in mind, you'd be using z/OSMF's Model After capability, selecting 
"existing master catalog",  data set configuration filtering and mass changes 
on data set and volume names, and system symbols with volume association.

-Marna WALLE
z/OS System Install and Upgrade
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Issues

[Shaffer, Terri]

Not sure I understand why you do that, but you have that option IF you DON'T do 
a SYSTEM UPGRADE and do a REPLACE, which builds all new things.

All I want to do is SWAP my 2 RES volumes, which I have done for 30+ years, 
Recatalog whats new to the release I am installing and IPL.

Like I said, I don't ever want to build a new MCAT, just to perform an upgrade, 
unless there is a really good reason.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Edgington, Jerry
Sent: Thursday, October 28, 2021 12:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues

External Email


Terri,

There are ways to leave your Master Catalog alone, and still be able to upgrade 
z/OS.  I install new z/OS either with ServerPac or now z/OSMF workflows, to its 
own "master" catalog, with ALIAS pointer of something like ZOS25.  Then build 
runtime datasets from the "ServerPac" datasets, upgrading without changing the 
z/OS datasets in the Master Catalog, using indirect cataloging.


Jerry Edgington  |  Sr.Technical Analyst IT Technical Operations Enterprise 
Systems
400 Broadway  |  Cincinnati, Ohio 45202
513.629.1826 direct
513.629.1787 fax
WesternSouthern.com



-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Thursday, October 28, 2021 12:44 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues

This message was sent from an external source outside of Western & Southern's 
network. Do not click links or open attachments unless you recognize the sender 
and know the contents are safe.


Sorry Kurt,

 Absolutely understand what you said, but that's dumb.

I haven't created a NEW Master Catalog in 20 years, because why would I want to 
have to RECAT all my PAGE, SMF,  USERCATs, NON-VSAM, ETC datasets??

When just adding an SSA to SYS1 gets away from any conflicts, and still gets in 
the current master catalog,  Then the renames all work, which really only does 
the physical names on DASD.

Then Recatalogs indirectly and NEW datasets and I am done.

Yuck, but okay I will just modify all my datasets again in z/OS 2.6, but will 
use my current instance as a Model to keep volume placements, But even this is 
ugly, because my volsers change... Currently ZA2511  and SMPD25, will go to 
ZA2611 and SMPD26 in z/OS 2.6, so I have mass change things anyhow.

I really liked the SERVERPAC dialogs even more now, ONE Panel to redefine my 
Physicals and all the logicals get placed magically with 0 work!!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Thursday, October 28, 2021 12:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues

External Email


> Great information Kurt, thanks, but need a clarification on one thing.
>
> >>That's great!  You would choose any of these software instances as
> your model when installing z/OS next.  You can also experiment with
> other Software >>Management actions on those defined software
> instances.  For example, on the Software Instances page try the View
> -> Data Sets action.
> >>Or any of the Maintenance Report actions.
>
> So does this mean I will always have to change every dataset again?
> To add my SYS1SSA, CPACSSA and SMPSSA? Because the instances all point
> to the real names.  If so you lost me again, because that was pain
> staking to change 1200 datasets, even with filtering.

Your installed z/OS 2.5 now has your desired data set names.  You defined a 
software instance that describes your installed z/OS 2.5.  Therefore, if you 
select that software instance as your model when you install z/OS next, as much 
as possible z/OSMF will initialize the configuration with the data set names 
from your installed z/OS 2.5.  You then will not have to modify data set names 
for 1200 data sets, however you will have to modify names for any new data sets 
in z/OS next and those which are not SMP/E managed, like the CPAC data sets.  
But those are much fewer.

> At least the SERVERPAC just prefixed everything with you SSA HLQ's.

z/OSMF will also prefix data sets with a temporary catalog alias (SSA) if 
that's what you want.  It does this when you tell z/OSMF you want to create a 
new master catalog.  You then get to specify the temporary catalog alias (SSA) 
to use for data sets in that new master catalog.  But do not manually add the 
tempora

Re: Serverpac installs January 2022 and beyond - Issues

[Shaffer, Terri]

Sorry Kurt,

 Absolutely understand what you said, but that's dumb.

I haven't created a NEW Master Catalog in 20 years, because why would I want to 
have to RECAT all my PAGE, SMF,  USERCATs, NON-VSAM, ETC datasets??

When just adding an SSA to SYS1 gets away from any conflicts, and still gets in 
the current master catalog,  Then the renames all work, which really only does 
the physical names on DASD.

Then Recatalogs indirectly and NEW datasets and I am done.

Yuck, but okay I will just modify all my datasets again in z/OS 2.6, but will 
use my current instance as a Model to keep volume placements, But even this is 
ugly, because my volsers change... Currently ZA2511  and SMPD25, will go to 
ZA2611 and SMPD26 in z/OS 2.6, so I have mass change things anyhow.

I really liked the SERVERPAC dialogs even more now, ONE Panel to redefine my 
Physicals and all the logicals get placed magically with 0 work!!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Thursday, October 28, 2021 12:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues

External Email


> Great information Kurt, thanks, but need a clarification on one thing.
>
> >>That's great!  You would choose any of these software instances as
> your model when installing z/OS next.  You can also experiment with
> other Software >>Management actions on those defined software
> instances.  For example, on the Software Instances page try the View
> -> Data Sets action.
> >>Or any of the Maintenance Report actions.
>
> So does this mean I will always have to change every dataset again?
> To add my SYS1SSA, CPACSSA and SMPSSA? Because the instances all point
> to the real names.  If so you lost me again, because that was pain
> staking to change 1200 datasets, even with filtering.

Your installed z/OS 2.5 now has your desired data set names.  You defined a 
software instance that describes your installed z/OS 2.5.  Therefore, if you 
select that software instance as your model when you install z/OS next, as much 
as possible z/OSMF will initialize the configuration with the data set names 
from your installed z/OS 2.5.  You then will not have to modify data set names 
for 1200 data sets, however you will have to modify names for any new data sets 
in z/OS next and those which are not SMP/E managed, like the CPAC data sets.  
But those are much fewer.

> At least the SERVERPAC just prefixed everything with you SSA HLQ's.

z/OSMF will also prefix data sets with a temporary catalog alias (SSA) if 
that's what you want.  It does this when you tell z/OSMF you want to create a 
new master catalog.  You then get to specify the temporary catalog alias (SSA) 
to use for data sets in that new master catalog.  But do not manually add the 
temporary catalog alias (SSA) prefix to the data set names!  z/OSMF will add it 
automatically to data set names, based on what catalog the data sets will be in.

Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management Chuck Norris 
never uses CHECK when he applies PTFs.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Issues

[Shaffer, Terri]

Great information Kurt, thanks, but need a clarification on one thing.

I was able to get the migration workflow now, that's the steps I was missing.

>>That's great!  You would choose any of these software instances as your model 
>>when installing z/OS next.  You can also experiment with other Software 
Management actions on those defined software instances.  For example, on 
>>the Software Instances page try the View -> Data Sets action.
>>Or any of the Maintenance Report actions.

So does this means I will always have to change every dataset again?  To add my 
SYS1SSA, CPACSSA and SMPSSA? Because the instances all point to the real names. 
 If so you lost me again, because that was pain staking to change 1200 
datasets, even with filtering.

At least the SERVERPAC just prefixed everything with you SSA HLQ's.

I would have thought the Portable would work as the model.. otherwise YUCK!!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Thursday, October 28, 2021 11:16 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues

External Email


> So just a few clarifications.
>
> I am guessing when I install z/OS 2.6, not sure what my model is, an
> instance or the portable 2.5 order?

A model is a software instance representing your actual installed software, no 
matter how it was installed, not a portable software instance.

> Because the portable copy still has all the install names like
> SYS1SSA, SMPESSA, CPACSSA for dataset names and it doesn't seem like I
> can change them.
>
> But then if that my model for z/OS 2.6, then it should work with
> everything I setup already, Again probably just a learning curve.
>
> So, I was trying to use my z/OSMF (Serverpac install for 2.5) as a
> base for my software instance.
>
> That's wrong, because it wants to duplicate everything that came with
> that process.
>
> Once I just pointed to the SMPE datasets, you are correct it went
> after the DDDEF's and found everything correctly.
>
> I have now built a 2.3, 2.4 and 2.5 instance that matches my shop.

That's great!  You would choose any of these software instances as your model 
when installing z/OS next.  You can also experiment with other Software 
Management actions on those defined software instances.  For example, on the 
Software Instances page try the View -> Data Sets action.
Or any of the Maintenance Report actions.

> z/OSMF still has a few quirks, depending on how you access things,
> Like my first comments about modifying datasets names. But I
> eventually got it to work.
>
> z/OS will be my first real install using z/osmf, so I am hoping all
> the nuances will be worked out, by then.
>
> Lastly,  I want to thank Barbara for the link to the migration guides.
> I still don't understand were they are in z/OSMF or how to access, but
> for another day.

Briefly, the z/OS Upgrade Workflow files will reside in /usr/lpp/bcp/upgrade/.  
There are several files depending on your upgrade path.  Open the z/OSMF 
Workflows application, click Actions -> Create Workflow, specify the 
appropriate file name in the Workflow definition file field, for example, 
/usr/lpp/bcp/upgrade/zOS_V2.5_from_V2.4_Upgrade_Workflow_V2.0.xml, and click 
Next, then click Finish.  This will create and open an instance of the upgrade 
workflow.  You can then perform the steps of the workflow ...
much like reading the upgrade actions in the older style Migration Guide.

Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management Chuck Norris 
never uses CHECK when he applies PTFs.



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Issues

[Shaffer, Terri]

Thanks Kurt.

As much as I despise z/OSMF, its just another learning curve on what's expected 
or how it works overall.

Having said that, In what I could do, I like it. But still don't like all the 
background things being done. Even if they are just catalog look ups.

So just a few clarifications.

I am guessing when I install z/OS 2.6, not sure what my model is, an instance 
or the portable 2.5 order?

Because the portable copy still has all the install names like SYS1SSA, 
SMPESSA, CPACSSA for dataset names and it doesn't seem like I can change them.

But then if that my model for z/OS 2.6, then it should work with everything I 
setup already, Again probably just a learning curve.

So, I was trying to use my z/OSMF (Serverpac install for 2.5) as a base for my 
software instance.

That's wrong, because it wants to duplicate everything that came with that 
process.

Once I just pointed to the SMPE datasets, you are correct it went after the 
DDDEF's and found everything correctly.

I have now built a 2.3, 2.4 and 2.5 instance that matches my shop.

z/OSMF still has a few quirks, depending on how you access things, Like my 
first comments about modifying datasets names. But I eventually got it to work.

z/OS will be my first real install using z/osmf, so I am hoping all the nuances 
will be worked out, by then.

Lastly,  I want to thank Barbara for the link to the migration guides. I still 
don't understand were they are in z/OSMF or how to access, but for another day.

Thanks


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Thursday, October 28, 2021 9:14 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues

External Email


> I have one set of installation volumes (TGT125, ZFS225 and DLBV25)
> specific to the release. TGT125 will NEVER get IPL'd, I clone from
> there to everywhere. All 'extranous' data sets (CPAC, the SMP
> environment) goes SMS and stays on my sandbox. I also don't IPL the
> CPAC system that comes with the serverpac. Everything on DLBv25 and
> TGT125 is uncataloged. Only the ZFSs are cataloged under the HLQ
> INST25. They, too, get cloned to the actual sysres and renamed during
cloning.
>
> After reading your posts, I am really glad I used the serverpac,
> especially with zOSMF insisting that everything is done exactly as
> zOSMF defines as 'the right way'. It sounds like a nightmare to me to
> keep my working process using z/OSMF.

Even if you personally will never install z/OS using z/OSMF, I want to address 
some of your concerns for others that may read this thread.

Does z/OSMF have a different look and feel than CustomPac ServerPac?  Yes.
 However, z/OSMF can certainly install as you've described here: you can 
specify your three installation volumes for the target and distribution 
libraries, you can let SMS manage the CPAC and SMP/E data sets, your targets 
and dlibs can be uncataloged, the zFSs can be cataloged with HLQ INST25.  And 
you don't have to IPL the installed system.

If anyone is confused how to tell z/OSMF about your unique installation 
desires, let me know.  I bet in most cases, like those described above, there's 
a way to make it happen.  I'm here to help.

Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management Chuck Norris 
never uses CHECK when he applies PTFs.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Issues Updated

[Shaffer, Terri]

Completely agree mostly..  I just want the option of some flexibility so I can 
still manipulate my layout after the fact not in the workflows.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Wednesday, October 27, 2021 1:26 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


Shields up!

This old dog wants to learn a new trick. I'm tired of the ISPF-based dialog 
install after doing ServerPac installs for several decades. Marna's NewEra 
two-part presentations were outstanding.

She spoke of taking a coworker with no experience with either and getting a 
running system up in three days! Granted, she mentored the individual, but 
still!

And aren't the migration workflows available as PTFs separate from the Software 
Instance? I am currently waiting for that PTF to close to get the most updated 
version of the workflow to review prior to actually ordering and downloading 
z/OS 2.5.

Bob



-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Dave Jousma
Sent: Wednesday, October 27, 2021 1:16 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

I too ordered V2.5 in the "window" where you still have a choice on custompac 
dialogs or z/OSMF.   I opted to go custompac one more time.

I do echo Terri's sentiments that there should be a way to mostly seed a new 
z/OSMF instance whether there is a utility that reads the last saved custompac 
config or somehow scans your sysres.   That will definitely soften the blow for 
moving over.Us old timers, can whip through the old dialogs in less than a 
day, and be pretty much ready to IPL.  I understand the need to modernize the 
environment for the next wave.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Issues Updated

[Shaffer, Terri]

Hey Dave
 I ordered both, and you are right in 4 hours I had my z/OS loaded and IPLed at 
least the initial IPL in test.  However

I wanted to try z/OSMF and I actually like the dataset naming flexibility, much 
better than the dialogs and Alias's discovery.

But all the background dataset checking that use to be done in the first 
SERVERPAC job, IE validate your configuration/Catalog setup, that is driving me 
insane.

That and in my mind when I build a software instance, not everything that the 
SERVERPAC downloads is copied/used.

IBM seems to force copying the CPAC and SMPE files, when I only want the SYS1 
datasets and OMVS.

Lastly and there are many takes on this from SYSTEM Programmers, But I only 
ever have one DISTRIBUTION zone and it matches my 2-3 target zones/RES vol sets.

This is because I always want to make sure no-one restores from the wrong 
DLIBS..  So I don’t ever copy these when I clone either.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Dave Jousma
Sent: Wednesday, October 27, 2021 1:16 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


I too ordered V2.5 in the "window" where you still have a choice on custompac 
dialogs or z/OSMF.   I opted to go custompac one more time.

I do echo Terri's sentiments that there should be a way to mostly seed a new 
z/OSMF instance whether there is a utility that reads the last saved custompac 
config or somehow scans your sysres.   That will definitely soften the blow for 
moving over.Us old timers, can whip through the old dialogs in less than a 
day, and be pretty much ready to IPL.  I understand the need to modernize the 
environment for the next wave.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Issues Updated

[Shaffer, Terri]

Also Kurt, again I have never used software deployment, but the only datasets I 
ever replicate for a close are SYS1.* and my OMVS files.

I tried to build a new instance and again it fails.  Why are you validating in 
the workflows???

