Re: z/OS NFS Server. Can it be used in Windows or Novell
Neal Eckhardt wrote: use NFS from Windows or Novell? There do not appear to be MVSLOGIN,etc programs supplied. There are sample program sources (don't quite remember where I found them but they are in some PDS that comes with the system) for mvslogin e.a. I compiled them on SUSE linux for a client and it works quite well. I guess these programs could be ported to Windows... Cheers, Jantje. P.S. You will, of course, need an NFS client on your Windows... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VSAM RLS, TVS, CICS/VR puzzle
Have a look at the zSeries Conference held in Innsbruck last year, there are a couple of presentations that I found very useful. If you cannot find let them let me know and I can send them to you. Regards Gerard -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of R.S. Sent: 04 January 2006 08:36 PM To: IBM-MAIN@BAMA.UA.EDU Subject: VSAM RLS, TVS, CICS/VR puzzle Does anybody know any material (presentation, booklet) about VSAM RLS and other products implementation ? The deeper I dig the more components I find. Now RLS, TVS, RRS and CICS/VR are in play. BTW: I suspect (*) there are ISV replacements for TVS and CICS/VR, aren't they ? (*) My impression comes form IBM style when describing CICS/VR. you can use product *like* CICS/VR, *for example* CICS/VR -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html __ Standard Bank Disclaimer and Confidentiality Note This e-mail, its attachments and any rights attaching hereto are, unless the context clearly indicates otherwise, the property of Standard Bank Group Limited and/or its subsidiaries (the Group). It is confidential, private and intended for the addressee only. Should you not be the addressee and receive this e-mail by mistake, kindly notify the sender, and delete this e-mail, immediately and do not disclose or use same in any manner whatsoever. Views and opinions expressed in this e-mail are those of the sender unless clearly stated as those of the Group. The Group accepts no liability whatsoever for any loss or damages whatsoever and howsoever incurred, or suffered, resulting, or arising, from the use of this email or its attachments. The Group does not warrant the integrity of this e-mail nor that it is free of errors, viruses, interception or interference. Licensed divisions of the Standard Bank Group are authorised financial services providers in terms of the Financial Advisory and Intermediary Services Act, No 37 of 2002 (FAIS). For information about the Standard Bank Group Limited visit our website http://www.standardbank.co.za ___ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Copy Extended-format VSAM Sphere
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Andrew N Wilt John, Off the top of my head, I think the reason that the offline volumes are being requested for mount is due to RACF (Security) processing. Because the source data set catalog is available to the target system, DFSMSdss is seeing that the original data set is cataloged. Since it is cataloged, we need to check your authority to be able to restore that data set. I think that as part of checking the authority, Catalog may be called which may need to read the VVRs from the volumes (which are offline to that system). I would try specifying the ADMINISTRATOR keyword so that we would bypass the RACF checking for the data set being restored. I think that the rest of what you are trying to do should work just fine. I think is just the funny situation of the source catalog being available to the target system, but not the source volumes that is the problem. Thanks, Andrew. We likely would not have thought of that angle. We'll give it a go and see what happens. -jc- Andrew Wilt IBM DFSMSdss Architecture/Development Tucson, Arizona -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Charles Mills I just posted the NETRC question but perhaps I should instead ask the fundamental underlying question. Here is what I want to do. I want to have a program ABC running in a normal batch job that might be submitted by any of a large number of TSO users invoke FTP and have it log on to a remote z/OS FTP server and, among other things, submit a job. I have complete control over the INPUT (command) file which is built on the fly. Here is the key question: I would like the FTP logon to be with the userid of the original user who submitted the batch job. Do any of you creative souls want to suggest a reasonable way to do this? Digital certificates? -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Speaking of RECEIVEFROMNETWORK (was RE: z/OS NFS Server. Can it b e used in Windows or Novell)
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Skip Robinson We have used SMB/Samba for quite some time to access MVS files from Windows. Yes, I'm the one who set it up. I may actually be the only regular user, and since RECEIVEFROMNETWORK replaced our older ShopzSeries procedure, even I don't use it a lot. ... Does SMP/E *require* the presence of crypto *hardware* to use RECEIVEFROMNETWORK? or can it be used with only the software crypto support (GSK library)? TIA, -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
