Re: IBM FTPS connect

The instructions for debugging connection issues indicates to run with debug soc which should provide some additional information. Rob Schramm On Tue, Sep 13, 2016, 11:10 AM Mark Pace wrote: > I'll have to go check on the z/OS Security lvl 3 FMID. I didn't install >

REASON: 3 - RECORD TYPE NOT RECOGNIZED

Hi All, While running a DIAGNOSE on a USERCAT the following error was picked up: IDC21364I ERROR DETECTED BY DIAGNOSE: ICFCAT ENTRY: 05:26:06.214 UTMOPB08: START TWRC MSGID(AFE7 (7) RECORD: 05:26:06.214 UTMOPB08: START TWRC MSGID(AFE7 /F0 OFFSET: X'0002'

Re: Bypassing s322

Just as an "Oh by the way". What are you running that needs so much time? Steve -Original Message- From: "Jesse 1 Robinson" Sent: Tuesday, September 13, 2016 12:35pm To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Bypassing s322 The usual circumvention for S322

DFSORT - ICETOOL - Search for text and replace with date

Good day to all DFSORT gurus Background: I have setup an automated e-mail reporting system which grab reports from various inputs, then I use IEBGENER to build up one PS file containing data in this sequence: e-mail body - report - boundary data - next report - ... etc ... (In this way I can

Re: DFSORT - ICETOOL - Search for text and replace with date

While not directly related to your question, but are you family with XMITIP from Lionel B. Dyck? Real handy stuff for emailing and attachments from the mainframe. --- skol...@us.ibm.com wrote: From: Sri h Kolusu To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re:

Re: Where did java 8 hide zoneinfo?

On Tue, 13 Sep 2016 13:40:02 +0800, Timothy Sipples wrote: >Java 8 relocated timezone information to a file "usually" named tzdb.dat. >You should find that file in the .../lib directory also. > >Anticipating the next question, if you'd like to update timezone >information between SDK service

Re: DFSORT - ICETOOL - Search for text and replace with date

On Tue, 13 Sep 2016 09:06:28 -0700, Sri h Kolusu wrote: >>> You could consider: //SYSUT1 DD *,SYMBOLS= instead of ICETOOL and >substitute the dynamic system symbols for and , however: > >What exactly is the midnight pitfall? If you used the LOCAL system symbols >then you would get the

Re: IDCAMs DEF AIX authorization

Dave - You can't fix mishaps except thru knowledge -Original Message- From: "Jousma, David" Sent: Tuesday, September 13, 2016 1:08pm To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: IDCAMs DEF AIX authorization Steve, the user tried to do the build index, but failed

Re: IBM FTPS connect

Oh hell. I don't know what any of that means. I set it up using the directions from IBM on testing connectivity. The ftp.data file contains. So I assume it's AT-TLS. There must be something within TCPIP that I need to setup also. SECURE_MECHANISM TLS TLSRFCLEVEL CCCNONOTIFY TLSMECHANISM

Re: IDCAMs DEF AIX authorization

Since it can, and did, cause a production outage, I voted for it. I would think that a production outage would rate higher than a medium priority. Dennis Roach, CISSP, PMP AIG IAM Access Administration – Consumer | Identity & Access Management 2929 Allen Parkway, America Building, 3rd Floor |

Re: IBM FTPS connect

For the record, there are several FMIDs that may be installed with the z/OS Security Lvl 3 and z/OS Communications Server Security lvl 3 may also be required. The FMIDs for Z/OS Security Lvl 3 at z/OS Version 1.13 are: JCRY741 JCPT3D1

Re: Bypassing s322

Actually, I misremembered how IEFUTL works, and just remembered (sorry)! IEFUTL gets control when the time limit set expires, and can extend the time allowed. It does not set lower values. John Eells wrote: For historical reasons lost in the Mists of Time, the explanations for z/OS BCP

Re: IDCAMs DEF AIX authorization

The challenge you will have is that the user in question had authority to build the AIX and the PATH but did not do the BUILD. And he could read the PRIMARY KSDS. This is an apples and oranges discussion or a Catch-22. -Original Message- From: "Roach, Dennis"

Re: DFSORT - ICETOOL - Search for text and replace with date

That should be "familar" not "family"! --- rpin...@netscape.com wrote: From: Richard Pinion To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: DFSORT - ICETOOL - Search for text and replace with date Date: Tue, 13 Sep 2016 08:56:07 -0700 While not