At this point I give up..

error
Generation of the deployment jobs failed. Target data set "CPAC.ZOS25.SAMPLIB" 
has the same name as a data set already cataloged on the target system.
IZUD9702E
Oct 27, 2021, 1:04:35 PM
error
Generation of the deployment jobs failed. Target data set "CPAC.ZOS25.LINKLIB" 
has the same name as a data set already cataloged on the target system.
IZUD9702E
Oct 27, 2021, 1:04:34 PM

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, October 27, 2021 12:47 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


NVM,  It how you select/filter the names that changes if you can modify or not..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, October 27, 2021 12:42 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


Wanted to add a few other comments
Since IBM is forcing everyone to z/OSMF with 2.5, not excited for this but It 
seems to work pretty well, except for everything that cant see it doing behind 
the scenes. It seems this is a ton of catalog look-ups to validate nothing 
exist.

But then in the IZUD04UZ job you delete everything anyhow. So why validate it 
in the workflows?  I fail because my SMPE datasets are already allocated, 
because I installed thru a SERVERPAC.

This would be all good, because I just wasn't planning on running any of the 
jobs, unless I saw something I needed for customizations.

But again you don't allow that and stop with errors.

Lastly since the direction in 2.5 for z/OSMF, now everyone will have a valid 
instance going forward.  So you should still provide a way to extract the 
migration action XML, so that for 2.5 only its available outside.

PPS..  If you do respond how do the workflow variables for in install portable 
instance to mirror a production names??

I cant use a filter to change the dataset names, However if I select each one 
separately, I can which would take forever.

Software Management > Portable Software Instances > Deployments > Deployment 
Checklist > Configure Deployment >Modify Modify Data Sets Enter the data set 
name or qualifiers to use for the selected data sets.
Common data set qualifiers: Example data set name:
From:   SYS1SSA.SYS1.SICELPASYS1SSA.SYS1.SICELPA
To:
SYS1.SICELPA


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, October 27, 2021 9:21 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


Hi Kurt,
  There are lots of things I dislike about black boxes and not being able to 
take things on blind faith.

In my 39 years as a system programmer that's gotten me into trouble exactly 
once before I said I just will not run anything without seeing the JCL.

So I pity the newer z/OS folks, because you have puts steps in to validate what 
you generate should run. But that's not always a good assumption. 
Invalid/duplicate issue might only be a temporary condition.

I use a process to roll out software by having my clone jobs already setup, 
between ZA2x11T and ZB2x11T zones for the last 21 years very successfully.

I control the software names in my batch jobs, because of nuances in the 
serverpac dialogs. Now you have removed most of those issues in z/OSMF but you 
added new stops to verify/validate all datasets names being allocated.  Good, 
or Bad, I might want to change things AFTER the fact that I missed, instead of 
re-driving thru the dialogs/screens.  I would be nice here to just generate the 
jobs period with no validation steps as you generate the jobs.

You could always have an option to validate whats generated or NOT. With all 
the standard disclaimersetc

So having NEVER used z/OSMF for software deployments because it was just way to 
cumbersome and time consuming to build for 107 LPARS, like at chase or even 
here at ACI, I have 6 lpars.  Again build once and clone X number of times.

So I am stuck in the z/OSMF now, because I cant build/use the instance of z/OS 
2.5 because everythi

Re: Serverpac installs January 2022 and beyond - Issues Updated

[Shaffer, Terri]

NVM,  It how you select/filter the names that changes if you can modify or not..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, October 27, 2021 12:42 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


Wanted to add a few other comments
Since IBM is forcing everyone to z/OSMF with 2.5, not excited for this but It 
seems to work pretty well, except for everything that cant see it doing behind 
the scenes. It seems this is a ton of catalog look-ups to validate nothing 
exist.

But then in the IZUD04UZ job you delete everything anyhow. So why validate it 
in the workflows?  I fail because my SMPE datasets are already allocated, 
because I installed thru a SERVERPAC.

This would be all good, because I just wasn't planning on running any of the 
jobs, unless I saw something I needed for customizations.

But again you don't allow that and stop with errors.

Lastly since the direction in 2.5 for z/OSMF, now everyone will have a valid 
instance going forward.  So you should still provide a way to extract the 
migration action XML, so that for 2.5 only its available outside.

PPS..  If you do respond how do the workflow variables for in install portable 
instance to mirror a production names??

I cant use a filter to change the dataset names, However if I select each one 
separately, I can which would take forever.

Software Management > Portable Software Instances > Deployments > Deployment 
Checklist > Configure Deployment >Modify Modify Data Sets Enter the data set 
name or qualifiers to use for the selected data sets.
Common data set qualifiers: Example data set name:
From:   SYS1SSA.SYS1.SICELPASYS1SSA.SYS1.SICELPA
To:
SYS1.SICELPA


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, October 27, 2021 9:21 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


Hi Kurt,
  There are lots of things I dislike about black boxes and not being able to 
take things on blind faith.

In my 39 years as a system programmer that's gotten me into trouble exactly 
once before I said I just will not run anything without seeing the JCL.

So I pity the newer z/OS folks, because you have puts steps in to validate what 
you generate should run. But that's not always a good assumption. 
Invalid/duplicate issue might only be a temporary condition.

I use a process to roll out software by having my clone jobs already setup, 
between ZA2x11T and ZB2x11T zones for the last 21 years very successfully.

I control the software names in my batch jobs, because of nuances in the 
serverpac dialogs. Now you have removed most of those issues in z/OSMF but you 
added new stops to verify/validate all datasets names being allocated.  Good, 
or Bad, I might want to change things AFTER the fact that I missed, instead of 
re-driving thru the dialogs/screens.  I would be nice here to just generate the 
jobs period with no validation steps as you generate the jobs.

You could always have an option to validate whats generated or NOT. With all 
the standard disclaimersetc

So having NEVER used z/OSMF for software deployments because it was just way to 
cumbersome and time consuming to build for 107 LPARS, like at chase or even 
here at ACI, I have 6 lpars.  Again build once and clone X number of times.

So I am stuck in the z/OSMF now, because I cant build/use the instance of z/OS 
2.5 because everything still has the SYS1SSA or SMPESSA, etc HLQ's.  I have 
already renamed everything to SYS1., SMPE. Or CPAC.  So its ready for 
production, but the workflows and variables don't reflect the PROD names.

In-Fact even if I say build a NEW instance I cant change the source so it fails 
because those names don't exist.  I have tried a few things and cant get around 
this.

Lastly all I really want is the migration actions, but instead you hid, it 
seems until sometime later in the workflows.

You also for the customer to define their previous release 2.3 and 2.4 in my 
case, so that you can build a checklist.  I sortof get that, but since I don't 
have anything primed its extra steps to get it to work.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Wednesday, October 27, 2021 8:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and 

Re: Serverpac installs January 2022 and beyond - Issues Updated

[Shaffer, Terri]

Wanted to add a few other comments
Since IBM is forcing everyone to z/OSMF with 2.5, not excited for this but It 
seems to work pretty well, except for everything that cant see it doing behind 
the scenes. It seems this is a ton of catalog look-ups to validate nothing 
exist.

But then in the IZUD04UZ job you delete everything anyhow. So why validate it 
in the workflows?  I fail because my SMPE datasets are already allocated, 
because I installed thru a SERVERPAC.

This would be all good, because I just wasn't planning on running any of the 
jobs, unless I saw something I needed for customizations.

But again you don't allow that and stop with errors.

Lastly since the direction in 2.5 for z/OSMF, now everyone will have a valid 
instance going forward.  So you should still provide a way to extract the 
migration action XML, so that for 2.5 only its available outside.

PPS..  If you do respond how do the workflow variables for in install portable 
instance to mirror a production names??

I cant use a filter to change the dataset names, However if I select each one 
separately, I can which would take forever.

Software Management > Portable Software Instances > Deployments > Deployment 
Checklist > Configure Deployment >Modify
Modify Data Sets
Enter the data set name or qualifiers to use for the selected data sets.
Common data set qualifiers: Example data set name:
From:   SYS1SSA.SYS1.SICELPASYS1SSA.SYS1.SICELPA
To:
SYS1.SICELPA


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Wednesday, October 27, 2021 9:21 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


Hi Kurt,
  There are lots of things I dislike about black boxes and not being able to 
take things on blind faith.

In my 39 years as a system programmer that's gotten me into trouble exactly 
once before I said I just will not run anything without seeing the JCL.

So I pity the newer z/OS folks, because you have puts steps in to validate what 
you generate should run. But that's not always a good assumption. 
Invalid/duplicate issue might only be a temporary condition.

I use a process to roll out software by having my clone jobs already setup, 
between ZA2x11T and ZB2x11T zones for the last 21 years very successfully.

I control the software names in my batch jobs, because of nuances in the 
serverpac dialogs. Now you have removed most of those issues in z/OSMF but you 
added new stops to verify/validate all datasets names being allocated.  Good, 
or Bad, I might want to change things AFTER the fact that I missed, instead of 
re-driving thru the dialogs/screens.  I would be nice here to just generate the 
jobs period with no validation steps as you generate the jobs.

You could always have an option to validate whats generated or NOT. With all 
the standard disclaimersetc

So having NEVER used z/OSMF for software deployments because it was just way to 
cumbersome and time consuming to build for 107 LPARS, like at chase or even 
here at ACI, I have 6 lpars.  Again build once and clone X number of times.

So I am stuck in the z/OSMF now, because I cant build/use the instance of z/OS 
2.5 because everything still has the SYS1SSA or SMPESSA, etc HLQ's.  I have 
already renamed everything to SYS1., SMPE. Or CPAC.  So its ready for 
production, but the workflows and variables don't reflect the PROD names.

In-Fact even if I say build a NEW instance I cant change the source so it fails 
because those names don't exist.  I have tried a few things and cant get around 
this.

Lastly all I really want is the migration actions, but instead you hid, it 
seems until sometime later in the workflows.

You also for the customer to define their previous release 2.3 and 2.4 in my 
case, so that you can build a checklist.  I sortof get that, but since I don't 
have anything primed its extra steps to get it to work.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Wednesday, October 27, 2021 8:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


> Actually now I was totally able to customize all my dataset names,
> which is really great. It is time consuming because I basically had to
> change everything.

Glad to hear you were able to customize the data set names to your liking.
 As already mentioned, next time I encourage you to use a Model and z/OSMF will 
use your existing data set name conventions as much as possible.

> Now I hit a few things, becaus

Re: Serverpac installs January 2022 and beyond - Issues Updated

[Shaffer, Terri]

Hi Kurt,
  There are lots of things I dislike about black boxes and not being able to 
take things on blind faith.

In my 39 years as a system programmer that's gotten me into trouble exactly 
once before I said I just will not run anything without seeing the JCL.

So I pity the newer z/OS folks, because you have puts steps in to validate what 
you generate should run. But that's not always a good assumption. 
Invalid/duplicate issue might only be a temporary condition.

I use a process to roll out software by having my clone jobs already setup, 
between ZA2x11T and ZB2x11T zones for the last 21 years very successfully.

I control the software names in my batch jobs, because of nuances in the 
serverpac dialogs. Now you have removed most of those issues in z/OSMF but you 
added new stops to verify/validate all datasets names being allocated.  Good, 
or Bad, I might want to change things AFTER the fact that I missed, instead of 
re-driving thru the dialogs/screens.  I would be nice here to just generate the 
jobs period with no validation steps as you generate the jobs.

You could always have an option to validate whats generated or NOT. With all 
the standard disclaimersetc

So having NEVER used z/OSMF for software deployments because it was just way to 
cumbersome and time consuming to build for 107 LPARS, like at chase or even 
here at ACI, I have 6 lpars.  Again build once and clone X number of times.

So I am stuck in the z/OSMF now, because I cant build/use the instance of z/OS 
2.5 because everything still has the SYS1SSA or SMPESSA, etc HLQ's.  I have 
already renamed everything to SYS1., SMPE. Or CPAC.  So its ready for 
production, but the workflows and variables don't reflect the PROD names.

In-Fact even if I say build a NEW instance I cant change the source so it fails 
because those names don't exist.  I have tried a few things and cant get around 
this.

Lastly all I really want is the migration actions, but instead you hid, it 
seems until sometime later in the workflows.

You also for the customer to define their previous release 2.3 and 2.4 in my 
case, so that you can build a checklist.  I sortof get that, but since I don't 
have anything primed its extra steps to get it to work.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt J. Quackenbush
Sent: Wednesday, October 27, 2021 8:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


> Actually now I was totally able to customize all my dataset names,
> which is really great. It is time consuming because I basically had to
> change everything.

Glad to hear you were able to customize the data set names to your liking.
 As already mentioned, next time I encourage you to use a Model and z/OSMF will 
use your existing data set name conventions as much as possible.

> Now I hit a few things, because its always checking names in the
> background..  So when it says its going to build jobs, it lies, its
> actually verifying names first.  So because I already installed z/OS
> 2.5 with a serverpac, I would like to bypass a few things and it will
> not let me.  So back to adding a SSA for my duplicates to get thru the
> screens.

I'd like to understand this comment better.  z/OSMF does indeed verify the 
information you specified in the configuration before generating the jobs, such 
as data set names and locations.  Mostly it ensures there is not already a same 
named data set on a specified volume or in a catalog.  Are you saying z/OSMF 
found a volume or catalog collision when in fact there was no collision?  If 
so, can you elaborate?  For example, did you select to create a new master 
catalog?  Are you using indirect cataloging for your existing data sets, and 
did you tell z/OSMF you want to indirectly catalog the new data sets?  Did you 
tell z/OSMF to create data sets on a particular volume?

Kurt Quackenbush -- IBM,  z/OS SMP/E and z/OSMF Software Management

Chuck Norris never uses CHECK when he applies PTFs.

>



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this 

Re: Serverpac installs January 2022 and beyond - Issues Updated

[Shaffer, Terri]

Thanks for the input.

Actually now I was totally able to customize all my dataset names, which is 
really great. It is time consuming because I basically had to change 
everything.. My dlibs are on a dedicated volume and my RES datasets on another 
volume.

Then they changed all the ZFS dataset names, so they not end with ZFS now, so 
that required updates, because this then effects my BPXPRMxx member.  I might 
change things to the new IBM names in 2.6, but small changes now.

So my OMVS files are on a secondary RES, but cataloged as 
SYSAOP.ZA2511.  datasets.

SMPE, I use SMS, so I had to use a ton of filtering to place those.

Lastly the CPAC datasets, are my SAVE-OFF's.  I really never use them in 
production because I do system upgrades, but I do reference them for changes 
that I might  have to propagate to my Parmlib/proclibs.

This is why I use CPAC.ZOS25.xx and SMPE.MVS.ZOS25.   this allows 
me to not have to deal with alias's.

All my SYS1.x are SYS1SSA, which SMS has special rules for that allow me to 
direct to volumes of my doing.

So far I like that part in z/OSMF.

Now I hit a few things, because its always checking names in the background..  
So when it says its going to build jobs, it lies, its actually verifying names 
first.  So because I already installed z/OS 2.5 with a serverpac, I would like 
to bypass a few things and it will not let me.  So back to adding a SSA for my 
duplicates to get thru the screens.

I understand IBM is trying to make this idiot/Beginner proof, but I wish there 
was and advanced I know what I am doing option.

Heck even with my serverpac this time, I modified every job, because it didn’t 
allow me to build what I wanted as a configuration.

At least z/OSMF seems to allow name changes, but before it builds jobs it goes 
and validates all the names.  I wish that was a batch job, but such as life..