An additional consideration is do individual users have non-expiring passwords on the remote system? If the password expires, then NETRC or any other automatic procedure becomes more difficult. Craig -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Charles Mills Sent: Wednesday, January 04, 2006 5:43 PM To: IBM-MAIN@BAMA.UA.EDU Subject: FTP userid propagation I just posted the NETRC question but perhaps I should instead ask the fundamental underlying question. Here is what I want to do. I want to have a program ABC running in a normal batch job that might be submitted by any of a large number of TSO users invoke FTP and have it log on to a remote z/OS FTP server and, among other things, submit a job. I have complete control over the INPUT (command) file which is built on the fly. Here is the key question: I would like the FTP logon to be with the userid of the original user who submitted the batch job. Do any of you creative souls want to suggest a reasonable way to do this? A file with possible userids and the associated remote passwords fulfills the letter of the above specs but is obviously totally unacceptable from a security point of view. I don't think NETRC does the job because a local NETRC is a security disaster and a global NETRC file would only provide one userid and password for the remote machine -- my whole point is I want to propagate each individual user id. Please don't ask why do you want to do it that way? The answer is I don't, the customer does. Charles Mills -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Speaking of RECEIVEFROMNETWORK (was RE: z/OS NFS Server. Can it b e used in Windows or Novell)
Chase, John wrote: Does SMP/E *require* the presence of crypto *hardware* to use RECEIVEFROMNETWORK? or can it be used with only the software crypto support (GSK library)? The latest SMP/E, 3.4, does not require the use of ICSF or the hardware. It will use a Java class instead. However, using ICSF and the crypto hardware is recommended because performance should be much better. More specifically: The z/OS Integrated Cryptographic Services Facility (ICSF) is used by SMP/E to calculate SHA-1 hash values. These hash values are calculated for files within a GIMZIP package to verify the integrity of the data within the package. SMP/E has been enhanced to use an alternate method to calculate SHA-1 hash values if ICSF is not available for use. Although ICSF is the preferred method, SMP/E will no longer require it for use by the GIMZIP and GIMUNZIP service routines, nor for the RECEIVE FROMNETWORK or RECEIVE FROMNTS commands. If SMP/E detects ICSF is not available, then SMP/E will automatically use an SMP/E Java™ application class to calculate SHA-1 hash values as an alternative. To use the new SMP/E Internet Service Retrieval capability, SMP/E requires the IBM Software Developer Kit for z/OS, Java 2 Technology Edition, Version 1 Release 4 (5644-I56) or its logical successor. Java is not required for the installation of SMP/E, but is required at run time to use this SMP/E function. snip -- John Eells z/OS Technical Marketing IBM Poughkeepsie [EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: NETRC and security -- am I missing something?
-Original Message-
From: IBM Mainframe Discussion List
[mailto:[EMAIL PROTECTED] On Behalf Of Charles Mills
Sent: Wednesday, January 04, 2006 4:34 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: NETRC and security -- am I missing something?
a site-wide one that is pointed to by the proc(s). RACF
program control /
conditional access is used for this. Our mainframe .netrc
files are only
accessable to programs like FTP
I'm not the biggest RACF expert. It's possible to do this? To
have a file
that FTP running for user XYZ can read, but user XYZ cannot
read him/herself
(say with ISPF browse)? Is FTP AFP-authorized? Is that how
this works? Is
there going to be an issue if FTP is loaded by a non-authorized batch
program?
Charles
Yes, this is possible. It is called PADS (Program Access to Data Sets).
It uses somthing called the Conditional Access List in RACF also. You
can basically say something like: Allow user xyz to have ... access to
dataset ... if they are running program ... An example:
ADDSD 'HLQ.MLQ.LLQ' UACC(NONE) OWNER(HLQ) GENERIC
PERMIT 'HLQ.MLQ.LLQ' ID(group) ACCESS(READ) WHEN(PROGRAM(FTP))
However, this does require that the program in question, FTP, be
program controlled by having an entry for it in the PROGRAM class,
similar to:
RADD PROGRAM FTP UACC(NONE) ADDMEM('dsn.containing.program'//PADCHK)
PERMIT FTP CLASS(PROGRAM) ID(group) ACCESS(READ)
Note that the above is very simplified and using PADS can become quite
complicated by things such as determining exactly which program is doing
the OPEN and which library it is coming from.
