Re: RACF, external password management

I wrote One minute MVS: What is IBM Multi Factor Authentication on z/OS? and a series of implementation posts starting with Multi Factor Authentication(MFA): Planning.

Re: TELNET PROFILE, strictly PDS?

Classification: Confidential 1) Re-allocate as PDS/E. This will require a PDS/E 2) Compress in batch w/IEBCOPY and make you changes. No restart required. -Original Message- From: IBM Mainframe Discussion List On Behalf Of roscoe5 Sent: Friday, March 1, 2024 2:47 PM To:

Re: TELNET PROFILE, strictly PDS?

I could not find definitive doc saying a PDS/E was/wasn’t allowed, but I am convinced it is. Thanks. Over the weekend I created a PDS/E and copied the members, made my update, and I’m awaiting Change approval to do any Obey from the new Library to pick it up, temporarily. Then the plan is to

Re: TELNET PROFILE, strictly PDS?

Classification: Confidential You will, at some point need to restart TCPIP to pick up the new PDSE in the Profile datasets. TYPE 1 PDS/E is sufficient for this purpose. -Original Message- From: IBM Mainframe Discussion List On Behalf Of roscoe5 Sent: Monday, March 4, 2024 7:30 AM To:

Re: TELNET PROFILE, strictly PDS?

On Mon, 4 Mar 2024 13:29:59 +, roscoe5 wrote: >I could not find definitive doc saying a PDS/E was/wasn’t allowed, but I am >convinced it is. Thanks. > In days of yore there were only PDSs Nowadays there are PDS, PDSE1, PDSE2, and UNIX directories with some similarities and many differences

Re: TELNET PROFILE, strictly PDS?

Thanks Gil From: IBM Mainframe Discussion List on behalf of Paul Gilmartin <042bfe9c879d-dmarc-requ...@listserv.ua.edu> Sent: Monday, March 4, 2024 9:25:07 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: TELNET PROFILE, strictly PDS? On Mon, 4 Mar 2024

Re: EXTERNAL EMAIL: ZOS Sending Logs to Sumologic Experience?

Thanks for the shout-out, Jerry! (I was the principal developer of said product.) I think BMC now calls the product AMI Defender. (I have no financial interest in BMC or the product.) I am pretty much of an expert on this topic. Feel free to reach out to me off-line if you have any questions.

Re: EXTERNAL EMAIL: ZOS Sending Logs to Sumologic Experience?

Steve, to add to what Jerry and Charles have said. I don't have any experience with Sumologic, but I'm going to guess it will need data sent to it in a format it will understand. The place that I retired from was using the BMC product to send data to Splunk. The BMC product allowed us to

Re: Can DFSORT assign custom Return Code values?

The situation is that I have three different environments. If we are in development, lets ignore the email If we are in pre-prod, let’s assume someone is perform a User Acceptance test. If we are in production, we should jump in and deal with remediation. When the email is sent, I have embedded

Re: ZOS Sending Logs to Sumologic Experience?

Steve Estle wrote: >We are embarking on an endeavor to explore sending logics to a >tool called Sumologic(sumologic.com). For those who are unaware, >Sumologic is a competitor to Splunk and contains a very powerful real >time log parsing analytics engine which can be used to build dashboards,

Re: How to reduce the overhead of WLM?

A few years back, I did a deep dive into tuning CPU usage across a multitude of very small z/OS guests under z/VM, and WLM was certainly a big hitter for many of them, but as there were so many instances, I was able to see notable differences in WLM use between "LPARs", which was obviously "of

Re: Changes to user's TSO PROFILE

Yes, you're right Seymour, mea culpa. Lennie -Original Message- From: IBM Mainframe Discussion List On Behalf Of Seymour J Metz Sent: 04 March 2024 20:24 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Changes to user's TSO PROFILE UPT. Some vendors feel entitled to change it without a "by

Re: How to reduce the overhead of WLM?

The most important thing is RMPTTOM for reducing the SRM timer pop overhead. Note that Timer DIE processing is uncaptured time. My IEAOPTxx for running under VM has RMPTTOM=3 /*REDUCE SRM INVOKATION FREQUENCY ON VM */ And that is a value we set a couple of decades ago,

Can DFSORT assign custom Return Code values?

Hello everyone, From what I have read this is not possible, but I decided to throw it out there to see if something is possible. I have a block of JCL with a bunch of steps. I have symbolic parameters assigned. (JP1/JP2 SYSPLEX Symbolics for DFSORT) I was looking for a Utility that would

ZOS Sending Logs to Sumologic Experience?

All, We are embarking on an endeavor to explore sending logics to a tool called Sumologic(sumologic.com). For those who are unaware, Sumologic is a competitor to Splunk and contains a very powerful real time log parsing analytics engine which can be used to build dashboards, alerts, and more.