So the saga continues..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Keith Gooding
Sent: Tuesday, October 26, 2021 3:03 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Issues Updated

External Email


Hi Terri.

I had a more positive experience with z/osmf installation of a z/os serverpac 
after some initial confusion.

A long time ago I had created a ‘software instance’ from a pair of z/os 2.4 
target/dlib zones. I used this as a model for my 2.5 installation and was very 
surprised when z/osmf proceeded to tailor the dataset names like the 2.4 
instance - surprised because I expected that the model had to be an instance 
created by a z/osmf installation. I now see that it probably looks for matching 
DDDEFs and adjusts the new dataset names accordingly.

I had to adjust the names for new datasets and operational datasets. Here I 
found that z/osmf appears to look for common HLQs in a dataset filter list and 
gives the opportunity to change that common HLQ to something else. I did this 
for instance for some CPAC datasets where we want the HLQ to be SYS1.CPAC 
instead of CPAC - I filtered on HLQs to get a list of all CPAC datasets and 
excluded the ones I did not want to change.

If you do not have a model instance then of course to change all HLQs to SYS1 
you would have to change each HLQ (CEe, ISF etc) separately.

I still have some gripes but these occurred also with the old dialogue:
- only single level aliases are supported. We want to use OMVS.ZOS250 as a 2 
level alias pointing to a new catalog on sysres but this has to be done 
post-install.

- SMPE.ZOS250.* non-VSAM datasets on the sysres are indirectly cataloged 
because indirect cataloging by the installation dialogue works at the volume 
level.

- I always do what used to be called an ‘upgrade install’.  With z/osmf I 
instead answered ‘no’ to ‘do you want to create operational datasets’. In both 
cases we still get some operational datasets such as CPAC.PARMLIB. Most of 
these are not required but to avoid clashing with existing datasets of the same 
name I rename them as SYS!.CPAC.* and indirectly catalog them on sysres.

Keith GOODING


> On 26 Oct 2021, at 18:05, Shaffer, Terri 
> <017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:
>
> Okay I am going to retract the dataset names issue.  Either my z/OSMF 
> decided to play nice now, or I did something wrong.
>
> I can modify all the names to my preferred names and HLQ..
>
> So let me continue to see what happens.. It sure would have been nice to just 
> retrieve my CPAC.SAVE.CONFIG file.
>
> But okay..
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide – Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>

---

Re: Serverpac installs January 2022 and beyond - Issues Updated

[Shaffer, Terri]

Okay I am going to retract the dataset names issue.  Either my z/OSMF decided 
to play nice now, or I did something wrong.

I can modify all the names to my preferred names and HLQ..

So let me continue to see what happens.. It sure would have been nice to just 
retrieve my CPAC.SAVE.CONFIG file.

But okay..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Tuesday, October 26, 2021 12:20 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Serverpac installs January 2022 and beyond - Issues

External Email


Well I tried, but there are way to many issues with using z/OSMF in my 
installation.

First you cant fix the dataset names, you can only change the prefix, We use 
SYS1.qualifier for all datasets.
When I run the server it just appends SYS1SSA as a HLQ and I am off running.

Next SMPE datasets, I use SMPE.ZOS2x.qualifier and then for my Targets I add in 
the Zone name.

z/OSMF insist on adding SYS1 to it, which stuffs in into the wrong catalog for 
renames.

Then there are no work-arounds, if the panels don’t build what you want, your 
done.

And to be honest I already have z/OS 2.5 installed and IPLed, but you have 
buried the migration guide, so I can guess but would like to have that as the 
first think I see when I install.  Unless it someplace else less obvious.

Will revisit in 2+ years...

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com> This email message and any attachments may 
contain confidential, proprietary or non-public information. The information is 
intended solely for the designated recipient(s). If an addressing or 
transmission error has misdirected this email, please notify the sender 
immediately and destroy this email. Any review, dissemination, use or reliance 
upon this information by unintended recipients is prohibited. Any opinions 
expressed in this email are those of the author personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Serverpac installs January 2022 and beyond - Issues

[Shaffer, Terri]

Well I tried, but there are way to many issues with using z/OSMF in my 
installation.

First you cant fix the dataset names, you can only change the prefix, We use 
SYS1.qualifier for all datasets.
When I run the server it just appends SYS1SSA as a HLQ and I am off running.

Next SMPE datasets, I use SMPE.ZOS2x.qualifier and then for my Targets I add in 
the Zone name.

z/OSMF insist on adding SYS1 to it, which stuffs in into the wrong catalog for 
renames.

Then there are no work-arounds, if the panels don’t build what you want, your 
done.

And to be honest I already have z/OS 2.5 installed and IPLed, but you have 
buried the migration guide, so I can guess but would like to have that as the 
first think I see when I install.  Unless it someplace else less obvious.

Will revisit in 2+ years...

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM Z WORKLOAD SCHEDULER - Upgrade issues

[Shaffer, Terri]

Thanks, Found the issue.

Apparently my predecessors to share the EV file, in V9R3 they allowed this, in 
V9R5, they stopped it.

So I didn’t notice that the tracker was not running on my controller LPAR.

Had to fix some JCL  to point to the correct names and now everything is 
working..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Monday, October 25, 2021 8:03 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IBM Z WORKLOAD SCHEDULER - Upgrade issues

External Email


Terri,

Did you turn on job submission under Service Functions?

And if not, be prepared for everything to run.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Monday, October 25, 2021 7:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: IBM Z WORKLOAD SCHEDULER - Upgrade issues

Was wondering if anyone could point me in the right direction.

Over the weekend we upgraded our last 2.2 LPAR to z/OS 2.4, so that I could IPL 
my z/OS 2.5 system.

With that it was required that I update the scheduler from 9.3 to 9.5,  
Allocated all the new files, did the upgrades, etc

And restarted the scheduler, Daily plan loaded and everything looked correct.

All my jobs were waiting on time or it looked that way.  This morning 
everything was still waiting.

The status was an * or R, but it will not submit the jobs.

I am not an expert, I dabble mostly, but can figure out most things, but this 
one has me lost.

Can someone point me in were the issue might be?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com> This email message and any attachments may 
contain confidential, proprietary or non-public information. The information is 
intended solely for the designated recipient(s). If an addressing or 
transmission error has misdirected this email, please notify the sender 
immediately and destroy this email. Any review, dissemination, use or reliance 
upon this information by unintended recipients is prohibited. Any opinions 
expressed in this email are those of the author personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

IBM Z WORKLOAD SCHEDULER - Upgrade issues

[Shaffer, Terri]

Was wondering if anyone could point me in the right direction.

Over the weekend we upgraded our last 2.2 LPAR to z/OS 2.4, so that I could IPL 
my z/OS 2.5 system.

With that it was required that I update the scheduler from 9.3 to 9.5,  
Allocated all the new files, did the upgrades, etc

And restarted the scheduler, Daily plan loaded and everything looked correct.

All my jobs were waiting on time or it looked that way.  This morning 
everything was still waiting.

The status was an * or R, but it will not submit the jobs.

I am not an expert, I dabble mostly, but can figure out most things, but this 
one has me lost.

Can someone point me in were the issue might be?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OSMF Certificates

[Shaffer, Terri]

Wanted to update everyone that responded to the resolution.

So after installing the 2 new CA's and new Client certificates in RACF.

I normally use Firefox or Edge as my browsers and neither worked, but never 
used Chrome.

I tried Chrome and Poof, got a secured HTTPS connection, That lead me down the 
mis-matched path/not found paths.

I looked at Edge and found an old copy of the original certificate zosmfca was 
still there in a few places.  I deleted all of them and poof my new 
certificates was used and https started working.

Firefox, I didn’t find any old certificates, what I found was it didn’t 
automatically import my 2 CA certificates.  So I had to manually import and 
then it then it started to work correctly.

Thanks for everyone's ideas and help.


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Carmen Vitullo
Sent: Friday, August 13, 2021 9:09 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF Certificates

External Email


I am working with out security folks also, they are requiring TLS 1.2 only 
connections, there's a local override file you can add to force all connections 
to TSL1.2, but be careful, if you use the JES2EDS (email delivery system) you 
also need to force TLS 1.2 via a SSH daemon or adding the TLS 1.2 parm in 
CEEPRMxx

for z/OS 2.3 and beyond

/global/zosmf/configuration - add

local_override.cfg

IZU_SSL_PROTOCOL=TSL1.2

if you need to force TLS 1.2 via LE

add

ENVAR=("GSK_PROTOCOL_TLSV1_2=ON")

I've tested with only the z/osmf local override file and this caused JES2EDS 
connections to fail.

there may be some other options, this is the only option that seemed to satisfy 
my security folks and still allow everything to work / connect

Carmen



On 8/13/2021 7:59 AM, Shaffer, Terri w
rote:
> So I am no expert when it comes to certificates,  So maybe someone can shed 
> some light for me.
>
> By default z/OSMF is configured with a CA   or ZOSMFCA label.   That doesn't 
> work or maybe seem to work for me. I can generate a client certificate from 
> it and download to me PC but will never establish an SSL TLS 1.2 connection.  
> I also done have admin rights, so even if I could it would only be for me, at 
> least I think.
>
> So my corporate network team, gave me a root and immediate CA and then 
> generated a client certificate for me.
>
> I imported them to RACF as trusted and built my z/OSMF key ring off those, 
> which seemed to work...
>
> However now I am getting
>
> [ERROR   ] CWPKI0022E: SSL HANDSHAKE FAILURE:  A signer with SubjectDN 
> CN=xxx.xxx.xxx.xxx my IP
> The signer might need to be added to local trust store 
> safkeyringhybrid://IZUSVR/IZUKeyring.IZUDFLT, located in SSL configuration 
> alias izuSSLConfig.
> The extended error message from the SSL handshake exception is: PKIX path 
> building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to 
> find valid certification path to requested target.
>
> Which I guess makes sense because my network team gave me all the Certs.  But 
> is there a way to resolve this so all users get a TLS 1.2 htps connection?
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> 
>   [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg]
> <http://www.aciworldwide.com> This email message and any attachments may 
> contain confidential, proprietary or non-public information. The information 
> is intended solely for the designated recipient(s). If an addressing or 
> transmission error has misdirected this email, please notify the sender 
> immediately and destroy this email. Any review, dissemination, use or 
> reliance upon this information by unintended recipients is prohibited. Any 
> opinions expressed in this email are those of the author personally.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
--
/I am not bound to win, but I am bound to be true. I am not bound to succeed, 
but I am bound to live by the light that I have. I must stand with anybody that 
stands right, and stand with him while he is right, and part with him when he 
goes wrong. *Abraham Lincoln*/

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030

Re: z/OSMF Certificates

[Shaffer, Terri]

I did that, I have 2 CA's and a client certificate when I view, but z/OSMF 
states its not in a local trust store.

CWPKI0022E: SSL HANDSHAKE FAILURE

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Colin Paice
Sent: Friday, August 13, 2021 9:22 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF Certificates

External Email


Display the certificate in the browser for example with chrome use 
chrome://settings/certificates with firefox use view certificates in settings

On Fri, 13 Aug 2021 at 14:13, Shaffer, Terri < 
017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:

> I thought that also,  but I am using the DNS name in my web browser.
>
> But they also my certificate with alias's.
>
> Subject Alt Names
> DNS Name   MFZ900ACWA.AM.TSACORP.COM
> DNS Name   MFZ900ACWA
> IP Address10.5.23.232
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide – Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> -Original Message-
> From: IBM Mainframe Discussion List  On
> Behalf Of Joe Monk
> Sent: Friday, August 13, 2021 9:04 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: z/OSMF Certificates
>
> External Email
>
>
> This is being caused because you are trying to access something by IP,
> but the certificate was issued to your DNS name.
>
> Try using the DNS name, and the problem will go away.
>
> Joe
>
> On Fri, Aug 13, 2021 at 7:59 AM Shaffer, Terri <
> 017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:
>
> > So I am no expert when it comes to certificates,  So maybe someone
> > can shed some light for me.
> >
> > By default z/OSMF is configured with a CA   or ZOSMFCA label.   That
> > doesn't work or maybe seem to work for me. I can generate a client
> > certificate from it and download to me PC but will never establish
> > an SSL TLS 1.2 connection.  I also done have admin rights, so even
> > if I could it would only be for me, at least I think.
> >
> > So my corporate network team, gave me a root and immediate CA and
> > then generated a client certificate for me.
> >
> > I imported them to RACF as trusted and built my z/OSMF key ring off
> > those, which seemed to work...
> >
> > However now I am getting
> >
> > [ERROR   ] CWPKI0022E: SSL HANDSHAKE FAILURE:  A signer with SubjectDN
> > CN=xxx.xxx.xxx.xxx my IP
> > The signer might need to be added to local trust store
> > safkeyringhybrid://IZUSVR/IZUKeyring.IZUDFLT, located in SSL
> > configuration alias izuSSLConfig.
> > The extended error message from the SSL handshake exception is: PKIX
> > path building failed:
> > com.ibm.security.cert.IBMCertPathBuilderException: unable to find
> > valid
> certification path to requested target.
> >
> > Which I guess makes sense because my network team gave me all the Certs.
> > But is there a way to resolve this so all users get a TLS 1.2 htps
> > connection?
> >
> > Ms Terri E Shaffer
> > Senior Systems Engineer,
> > z/OS Support:
> > ACIWorldwide - Telecommuter
> > H(412-766-2697) C(412-519-2592)
> > terri.shaf...@aciworldwide.com
> >
> > 
> >  [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg]
> > < http://www.aciworldwide.com> This email message and any
> > attachments may contain confidential, proprietary or non-public
> > information. The information is intended solely for the designated
> > recipient(s). If an addressing or transmission error has misdirected
> > this email, please notify the sender immediately and destroy this
> > email. Any review, dissemination, use or reliance upon this
> > information by unintended recipients is prohibited. Any opinions
> > expressed in this email are those of the author personally.
> >
> > 
> > -- For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO
> > IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> 
> [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] <
> http://www.aciworldwide.com> This email

Re: z/OSMF Certificates

[Shaffer, Terri]

Hi Colin,
  Yes I read your info and it was super helpful, but I could get past not 
having the ability for all PC's to do an HTTPS  TLS 1.2 connection from a 
browser.

For example.

Label:Corporate Root CA
Certificate ID:2QiJmZmDhZmjgcOWmZeWmYGjhUDZlpajQMPB
Status:TRUST
Start Date:2015/08/14 13:27:47
End Date:  2114/08/14 13:37:46
Serial Number:xxx

Issuer's Name:CN=COV1CERT01VM
Subject's Name:CN=COV1CERT01VM

Label:Corporate IMMED CA
Certificate ID:2QiJmZmDhZmjgcOWmZeWmYGjhUDJ1NTFxEDDwUBA
Status:TRUST
Start Date:2016/04/25 13:00:14
End Date:  2114/08/14 13:37:46
Serial Number:xxx

Issuer's Name:CN=COV1CERT01VM
Subject's Name:CN=NRC1CERT03VM.am.tsacorp.com

Label:ACWA Client Cert
Certificate ID:2Qfj4uLjxeLBwcPmwUDDk4mFlaNAw4WZo0BA
Status:TRUST
Start Date:2021/08/11 08:34:50
End Date:  2023/08/11 08:34:50
Serial Number:

Issuer's Name:CN=NRC1CERT03VM.am.tsacorp.com
Subject's Name:CN=MFZ900ACWA.AM.TSACORP.COM

Subject's AltNames:
  ,IP:10.x.xx.xxx
  ,Domain: MFZ900ACWA.AM.TSACORP.COM

And lastly my keyring owned by IZUSVR

Ring:
 ,IZUKeyring.IZUDFLT

 Certificate Label NameCert Owner   USAGE   DEFAULT
-  ---  
 ,Corporate Root CA,CERTAUTH,CERTAUTH   ,NO
 ,Corporate IMMED CA   ,CERTAUTH,CERTAUTH   ,NO
 ,ACWA Client Cert ,ID(TSSTESA) ,PERSONAL   ,YES



Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Colin Paice
Sent: Friday, August 13, 2021 9:13 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF Certificates

External Email


Terri,

I too had problems and wrote A practical guide to getting z/OSMF working 
<https://colinpaice.blog/2020/12/21/a-practical-guide-to-getting-z-osmf-working/>
it mentions certificates.