Re: REASON: 3 - RECORD TYPE NOT RECOGNIZED

> -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of willie bunter > Sent: Tuesday, September 13, 2016 9:01 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: REASON: 3 - RECORD TYPE NOT RECOGNIZED > > Hi All, > > While running a DIAGNOSE

Re: IDCAMs DEF AIX authorization

Steve, the user tried to do the build index, but failed on lack of access S913 as he should have.The user *should* have then deleted his AIX, but didn’t, and left it hanging out there. I suspect that the error was unintentional, as our application dataset naming conventions here, leave a

Re: 2FA in the Real World

For me the problem is that it is a Dell product. Previous experience with them just leave a bitter taste in the mouth and one I have no intention of repeating. Vincent On 13/09/16 17:49, Steve wrote: > Is anyone in the real not government world using this product? > > [

Re: IBM FTPS connect

I'll have to go check on the z/OS Security lvl 3 FMID. I didn't install this system, so I'm not sure. On Tue, Sep 13, 2016 at 9:12 AM, Tim Deller wrote: > Perhaps the list of ciphers in the ftpdata file is too restrictive or > maybe the z/OS Security Level 3 FMID is not

Re: IBM FTPS connect

Is this implemented within FTPD or Policy Agent / AT-TLS? On Mon, Sep 12, 2016 at 12:28 PM Mark Pace wrote: > I'm setting up FTPS on a 1.13 system and am a little confused by this > sequence. It logs on okay showing a secure connect. But then it won't do > the actual

Re: DFSORT - ICETOOL - Search for text and replace with date

Elardus Engelbrecht, You just need to define a symbol for the current date and you can use it in FINDREP. You do not code OPTION COPY when you use COPY verb of ICETOOL. Here is a sample //SELECT EXEC PGM=ICETOOL //TOOLMSG DD SYSOUT=* //SYMNAMES DD * CURRDATE,S'' //DFSMSG DD

Re: DFSORT - ICETOOL - Search for text and replace with date

>> You could consider: //SYSUT1 DD *,SYMBOLS= instead of ICETOOL and substitute the dynamic system symbols for and , however: Paul, DFSORT has the ability to read system symbols defined here http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/iea2e2c2/2.2.2? > Does ICETOOL cover

Re: Bypassing s322

I would compare the Run time(Clock) with CPU TIME. You may be exceeding the CPU Time limit set for that Class. We have an exit that produces a nice little map of CPU usage details. CPU TIME is one of the fields. I recently had a job running in INPUT CLASS X that kept timing out no matter

Hillgang - Save the date

Hi, The next Hillgang meeting (DC/MD/VA Linux & z/VM User Group) will be held 28 September. The agenda should be available in the next couple of days. In brief: - From the z/VM Lab - Bill Bitner - Introduction to z/TPF - Customer experience - Building and using Docker Containers If that is

Re: DFSORT - ICETOOL - Search for text and replace with date

If there's only one thing to change per line (maximum, or limit) I always use DO=1 on the FINDREP. If there's a limit to where the data can start, end, or both, there's STARTPOS and ENDPOS. Use IFTHEN=(WHEN=(logicalexpression) to only allow the FINDREP to operate on the expected records.

Re: IDCAMs DEF AIX authorization

To Dave's point, there is an exposure that can be exploited to cause denial of service with what appears to be relatively "safe" access levels for production. Rob Schramm On Tue, Sep 13, 2016, 11:50 AM Steve wrote: > The challenge you will have is that the user in

Re: DFSORT - ICETOOL - Search for text and replace with date

Sri h Kolusu wrote: >You just need to define a symbol for the current date and you can use it in >FINDREP. You do not code OPTION COPY when you use COPY verb of ICETOOL. >Here is a sample >//SYMNAMES DD * >CURRDATE,S'' >//SORTCNTL DD * > OUTREC FINDREP=(IN=C'MMDD',OUT=CURRDATE)

Re: DFSORT - ICETOOL - Search for text and replace with date

>> Rexx covers this by guaranteeing that if a single clause contains (any number of) references to TIME() and DATE() the TOD clock will be read only once and that value used for all. The TIME macro should nave no need to read the TOD clock more than once. Paul, If that is the definition of the

2FA in the Real World

Is anyone in the real not government world using this product? [ https://software.dell.com/products/defender-mainframe-edition/ ]( https://software.dell.com/products/defender-mainframe-edition/ ) Steve -- For IBM-MAIN