--
John McKown
Senior Systems Programmer
UICI Insurance Center
Information Technology
This message (including any attachments) contains confidential
information intended for a specific individual and purpose, and its
content is protected by law. If you are not the intended recipient, you
should delete this message and are hereby notified that any disclosure,
copying, or distribution of this transmission, or taking any action
based on it, is strictly prohibited.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ICHDEX01 question
On 1/5/2006 8:57 AM, [EMAIL PROTECTED] wrote: FYI - the doc says the default module returns a 4. The default module does return a 4. And it lives in SYS1.LINKLIB (where RACF won't use it), not SYS1.LPALIB. If you have one in SYS1.LPALIB you put it there yourself. I recommend that you remove that one from SYS1.LPALIB. You might consider replacing it with one that sets return code 16, which will provide the best security. Walt Farrell, CISSP z/OS Security Design, IBM -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
On 1/4/2006 5:43 PM, Charles Mills wrote: I just posted the NETRC question but perhaps I should instead ask the fundamental underlying question. Here is what I want to do. I want to have a program ABC running in a normal batch job that might be submitted by any of a large number of TSO users invoke FTP and have it log on to a remote z/OS FTP server and, among other things, submit a job. I have complete control over the INPUT (command) file which is built on the fly. Here is the key question: I would like the FTP logon to be with the userid of the original user who submitted the batch job. Do any of you creative souls want to suggest a reasonable way to do this? The z/OS FTP server and client both support authentication via digital certificates (client authentication functions of SSL or TLS). I suggest you use that approach. Walt Farrell, CISSP z/OS Security Design, IBM -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
MVSLOGIN (was: z/OS NFS Server. ...)
In a recent note, Jan MOEYERSONS said: Date: Thu, 5 Jan 2006 04:52:32 -0600 There are sample program sources (don't quite remember where I found them but they are in some PDS that comes with the system) for mvslogin e.a. I compiled them on SUSE linux for a client and it works quite well. I guess these programs could be ported to Windows... Re: z/OS NFS Server. Can it be used in z/OS clients? BTW, has anyone succeeded in porting this MVSLOGIN to z/OS Unix itself? I've tried with no success. My motives are partly practical: I'd be delighted to be able to mount a collection of MVS data sets, even on the server itself, as a Unix VFS and be able to use all UNIX facilities, particularly shell redirection, on Classic data sets and members. And partly perverse: when I wish to report a perceived NFS bug (there are plenty), it would eliminate the possibility of finger pointing to have z/OS at both server and client ends. We routinely use NFS for UNIX filesystems served by z/OS servers to z/OS clients, and Classic data sets to Solaris clients. Is anyone doing this with Classic data sets and z/OS clients? How? -- gil -- StorageTek INFORMATION made POWERFUL -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VSAM Recovery Help
If you can get the VVDS entries back, then a simple DEFINE RECATALOG should work. Otherwise, do you have any tools that can backup a VSAM data component using EXCP? If so, you could back up the data, scratch the data/index from the current volume, define the cluster, then reload from your backup. Larry Crilley Dino Software, Corp. http://www.dino-software.com/ 412-734-2853. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey Deaver Sent: Wednesday, January 04, 2006 11:53 PM To: IBM-MAIN@BAMA.UA.EDU Subject: VSAM Recovery Help Long story short... I screwed up and lost some data... I have a volume recovered from an FDR dump that contains the data and index components of a vsam dataset. The catalog/cluster entry is gone. I need to recreate the vsam cluster from the components I have. Also - the recovered volume serial is different than the original volume name, so I fear the VVDS may cause me problems. I'm not a VSAM expert and so looking for help here. Thanks. Jeffrey Deaver, Senior Analyst, Systems Engineering 651-665-4231 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
Walt Farrell said: | | The z/OS FTP server and client both support authentication | via digital | certificates (client authentication functions of SSL or | TLS). I suggest | you use that approach. | | Walt Farrell, CISSP | z/OS Security Design, IBM | Hi Walt, This does sound a lot better that the .netrc approach (which we've been using). Can you point me to the relevent manuals? Redbooks? Thanks! *BobL* -- This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended exclusively for the person(s) to whom it is addressed. Any use, copying, retention or disclosure by any person other than the intended recipient or the intended recipient's designees is strictly prohibited. If you are not the intended recipient or their designee, please notify the sender immediately by return e-mail and delete all copies. OppenheimerFunds may, at its sole discretion, monitor, review, retain and/or disclose the content of all email communications. == -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Speaking of RECEIVEFROMNETWORK ...