It sounds like someone is trying to connect to your server.   The CAs for
this user are not in the server's keyring.

Can you list your client's certificate and see the CA's for the client cert?

on z try
RACDCERT LISTRING(IZUKeyring.IZUDFLT ID(IZUSVR) to see what is in RACF.

What are you using on your client  - browser or python etc?

regards

Colin

On Fri, 13 Aug 2021 at 13:59, Shaffer, Terri < 
017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:

> So I am no expert when it comes to certificates,  So maybe someone can
> shed some light for me.
>
> By default z/OSMF is configured with a CA   or ZOSMFCA label.   That
> doesn't work or maybe seem to work for me. I can generate a client
> certificate from it and download to me PC but will never establish an
> SSL TLS 1.2 connection.  I also done have admin rights, so even if I
> could it would only be for me, at least I think.
>
> So my corporate network team, gave me a root and immediate CA and then
> generated a client certificate for me.
>
> I imported them to RACF as trusted and built my z/OSMF key ring off
> those, which seemed to work...
>
> However now I am getting
>
> [ERROR   ] CWPKI0022E: SSL HANDSHAKE FAILURE:  A signer with SubjectDN
> CN=xxx.xxx.xxx.xxx my IP
> The signer might need to be added to local trust store
> safkeyringhybrid://IZUSVR/IZUKeyring.IZUDFLT, located in SSL
> configuration alias izuSSLConfig.
> The extended error message from the SSL handshake exception is: PKIX
> path building failed:
> com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid 
> certification path to requested target.
>
> Which I guess makes sense because my network team gave me all the Certs.
> But is there a way to resolve this so all users get a TLS 1.2 htps
> connection?
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> 
>  [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] <
> http://www.aciworldwide.com> This email message and any attachments
> may contain confidential, proprietary or non-public information. The
> information is intended solely for the designated recipient(s). If an
> addressing or transmission error has misdirected this email, please
> notify the sender immediately and destroy this email. Any review,
> dissemination, use or reliance upon this information by unintended
> recipients is prohibited. Any opinions expressed in this email are
> those of the author personally.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to

Re: z/OSMF Certificates

[Shaffer, Terri]

I thought that also,  but I am using the DNS name in my web browser.

But they also my certificate with alias's.

Subject Alt Names
DNS Name   MFZ900ACWA.AM.TSACORP.COM
DNS Name   MFZ900ACWA
IP Address10.5.23.232

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Joe 
Monk
Sent: Friday, August 13, 2021 9:04 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OSMF Certificates

External Email


This is being caused because you are trying to access something by IP, but the 
certificate was issued to your DNS name.

Try using the DNS name, and the problem will go away.

Joe

On Fri, Aug 13, 2021 at 7:59 AM Shaffer, Terri < 
017d5f778222-dmarc-requ...@listserv.ua.edu> wrote:

> So I am no expert when it comes to certificates,  So maybe someone can
> shed some light for me.
>
> By default z/OSMF is configured with a CA   or ZOSMFCA label.   That
> doesn't work or maybe seem to work for me. I can generate a client
> certificate from it and download to me PC but will never establish an
> SSL TLS 1.2 connection.  I also done have admin rights, so even if I
> could it would only be for me, at least I think.
>
> So my corporate network team, gave me a root and immediate CA and then
> generated a client certificate for me.
>
> I imported them to RACF as trusted and built my z/OSMF key ring off
> those, which seemed to work...
>
> However now I am getting
>
> [ERROR   ] CWPKI0022E: SSL HANDSHAKE FAILURE:  A signer with SubjectDN
> CN=xxx.xxx.xxx.xxx my IP
> The signer might need to be added to local trust store
> safkeyringhybrid://IZUSVR/IZUKeyring.IZUDFLT, located in SSL
> configuration alias izuSSLConfig.
> The extended error message from the SSL handshake exception is: PKIX
> path building failed:
> com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid 
> certification path to requested target.
>
> Which I guess makes sense because my network team gave me all the Certs.
> But is there a way to resolve this so all users get a TLS 1.2 htps
> connection?
>
> Ms Terri E Shaffer
> Senior Systems Engineer,
> z/OS Support:
> ACIWorldwide - Telecommuter
> H(412-766-2697) C(412-519-2592)
> terri.shaf...@aciworldwide.com
>
> 
>  [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] <
> http://www.aciworldwide.com> This email message and any attachments
> may contain confidential, proprietary or non-public information. The
> information is intended solely for the designated recipient(s). If an
> addressing or transmission error has misdirected this email, please
> notify the sender immediately and destroy this email. Any review,
> dissemination, use or reliance upon this information by unintended
> recipients is prohibited. Any opinions expressed in this email are
> those of the author personally.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

z/OSMF Certificates

[Shaffer, Terri]

So I am no expert when it comes to certificates,  So maybe someone can shed 
some light for me.

By default z/OSMF is configured with a CA   or ZOSMFCA label.   That doesn't 
work or maybe seem to work for me. I can generate a client certificate from it 
and download to me PC but will never establish an SSL TLS 1.2 connection.  I 
also done have admin rights, so even if I could it would only be for me, at 
least I think.

So my corporate network team, gave me a root and immediate CA and then 
generated a client certificate for me.

I imported them to RACF as trusted and built my z/OSMF key ring off those, 
which seemed to work...

However now I am getting

[ERROR   ] CWPKI0022E: SSL HANDSHAKE FAILURE:  A signer with SubjectDN 
CN=xxx.xxx.xxx.xxx my IP
The signer might need to be added to local trust store 
safkeyringhybrid://IZUSVR/IZUKeyring.IZUDFLT, located in SSL configuration 
alias izuSSLConfig.
The extended error message from the SSL handshake exception is: PKIX path 
building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to 
find valid certification path to requested target.

Which I guess makes sense because my network team gave me all the Certs.  But 
is there a way to resolve this so all users get a TLS 1.2 htps connection?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Requests

[Shaffer, Terri]

Its interesting, because I don’t have any products that give me extra extents 
except what SMS does for me space wise, and I have never increased my dataset 
size allocations.

That being said, my cloning process copies my res volume and ZFS datasets to 
new volumes and resets extents to current used, which is why I never used the 
software deployment and NEVER will in z/OSMF.

I also DEFRAG my RES volumes after an apply and with my 2 - MOD-27, have always 
had enough room, for my 2.2, 2.3 and 2.4 and hopefully for 2.5.  My z/OS 2.2, 
will be replaced in the SYSPLEX.

I apply around 1000 PTF each time, I do RSU upgrades normally twice a year over 
the life of a z/OS release and can say I might have had 10 datasets/ZFS 
expansion, I needed to expand during an APPLY.

This is the least of my concerns/issues for the serverpac.

I think, to say the Saved Config is out of date, is short sided and in 20 years 
I have always used it since serverpac gave me the MERGE and UPGRADE option.  
Fixed anything new to the Serverpac order and was ready to install in a short 
time.This saves SO MUCH TIME with installation as all I have to do verify, 
make very few updates and install.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Tuesday, July 20, 2021 12:51 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Requests

External Email


Hi Terri,
When adding an Software Instance that you already have (say, z/OS V2.4), you 
are telling z/OSMF the CSI and zones to use.  Those DDDEFs, presumably, will be 
correct with the data set names, volumes, and paths.  Those DDDEFs will be used 
as a model on the incoming z/OS CSI DDDEFs.  That will save you hundreds of 
customizations to do for z/OS V2.5 and beyond.  I've seen many ServerPac saved 
configurations that are stale, and the CSI DDDEFs are the correct and current 
values.  Meaning, that the ServerPac saved configuration can "drift" out of 
accuracy over time, but the CSI DDDEFs had better not. That is what I mean by 
saving time.  Especially when you are basing on a known, accurate, SMP/E 
configuration.

For the shipped configuration data sets (like CPAC.*):  if you add those data 
sets to that Software Instance, then those data sets can be modelled too.  If 
you choose not to, the worst thing is that the 16 CPAC data sets shipped with 
z/OS V2.5, can be modified *en masse* within the z/OSMF interface.  Since they 
are all shipped with a HLQ of CPAC, it is very easy to filter, select, move, 
rename them as a group.  With the z/OS V2.5 Software Instance, they then become 
known and can be modelled with future z/OS Portable Software Instances.

For the catalog:  depending on what catalog options you want - new master cat, 
existing master cat and the data set names you select - the existing structure 
you have on your driving system can be used and detected, should you wish to 
use it.  If you want a new master cat, you will need to supply the name and the 
temporary catalog alias of your choice (aka SSA), just like in the old 
ServerPac.  If you want all your data sets to begin with "ZOSV25", and you have 
that existing HLQ alias going to an existing usercat today, no problem, that 
will be used.  If you want to create a new master catalog, and use "MYSSA" as 
the temporary catalog alias, you'll need to supply that, just like in the old 
ServerPac.  The catalog structure, I see, is similar to how the old ServerPac 
did it.  Although, there is a lot more flexibility, because you can rename any 
data set, and put it in any catalog you want, with only VSAM (including zFS) 
forced to be cataloged.  The old ServerPac had lots of restrictions on what 
could be renamed, and where it had to be cataloged.

-Marna WALLE
z/OS System Install and Upgrade
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to 

Re: Serverpac installs January 2022 and beyond - Requests

[Shaffer, Terri]

Okay I am out. Thanks for the clarifications. I will revisit with z/OS 2.6... I 
will just order the serverpac Nov 1, and install, then just apply maint in Feb 
2022 and go-live in March 2022.   In 3 years I can revisit as you have not sold 
me on being simpler and much more work!

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Tuesday, July 20, 2021 12:51 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Requests

External Email


Hi Terri,
When adding an Software Instance that you already have (say, z/OS V2.4), you 
are telling z/OSMF the CSI and zones to use.  Those DDDEFs, presumably, will be 
correct with the data set names, volumes, and paths.  Those DDDEFs will be used 
as a model on the incoming z/OS CSI DDDEFs.  That will save you hundreds of 
customizations to do for z/OS V2.5 and beyond.  I've seen many ServerPac saved 
configurations that are stale, and the CSI DDDEFs are the correct and current 
values.  Meaning, that the ServerPac saved configuration can "drift" out of 
accuracy over time, but the CSI DDDEFs had better not. That is what I mean by 
saving time.  Especially when you are basing on a known, accurate, SMP/E 
configuration.

For the shipped configuration data sets (like CPAC.*):  if you add those data 
sets to that Software Instance, then those data sets can be modelled too.  If 
you choose not to, the worst thing is that the 16 CPAC data sets shipped with 
z/OS V2.5, can be modified *en masse* within the z/OSMF interface.  Since they 
are all shipped with a HLQ of CPAC, it is very easy to filter, select, move, 
rename them as a group.  With the z/OS V2.5 Software Instance, they then become 
known and can be modelled with future z/OS Portable Software Instances.

For the catalog:  depending on what catalog options you want - new master cat, 
existing master cat and the data set names you select - the existing structure 
you have on your driving system can be used and detected, should you wish to 
use it.  If you want a new master cat, you will need to supply the name and the 
temporary catalog alias of your choice (aka SSA), just like in the old 
ServerPac.  If you want all your data sets to begin with "ZOSV25", and you have 
that existing HLQ alias going to an existing usercat today, no problem, that 
will be used.  If you want to create a new master catalog, and use "MYSSA" as 
the temporary catalog alias, you'll need to supply that, just like in the old 
ServerPac.  The catalog structure, I see, is similar to how the old ServerPac 
did it.  Although, there is a lot more flexibility, because you can rename any 
data set, and put it in any catalog you want, with only VSAM (including zFS) 
forced to be cataloged.  The old ServerPac had lots of restrictions on what 
could be renamed, and where it had to be cataloged.

-Marna WALLE
z/OS System Install and Upgrade
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Requests

[Shaffer, Terri]

Ed,
  How would this even work?  Or be complete.. SMPE doesn’t know about my 
SERVERPAC customizations.  Or how about the CPAC. **  datasets or other 
operational names I setup.

How about my master catalog or usercatalog names..  and many other things..  I 
don’t understand how this would help or solve the layout issues.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Ed 
Jaffe
Sent: Tuesday, July 20, 2021 10:04 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Requests

External Email


On 7/20/2021 4:41 AM, Richards, Robert B. (CTR) wrote:
> "If I may suggest to all that will install z/OS V2.5 with z/OSMF, it really 
> behooves you to define your prior z/OS release right now as a Software 
> Instance."
>
> I do not want to assume that I completely understand your suggestion.

She means for you to go into the Software Management application in z/OSMF and 
add a new Software Instance. Choose your existing global CSI and target zone as 
appropriate.

--
Phoenix Software International
Edward E. Jaffe
831 Parkview Drive North
El Segundo, CA 90245
https://www.phoenixsoftware.com/



This e-mail message, including any attachments, appended messages and the 
information contained therein, is for the sole use of the intended 
recipient(s). If you are not an intended recipient or have otherwise received 
this email message in error, any use, dissemination, distribution, review, 
storage or copying of this e-mail message and the information contained therein 
is strictly prohibited. If you are not an intended recipient, please contact 
the sender by reply e-mail and destroy all copies of this email message and do 
not otherwise utilize or retain this email message or any or all of the 
information contained therein. Although this email message and any attachments 
or appended messages are believed to be free of any virus or other defect that 
might affect any computer system into which it is received and opened, it is 
the responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by the sender for any loss or damage arising in any 
way from its opening or use.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Requests

[Shaffer, Terri]

I would not think my SMPE CSI for my current z/OS 2.4 would have enough 
information to support a serverpac install.  Many things have been changed that 
I would not count on matching what it was for the actual serverpac install.  
Mountpoints, dataset names, etc.  Again if you looking for people to use this, 
at least with z/OS 2.5, you need to read my saved serverpac configuration file 
dataset.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
kekronbekron
Sent: Tuesday, July 20, 2021 9:24 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Requests

External Email


Hi Bob,

I believe she means that when you import your prior/current zOS CSI and set 
some parms (if required) for it, then you can base your target environment 
(CSI, files, etc.) off of it.
This way, you don't start at zero, i.e., defining all datasets manually, anew.

