Bruno Sugliani wrote:
[...]
Being sarcastic, i would say the document proving it is not supported is the
monthly software bill.
In a mixed security environment SYSPLEX, RACF is charged for all lpars, even
for the one you run another security product.
Similar rule apply for WLC and z/OS
Cwi Jeret wrote:
Hello,
After the removal of Master Console on z/OS 1.8 , Our operation department
asked me to define AUTH=MASTER to all of our defined consoles !
Is there any reason why not to do that ???
Is there any reason to do that ?
BTW: in many cases AUTH is obsoleted by OPERCMDS -
5 CYL is the size and has been for years.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at
Looked at all consoles and did not see any high NBUF.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at
Don't know if its related or not, but when I ordered z/os 1.10
serverpac, shopz would not let me select SMPE as one of the products to
include. After talking with the ordering people, it seems as though
starting with 1.10, smpe is no longer orderable as a separate product.
After installing z/os v1r9, I converted the HFS files to ZFS files.
Now, I'm trying to put maintenance on and I am running out of space on
the root ZFS file. I tried defining a bigger vsam dataset and using
IOEAGFMT to format it. When I tried to use ADRDSSU DUMP/RESTORE
scenario to copy the
Hi
From our experience:
- if you can avoid to put anything to the ROOT, ibest if it is read
only, and have only mount points.
- with the IOAGFMT you can incease the size of the ZFS, but maybe you
need to add more volumes to the cluster to enable to expand.
- if you restore an older version,
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Bruno Sugliani
On Thu, 23 Oct 2008 11:35:57 -0500, Mike Feeley wrote:
WOW!! That doc APAR is 10 years old. I would have thought that this
would
no longer be an issue by now. Especially
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of Jousma, David
Don't know if its related or not, but when I ordered z/os 1.10
serverpac, shopz would not let me select SMPE as one of the products
to
include. After talking with the ordering people, it seems as
Good example of why this facility should be disabled for batch jobs (JES2 -
JOBCLASS(*) COMMAND=IGNORE,). We had a DB2 job that wanted to
'quiesce' something in DB2 (sorry, I'm not a DB2 person so I don't remember
what the 'something' was). Anyway, the JCL should have said //*
1) F DFHSM,LIST TTOC SELECT(FULL)
2) examine listing for PREV/NEXT volumes
3) Find the first volume in the chain
4) F DFHSM,RECYCLE EXECUTE VOLUME(1st vol in chain)
HSM goes through a couple of checks for recycling of volume chains. See
topic 4.2.10 in
Tom Longfellow wrote:
Someday, someone is going to give me a rational, non paranoid reason for
why presenting a TSO login to the web is any less secure than WEB front-
end authentication. I have heard many arguements (DOS attacks, brute
force password hacks etc). but each and every one of
John,
I think you are right, but in the past, I always selected SMPE as part
of my serverpac order. What IBM is telling me is that with 1.10 and
beyond, you no longer select SMPE as a product to order with your
serverpac.
_
Dave
I've used the ISH ISPF shell - dropdown File systems; zfs aggregates;
Extend. It's nice and easy!
Best regards,
David Tidy Tel:(31)115-67-1745
IS Technical Management/SAP-Mf Fax:(31)115-67-1762
Dow Benelux B.V.
Hi,
We have a requirement to create a online cics program and a batch program.
The program is used to create a user account by inputting the values thru the
online screen and also needs a batch program that does the same
funcationality , the input is supplied in a flat file. The customer wants
Very helpful. Thanks!
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Tidy, David (D)
Sent: Monday, October 27, 2008 9:25 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: ZFS file made bigger
I've used the ISH ISPF shell - dropdown File systems;
On Mon, 27 Oct 2008 14:04:50 +0100, Ulrich Boche wrote:
Tom Longfellow wrote:
If SSL encryption is good enough to protect billions of dollars of credit
card numbers, why is it insufficient to protect my TSO userid and
password?
The problem you run into when opening the Internet for any
Paul Gilmartin wrote:
[...]
How have eBay and PayPal addressed this problem? If client certificates
or secondary authentication prevent D-o-S attacks which would keep
their administrators pretty busy, can't those techniques be adapted
to TSO logons?
Good point.
However I strongly doubt wether
Jousma, David wrote:
John,
I think you are right, but in the past, I always selected SMPE as part
of my serverpac order. What IBM is telling me is that with 1.10 and
beyond, you no longer select SMPE as a product to order with your
serverpac.
snip
You can't select SMP/E 3.5 with z/OS R10
My point is, that Ebay sent me a secure id card which can be used instead of a
fixed password.
Userid password is not state of the art security these days.
State of the art banks use smartcards in combination with userid and password
in addition to indexed TANs for each transaction.