Re: DFSORT - ICETOOL - Search for text and replace with date

On Tue, 13 Sep 2016 10:36:18 -0500, Elardus Engelbrecht wrote: > >Now, a client asked whether it is possible to insert run date in the file >names of those attachments for easy retrieval at a later stage. > >//INVOER DD *

Re: DFSORT - ICETOOL - Search for text and replace with date

That should be "FAMILIAR" not "FAMILAR"! --- rpin...@netscape.com wrote: From: Richard Pinion To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: DFSORT - ICETOOL - Search for text and replace with date Date: Tue, 13 Sep 2016 08:57:22 -0700 That should be

Re: Bypassing s322

The usual circumvention for S322 is to increase the TIME= value, not play with exits. For one thing, IEFUTIL can extend the time, but even with no exit in place, the system will abend a job eventually. Be sure to increase the time value on both the job card and on the step (EXEC) card.

Re: DFSORT - ICETOOL - Search for text and replace with date

Bill Woodger wrote: >It would be ironic if Elardus followed your advice, only to find that his >IEBGENER is an alias of ICEGENER and that DFSORT will be used for operations >without any IEBGENER control cards. I'm aware of ICEGENER and such. In fact, CustomPac includes some IVP checks to

Internals of Catalog

Hi Can some one please explain the Catalog internals with respect to the VVDS and VTOC. I am basically trying to understand the relationship from the catalog internals point of view. Any documents or URL that might help ? Jake

Re: IBM FTPS connect

Just a thought. Kurt Q. has been helpful to folks offlist to resolve their FTP IBM issues. You may wish to see if he will assist. He really wants to be a smooth process and easy transition. Lizette > -Original Message- > From: IBM Mainframe Discussion List

Re: 2FA in the Real World

NC-Pass was purchased some time ago by Dell, and I don't remember who wrote itt Steve -Original Message- From: "Vince Coen" Sent: Tuesday, September 13, 2016 1:23pm To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: 2FA in the Real World For me the problem is that it is a

Re: Internals of Catalog

Most of that is propriety by IBM. Not much you are going to find unless you can ask a very specific question. Search REDBOOKS for info on CATALOG and SMS and DATASET and VSAM. Lizette > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On >

Re: IBM FTPS connect

That was a big help, thank you. I was able to confirm that all the correct FMIDs were installed. So I know it "should" work. I also tried FWFRIENDLY TRUE that didn't seem to make any difference. Turned on DEBUG SOC. So now I'll have to research the output. > GET "/GIMPAF.XML"

Re: IBM FTPS connect

I'm sure it's worth fixing FTPS--whatever that takes--but you might find HTTPS easier to manage. I use the latter because I have to: my proxy appliance does not understand TLS syntax. For the record, FTPS and SFTP are entirely different animals. SFTP is an open source protocol that evolved

Re: z/OS and code pages

Isn't there some Japanese code page (Katakana) support in z/OS? Some z/OS fields will take any bit value -- for example, the JOB statement Programmer Name field. For reasons unnecessary to this thread I have gone into Hex mode in ISPF and stored various unprintable values there, and everything

z/OS and code pages

This is probably a dumb question, but that's never stopped me before: If my name were "*Étienne*", would I be able to have that as a TSO userid? Or would I have to suffer through just "*Etienne*", sans accent aigu? Does the MVS side of z/OS "do" code pages in any meaningful way? I don't mean in

Re: z/OS and code pages

On 13 September 2016 at 19:09, zMan wrote: > This is probably a dumb question, but that's never stopped me before: :-) > If my name were "*Étienne*", would I be able to have that as a TSO userid? No. > Or would I have to suffer through just "*Etienne*", sans accent

Re: IBM FTPS connect

To add my $0.02 of useless knowledge; In your FTP.DATA file did you also code? SECURE_MECHANISM TLS TLSRFCLEVELRFC4217 Just my $0.02 worth. I am no expert when it comes to IBM's FTP, but I recently had to add those two to make a connection work. Al Nims University of Florida.