- KB

‐‐‐ Original Message ‐‐‐

On Tuesday, July 20th, 2021 at 5:11 PM, Richards, Robert B. (CTR) 
<01c91f408b9e-dmarc-requ...@listserv.ua.edu> wrote:

> Marna,
>
> Can you expand on what you mean below?
>
> "If I may suggest to all that will install z/OS V2.5 with z/OSMF, it really 
> behooves you to define your prior z/OS release right now as a Software 
> Instance."
>
> I do not want to assume that I completely understand your suggestion.
>
> Bob
>
> --
> --
> --
> --
> --
>
> For IBM-MAIN subscribe / signoff / archive access instructions,
>
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond - Requests

[Shaffer, Terri]

Marna,
  I missed a few answers to you below  I am hoping you can read my 
responses after yours.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Monday, July 19, 2021 1:35 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Requests

External Email


Hi Terri,
You are correct that within the z/OSMF interface, there is no way to edit a 
produced job for Deployment.  It is intended that no editing is necessary, in 
that if you need to "tweak" the job, we should be providing that capability 
within the interface itself.  The JCL produced should reflect what you want and 
also can be saved such that it can be reused for similar deployments, to avoid 
the same future tweaking.

Did you have any specifics on what you wanted to change in z/OSMF, but 
couldn't?  Realize that the data set configuration, volumes, and cataloging 
capabilities are extremely flexible and should be able to do whatever you want. 
 Even more so than the old ServerPac ISPF dialog.  For instance, you can rename 
any data set you want, put it anywhere you want, and the old dialog had some 
restrictions on certain data sets.  Might there be something in the data set, 
volume, and catalog capabilities we are missing?  I'd like to solve the 
editing-JCL problem, with a solution for you that allows you to incorporate 
your intentions right within the GUI much earlier, save that intention, and 
make it so that you never have to "remember" it again should you do a similar 
deploy of the product.   (I can see how tweaks to the old ServerPac JCL would 
not be saved in the configuration, and then you would have a need to keep doing 
those tweaks in the future for every install.  That is not the intention here 
with z/OSMF.)

If I have the capability to modify the names/volumes OF all 
datasets then the manual editing issue might go away.  The issues were always 
with the ALIAS screen and then that carried over to JCL issues!!

I believe the "work data set prefix" you are referring to is the temporary file 
system for use as SMPWKDIR on "Define Job Settings".  Would you like more 
information provided for that description to help understand what you are 
providing?  Maybe something like a "Learn more..." to quickly show with more 
details that we are asking for the beginning qualifier(s) of data set name, 
that is a temporary zFS (completely handled within the jobs and accurately 
sized) that will be used as the SMPWKDIR?  This should be an easy thing to do, 
if it would help.

Yes just something, so especially for first time use, the 
person understand what you are wanting in a field like that workdir.. I am 
assuming like /SMPNTS/Workdir  or like that???

On that same checklist location for "Define Job Settings", the jobcard can be 
supplied, and also the place where you want all the generated jobs saved (like 
we had in SCPPBENU).  Of course, you could run the jobs from that saved data 
set from ISPF, but again, the intention is that they are run through z/OSMF so 
the interface can keep track of what you've done and how far you've gone.  You 
could re-submit the same job again, from z/OSMF, should you wish. Or even 
indicate that the job is complete as your ran it from ISPF and you want to 
continue on.

Agreed if I have to submit thru ISPF, then z/OSMF becomes 
obsolete after I would generate the jobs, so its better to keep me in one 
place!!

If I may suggest to all that will install z/OS V2.5 with z/OSMF, it really 
behooves you to define your prior z/OS release right now as a Software 
Instance.  This will allow you to model z/OS V2.5 from that prior z/OS release 
and not have to re-specify hundreds of data sets and volume placement.  This is 
very very similar to the old ISPF ServerPac dialog "save and merge 
configuration".  You will still have some unique data sets to deal with, but it 
will be a lot fewer than the entire z/OS ServerPac.  Of course, I'd do that 
with CICS, Db2, and IMS also.

I think this is a show stopper for this install if you CANT read the 
SAVED config because then everyone can move forward from this z/OS 2.5 release 
in z/OSMF.
I would just spend the time in z/OS 2.6 to rebuild everything, which I 
think IBM really is missing the boat here

-Marna WALLE
z/OS System Install and Upgrade
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 

Re: Serverpac installs January 2022 and beyond - Requests

[Shaffer, Terri]

Hi Marna,
  Thanks for the response.

So remembering my last serverpac install was 2.4 about a year ago, I am going 
by memory, but also from my past history.

There has always been issue, with a system upgrade, where I am re-using my 
existing catalog structure, but yet all forced IPL required datasets are not 
used.

These are like CPAC.  Datasets.   This causes cataloging issues in a few jobs 
as they are "required".  The way around this was to edit the job, change the 
names, etc and submit.

The other thing and maybe I am missing it, was the SSA,  I always used SYS1SSA. 
 Which was prefixed to all my SYS1 datasets only.

This caused issues with how jobs are built, because I used datasets, like 
CPAC.PARMLIB, etc and a template to copy things I might need for my upgrade in 
MY operational datasets.

There are at least 2-3 times I had to edit JCL to "fix" these operational 
changes.  Again I understand exactly where I want things and put datasets on 
alternate volumes just so I have them.

I can see why the junior or someone without that experience you might not want 
to fiddle with layout, but I have gotten my process down to about 3-4 hours for 
my complete SERVERPAC install.

I saved off my configuration, merged with the NEW configuration to any new 
datasets, changed the Logical to place the datasets where I want them and load.

I also see the dataset where you build all the JCL and even though I hope I 
don’t have too,  I could copy this dataset to a backup, edit my changes and 
submit outside of z/OSMF.

Like I said you are forcing a learning curve just like SERVERPAC was eons ago, 
which I am okay with AS LONG as I don’t lose functionality or flexibility, or 
maybe under an ADVANCED TAB, use caution, etc.

I have many thoughts. Just like you said, you should read my 
CPAC.OS240860.CONFIG dataset and merge the new serverpac information with it.

Since many already do this, and it was a SERVERPAC staple, why not prompt the 
user for the information and once a user states NEW or UPGRADE, merge with 
their configuration???

Again maybe you do, but I get the feeling you are throwing that responsibility 
back, which then causes more time and learning curves..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Monday, July 19, 2021 1:35 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond - Requests

External Email


Hi Terri,
You are correct that within the z/OSMF interface, there is no way to edit a 
produced job for Deployment.  It is intended that no editing is necessary, in 
that if you need to "tweak" the job, we should be providing that capability 
within the interface itself.  The JCL produced should reflect what you want and 
also can be saved such that it can be reused for similar deployments, to avoid 
the same future tweaking.

Did you have any specifics on what you wanted to change in z/OSMF, but 
couldn't?  Realize that the data set configuration, volumes, and cataloging 
capabilities are extremely flexible and should be able to do whatever you want. 
 Even more so than the old ServerPac ISPF dialog.  For instance, you can rename 
any data set you want, put it anywhere you want, and the old dialog had some 
restrictions on certain data sets.  Might there be something in the data set, 
volume, and catalog capabilities we are missing?  I'd like to solve the 
editing-JCL problem, with a solution for you that allows you to incorporate 
your intentions right within the GUI much earlier, save that intention, and 
make it so that you never have to "remember" it again should you do a similar 
deploy of the product.   (I can see how tweaks to the old ServerPac JCL would 
not be saved in the configuration, and then you would have a need to keep doing 
those tweaks in the future for every install.  That is not the intention here 
with z/OSMF.)

I believe the "work data set prefix" you are referring to is the temporary file 
system for use as SMPWKDIR on "Define Job Settings".  Would you like more 
information provided for that description to help understand what you are 
providing?  Maybe something like a "Learn more..." to quickly show with more 
details that we are asking for the beginning qualifier(s) of data set name, 
that is a temporary zFS (completely handled within the jobs and accurately 
sized) that will be used as the SMPWKDIR?  This should be an easy thing to do, 
if it would help.

On that same checklist location for "Define Job Settings", the jobcard can be 
supplied, and also the place where you want all the generated jobs saved (like 
we had in SCPPBENU).  Of course, you could run the jobs from that saved data 
set from ISPF, but again, the intention is that they are run through z/OSMF so 
the interface can keep track of what you've done and how far you've 

Re: Serverpac installs January 2022 and beyond - Requests

[Shaffer, Terri]

So,  I am going to ease up on IBM a little, except for the resources needed for 
z/OSMF,  But have a few usability requests just as in the serverpac.

I am not 100% convinced yet, but I see no way of editing a job that was 
generated, BEFORE submit!!

I also see fields on the screen but no context help as to know what they want 
to fill in, like * Work data set name prefix:  what was the equivalent ??

This is critical, in many shops I have every installed SEVERPAC in, due to 
catalogs naming's mostly and where datasets live.

In serverpac, you could SAVE JCL and recall using BACKUP to re-run something 
you had to modify for whatever reason.  That ability seems gone??

I will test using z/OSMF based on what I saw in the DEMO, but when dealing with 
1200+ z/OS datasets across, probably 5 or 6  volumes, in my experience always 
needed tweaked!

Again, maybe for the sysprog, who doesn’t understand, this make perfect sense, 
but there are many times, the canned/generated JCL will not work in an 
environment and the dialogs don’t allow it to be fixed.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Serverpac installs January 2022 and beyond

[Shaffer, Terri]

Hi Cheryl,
  I think the issues and its really outside of this scope, but I am the ONLY 
system programmer at my shop.  I maintain all 7 z/OS lpars with 3 z/OS 
releases, including the care and installation of VM 7.1.

I am also the Operator, HMC, Do IPLs, RACF, CICS, OMVS,  HSM, SMS, DASD, ETC, I 
dabble in DB2, MQ and WAS (but not all that great) and am the only person who 
does SMPE installs and installations.

We only run 2 ISV products  QW and Micro focus. So that simplifies things.

So unfortunately, my core skillset, I use, instead of the z/OSMF click type, 
with the latest SDSF screens over the past releases, everything is a screen 
away.

For z/OSMF I have setup/used in a past life at Chase Bank, but now I find there 
is no real need because of everything else I am doing. But it looks like IBM is 
now forcing that issue...

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Cheryl Watson Walker
Sent: Friday, July 16, 2021 10:26 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond

External Email


Hi Terri,

I understand your situation, but I hope you will reconsider one of your earlier 
statement: "never touch z/OSMF again for 2 years."  Yes, z/OSMF has had some 
problems, but it is absolutely IBM's direction and new functions/facilities are 
being added to z/OSMF all the time.  As one of your site's senior people, I 
think it would be to your benefit to ensure that your entire staff is familiar 
with the tool.  As an ISV, you are probably in the PartnerWorld ISV group and 
see that other software vendors are creating installation workflows for their 
own software.  Even as a small software provider, we're looking at doing the 
same thing.

I think that it is a shame that the bad experiences, such as with certificates, 
have kept many installations from exploiting the powerful features of z/OSMF.  
One small example that I heard a couple of weeks ago was a site who finally 
went to z/OSMF in production and discovered that WLM under z/OSMF provides an 
edit facility to show if something is incorrect.
The person said: "where has this been all my life?".  So I hope that other 
sites will not let a bad experience keep them from trying it again.

Best regards,
Cheryl

==
Cheryl Watson Walker, CEO
Watson & Walker, Inc.
Sarasota, FL USA
www.watsonwalker.com
==



-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, July 16, 2021 7:07 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond

So I have to politely disagree with that comment.

z/OSMF software install has always had its limitations as with big installation 
we installed once and replicated 127 times to all our other lpars.  Now in my 
small shop its only 7 times, but I maintain 3 different levels of z/OS since we 
develop mainframe software.

So yes huge learning curve, in-fact even serverpac has a few nuances when it 
comes to certain system layouts, where parmlib's, proclibs, TCPIP and other 
"system datasets' live and tweaking of the recatDS jobs to u fix things.

I never said I will not try it and see, but yes my fall-back is Serverpac at 
least one more time, for the reasons I mentioned below. I have been apart of a 
few ESP's with IBM, so I am open to ideas.

Over my 38 years doing MVS system programming, Serverpac was a slice of heaven, 
once a few modifications where allowed and I didn't have to use the manual 
hacks modifying CPAC SLIB entries for over-rides.

My comments where directed at usability, layouts, the ability to perform a 
system layout that matches my current environments, and the list goes on.

I like having the control before I submit a job, completely understanding what 
is does, because the thing I hate is opps after I hit enter.

Also the setup for certificates, especially on corporate PC's, with no ADMIN 
rights or a defined process to manage, adds to my concerns and issues.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Friday, July 16, 2021 12:40 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond

External Email


This level of vitriol is best left to twitter, fb or Instagram.

It is totally uncalled for on this list. Every new process has its bumps and 
bruises and after twenty years, ServerPac was overdue for a makeover.

Just my two cents.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Ron 
Wells
Sent: Friday, July 16, 2021 12:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Su

Re: Serverpac installs January 2022 and beyond

[Shaffer, Terri]

So I have to politely disagree with that comment.

z/OSMF software install has always had its limitations as with big installation 
we installed once and replicated 127 times to all our other lpars.  Now in my 
small shop its only 7 times, but I maintain 3 different levels of z/OS since we 
develop mainframe software.

So yes huge learning curve, in-fact even serverpac has a few nuances when it 
comes to certain system layouts, where parmlib's, proclibs, TCPIP and other 
"system datasets' live and tweaking of the recatDS jobs to u fix things.

I never said I will not try it and see, but yes my fall-back is Serverpac at 
least one more time, for the reasons I mentioned below. I have been apart of a 
few ESP's with IBM, so I am open to ideas.

Over my 38 years doing MVS system programming, Serverpac was a slice of heaven, 
once a few modifications where allowed and I didn't have to use the manual 
hacks modifying CPAC SLIB entries for over-rides.

My comments where directed at usability, layouts, the ability to perform a 
system layout that matches my current environments, and the list goes on.

I like having the control before I submit a job, completely understanding what 
is does, because the thing I hate is opps after I hit enter.

Also the setup for certificates, especially on corporate PC's, with no ADMIN 
rights or a defined process to manage, adds to my concerns and issues.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Richards, Robert B. (CTR)
Sent: Friday, July 16, 2021 12:40 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond

External Email


This level of vitriol is best left to twitter, fb or Instagram.

It is totally uncalled for on this list. Every new process has its bumps and 
bruises and after twenty years, ServerPac was overdue for a makeover.

Just my two cents.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Ron 
Wells
Sent: Friday, July 16, 2021 12:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond

Total joke--setup and developed by people that THINK they know what they are 
doing and THINK they know what you need.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, July 16, 2021 11:01 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond

** EXTERNAL EMAIL - USE CAUTION **


So not to beat up on this new installation process, but if I have the option on 
installing z/OS 2.5 with serverpac in Oct, I will never touch z/OSMF again for 
2 years.

It took me 2 days and working with security just to get the certificates 
working correctly.  I still have issues with the HTTPS not authenticating, but 
at least z/OSMF can communicate with my LPARS.

Then I tried the TRYIT - Portable software instance and looks like even more 
issues, or things that haven't been customized.  Because I don't use ISP, HLQ's

An error occurred on system "ACWA". Error: "login: timeout: 
TsoServerConnection(USER=TSSTESA, ASID=0x00b5, QID=0x0019)". "IKJ56455I 
TSSTESA LOGON IN PROGRESS AT 10:49:05 ON JULY 16, 2021 IEFA107I TSSTESA 
IZUFPROC IZUFPROC SYSEXEC - DATA SET ISP.SISPEXEC NOT FOUND ". The error report 
returned by the z/OS data set and files REST interface for the "LIST_DATASETS" 
service contains category "2", return code 4 and reason 1.