When I
We had a really weird semi-outage over the weekend. People could not logon
to TSO (but could to CICS), jobs would simply stop running, and other
strange events. It turns out that we had run out of JES2 BERTs. We are
converting a very huge, to us, number of reports from one archival product
to a
John,
Can you speak to the silly licensing issues I and others have experienced? If
I already have a z/OS license, why should I have to acquire a separate license
for SMP/e in order to order it separately?
Scott Rowe
John Eells [EMAIL PROTECTED] 10/27/2008 11:09 AM
You can't select SMP/E
On Mon, 27 Oct 2008 11:27:41 -0400, Denis Gäbler wrote:
My point is, that Ebay sent me a secure id card which can be used instead of
a fixed password.
Userid password is not state of the art security these days.
State of the art banks use smartcards in combination with userid and password
in
John,
Were you running a larger number than normal jobs? The BERT is value is
based on the number of JQEs defined on the system which relates to the
number of Jobs.
So if you normal run 100 jobs daily but this time you ran 15000 jobs, then I
can see the need to increase the number of BERTS.
On Mon, 2008-10-27 at 11:48 -0400, Scott Rowe wrote:
Can you speak to the silly licensing issues I and others have
experienced?
As long as we're beating up on John here, let me add my pet peeve. I
can't download the SCRT tool without click-agreeing to:
...REPRESENT AND WARRANT THAT
Original Message
Subject: Re: TN3270 for iPhone
Date: Mon, 27 Oct 2008 17:04:17 +0100
From: Ulrich Boche [EMAIL PROTECTED]
Newsgroups: bit.listserv.ibm-main
References: [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Denis Gäbler wrote:
My point is, that Ebay sent me
Hi John,
DON'T RUN OUT OF BERTS
5K even 25K is not that much. You need to take a look at your checkpoint space
including your BERTWARN threshold and your automation then make sure you have a
long runway and visibility to problems before they become a crisis.
Here is our current status
On Mon, 27 Oct 2008 12:07:40 -0400, Knutson, Sam [EMAIL PROTECTED] wrote:
Hi John,
DON'T RUN OUT OF BERTS
5K even 25K is not that much. You need to take a look at your checkpoint
space including your BERTWARN threshold and your automation then make sure
you have a long runway and visibility to
You don't say what programming language (much less what release/version of a
compiler) you are using.
If you are talking about COBOL, it is entirely possible to put as much or as
little as you might want - from either the Data Division *OR* the Procedure
Division.
If fact, if it is distinct set
Yes. Support for mixed security environments for console commands was
added in CA ACF2 release 9.0 and CA Top Secret release 12.0.
David Hrycewicz
CA Mainframe Security Development
[EMAIL PROTECTED]
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Does anyone know if SUSBSYSTEM requests to SMS are documented
anywhere? I find the reason codes for bad returns but not the function codes
for the requests.
How best to obtain information from SMS or other source like STORAGE GROUP
NAMES and the VOLUME SERIAL NUMBERS for that group
Denis Gäbler wrote:
My point is, that Ebay sent me a secure id card which can be used instead of a
fixed password.
Userid password is not state of the art security these days.
Yes. However it's like democracy: very bad system, but there is nothing
better. And yes, I'm aware of smartcards,
On Mon, 27 Oct 2008 17:59:27 +0100, R.S. wrote:
State of the art banks use smartcards in combination with userid and
password in addition to indexed TANs for each transaction.
Such banks have to pay for millions of smartcards ,including
replacement, secure distribution, lost/stolen cards,
Take a look in IEFSSSA in SYS1.MODGEN
David Elliot
zSeries Software Support
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Bill Wilkie
Sent: Monday, October 27, 2008 11:37 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: SMS requests
Does anyone know
On Mon, 27 Oct 2008 10:55:44 -0500, Paul Gilmartin [EMAIL PROTECTED] wrote:
On Mon, 27 Oct 2008 11:27:41 -0400, Denis Gäbler wrote:
My point is, that Ebay sent me a secure id card which can be used instead
of a fixed
password.
Userid password is not state of the art security these days.
State
2008/10/27 John McKown [EMAIL PROTECTED]:
So, anybody want to tell me what a BERT is really used for? It seems to be a
generic overflow type control block. How do I avoid this in the future?
If JES2 didn't have BERTs, it couldn't have the $DILBERT and $DOGBERT
macros. And what fun would that
On Mon, 27 Oct 2008 10:35:14 -0500, John McKown [EMAIL PROTECTED] wrote:
We had a really weird semi-outage over the weekend. People could not logon
to TSO (but could to CICS), jobs would simply stop running, and other
strange events. It turns out that we had run out of JES2 BERTs. We are
Mark Zelden wrote:
Had you been paying more attention to IBM-MAIN at the end of August
(I'm surprised you missed this), you whould have seen this thread:
DON'T RUN OUT OF BERTS (or you may COLD start JES2) APAR OA25562
http://bama.ua.edu/cgi-bin/wa?A2=ind0808L=ibm-mainP=R85016I=1X=-
--
And the user may then need to carry a smartcard for each account.