In a recent note, John Eells said: Date: Thu, 5 Jan 2006 08:43:03 -0500 SMP/E has been enhanced to use an alternate method to calculate SHA-1 hash values if ICSF is not available for use. Although ICSF is the preferred method, SMP/E will no longer require it for use by the GIMZIP and GIMUNZIP service routines, nor for the RECEIVE FROMNETWORK or RECEIVE FROMNTS commands. If SMP/E detects ICSF is not available, then SMP/E will automatically use an SMP/E Java(TM) application class to calculate SHA-1 hash values as an alternative. I tried this (somewhat accidentally), only to be reminded that our systems with SMP/E v3r4.0 do not have ICSF. But they also don't have Java. But as far as it got before failing was revealing and somewhat disturbing: tracks it left show that SMP/E runs a UNIX login shell in order to (try to) invoke Java. This strikes me as a misdesign in that the function is left at the whim of the behavior of the user's ~/.profile. (It was my .profile that left the tracks I discovered.) Better to invoke a non-login shell, with variable ENV unset, or to spawn() the Java engine directly, with no shell. Of course, this also leaves me with the opportunity to reverse engineer the SMP/E interface to Java and substitute an open source SHA-1 in C. Probably performs better and easier to install. -- gil -- StorageTek INFORMATION made POWERFUL -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: XML TOOLKIT Installation question.
OK, so the name's confusing. But it's V1.8 of the toolkit for z/OS, not the z/OS R8 toolkit. It's not really an OK, so IBM was attempting to keep everything with the same release name/number to reduce confusion. I think this is an example where that failed. We have enough issues on precision, causing problems. Why add more? -teD Me? A skeptic? I trust you have proof! -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VSAM Recovery Help
In a message dated 1/4/2006 10:54:01 P.M. Central Standard Time, [EMAIL PROTECTED] writes: I'm not a VSAM expert and so looking for help here.Thanks. Bruce will probably kick in shortly. Think the parm is VRECAT on the restore. Lacking that I'd use FDRCOPY to MOVE it again and do the RECAT. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: MVSLOGIN
On 1/5/2006 9:42 AM, [EMAIL PROTECTED] wrote: Re: z/OS NFS Server. Can it be used in z/OS clients? BTW, has anyone succeeded in porting this MVSLOGIN to z/OS Unix itself? I've tried with no success. My motives are partly practical: I'd be delighted to be able to mount a collection of MVS data sets, even on the server itself, as a Unix VFS and be able to use all UNIX facilities, particularly shell redirection, on Classic data sets and members. Why would you need to use MVSLOGIN to do this? As you mention below, you're already serving data to z/OS clients, which would seem to indicate that you don't need MVSLOGIN in the z/OS environment. ...snipped... We routinely use NFS for UNIX filesystems served by z/OS servers to z/OS clients, and Classic data sets to Solaris clients. Is anyone doing this with Classic data sets and z/OS clients? How? Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: MVSLOGIN
On Thu, 5 Jan 2006 10:26:05 -0500, Walt Farrell [EMAIL PROTECTED] wrote: Why would you need to use MVSLOGIN to do this? As you mention below, you're already serving data to z/OS clients, which would seem to indicate that you don't need MVSLOGIN in the z/OS environment. I had (mis-?)understood that for UNIX FS, the server follows UID/GID authorization; for Classic data sets, it requires an actual user name and password. I'd be delighted to be shown wrong by an affirmative answer below? ...snipped... We routinely use NFS for UNIX filesystems served by z/OS servers to z/OS clients, and Classic data sets to Solaris clients. Is anyone doing this with Classic data sets and z/OS clients? How? Are you doing this with no need for MVSLOGIN? Thanks, gil -- StorageTek INFORMATION made POWERFUL -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Warning: PTF's require HDS microcode, which is not available until the second week of January ----- UPDATE!!!!