For the migration guide I will explode/print because using z/OSMF on a window 
that is about 8 x 5 is un-usable, with all the z/OSMF headers and tabs, etc.

If IBM wanted to fix this SPAWN another window to view the Migration task at 
least then it would be the size of my laptop monitor.

I understand IBM's direction but just like many shops have stated we never 
start it, I just setup a JCL error in the proc and go about it not taking 130G 
of storage and resources.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Sunday, March 7, 2021 10:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond

External Email


Brian,
I would like to assure you that this decision was not taken lightly, and was 
taken with all those considerations (and others) to extend both ordering types 
for as long as was feasible.

Some points I would like to make:

- the z/OS ServerPac for z/OSMF is extremely similar to the CICS, Db2,and IMS 
ServerPac for z/OSMF.  What is different?  The Workflows which contain the 
configuration and verification, since they are product-specific.  Where can you 
see those Workflow steps today?  By 

Re: Serverpac installs January 2022 and beyond

[Shaffer, Terri]

So not to beat up on this new installation process, but if I have the option on 
installing z/OS 2.5 with serverpac in Oct, I will never touch z/OSMF again for 
2 years.

It took me 2 days and working with security just to get the certificates 
working correctly.  I still have issues with the HTTPS not authenticating, but 
at least z/OSMF can communicate with my LPARS.

Then I tried the TRYIT - Portable software instance and looks like even more 
issues, or things that haven't been customized.  Because I don’t use ISP, HLQ's

An error occurred on system "ACWA". Error: "login: timeout: 
TsoServerConnection(USER=TSSTESA, ASID=0x00b5, QID=0x0019)". "IKJ56455I 
TSSTESA LOGON IN PROGRESS AT 10:49:05 ON JULY 16, 2021 IEFA107I TSSTESA 
IZUFPROC IZUFPROC SYSEXEC - DATA SET ISP.SISPEXEC NOT FOUND ". The error report 
returned by the z/OS data set and files REST interface for the "LIST_DATASETS" 
service contains category "2", return code 4 and reason 1.

For the migration guide I will explode/print because using z/OSMF on a window 
that is about 8 x 5 is un-usable, with all the z/OSMF headers and tabs, etc.

If IBM wanted to fix this SPAWN another window to view the Migration task at 
least then it would be the size of my laptop monitor.

I understand IBM's direction but just like many shops have stated we never 
start it, I just setup a JCL error in the proc and go about it not taking 130G 
of storage and resources.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Sunday, March 7, 2021 10:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Serverpac installs January 2022 and beyond

External Email


Brian,
I would like to assure you that this decision was not taken lightly, and was 
taken with all those considerations (and others) to extend both ordering types 
for as long as was feasible.

Some points I would like to make:

- the z/OS ServerPac for z/OSMF is extremely similar to the CICS, Db2,and IMS 
ServerPac for z/OSMF.  What is different?  The Workflows which contain the 
configuration and verification, since they are product-specific.  Where can you 
see those Workflow steps today?  By looking at your z/OS CustomPac dialog JCL 
jobs you ran for your last z/OS installation.  Those are the Workflow steps 
you'll see.  So the "differences" are simply the way you submit the JCL jobs.  
Do you want to see how you lay down the data sets and assign them to volumes 
and catalogs, and how that is different with z/OSMF vs. ISPF?  Look today at 
the CICS, IMS, and Db2 z/OSMF ServerPac.  That is how it will be done - with 
the z/OS addition that you'll be able to use (or not use) a new master catalog, 
as you desire.

- providing a "dual" method of installing the z/OS release (and other IBM 
products) requires two software manufacturing processes, for existing and every 
new product that GA's during that time. I'm sure I don't need to mention that 
the costs of have two production processes for every product in the IBM catalog 
is not insignificant.  Now, that is what we are doing right now for CICS, IMS, 
and Db2, so that customers can have that choice right now for the non-z038 SREL 
products.  It is expected that you set up and learn this process now, so that 
when the z/OS SREL arrives, it is not a unknown method of installing.  Keep in 
mind, these "dual" paths and costs have been ongoing since September 2019.  
This overlap has been going on for a while, at varying levels for the product 
set.

- As you mention, if you still want to see z/OS itself in z/OSMF ServerPac, 
then order z/OS V2.5 between Sept 2021 and January 2022.  Install it.  Throw it 
away.   That would then be your "test order".   That is how it will install 
should you re-order z/OS V2.5 (or a later release) when you are ready to 
install it.

- You mention that the service on the ServerPac, if you keep it un-installled, 
will need more PTFs. Yes, if you insist that you must install a CustomPac 
ServerPac after that path is gone, it will age as any old ServerPac order will 
age.  This is no different than ordering a z/OS release in ServerPac before it 
is end-of-marketing, putting it on the shelf, and having to install many PTFs 
today. I've seen lots of customers do that for z/OS V2.3, when they were on 
V2.1 and weren't ready to move yet.  Always, I recommend that if your z/OS 
release is still orderable and yours has aged, order another one with current 
service.

- You mention anyone running below z/OS V2.3, will have a harder path to z/OS 
V2.5.  I would say that anyone on V2.2 or lower, wishing to go to z/OS V2.5, 
will have a harder path if they don't stay within the coexistence policy, and 
are not service supported.  And this has little to do with how the ServerPac is 
packaged.  I know you are involved in quite a few of those "long jumps" and 

Re: DFHSM Backups using DFDSS - Enqueues

[Shaffer, Terri]

Hi Sorry, No.. I opened an issue with IBM, and they told me DFHSM will 
eventually backup the file, Because I did a List BCDS on the dataset and it was 
backed up.

They just fill the logs with failures, instead of giving a RC=4, Warning about 
the backup.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Glenn Wilcock
Sent: Friday, March 5, 2021 12:32 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: DFHSM Backups using DFDSS - Enqueues

External Email


Hi Terri,

You have the correct HSM setting - INUSE(...)  HSM traps on the ADR412 message 
to know that DSS failed serialization and that it should be retried.  Do you 
see a subsequent DSS Dump for the data sets that initially failed (a retry w/o 
serialization)?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: DFHSM Backups using DFDSS - Enqueues

[Shaffer, Terri]

Thanks, True, but you cant set that option running under DFHSM.  Or I cant find 
a parm to set it.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Reno Puntillo
Sent: Thursday, March 4, 2021 2:27 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: DFHSM Backups using DFDSS - Enqueues

External Email


I believe you are referring to the "SHARE and TOLERATE(ENQFAILURE)" switches in 
order to get a successful fuzzy copy.

https://www.ibm.com/support/knowledgecenter/SSLTBW_2.2.0/com.ibm.zos.v2r2.adru000/r2003.htm

"You can specify TOLERATE(ENQFAILURE) in addition to the default, ENQ, or the 
SHARE option. If TOLERATE(ENQFAILURE) is specified, DFSMSdss attempts to get 
the specified level of enqueue, exclusive or share. If the enqueue fails after 
the specified or default number of retries, DFSMSdss processes the data set 
without an enqueue. Specify TOLERATE(ENQFAILURE) if you are willing to tolerate 
the exposure of not having data integrity in order to force the successful 
completion of that particular data set operation. This is particularly useful 
when an installation has duplicate data sets (different data sets with the same 
name but on different volumes) and you want to run DFSMSdss on a data set on 
one volume while the data set with the same name is being used by the system or 
another job on a different volume."

Hope that helps.

Reno


-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: March 4, 2021 1:49 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: DFHSM Backups using DFDSS - Enqueues

Hello,
  So its been awhile since I setup DFHSM, and have a small issue with doing my 
backups, with enqueue failures.  Normally I would set TOL(ENQF) in DFDSS, but 
since DFHSM is passing control that flag never gets set.   I did set BACKUP 
(INUSE to SERIALIZATION=PREFERRED)  but that didn’t help in all cases.. For 
example:

ADR035I (SCH)-PRIME(06), INSTALLATION EXIT ALTERED BYPASS FAC CLASS CHK DEFAULT 
 DUMP DATASET(INCLUDE(PFMTDB2.LOGCOPY1.DS01)) -
  OUTDDNAME(SYS85689) CANCELERROR OPTIMIZE(4) -
  SPHERE -
  SHARE
ADR101I (R/I)-RI01 (01), TASKID 001 HAS BEEN ASSIGNED TO COMMAND 'DUMP '
ADR109I (R/I)-RI01 (01), 2021.063 15:02:04 INITIAL SCAN OF USER CONTROL 
STATEMEN ADR050I (001)-PRIME(01), DFSMSDSS INVOKED VIA APPLICATION INTERFACE 
ADR035I (001)-PRIME(50), INSTALLATION EXIT ALTERED TAPE BLOCK SIZE DEFAULT TO 
32 ADR016I (001)-PRIME(01), RACF LOGGING OPTION IN EFFECT FOR THIS TASK ADR006I 
(001)-STEND(01), 2021.063 15:02:04 EXECUTION BEGINS ADR412E (001)-DTDSC(04), 
DATA SET PFMTDB2.LOGCOPY1.DS01 IN CATALOG
CATALOG.SMS.USER04 ON VOLUME EU2227 FAILED SERIALIZATION ADR801I 
(001)-DTDSC(01), 2021.063 15:02:10 DATA SET FILTERING IS COMPLETE. 0 OF 1 DATA 
SETS WERE SELECTED: 1 FAILED SERIALIZATION
 AND 0 FAILED FOR OTHER REASONS ADR415W 
(001)-DTDSC(04), NO DATA SETS WERE COPIED, DUMPED, OR RESTORED FROM ANY ADR006I 
(001)-STEND(02), 2021.063 15:02:10 EXECUTION ENDS ADR013I (001)-CLTSK(01), 
2021.063 15:02:10 TASK COMPLETED WITH RETURN CODE 0008

Is there a switch I set to allow for a fuzzy backup even?  I have few hundred 
of these failures, I just picked the first one.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com> This email message and any attachments may 
contain confidential, proprietary or non-public information. The information is 
intended solely for the designated recipient(s). If an addressing or 
transmission error has misdirected this email, please notify the sender 
immediately and destroy this email. Any review, dissemination, use or reliance 
upon this information by unintended recipients is prohibited. Any opinions 
expressed in this email are those of the author personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 
<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immedia

DFHSM Backups using DFDSS - Enqueues

[Shaffer, Terri]

Hello,
  So its been awhile since I setup DFHSM, and have a small issue with doing my 
backups, with enqueue failures.  Normally I would set TOL(ENQF) in DFDSS, but 
since DFHSM is passing control that flag never gets set.   I did set BACKUP 
(INUSE to SERIALIZATION=PREFERRED)  but that didn’t help in all cases.. For 
example:

ADR035I (SCH)-PRIME(06), INSTALLATION EXIT ALTERED BYPASS FAC CLASS CHK DEFAULT
 DUMP DATASET(INCLUDE(PFMTDB2.LOGCOPY1.DS01)) -
  OUTDDNAME(SYS85689) CANCELERROR OPTIMIZE(4) -
  SPHERE -
  SHARE
ADR101I (R/I)-RI01 (01), TASKID 001 HAS BEEN ASSIGNED TO COMMAND 'DUMP '
ADR109I (R/I)-RI01 (01), 2021.063 15:02:04 INITIAL SCAN OF USER CONTROL STATEMEN
ADR050I (001)-PRIME(01), DFSMSDSS INVOKED VIA APPLICATION INTERFACE
ADR035I (001)-PRIME(50), INSTALLATION EXIT ALTERED TAPE BLOCK SIZE DEFAULT TO 32
ADR016I (001)-PRIME(01), RACF LOGGING OPTION IN EFFECT FOR THIS TASK
ADR006I (001)-STEND(01), 2021.063 15:02:04 EXECUTION BEGINS
ADR412E (001)-DTDSC(04), DATA SET PFMTDB2.LOGCOPY1.DS01 IN CATALOG
CATALOG.SMS.USER04 ON VOLUME EU2227 FAILED SERIALIZATION
ADR801I (001)-DTDSC(01), 2021.063 15:02:10 DATA SET FILTERING IS
COMPLETE. 0 OF 1 DATA SETS WERE SELECTED: 1 FAILED SERIALIZATION
 AND 0 FAILED FOR OTHER REASONS
ADR415W (001)-DTDSC(04), NO DATA SETS WERE COPIED, DUMPED, OR RESTORED FROM ANY
ADR006I (001)-STEND(02), 2021.063 15:02:10 EXECUTION ENDS
ADR013I (001)-CLTSK(01), 2021.063 15:02:10 TASK COMPLETED WITH RETURN CODE 0008

Is there a switch I set to allow for a fuzzy backup even?  I have few hundred 
of these failures, I just picked the first one.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com



 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RMM/OAM/SMS

[Shaffer, Terri]

Issue was caused/fixed by commenting out mntmsg in RMM config.  RACK(999) 
appends the SGPOOL=  to the end of mount messages.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Steve Pryor
Sent: Thursday, January 28, 2021 10:16 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RMM/OAM/SMS

External Email


The storage group name is assigned by the storage group ACS routine. RMM 
appends the storage group name to the mount message and updates the Load 
Display to use the storage group name. This allows you to have different ranges 
of tape volumes for each storage group, i.e., the storage groups correspond to 
the RMM 'scratch pools'. If the tape volser doesn't matter, you can assign all 
the tapes to a single RMM scratch pool in the VLPOOL statement, or don't have 
the ACS routine assign a storage group.

Steve

Steve Pryor
DTS Software, LLC
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Visara 5990 Tapes

[Shaffer, Terri]

Hi,
  I am curious does anyone run Hardware DASD/TAPE from Visara?  And if TAPE, 
how you have it setup?

Thanks

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg] 

This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SDSF CPU L/Z

[Shaffer, Terri]

I find is odd in my 34 years as a sysprog this has always been true or pretty 
close and now its not.  Not saying I don't believe that you are telling me just 
not what I am seeing..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Friday, June 26, 2020 11:07 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF CPU L/Z

External Email


Terri,

I think the SDSF doc could be a bit clearer in this area, but the numbers you 
quoted do not mean what you think they mean.

There is some extra help text in the "CPU and SIO fields" section of the help 
for the DA command (at the end of the help for the content of the fields).

Taking the  xx/yy numbers :

(o) xx - This is SRM's native view of CPU% busy of the local system without 
factoring in any LPAR weights from PR/SM.
For example, if over a period of 100 seconds, PR/SM gave this system a grand 
total of 10 CPU seconds (and 90 seconds to other LPARs) and this system was 
busy for 5 seconds then the CPU% would be 50%. Think of this as a SRM being 
blissfully unaware of other LPARs in the CEC and behaving like an old-school 
single MVS system.

(o) yy - This is the CPU% factoring in LPAR weighting.
Using the above trivial example, this would be 5.

SDSF does not perform any calculations in this area - we just report what we 
get back from RMF for these two numbers.

I will look to see if we can improve the help text.

Rob

From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, June 26, 2020 3:26 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF CPU L/Z

EXTERNAL EMAIL



Thanks Rob,
So NO to the first 2, as we run with hardly any usermods or customizations.

Number 3 is partially true. The 2 UBS2T* Jobs are running on ACW5, But that is 
reflected by the 45/29 number is my display. 45 is my total across the sysplex 
and 29 is the local lpar.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of Rob 
Scott
Sent: Friday, June 26, 2020 9:38 AM
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: Re: SDSF CPU L/Z

External Email


Terri,

The native SDSF 2.2 code populates the title line from the local system CPU 
usage.