Re: Changes to user's TSO PROFILE

I did some checking of our CLIST libraries, and found a CLIST which changes the TSO PROFILE setting. The user says she uses that CLIST quite often. Thanks for your help everybody! Sent with Proton Mail secure email. On Monday, March 4th, 2024 at 10:21 AM, Lennie Bradshaw wrote: > The

Re: Can DFSORT assign custom Return Code values?

I think I did what you want, many years ago. A very small C program something like int main(argc,argv) { if (strcmp(argv[1],argv[2]) == 0 return 0 else return 4; } //S1 EXEC PGM=IFPROG,PARM="DEV," // if S1.RC == 0 they are the same Colin On Mon, 4 Mar 2024 at 16:02, Cameron Conacher <

Re: Can DFSORT assign custom Return Code values?

Or this, posted on @ Tue Jul 28, 2009 11:59 pm //* Use a tiny Rexx exec to check both month and year //* If 1st of month, return number of month, else return 99 //MAKEREXX EXEC PGM=IEBUPDTE,PARM=NEW //SYSINDD DATA ./ADD NAME=CHKDATE

Re: Can DFSORT assign custom Return Code values?

On Mon, 4 Mar 2024 at 16:13, Sri Hari Kolusu wrote: > Please send an offline email with your complete requirement and I will > show you a way to do it. > After all, why would anyone else be interested in it? Robert -- Robert AH Prins robert(a)prino(d)org The hitchhiking grandfather

Re: Can DFSORT assign custom Return Code values?

>> I was to be able to assign one of three different Return Code values (any >> value) that I can let check to determine if I am running in Development, >> Pre-Prod or Production, and then execute steps related to the specific >> environment. Not something I absolutely need since I could write

Re: Can DFSORT assign custom Return Code values?

Another simple way to do this is a simple Rexx exec using MVSVAR to get the system symbol that you want . See https://www.ibm.com/docs/en/zos/2.5.0?topic=tef-mvsvar to see examples of how to do this. Doug   On Mon, 4 Mar 2024 16:01:51 +, Cameron Conacher wrote: >Hello everyone, >From

Re: TELNET PROFILE, strictly PDS?

General remarks: There are three flavours of "partitioned data set": - PDS - PDSE (now described as v1) - PDSE v2 PDS/PDSE can hold data members or program members. For programs, the difference between PDS and PDSE is significant. However for brevity let's stop talking about programs. Now

Re: TELNET PROFILE, strictly PDS?

Excellent!! Thanks! On Mon, Mar 4, 2024 at 12:53 PM Radoslaw Skorupka < 0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote: > General remarks: > There are three flavours of "partitioned data set": > - PDS > - PDSE (now described as v1) > - PDSE v2 > > PDS/PDSE can hold data members or

Re: Changes to user's TSO PROFILE

Is she logging off cleanly? Or is she letting her session 522 off. If the latter profile changes don’t get written out and would explain the behavior. Dave Jousma Vice President | Director, Technology Engineering From: IBM Mainframe Discussion List on behalf of rpinion865

Changes to user's TSO PROFILE

Is there anything that tracks changes to a TSO user's PREFIX? I have a user who says her PREFIX keeps getting changed to NOPREFIX. Sent with [Proton Mail](https://proton.me/) secure email. -- For IBM-MAIN subscribe / signoff /

Re: Can DFSORT assign custom Return Code values?

Presuming these are three different z/OS instances. why not just use system symbols to make the determination of what environment is being used? Michael At 10:12 AM 3/4/2024, Sri Hari Kolusu wrote: Content-Transfer-Encoding: base64>> I was to be able to assign one of three different Return

Re: Can DFSORT assign custom Return Code values?

>> Another simple way to do this is a simple Rexx exec using MVSVAR to get the >> system symbol that you want . See >> https://www.ibm.com/docs/en/zos/2.5.0?topic=tef-mvsvar to see examples of >> how to do this. Doug, As I mentioned earlier you don't need REXX to get the MVS variables. DFSORT

Re: Changes to user's TSO PROFILE

Is there anything that tracks changes to a TSO user's PREFIX? I have a user who says her PREFIX keeps getting changed to NOPREFIX. RACF, ACF2, TSS Regards, Steve This electronic mail (including any

Re: Changes to user's TSO PROFILE

The TSO prefix is stored in an unprotected control block (the ECT I think). As such, almost any program running in the TSO session can change it. I don't think that any of RACF, ACF2 or TSS can protect you against that. Lennie -Original Message- From: IBM Mainframe Discussion List On

Re: Can DFSORT assign custom Return Code values?

Not exactly sure what you are trying to do, but . it should be a simple rexx procedure /* REXX */ STRING = "TEST PROD WHATEVER" RCS = "4 8 12"

Re: Changes to user's TSO PROFILE

(Although come to think of it I guess PREFIX/NOPREFIX isn't one of the fields recorded in TSS. I don't remember about ACF2 or RACF.) --- Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313 /* If you have a problem with me, text me. And if you don’t have my number, you don’t know me well

Re: Changes to user's TSO PROFILE

On Mon, 4 Mar 2024 at 14:36, Bob Bridges < 0587168ababf-dmarc-requ...@listserv.ua.edu> wrote: > (Although come to think of it I guess PREFIX/NOPREFIX isn't one of the > fields recorded in TSS. I don't remember about ACF2 or RACF.) > Yabut... Where else could it be recorded? It used to be in

Re: TELNET PROFILE, strictly PDS?