There *was* more to the story The PE list in OA14708 today includes all affected PTFs and the AI information (which was only on *some* of the PTFs) has now been deleted. In addition, under 'additional symptoms' OA14708 describes the aspect of the problem which was specific to HDS hardware. Customers are now protected from inadvertently stumbling into this problem, assuming they get current holddata prior to APPLY. Thank you, IBM. Brian On Wed, 4 Jan 2006 13:51:03 -0600, Brian Peterson [EMAIL PROTECTED] wrote: Not sure what you mean by IBM has backed off. The APAR quoted does not mention HDS, nor does it flag as PE any PTF (which means that HDS customers are still doomed to discover their new MVS maintenance fails to IPL). There must be more to the story Brian On Wed, 4 Jan 2006 09:05:13 -0600, Eatherly, John D [IT] [EMAIL PROTECTED] wrote: IBM has backed off. They created this APAR for the issue. APAR Identifier .. OA14708 (snip) PE PTF List: -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: HMC: Optical Network - Hardware messages
Talked with IBM. No there is no way to filter certain CHPID out of Call Home. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Clark, Kevin D, HRC-Alexandria/EDS Sent: Thursday, December 29, 2005 2:25 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: HMC: Optical Network - Hardware messages You...it Global only. There maybe something in AO manager. But for now I guess I have to update my operation procedure to CF CHPID offline when it's PM time. I am going to also open an ETR. Since it's IBM who keep calling me back about these failures, Kevin -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of R.S. Sent: Thursday, December 29, 2005 11:41 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: HMC: Optical Network - Hardware messages Clark, Kevin D, HRC-Alexandria/EDS wrote: Yes, that will work. But I need to disable the CALL HOME function for non-IBM equipment. (STK tape drive, printers) AFAIK you can switch it On/Off globally. To do it choose Console Actions then Enable HMC Services then Optical and I/O Error Analysis radio button. Disabled means no call home reports and AFAIR no messages on HMC. (My vaguely recollection) HTH -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
DS 6800 configuration question
A DS6800 is to be used in 2105 mode. It is planned for the future to change it to native 1750 mode. Question: Does the change involve all data on volumes to be deleted ? -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ICHDEX01 question
On 1/5/2006 11:25 AM, [EMAIL PROTECTED] wrote: Please explain. The RACF sysprog guide says to put it in LPALIB so RACF finds it during initialization. When RACF first implemented DES, and created ICHDEX01, it used to ship a default ICHDEX01 in LPALIB so that installations would by default use the masking algorithm, and could optionally choose to use DES. Many years ago (RACF 2.1) we changed the default to DES, and moved the exit into LINKLIB so it would NOT be used, and thus everyone would migrate to DES. We expect that no one should be installing our version of that exit into LPALIB today, and since RACF 2.1 your system programmer should NOT have been applying that usermod. The instructions you show below are for those users who decide to stay with masking, which we do not recommend. They are NOT instructions that you should install the exit. As documented, in the absence of the exit RACF will use a two-stage (DES, then masking) to compare passwords, and will store all new passwords using DES. Walt Farrell, CISSP z/OS Security Design, IBM Installing the Exit Routine IBM provides an ICHDEX01 exit in SYS1.LINKLIB that causes RACF to use the masking algorithm to authenticate passwords. To use the ICHDEX01 exit that IBM provides, you must activate it by installing it in the link pack area so that RACF finds it during initialization. There are two methods you can use: - Use an IEALPAxx member in SYS1.PARMLIB to request that MVS load ICHDEX01 from SYS1.LINKLIB as a temporary extension to the existing link pack area. Modify all your IEASYSxx members to specify that MVS should use this IEALPAxx member. See z/OS MVS Initialization and Tuning Guide for information. See member RACPARM in SYS1.SAMPLIB for a sample IEALPAxx member. - Create an SMP/E USERMOD to move ICHDEX01 into LPALIB. We have a legacy usermod that moves it to LPALIB. If I do nothing and it stays in LINKLIB, what action does RACF default to? Also, we are using masking. What advantage would we gain using DES? Are there any gotchas to conversion? (Please consider that the site is extremely risk averse.) Thanks for the info! -- Bruce -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about TRSMAIN aks TERSE