Re: z/OS and code pages

EBCDIC code page 930 supports Japanese kanji and single byte katakana Sent from my iPhone > On Sep 13, 2016, at 7:47 PM, Charles Mills wrote: > > Isn't there some Japanese code page (Katakana) support in z/OS? > > Some z/OS fields will take any bit value -- for example, the

Re: 2FA in the Real World

Quest. Seem to recall some other m/f products as well. Toad ? Vince On 13/09/16 18:31, Steve wrote: > NC-Pass was purchased some time ago by Dell, and I don't remember who wrote > itt > > > Steve > -Original Message- > From: "Vince Coen" > Sent: Tuesday,

Re: Internals of Catalog

On 9/13/2016 11:55 AM, Jake Anderson wrote: Can some one please explain the Catalog internals with respect to the VVDS and VTOC. At the 10,000 ft level... The catalog is a VSAM KSDS dataset that (mostly) points to the volume containing the dataset. The VTOC contains where on the volume, by

Re: Internals of Catalog

> -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Greg Dyck > Sent: Tuesday, September 13, 2016 1:14 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Internals of Catalog > > On 9/13/2016 11:55 AM, Jake Anderson wrote: > > Can

Re: IDCAMs DEF AIX authorization

Dave, First of all, I agree with you that the programmer shouldn't have been able to relate the AIX to the base cluster with only having read access to the base. But that being said, since they could relate them, why couldn't they run the BUILDIX command? The BUILDIX doesn't update the base

Re: SHARE Atlanta proceedings

On Sun, 14 Aug 2016 11:49:42 -0600, Mark Post wrote: On 8/14/2016 at 06:17 AM, Art Gutowski wrote: >> I went to San Antonio in March, and not a word about a DVD or an ISO image >> or >> anything. Remember the Alamo? Guess not. > >I made a query

Re: Internals of Catalog

The VVDS contains VVR and NVR records. VVR's describe VSAM data sets, while NVR's describe non-VSAM data sets. --- gregd...@pobox.com wrote: From: Greg Dyck To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Internals of Catalog Date: Tue, 13 Sep 2016

Re: z/OS and code pages

On 2016-09-13 17:47, Charles Mills wrote: > > z/OS Unicode Services is all about code pages and so forth. The C compiler I > think has some varying code page support. z/OS FTP supports code page > specification. > > How about USS? Where is @Gil when you need him? > Sounds kinda like "Where's

Re: IBM-MAIN Digest - 11 Sep 2016 to 12 Sep 2016 (#2016-255)

There's a standard Lsoft web page at listserv.ua.edu/archives/ibm-main.html or follow directions at bottom of every posting. In a message dated 9/13/2016 10:31:14 P.M. Central Daylight Time, zos.elliott.pic...@gmail.com writes: > Help

Re: z/OS and code pages

Sure, but does z/OS tolerate it? Can you use Katakana characters in passwords and userids? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Cameron Conacher Sent: Tuesday, September 13, 2016 4:56 PM To:

Re: IBM-MAIN Digest - 11 Sep 2016 to 12 Sep 2016 (#2016-255)

> > Help -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Internals of Catalog

The IBM manual z/OS DFSMS Managing Catalogs documents this very well. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Internals of Catalog

You may also want to look at Chapter 6 of the Redbook "ABCs of z/OS System Programming Volume 3": http://www.redbooks.ibm.com/abstracts/sg246983.html?Open HTH Klaus Stanislawiak -- For IBM-MAIN subscribe / signoff / archive

Re: Internals of Catalog

Thanks Basically I was looking how IBM catalog programes makes call with respect to the VVDS and VTOC. Just trying to understand internally how they synchronize and logics. I am not trying to resolve anything but just curious if IBM has documented anywhere. On Sep 14, 2016 1:50 AM, "Richard

Re: Bypassing s322

Peter wrote: You've got good replies. Please check all of them! >I am running which is a long running job but it keeps abending with s322. How long? What is your TIME on JOB and/or EXEC statements? Do you have any IEFUTL exit active? (D PROG,EXIT,EX=SYSSTC.IEFUTL,DIAG can help) What is your

Re: Converson of hex value to character

Bernd Oppolzer's answer is the best, although I'd prefer to define the fields so length overrides weren't needed: ONEBYTE DS XL2 TWOBYTE DS CL3 Not that I'd likely use it for small fields, but the TROT instruction is great at this. It requires a 512-byte translate table though: TROTTAB DC

Re: Converson of hex value to character

I was interested in seeing a complete example.. here is one.. http://www.z390.org/contest/p3/P3MM1.TXT -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message:

Re: IDCAMs DEF AIX authorization

I did open an RFE for this, if anyone wishes to vote on it, here is the info. -- Notification generated at: 13 Sep 2016, 10:06 AM Eastern Time (ET) ID:

Re: Converson of hex value to character

Thank you for all these great suggestions. My needs are very simple in only having to translate two different 1-byte fields, so Bernd's solution worked out to be the easiest and quickest to use. I will be saving these other ones, and like the macro idea as well as a quick print using DFSORT

Re: IDCAMs DEF AIX authorization

Steve, That’s what I am seeing, and IBM just confirmed it. I guess all we can do is give the contractor a slap on the hands, and move on. IBM comments: Basically, authorization checking is done against the AIX being defined (ALTER access to the AIX cluster name as shown in the table

Re: Bypassing s322

For historical reasons lost in the Mists of Time, the explanations for z/OS BCP system abends are in System Codes, while those for DFSMS abends are in System Messages. (It took me years to realize why I always seemed to be looking in the wrong place!) Basically, for batch jobs, if you do not

Re: Bypassing s322

IEFUTL only acts when you exceed the TIME= value supplied to your job. Did you try to overrule the default value with either a reasonable value or NOLIMIT? Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Steve Sent: 13

Re: Bypassing s322

On Tue, Sep 13, 2016 at 8:50 AM, John Eells wrote: > For historical reasons lost in the Mists of Time, ​Oh, good one :-) but wouldn't that be Mists of TIME=?​ > the explanations for z/OS BCP system abends are in System Codes, while > those for DFSMS abends are in System

Bypassing s322

Hello I am running which is a long running job but it keeps abending with s322. I have used all the long running WLM initiators but still abends. I am not sure if IEFUTL exit is restricting it. The error message doesn't produce much information to diagnose. Is there a way to bypass any EXIT

IDCAMs DEF AIX authorization

All, I've got a PMR open with IBM asking the question, but thought I'd also pass this by the brain trust on this list. We recently had an off-shore contractor do a DEFINE AIX for a TEST dataset name, but RELATEd it to a PROD dataset name. The process was allowed surprisingly. Contractor

Re: Two running job program name discovery questions

Thanks, Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Peter Relson Sent: Tuesday, September 13, 2016 5:54 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Two running job program name discovery questions SMF30PGM: the source is

Re: Bypassing s322

About the only way is to pull out the exit or add a FASTAUTH for some widget Steve -Original Message- From: "John McKown" Sent: Tuesday, September 13, 2016 9:19am To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Bypassing s322 Have you tried TIME=1440 on the

Re: IDCAMs DEF AIX authorization

AS I remember, DEF AIX and PATH only operate in the CAT. The BLX would to the extract to the AIX -Original Message- From: "Jousma, David" Sent: Tuesday, September 13, 2016 9:19am To: IBM-MAIN@LISTSERV.UA.EDU Subject: IDCAMs DEF AIX authorization All, I've got a

Re: What is the STCB?

That seems like an understandable confusion, considering how many TCB pointers there are in a TCB. btw, the OTCB is not a TCB, either. sas On Mon, Sep 12, 2016 at 11:29 AM, Charles Mills wrote: > Thanks all. Thanks @John for the link. Duh -- I did not realize it was its >

Re: Two running job program name discovery questions

SMF30PGM: the source is not a programming interface field. It is not the RB's CDE's CDNAME field. SMF30_Highest_Task_CPU_Program: The CDNAME field from the CDE from the oldest RB for the particular task if there is a CDE for that RB. If there is no CDE for that RB, then 8 question-marks or

Re: IBM FTPS connect

Perhaps the list of ciphers in the ftpdata file is too restrictive or maybe the z/OS Security Level 3 FMID is not installed. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to

Re: Bypassing s322

The S322 abend occurs when the TIME= on the JOB or EXEC statement is exceeded. So the job does have one and you must be able to find out where it originates from, possibly from JES2PARM JOBCLASS statement. You can override the time with the TIME=nnn or TIME=NOLIMIT parameter (if exits allow

FW: FTP_NEEDS_CONNECTION return From EZAFTPKS interface

Hi I originally posted on the TCP/IP list but saw FTP issues on IBMMAIN From: Joe Reichman [mailto:reichman...@gmail.com] Sent: Tuesday, September 13, 2016 8:21 AM To: 'ibmtc...@vm.marist.edu' Subject: FTP_NEEDS_CONNECTION return From EZAFTPKS interface Hi

Re: Bypassing s322

Have you tried TIME=1440 on the job card? Or, if you like the more recent way, TIME=NOLIMIT . As Kees said, this may be disallowed at your shop. You might need to ask your sysprog, if you are not one yourself. There is not a way for a job to say the equivalent of "this job should not be controlled