On Mar 4, 2024, at 8:25 AM, Paul Gilmartin <042bfe9c879d-dmarc-requ...@listserv.ua.edu> wrote: Must it be the responsibility of every facility to enumerate its capabilities? With great power comes great responsibility. I believe that the only things that must be PDS and not PDSE are

Re: 35th International Rexx Symposium in Birsbane (Australia) about to start

Well, yeah. But a) I'm not far enough into that debate to understand all the issues and distinctions, and b) at any rate "object-oriented" means SOMETHING. As I said, when he wrote "dynamic" I was sure he didn't mean just "lively" or "ever-changing". Heck, I'm satisfied if "object-oriented"

Re: Changes to user's TSO PROFILE

ACF2 et al can not protect you from your self Sent from my iPhone No one said I could type with one thumb > On Mar 4, 2024, at 14:12, Schmitt, Michael wrote: > > I think in ACF2 it is the PREFIX attribute in the user's profile record. > > -Original Message- > From: IBM Mainframe

Re: TELNET PROFILE, strictly PDS?

As Allan said, you can compress an in-use PDS using IEBCOPY. //CMPEXEC PGM=IEBCOPY //SYSPRINT DD SYSOUT=* //SYSUT3 DD UNIT=SYSDA,SPACE=(CYL,(90)) //SYSUT4 DD UNIT=SYSDA,SPACE=(CYL,(90)) //INDD0DD DISP=SHR,DSN= //SYSINDD * C I=INDD0,O=INDD0 /* You might have to adjust the

Re: Changes to user's TSO PROFILE

UPT. Some vendors feel entitled to change it without a "by your leave". -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 עַם יִשְׂרָאֵל חַי נֵ֣צַח יִשְׂרָאֵ֔ל לֹ֥א יְשַׁקֵּ֖ר From: IBM Mainframe Discussion List on behalf of Lennie Bradshaw

Re: 35th International Rexx Symposium in Birsbane (Australia) about to start

Isn't I Don't Want To Talk Smalltalk" a song about OO languages? I'ld say that to be OO it must at least have inheritance. Other issues: Is everything an object? Is it message oriented? Is multiple inheritance allowed? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 עַם יִשְׂרָאֵל

How to reduce the overhead of WLM?

This is probably a strange question, but is there a way to reduce WLM cpu usage? Here's the situation: - The system is a lightly used development system. Unless something is in a loop (very rare), CPU % probably is usually less than 10%. And except for system regions & CICS, it's rare to

Re: Changes to user's TSO PROFILE

Protect, no, but since many of the fields in the TSO profile are recorded in the security ID, mightn't they at least track the changes when they occur? --- Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313 /* Politicians used to understand, without being told, that they didn't necessarily

Re: TELNET PROFILE, strictly PDS?

Classification: Confidential TCPIP/TELNET come up *LONG* after PDSE initialization. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Pew, Curtis G Sent: Monday, March 4, 2024 1:31 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: TELNET PROFILE, strictly PDS? [CAUTION:

Re: ZOS Sending Logs to Sumologic Experience?

Technically, it is not an issue. You can send everything using Rexx (I can supply a sample for syslog). The main issue is converting the input to a format familiar to the syslog parser. In my code I use CEF. So, what are your input sources? ITschak *| **Itschak Mugzach | Director | SecuriTeam

Re: 35th International Rexx Symposium in Birsbane (Australia) about to start

Well, let me focus on that one thing. If I can define a class as a cluster of data values and/or subroutines, and instantiate objects in that class, then isn't that "object-oriented" even if it doesn't have any features to define inheritance from other classes? You may think it's a pretty

Re: Changes to user's TSO PROFILE

I think the prefix is remembered across TSO sessions, and it is stored in the TSO segment of RACF. However, it is stored at LOGOFF time, so interim changes are not recorded. Lennie -Original Message- From: IBM Mainframe Discussion List On Behalf Of Bob Bridges Sent: 04 March 2024

Re: EXTERNAL EMAIL: ZOS Sending Logs to Sumologic Experience?

We used a product to send syslog/smf data to splunk called Correlog - since acquired by BMC and I don't know its new same. I don't think you will have any success in doing this without some agent on the mainframe that can extract and then send the data. Jerry Whitteridge Sr Manager Managed

Re: Changes to user's TSO PROFILE

I think in ACF2 it is the PREFIX attribute in the user's profile record. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Tony Harminc Sent: Monday, March 4, 2024 2:05 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Changes to user's TSO PROFILE On Mon, 4 Mar 2024 at