On Wed, 4 Jan 2006 14:19:03 -0600, John McKown wrote: This is more curiousity that much else, but I'm wondering if there is a PC version of TRSMAIN. Preferable a Linux one. Why? Because we are always a bit short of CPU on the zSeries. Also, I'm just curious. In the list archives there is a post in March 2004 about an OS/2 terse program that works on Windows PC's. Search the archives for terse16 or follow this link: http://bama.ua.edu/cgi-bin/wa?A2=ind0403L=ibm-mainP=R37852I=1 The link in the old post no longer works, but the program is still out there in other places. Of course there's always the risk of catching a virus with downloaded programs. I don't know of any supported terse programs for the PC. Bill Godfrey -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about TRSMAIN aks TERSE
On Thu, Jan 05, 2006 at 10:42:33AM -0600, Bill Godfrey wrote: I don't know of any supported terse programs for the PC. Is the terse algorithm documented anywhere? -- Jay Maynard, K5ZChttp://www.conmicro.cx http://www.hercules-390.org http://www.tronguy.net http://jmaynard.livejournal.com (Yes, that's me!) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SDSF CPU% vs. ECPU%
I'm still confused ... here's my interpretation, based on previous postings, IBM manuals, and some googling: CPU% is time spent on behalf of the address space (R791TCPU) It includes all the TCB (ASCBEJST) and SRB (ASCBSRBT) time for the address space's own internal work It also includes any enclave time (ASSBASST) spent in another (server) address space (e.g., DB2) Therefore for a client address space like DDF it should represent all DDF-related work For a server address space like DB2 it should represent only the DB2 internal (overhead) work ECPU% is time spent in the address space (R791TCPC) It also includes all the TCB (ASCBEJST) and SRB (ASCBSRBT) time for the address space's own internal work It does not include any enclave time spent in another (server) address space It does include enclave time (ASSBPHTM) that this (server) address space executes on behalf of a client Therefore for a server address space like DB2 it should represent all DB2-related work For a client address space like DDF it should represent only the DDF internal (overhead) work Of course, some address spaces might both create and service enclave work, but hopefully that is not an issue in my case. Now here's a concrete example ... (I changed a few names for clarity purposes only). JOBNAME CPU% CPU-Time SCPU% Workload SrvClass ECPU-Time ECPU% DB2XDIST 1.50 4,403.60 85.00 DDF DDF408,886.43 36.96 DB2QDIST16.13 160,199.54 85.00 DDF DDF508,487.94 18.40 PCICSA0440.36 467,627.88 85.00 STC CICSSTC467,627.88 17.75 DB2XDBM1 9.0933,046.14 85.00 DB2 DB2X 33,046.14 4.00 OMEGDB2 4.0230,483.05 85.00 STC MONITOR 30,483.051.77 TCPIP 1.4926,865.07 85.00 SYSTEM SYSSTC 26,865.070.65 DB2QDBM1 1.4447,296.32 85.00 DB2 DB2Q 47,296.320.63 DB2XDIST is a PeopleSoft application. Although there are some batch jobs, most work comes from off the box. DB2QDIST also comes from off the box but is an in-house application with a different profile -- it executes a high volume of very tiny requests, hence I anticipate much higher enclave management overhead. By my logic, I expected to see ECPU% CPU% for the DB2 workloads (just like in the previous posting) because ECPU includes the enclave CPU executed within the DB2 address space on behalf of the DDF address space. Similarly I expected to see CPU% ECPU% for the DDF workloads (Amy and David in the previous posting) because CPU includes that same enclave CPU. Finally, I would expect to see ECPU% = CPU% for non-enclave workloads like CICS (John in the previous posting -- we're not even running threadsafe in that region). Note that the total CPU-Time and ECPU-Time do match perfectly. Clearly, I must have misunderstood something . . . can anyone put me straight? It looks to me almost as though the enclave CPU for requests originating off the box is simply not reported in the CPU column, but only in the ECPU column. In actual fact, when I re-calculate the values by pro-rating all the CPU% fields down so that my non-Enclave address spaces give the same value in both CPU% and ECPU%, the difference between the ECPU and the re-calculated CPU (presumably representing the actual NP-SRB/Enclave time) seems entirely appropriate. Further, I have verified that the interval CPU-Time for the CICS region is identical to the interval ECPU-TIME. Therefore the CPU% and ECPU% should be identical unless something is not being reported. This is definitely not what is suggested by the SDSF help definition of these fields or by any other documents I've found so far. If my calculation is correct, I would suggest that the correct interpretation of the fields on my SDSF display (supposedly vanilla) are: CPU-Time is the CPU Time (TCB + SRB) for the address space, EXCLUDING any NP-SRB/Enclave time ECPU-Time is the CPU Time (TCB + SRB) for the address space, PLUS any NP-SRB/Enclave time [i.e. CPU used on behalf of this address space -- the definition of CPU-Time] The Server CPU Time (TCB + SRB + served NPE-SRB/Enclave time -- CPU used within this address space -- the definition of ECPU-Time) is not available on my display; the NP-SRB/Enclave time is also not directly available. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SDSF CPU% vs. ECPU% [re-sent as plain text]