A couple of possibilities exist that could explain what you are seeing :


1. You have an ISFUSER exit that alters the title line (possible - but not 
common) 2. You have a local replacement/modification for ERBSMFI or ERB2XDGS on 
your 2.2 system that is not installed on your 2.4 system (unlikely).
3. Your 2.2 system is getting the lion's share of CPU resources (maybe via LPAR 
definitions), or is naturally a much busier system so that it permanently shows 
a higher local CPU% which does not look out of place when SYSNAME=* is in 
effect and you sort DA by CPU% descending.

If none of the above apply, please feel free to update the PMR and maybe we can 
take a look at some trace options and other diagnostics.

Rob

From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of 
Shaffer, Terri
Sent: Friday, June 26, 2020 2:02 PM
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: Re: SDSF CPU L/Z

EXTERNAL EMAIL



Rob,
My question, was does anyone else see this behavior? And yes that was my point 
of sysname=* I think it should total all lpars, like I see in my z/OS 2.2 lpar 
and display.

But you can see in my z/OS 2.4 lpar, I only get an lpar view.

And yes I opened up the SR because it looked like an issue, but from what she 
stated and you said its working as designed, but not what I see.

I can also tell my cut/paste because IBM list doesn't maintain columns you cant 
really tell the CPU column.


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com%3cmailto:terri.shaf...@aciworldwide.com>>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU%3cmailto:IBM-MAIN@LISTSERV.UA.EDU>>>
 On Behalf Of Rob Scott
Sent: Friday, June 26, 2020 8:47 AM
To: 
IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU%3cmailto:IBM-MAIN@LISTSERV.UA.EDU>>
Subject: Re: SDSF CPU L/Z

External Email


Terri

You have SYSNAME set to "*" - which means the rows are for all address spaces 
on all systems.

The title line only shows CPU% for the local system.

You also state that you are seeing a disc

Re: SDSF CPU L/Z

[Shaffer, Terri]

Thanks Rob,
 So NO to the first 2, as we run with hardly any usermods or customizations.

Number 3 is partially true.   The 2 UBS2T* Jobs are running on ACW5, But that 
is reflected by the 45/29 number is my display.  45 is my total across the 
sysplex and 29 is the local lpar.

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Friday, June 26, 2020 9:38 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF CPU L/Z

External Email


Terri,

The native SDSF 2.2 code populates the title line from the local system CPU 
usage.

A couple of possibilities exist that could explain what you are seeing :


  1.  You have an ISFUSER exit that alters the title line (possible - but not 
common)
  2.  You have a local replacement/modification for ERBSMFI or ERB2XDGS on your 
2.2 system that is not installed on your 2.4 system (unlikely).
  3.  Your 2.2 system is getting the lion's share of CPU resources (maybe via 
LPAR definitions), or is naturally a much busier system so that it permanently 
shows a higher local CPU% which does not look out of place when SYSNAME=* is in 
effect and you sort DA by CPU% descending.

If none of the above apply, please feel free to update the PMR and maybe we can 
take a look at some trace options and other diagnostics.

Rob

From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, June 26, 2020 2:02 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF CPU L/Z

EXTERNAL EMAIL



Rob,
My question, was does anyone else see this behavior? And yes that was my point 
of sysname=* I think it should total all lpars, like I see in my z/OS 2.2 lpar 
and display.

But you can see in my z/OS 2.4 lpar, I only get an lpar view.

And yes I opened up the SR because it looked like an issue, but from what she 
stated and you said its working as designed, but not what I see.

I can also tell my cut/paste because IBM list doesn't maintain columns you cant 
really tell the CPU column.


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of Rob 
Scott
Sent: Friday, June 26, 2020 8:47 AM
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: Re: SDSF CPU L/Z

External Email


Terri

You have SYSNAME set to "*" - which means the rows are for all address spaces 
on all systems.

The title line only shows CPU% for the local system.

You also state that you are seeing a discrepancy in 2.3, however the 2.3 DA 
code uses the same methods as 2.2.

I see that you have a PMR open for this - can I suggest we discuss this further 
in there rather than IBM-Main?

Rob

From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of 
Shaffer, Terri
Sent: Friday, June 26, 2020 1:29 PM
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: Re: SDSF CPU L/Z

EXTERNAL EMAIL



Interesting because that's not what I am seeing..

SDSF DA ACWA (ALL) PAG 0 CPU/L 4/ 1 LINE 815-826 (826)z/OS 2.4 LPAR COMMAND 
INPUT ===>, ,SCROLL ===>,C
PREFIX=* DEST=(ALL) OWNER=* SORT=CPU%/A SYSNAME=* NP ,JOBNAME ,DP,Real,Paging, 
SIO, CPU%,ASID,ASIDX, EXCP-Cnt, CPU-Time ,

TCPIP , FE 14T 0.00 0.001.01 78 004E 12918 9250.83 , ZFS , FE 634T 0.00 1.75 
1.07 49 0031 22602696 5441.27 , NFSC , FE 72T 0.00 0.00 1.13 66 0042 289157 
29189.68 , QZ77EVTL, F2 572 0.00 342.50 1.30 130 0082 4688161 454.80 , 
C8QBMSTR, FE 29T 0.00 863.00 1.40 41 0029 117138340 6337.83 , UBS2EVTA, F0 55T 
0.00 269.00 2.60 264 0108 12993387 2005.01 , NFSC , FE 1M 0.00 0.00 2.93 39 
0027 71333 17037.59 ,T SPAXAA6, F4 54T 0.00 0.00 3.46214 00D6 58211 4888.83 , 
TSPQEBA6, F0 39T 0.00 4113.5 4.65 157 009D 248680399 6875.79 , TSOJXSA5, F4 37T 
0.00 0.00 6.86 350 015E 2123259 3352.63 , UBS2TDAL, E6 10T 0.00 15177 13.86 320 
0140 534324805 7649.91 , UBS2TDAL, E6 10T 0.00 16494 14.73 259 0103 537388749 
7603.17


SDSF DA ACW5 (ALL) PAG 0 CPU/L 45/ 29 LINE 813-825Z/OS 2.2 COMMAND INPUT ===>, 
,SCROLL
PREFIX=* DEST=(ALL) OWNER=* SORT=CPU%/A SYSNAME=* NP ,JOBNAME 
,Pos,DP,Real,Paging, SIO, CPU%,ASID,ASIDX, EXCP-Cnt

TCPIP NS FE 14T 0.00 0.00 1.27 78 004E 12918
BBOS010 NS F0 75T 0.00 338.53 1.52 141 008D 7705735 , QZ77EVTL IN F2 572 0.00 
372.08 1.58 130 0082 4682243 , C8QBMSTR NS FE 29T 0.00 937.32 1.70 41 0029 
117123444
EYUCAS31 NS EE 2106 0.00 0.00 2.06 87 0057 909 , UBS2EVTA IN F2 55T 0.00 335.48 
2.59 264 0108 12988064
TSPAXAA6 IN F2 54T 0.00 0.00 3.16 214 00D6 58211 , NFSC NS FE 1M 0.00 0.00 3.58 
39 0027 71333
TSPQEBA6 IN F0 39T 0.00 4469.0 5.59 157 009D 248609323
TSOJXSA5 IN F2 37T 0.00 0.00 6.46 350 015E 2123259 , UBS2TDAL IN E6 10

Re: SDSF CPU L/Z

[Shaffer, Terri]

Rob,
 My question,  was does anyone else see this behavior?  And yes that was my 
point of sysname=* I think it should total all lpars, like I see in my z/OS 2.2 
lpar and display.

But you can see in my z/OS 2.4 lpar, I only get an lpar view.

And yes I opened up the SR because it looked like an issue, but from what she 
stated and you said its working as designed, but not what I see.

I can also tell my cut/paste because IBM list doesn't maintain columns you cant 
really tell the CPU column.


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Friday, June 26, 2020 8:47 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF CPU L/Z

External Email


Terri

You have SYSNAME set to "*" - which means the rows are for all address spaces 
on all systems.

The title line only shows CPU% for the local system.

You also state that you are seeing a discrepancy in 2.3, however the 2.3 DA 
code uses the same methods as 2.2.

I see that you have a PMR open for this - can I suggest we discuss this further 
in there rather than IBM-Main?

Rob

From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, June 26, 2020 1:29 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF CPU L/Z

EXTERNAL EMAIL



Interesting because that's not what I am seeing..

SDSF DA ACWA (ALL) PAG 0 CPU/L 4/ 1 LINE 815-826 (826)z/OS 2.4 LPAR
COMMAND INPUT ===>, ,SCROLL ===>,C
PREFIX=* DEST=(ALL) OWNER=* SORT=CPU%/A SYSNAME=*
NP ,JOBNAME ,DP,Real,Paging, SIO, CPU%,ASID,ASIDX, EXCP-Cnt, CPU-Time ,

TCPIP , FE 14T 0.00 0.001.01 78 004E 12918 9250.83 ,
ZFS , FE 634T 0.00 1.75 1.07 49 0031 22602696 5441.27 ,
NFSC , FE 72T 0.00 0.00 1.13 66 0042 289157 29189.68 ,
QZ77EVTL, F2 572 0.00 342.50 1.30 130 0082 4688161 454.80 ,
C8QBMSTR, FE 29T 0.00 863.00 1.40 41 0029 117138340 6337.83 ,
UBS2EVTA, F0 55T 0.00 269.00 2.60 264 0108 12993387 2005.01 ,
NFSC , FE 1M 0.00 0.00 2.93 39 0027 71333 17037.59 ,T
SPAXAA6, F4 54T 0.00 0.00 3.46214 00D6 58211 4888.83 ,
TSPQEBA6, F0 39T 0.00 4113.5 4.65 157 009D 248680399 6875.79 ,
TSOJXSA5, F4 37T 0.00 0.00 6.86 350 015E 2123259 3352.63 ,
UBS2TDAL, E6 10T 0.00 15177 13.86 320 0140 534324805 7649.91 ,
UBS2TDAL, E6 10T 0.00 16494 14.73 259 0103 537388749 7603.17


SDSF DA ACW5 (ALL) PAG 0 CPU/L 45/ 29 LINE 813-825Z/OS 2.2
COMMAND INPUT ===>, ,SCROLL
PREFIX=* DEST=(ALL) OWNER=* SORT=CPU%/A SYSNAME=*
NP ,JOBNAME ,Pos,DP,Real,Paging, SIO, CPU%,ASID,ASIDX, EXCP-Cnt

TCPIP NS FE 14T 0.00 0.00 1.27 78 004E 12918
BBOS010 NS F0 75T 0.00 338.53 1.52 141 008D 7705735 ,
QZ77EVTL IN F2 572 0.00 372.08 1.58 130 0082 4682243 ,
C8QBMSTR NS FE 29T 0.00 937.32 1.70 41 0029 117123444
EYUCAS31 NS EE 2106 0.00 0.00 2.06 87 0057 909 ,
UBS2EVTA IN F2 55T 0.00 335.48 2.59 264 0108 12988064
TSPAXAA6 IN F2 54T 0.00 0.00 3.16 214 00D6 58211 ,
NFSC NS FE 1M 0.00 0.00 3.58 39 0027 71333
TSPQEBA6 IN F0 39T 0.00 4469.0 5.59 157 009D 248609323
TSOJXSA5 IN F2 37T 0.00 0.00 6.46 350 015E 2123259 ,
UBS2TDAL IN E6 10T 0.00 15428 12.91 259 0103 537122733 ,
UBS2TDAL IN E6 10T 0.00 16673 14.37 320 0140 534062332

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com>

-Original Message-
From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of Rob 
Scott
Sent: Friday, June 26, 2020 8:01 AM
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: Re: SDSF CPU L/Z

External Email


Terri,



The CPU% in the title line is always for the local system, regardless of the 
SYSNAME setting - this has always been the case.

You might be noticing the difference more because the DA data in 2.4 is 
collected centrally by the data gathering task in SDSFAUX, whereas in previous 
releases (including 2.3) the data was gathered by the client code. In both 
cases, however, the RMF sample that calculates the CPU% for the title line is 
different to the SDSF sample and variations will occur, especially on low to 
medium activity systems where the CPU consumption is not constantly high.

CPU% for both the system and for a specific address space can vary greatly over 
sub-second intervals.

The data gathering task in SDSFAUX still calls RMF for the underlying address 
space information.

Rob Scott

Rocket Software


From: IBM Mainframe Discussion List 
mailto:IBM-MAIN@LISTSERV.UA.EDU>> On Behalf Of 
Shaffer, Terri
Sent: Friday, June 26, 2020 12:35 PM
To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU>
Subject: SDSF CPU L/Z

EXTERNAL EMAIL



Does anyone else have this issue with the SDSF CPU Title CPU L/Z fields on 
reflecting the LPAR usage and not a SYSPLEX total now with z/OS 2.4?

On my z/OS 2.2 lpar, if I sort on CPU% the numbe

Re: SDSF CPU L/Z

[Shaffer, Terri]

Interesting because that's not what I am seeing..

SDSF DA ACWA (ALL)PAG  0  CPU/L 4/  1  LINE 815-826 (826)z/OS 
2.4 LPAR
COMMAND INPUT ===>,  ,SCROLL ===>,C
PREFIX=*  DEST=(ALL)  OWNER=*  SORT=CPU%/A  SYSNAME=*
NP  ,JOBNAME  ,DP,Real,Paging,   SIO,  CPU%,ASID,ASIDX, EXCP-Cnt,  CPU-Time
,TCPIP   , FE  14T   0.00   0.001.01   78 004E  129189250.83
,ZFS , FE 634T   0.00   1.75  1.07   49 0031   22602696
5441.27
,NFSC, FE  72T   0.00   0.00 1.13  66 0042 289157   
29189.68
,QZ77EVTL, F2  572   0.00 342.50 1.30  130 00824688161 454.80
,C8QBMSTR, FE  29T   0.00 863.00   1.40   41 0029  1171383406337.83
,UBS2EVTA, F0  55T   0.00 269.00   2.60  264 0108   129933872005.01
,NFSC, FE   1M   0.00   0.00   2.93   39 0027  71333   
17037.59
,TSPAXAA6, F4  54T   0.00   0.00  3.46  214 00D6  582114888.83
,TSPQEBA6, F0  39T   0.00 4113.5   4.65  157 009D  2486803996875.79
,TSOJXSA5, F4  37T   0.00   0.00   6.86  350 015E21232593352.63
,UBS2TDAL, E6  10T   0.00  15177  13.86  320 0140  5343248057649.91
,UBS2TDAL, E6  10T   0.00  16494  14.73  259 0103  5373887497603.17


SDSF DA ACW5 (ALL)PAG  0  CPU/L45/ 29  LINE 813-825Z/OS 2.2
COMMAND INPUT ===>,  ,SCROLL
PREFIX=*  DEST=(ALL)  OWNER=*  SORT=CPU%/A  SYSNAME=*
NP  ,JOBNAME  ,Pos,DP,Real,Paging,   SIO,  CPU%,ASID,ASIDX, EXCP-Cnt
,JES2  NS  FE 9940   0.00   6.10   1.12   36 0024 594743
,TCPIP NS  FE  14T   0.00   0.00   1.27   78 004E  12918
,BBOS010   NS  F0  75T   0.00 338.53   1.52  141 008D7705735
,QZ77EVTL  IN  F2  572   0.00 372.08   1.58  130 00824682243
,C8QBMSTR  NS  FE  29T   0.00 937.32  1.70   41 0029  117123444
,EYUCAS31  NS  EE 2106   0.00   0.00   2.06   87 0057909
,UBS2EVTA  IN  F2  55T   0.00 335.48   2.59  264 0108   12988064
,TSPAXAA6  IN  F2  54T   0.00   0.00   3.16  214 00D6  58211
,NFSC  NS  FE   1M   0.00   0.00   3.58   39 0027  71333
,TSPQEBA6  IN  F0  39T   0.00 4469.0   5.59  157 009D  248609323
,TSOJXSA5  IN  F2  37T   0.00   0.00   6.46  350 015E2123259
,UBS2TDAL  IN  E6  10T   0.00  15428  12.91  259 0103  537122733
,UBS2TDAL  IN  E6  10T   0.00  16673  14.37  320 0140  534062332

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of Rob 
Scott
Sent: Friday, June 26, 2020 8:01 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SDSF CPU L/Z

External Email


Terri,



The CPU% in the title line is always for the local system, regardless of the 
SYSNAME setting - this has always been the case.