My bank has the concept of combining multiple accounts to one login, so only
one smartcard is enough.
However, according the cost of smartcards?
Wasn't it the US, UK and also parts of eastern Europe that use lots of Pay TV?
Actually, if you didn't want to get into programming too much, a look in
SYS1.SACBCNTL would show you how to run ISMF in the batch (NaviQuest is
what IBM calls it). Then you could come along with a REXX EXEC or
something and format your reports or whatever from the output.
David Elliot
zSeries
Hi,
I received this sad story in my Email In-box. and I am putting it on the
list because I lost touch with what is happening in Texas..
Is there anybody from IBM that would like to comment on this ?
The attached news story reports a failure of IBM T4T to backup
critical network
Hi,
I have a input file and Based on the current date(mm/dd/yy), could some
please let me know how to get the last 7 days of data for weekly processing.
Thanks,
Ron
--
For IBM-MAIN subscribe / signoff / archive access
That will depend on what you use to access the file. And what kind of data
you are trying to work with. This is probably specific to your shop.
Are you going to use DFSORT, Syncsort, a Cobol Program, REXX, SAS or some
other facility?
Most languages can provide a DATE-7 Days function. But you
On Mon, 27 Oct 2008 12:55:14 -0500, Ron Thomas [EMAIL PROTECTED] wrote:
Hi,
I have a input file and Based on the current date(mm/dd/yy), could some
please let me know how to get the last 7 days of data for weekly processing.
Thanks,
Ron
Very vague. What language? REXX? COBOL? DB/2 select?.
David:
Thanks. I found that maro in some old code, just still not clear on how to set
the function for what I need returnedand where it would be returned. For
example there is a field named sssasfn for the subfunction code, but not sure
what I would put in there.
There is also an operator
A z/OS exposed to the web should also make sure that nobody can guess Started
Task Userids, when they are revoked after 3 false passwords that has nice
impacts to your z/OS (Happened to me once due to a user using the first userid
that he found in syslog for some testing).
If you make the
Bill
There is a way of programmatically getting the SMS constructs - unfortunately
the manual that describes the interface is only provided if you pay approx
$50,000 and also sign some sort of CDA (or NDA). This (famous) manual has been
mentioned quite a few times on IBM-Main and is called the
A z/OS exposed to the web should also make sure that nobody can guess
Started Task Userids, when they are revoked after 3 false passwords that
has nice impacts to your z/OS (Happened to me once due to a user using the
first userid that he found in syslog for some testing).
Strange. It should
Bill,
The operator command you refer to tells you which subsystems are enabled
for the specified subsystem function. I don't think this is what you are
looking for.
It might be useful to know what your objective is here. There are easier
ways of obtaining this information than writing subsystem
Rob/David:
Thanks for your answers. I just wanted to makes sure there wasn't an easy way
to do this that I was overlooking. It appears there isn't.
Bill
Date: Mon, 27 Oct 2008 15:28:56 -0400 From: [EMAIL PROTECTED] Subject: Re:
SMS requests To: IBM-MAIN@BAMA.UA.EDU Bill
We did an offload z/OS V1R7 spool with no selection parameters; WS=(/):
$SOFFLOAD1,TYPE=TRANSMIT
After a bit we issued a:
$ZOFFLOAD1
After a bit more we issued a:
$SOFFLOAD1 and then later a $POFFLOAD1
Then we IPL'd:
After the IPL we issued a:
$SOFFLOAD1,TYPE=RECEIVE
On Sun, 26 Oct 2008 19:39:48 -0500, Mark Zelden
[EMAIL PROTECTED] wrote:
A console that was not rolling?
Mark,
That advice applied prior to the Console Restructure. After z/OS R4.2, we
moved the point where SYSLOG/OPERLOG is written -- it is now written
immediately after the SSI, prior to
On Mon, 27 Oct 2008 16:47:57 -0500, W. Kevin Kelley [EMAIL PROTECTED]
wrote:
On Sun, 26 Oct 2008 19:39:48 -0500, Mark Zelden
[EMAIL PROTECTED] wrote:
A console that was not rolling?
Mark,
That advice applied prior to the Console Restructure. After z/OS R4.2, we
moved the point where
How is OFFLOAD1 defined in your JES2 parms?
What messages did you receive during the offload/reload?
Linda
-- Original message --
From: Donnelly, John P [EMAIL PROTECTED]
We did an offload z/OS V1R7 spool with no selection parameters; WS=(/):
54 matches
Mail list logo