I'm still confused ... here's my interpretation, based on previous postings, IBM manuals, and some googling: CPU% is time spent on behalf of the address space (R791TCPU) It includes all the TCB (ASCBEJST) and SRB (ASCBSRBT) time for the address space's own internal work It also includes any enclave time (ASSBASST) spent in another (server) address space (e.g., DB2) Therefore for a client address space like DDF it should represent all DDF-related work For a server address space like DB2 it should represent only the DB2 internal (overhead) work ECPU% is time spent in the address space (R791TCPC) It also includes all the TCB (ASCBEJST) and SRB (ASCBSRBT) time for the address space's own internal work It does not include any enclave time spent in another (server) address space It does include enclave time (ASSBPHTM) that this (server) address space executes on behalf of a client Therefore for a server address space like DB2 it should represent all DB2-related work For a client address space like DDF it should represent only the DDF internal (overhead) work Of course, some address spaces might both create and service enclave work, but hopefully that is not an issue in my case. Now here's a concrete example - I changed a few names for clarity JOBNAME CPU% CPU-Time SCPU% Workload SrvClass ECPU-Time ECPU% DB2XDIST 1.50 4,403.60 85.00 DDF DDF 408,886.43 36.96 DB2QDIST 16.13 160,199.54 85.00 DDF DDF 508,487.94 18.40 PCICSA04 40.36 467,627.88 85.00 STC CICSSTC 467,627.88 17.75 DB2XDBM1 9.09 33,046.14 85.00 DB2 DB2X 33,046.14 4.00 OMEGDB2 4.02 30,483.05 85.00 STC MONITOR 30,483.05 1.77 TCPIP 1.49 26,865.07 85.00 SYSTEMSYSSTC26,865.07 0.65 DB2QDBM1 1.44 47,296.32 85.00 DB2 DB2Q 47,296.32 0.63 DB2XDIST is a PeopleSoft application. Although there are some batch jobs, most work comes from off the box. DB2QDIST also comes from off the box but is an in-house application with a different profile -- it executes a high volume of very tiny requests, hence I anticipate much higher enclave management overhead. By my logic, I expected to see ECPU% CPU% for the DB2 workloads (just like in a previous posting) because ECPU includes the enclave CPU executed within the DB2 address space on behalf of the DDF address space. Similarly I expected to see CPU% ECPU% for the DDF workloads (Amy and David in the previous posting) because CPU includes that same enclave CPU. Finally, I would expect to see ECPU% = CPU% for non-enclave workloads like CICS (John in the previous posting -- we're not even running threadsafe in that region). Note that the total CPU-Time and ECPU-Time do match perfectly. Clearly, I must have misunderstood something . . . can anyone put me straight? It looks to me almost as though the enclave CPU for requests originating off the box is simply not reported in the CPU column, but only in the ECPU column. === In actual fact, when I re-calculate the values by pro-rating all the CPU% fields down so that my non-Enclave address spaces give the same value in both CPU% and ECPU%, the difference between the ECPU and the re-calculated CPU (presumably representing the actual NP-SRB/Enclave time) seems entirely appropriate. Further, I have verified that the interval CPU-Time for the CICS region is identical to the interval ECPU-TIME. Therefore the CPU% and ECPU% should be identical unless something is not being reported. This is definitely not what is suggested by the SDSF help definition of these fields or by any other documents I've found so far. If my calculation is correct, I would suggest that the correct interpretation of the fields on my SDSF display (supposedly vanilla) are: CPU-Time is the CPU Time (TCB + SRB) for the address space, EXCLUDING any NP-SRB/Enclave time ECPU-Time is the CPU Time (TCB + SRB) for the address space, PLUS any NP-SRB/Enclave time [i.e. CPU used on behalf of this address space -- the SDSF definition of CPU-Time] The Server CPU Time (TCB + SRB + served NPE-SRB/Enclave time -- CPU used within this address space -- the definition of ECPU-Time) is not available on my display; the NP-SRB/Enclave time is also not directly available. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: NETRC and security -- am I missing something?