You might be noticing the difference more because the DA data in 2.4 is 
collected centrally by the data gathering task in SDSFAUX, whereas in previous 
releases (including 2.3) the data was gathered by the client code. In both 
cases, however, the RMF sample that calculates the CPU% for the title line is 
different to the SDSF sample and variations will occur, especially on low to 
medium activity systems where the CPU consumption is not constantly high.

CPU% for both the system and for a specific address space can vary greatly over 
sub-second intervals.

The data gathering task in SDSFAUX still calls RMF for the underlying address 
space information.

Rob Scott

Rocket Software


From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: Friday, June 26, 2020 12:35 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: SDSF CPU L/Z

EXTERNAL EMAIL



Does anyone else have this issue with the SDSF CPU Title CPU L/Z fields on 
reflecting the LPAR usage and not a SYSPLEX total now with z/OS 2.4?

On my z/OS 2.2 lpar, if I sort on CPU% the numbers match pretty closely to the 
Title bar numbers, This isn't the case on my z/OS 2.3 and z/OS 2.4 lpars.

I have checked my SYSTEM NAME and Filters and it seems internally its always 
using the lpar specific CPU %.

I know in SDSF 2.4 and I think also 2.3, they gather these number thru SDSFAUX 
instead of I think it was RMF.

Trying to figure out if this is a setup issue in my shop or a bigger issue?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com<mailto:terri.shaf...@aciworldwide.com>


[https://www.aciworldwide.com/-/media/aci-footer<https://www.aciworldwide.com/-/media/aci-footer>]
 <http://www.aciworldwide.com<http://www.aciworldwide.com>>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designate

SDSF CPU L/Z

[Shaffer, Terri]

Does anyone else have this issue with the SDSF CPU Title CPU L/Z fields on 
reflecting the LPAR usage and not a SYSPLEX total now with z/OS 2.4?

On my z/OS 2.2 lpar, if I sort on CPU% the numbers match pretty closely to the 
Title bar numbers, This isn't the case on my z/OS 2.3 and z/OS 2.4 lpars.

I have checked my SYSTEM NAME and Filters and it seems internally its always 
using the lpar specific CPU %.

I know in SDSF 2.4 and I think also 2.3, they gather these number thru SDSFAUX 
instead of I think it was RMF.

Trying to figure out if this is a setup issue in my shop or a bigger issue?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide - Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com


 [https://www.aciworldwide.com/-/media/aci-footer] 
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS 2.4 Migration manual and z/OSMF usage

[Shaffer, Terri]

So a few things happened here.

First I had the issue with the Discovery failing stating it could not talk to 
my ACWB 2.1 lpar from my driving ACWA 2.3 lpar.

After looking at all the manuals I could not figure out the reason for the 
failure, given my understandings in my first email.

This lead me to start over. So yes I had a fully populated IZUPRMxx member 
however when I attempted to start my z/osmf it kept giving me an error about 
the /var/zosmf/data/home/izusvr directory not found. This was after I moved it 
to /global/zosmf/data/home/izusvr

So yes I ran the izuconfig.SH member.  This did 2 things.  It verified that all 
my variables and parms where correct so something else was wrong.

Next I found the APAR/PTF that actually moved the montpoint for /global/zosmf, 
however the ALU for user IZUSVR was not run plus I could not find it documented 
in the z/OSMF config manual to change from /var/zosmf..   to 
/global/zosmf/ It was only in the holddata.

After I did that everything started correctly.  So your correct it was not 
izusetup.sh and I didn’t need to run anything.

So that was my missing piece.  Now everything is working as designed.

Now for my comment about the whole process
Using z/OSMF for the migration is a horrible.

First its formatted on a screen and with all the header information in z/OSMF 
you only seeing a screen that’s severely reduced in size.
Then when you click to expand you have to jump tabs to details, notes, ETC to 
see the data, where as the manual was very easy to digest and put together a 
sheet with upgrade tasks.

Unless I am missing something new in z/OSMF to make this fullscreen its very 
cumbersome and tedious.

I am glad I found the exploded version that I used first because that was 
fullscreen and very easy to use.  I still would prefer the manual but this is a 
valid work around.

I don’t see z/OSMF as anything usable, but that’s just my opinion after doing 
this for 35 years and tons of upgrades.


Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Friday, March 27, 2020 12:36 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS 2.4 Migration manual and z/OSMF usage

External Email


Hi Terri,
You re-ran IZUSETUP, not recently right?  That was made obsolete way back on 
z/OS V2.1 with APAR PI54286 (2016), to move to the "modern" parmlib (IZUPRMxx) 
method.  I hope you still aren't using that, and don't have the server running 
on your z/OS V2.1 system but rather on a higher system in your sysplex.

You are running your server on your V2.3 system, correct?

Thanks,
Marna WALLE
z/OS System Install and Upgrade, IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://www.aciworldwide.com/-/media/aci-footer] 
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z/OS 2.4 Migration manual and z/OSMF usage

[Shaffer, Terri]

Thanks Kurt!



You magically fixed it..  j/k  but now its working.



I started to play around with my configuration yesterday after the failure 
message.  I actually deleted most everything and reran my IZUSETUP to rebuild 
everything.



I was not the one who did the initial install on this a few years back.



The Failed message I got yesterday on my first try was there was no valid URL 
for ACWB. This seemed strange to me and I sent this message to the list.



After your asking me today, the Systems tab looked the same but my workflow was 
missing, because I did the rebuild.



I then rebuilt the Workflow and retried the flow and now its happily running to 
my surprise.



So not sure what was the real reason for the message.



Anyhow thank you for the response!



Ms Terri E Shaffer

Senior Systems Engineer,

z/OS Support:

ACIWorldwide – Telecommuter

H(412-766-2697) C(412-519-2592)

terri.shaf...@aciworldwide.com



-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Kurt Quackenbush
Sent: Friday, March 27, 2020 8:31 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS 2.4 Migration manual and z/OSMF usage



External Email





On 3/26/2020 5:45 PM, Shaffer, Terri wrote:



> It then immediately fails stating z/OSMF cant talk to the 2.1 lpar, because 
> there is no IP address under the SYSTEM tab in z/OSMF.

What do you see when you open the Systems tab?  Do you see an entry for all 5 
of your sysplex members, including your z/OS 2.1 system?  On start up z/OSMF 
should discover all members in the same sysplex as the z/OSMF server, so I'm 
curious what was discovered.



Kurt Quackenbush -- IBM, SMP/E Development Chuck Norris never uses CHECK when 
he applies PTFs.



--

For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with the message: 
INFO IBM-MAIN


[https://www.aciworldwide.com/-/media/aci-footer]<http://www.aciworldwide.com>
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

z/OS 2.4 Migration manual and z/OSMF usage

[Shaffer, Terri]

So I have a few questions I was wondering if someone can explain to me?

We are a software development company that have 5 lpars in a SYSPLEX.  1 - z/OS 
2.3 ,  3 - z/OS 2.2 and 1 - z/OS 2.1, because of developers.

Yes I know the 2.1 is unsupported and this is where my questions start.

I have installed the serverpac for z/OS 2.4 and ready to IPL and went looking 
for the migration guide for 2.4 and used the exploded z/OS 2.2 version (close 
enough) copy IBM provides.

However then I got curious about using z/OSMF, so I downloaded the XML for z/OS 
2.2 to 2.4 and the HC_rexx and Discovery and built my workflow on a z/OS 2.3 
lpar.

It then immediately fails stating z/OSMF cant talk to the 2.1 lpar, because 
there is no IP address under the SYSTEM tab in z/OSMF.

Then as far as my last knowledge was only one instance of z/OSMF can run in a 
SYSPLEX. Yes I know if I change autogrp and autostart, etc I can but this is 
not the case.

So can someone explain how this could ever work, or how to properly set this up 
to work?

Inquiring minds have tried 100 things but all fail..

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Marna WALLE
Sent: Wednesday, July 24, 2019 8:48 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: z/OS Upgrade Information

External Email


Hello All,
You might be wondering, I'm seeing all the z/OS V2.4 books, but where is the 
z/OS Migration book?  As we've announced many moons ago, the Migration book has 
been removed, and been replaced with the z/OS Upgrade Workflow, found here:

https://github.com/IBM/IBM-Z-zOS/tree/master/zOS-Workflow/zOS%20V2.4%20Upgrade%20Workflow
(Please read the readme here.  Every problem I've heard about from clients is 
addressed in readme.)

If you don't (yet) have z/OSMF Workflow up and running, we've provided an 
exported view of the workflows that you can find here at the very bottom. We 
are aware of some "hot link behaviors" that this exported workflow is currently 
experiencing and are working on fixing that - please be patient.

https://www.ibm.com/support/knowledgecenter/SSLTBW_2.4.0/com.ibm.zos.v2r4.e0zm100/abstract.htm

The exported view is suitable for viewing, searching, and even printing (if you 
like to kill trees).  You can also export the workflow yourself, after you have 
created it in z/OSMF, to do better filtering for your enterprise.

We do welcome comments you have on the z/OS V2.4 Upgrade Workflows! I encourage 
people to use the workflow instead of the exported file.  The workflow really 
does have some significant advantages.

-Marna WALLE
z/OS Install and Upgrade, IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 [https://www.aciworldwide.com/-/media/aci-footer] 
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: DFSMSrmm and DFHSM - Tape Expirations

[Shaffer, Terri]

I think you might be right, but I need help please??  For my management class, 
as I didn’t set this up, it was my predecessor and didn’t even think about this.

Expiration Attributes,
,,Expire after Days Non-usage  . .,NOLIMIT  ,   ,(1 to 93000 or NOLIMIT)
,,Expire after Date/Days . . . . .,NOLIMIT   ,,(0 to 93000, /mm/dd or
, ,NOLIMIT)
, ,
Retention Limit  . . . . . . . . .,NOLIMIT  ,   ,(0 to 93000 or NOLIMIT)

What are the normal settings?  I am thinking 1  , 0 , NOLIMIT?

Can someone give me a hint?

Ms Terri E Shaffer
Senior Systems Engineer,
z/OS Support:
ACIWorldwide – Telecommuter
H(412-766-2697) C(412-519-2592)
terri.shaf...@aciworldwide.com

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Wheeler, Simon
Sent: Friday, September 13, 2019 11:31 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: DFSMSrmm and DFHSM - Tape Expirations

External Email


Hi Terri,

Couldn't see if this has already been answered, but if everything looks 
correctly defined within RMM and HSM, could it be the scratch expiry setting on 
the VTS scratch category?

It can be set to keep scratch tapes for a specified time, so although scratched 
in RMM they can't be used until the VTS expiry time has elapsed.

thanks,
Simon.


-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Shaffer, Terri
Sent: 11 September 2019 17:11
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: DFSMSrmm and DFHSM - Tape Expirations

WARNING: this email has originated from outside of the SSE Group. Please treat 
any links or attachments with caution.

**
Thanks for the answers so far, but I don’t think I am explaining it correctly.



DFHSM scratches the tape, RMM shows as scratch also, but within I guess my VTS 
volume definitions it does not scratch.



So in ISMF, Then option 2 for Volume, then Option 3 for Mountable Tapes, it is 
not scratch. This is what I have to fix every Monday after DFHSM returns tapes, 
because of 1999/365.



I only keep 15 days RETPD in my dumpclass, so now every week it deletes about 
50 tapes, but even though RMM shows as scratch if I display my available 
scratch tapes, they are no scratch.



This requires my to ALTER the volume and change to S - Scratch status to match 
the current RMM tape status.



Oh I should mention all my tapes are in one pool, HSM included.



So I am missing something, but since this is my first VTS and RMM setup, I am 
not sure what?



Ms Terri E Shaffer

Senior Systems Engineer,

z/OS Support:

ACIWorldwide – Telecommuter

H(412-766-2697) C(412-519-2592)

terri.shaf...@aciworldwide.com



-Original Message-

From: IBM Mainframe Discussion List  On Behalf Of Max 
Smith

Sent: Tuesday, September 10, 2019 7:22 PM

To: IBM-MAIN@LISTSERV.UA.EDU

Subject: Re: DFSMSrmm and DFHSM - Tape Expirations



External Email





Hi Terri,



In your first update you indicated you were having trouble with dump tapes.  Is 
it only dump or is it also ML2 and Backup tapes also?  There is a separate 
setup for dump tapes in the DEFINE DUMPCLASS eg EXPIRATIONDATE, RETENTIONPERIOD 
& AUTOREUSE these allow you to manage your dump tapes differently than your 
other tapes.



I would suggest as opposed to using VRS's use the EDM (External Data Manager) 
support added in RMM and discussed here 
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ibm.com_support_pages_tapes-2Dreleased-2Dscratch-2Dwithout-2Dhsm=DwIGaQ=fXqKLe8hYaTUGdMO87BomA=N8X6WUEdDcmMkF942cLcZpTmK1om3UZ98XkAPjjFZFA=NgdcxmPFo3UNOVAqr9AaX4Ojtqc4TAHmUsIGxinuyOk=ntuFDsbGrlRxEVdRpmxze8MnVr2xWhT6Q_iFcpZxWxg=



You can also use some of the FIXCDS commands here to see if HSM still knows 
about the tape(s).  You should also make sure the EDGTVEXT is installed 
correctly as documented in RMM because that is what HSM needs to call to 
communicate a volume to scratch to RMM.



In addition you could refer to APAR OA52541 for additional information.

https://urldefense.proofpoint.com/v2/url?u=https-3A__www-2D01.ibm.com_support_docview.wss-3Fuid-3Disg1OA52541=DwIGaQ=fXqKLe8hYaTUGdMO87BomA=N8X6WUEdDcmMkF942cLcZpTmK1om3UZ98XkAPjjFZFA=NgdcxmPFo3UNOVAqr9AaX4Ojtqc4TAHmUsIGxinuyOk=ITk8R8O1Yo5OmyMYUoiv8l66hTzhF58_OO3IE7UlF_w=



We had times when the VRS's were not set up properly to manage the tapes and 
found they could get released to scratch prematurely so we put in the EDM 
support to allow HSM and RMM work better together.



Hope this helps.



Max Smith DFSMS Development



--

For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN



 
[https://urldefense.proofpoint.com/v2/url?u=https-3A__www.aciworldwide.com_-2D_media_aci-2Dfooter=DwIGaQ=fXqKLe8hYaTUGdMO87