Thanks. This is sufficient. It's perfect. I don't need to be able to do it; I just need to be able to point a RACF expert in the right direction. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of McKown, John Sent: Thursday, January 05, 2006 5:50 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: NETRC and security -- am I missing something? Yes, this is possible. It is called PADS (Program Access to Data Sets). It uses somthing called the Conditional Access List in RACF also. You can basically say something like: Allow user xyz to have ... access to ... Note that the above is very simplified and using PADS can become quite complicated by things such as determining exactly which program is doing the OPEN and which library it is coming from. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
Thanks. Let me echo Bob Lester's request for more pointers if possible and ALSO ask: I ran across the facility called PassTicket. Wouldn't this do the job? The job being letting a program running for user XYZ log on to FTP on a different machine using the same userid (and assuming synchronized passwords and clocks)? Any gotchas with PassTicket? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Walt Farrell Sent: Thursday, January 05, 2006 6:21 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: FTP userid propagation On 1/4/2006 5:43 PM, Charles Mills wrote: I just posted the NETRC question but perhaps I should instead ask the fundamental underlying question. Here is what I want to do. I want to have a program ABC running in a normal batch job that might be submitted by any of a large number of TSO users invoke FTP and have it log on to a remote z/OS FTP server and, among other things, submit a job. I have complete control over the INPUT (command) file which is built on the fly. Here is the key question: I would like the FTP logon to be with the userid of the original user who submitted the batch job. Do any of you creative souls want to suggest a reasonable way to do this? The z/OS FTP server and client both support authentication via digital certificates (client authentication functions of SSL or TLS). I suggest you use that approach. Walt Farrell, CISSP z/OS Security Design, IBM -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMP/E Internet Service Retrieval
Dennis McCarthy wrote: I'm running z/OS 1.4, with SMP/E 34.04 and Java SDK 1.4 at the Service Refresh level of SR3 (PTF UQ07860). I am attempting to use the Internet Service Retrieval with absolutely no success. Does *anyone* have this working under z/OS 1.7? I tried it and it failed: | RECEIVE |ORDER ( |ORDERSERVER( |ORDSRVR | ) |CONTENT ( | RECOMMENDED |) |CLIENT(SMPCLNT) |WAIT(120) | ) | | GIM43500S ** THE CALL TO THE BPX1WRT SERVICE FAILED. THE RETURN CODE WAS | '008C'X AND THE REASON CODE WAS '059D0129'X. | GIM43500S ** THE CALL TO THE BPX1WRT SERVICE FAILED. THE RETURN CODE WAS | '008C'X AND THE REASON CODE WAS '059D0129'X. | GIM69206S ** RECEIVE PROCESSING HAS FAILED BECAUSE PROGRAM GIMJVCLT WAS | UNEXPECTEDLY TERMINATED. | GIM20501IRECEIVE PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12. Digging a little deeper, it looks like Java received an 0C4 -- producing both CEEDUMP and JAVADUMP. Can't tell if it caused the problem or is caused _by_ the problem. I used SUF (the tool I'm trying to replace with native SMP/E function) to bring everything (including the BCP, z/OS UNIX, DFSMSdfp, SMP/E and Java) up to the 0511 RSU + HIPER level, but it still doesn't work. :-( The last call in the Java traceback was RegistClass, so I'm tracking PK11034. Not sure if it has anything to do with my problem, but it gives me something to do ... :-) -- .-. | Edward E. Jaffe|| | Mgr, Research Development| [EMAIL PROTECTED]| | Phoenix Software International | Tel: (310) 338-0400 x318 | | 5200 W Century Blvd, Suite 800 | Fax: (310) 338-0801| | Los Angeles, CA 90045 | http://www.phoenixsoftware.com | '-' -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about TRSMAIN aks TERSE
In a recent note, Jay Maynard said: Date: Thu, 5 Jan 2006 11:04:49 -0600 On Thu, Jan 05, 2006 at 10:42:33AM -0600, Bill Godfrey wrote: I don't know of any supported terse programs for the PC. Is the terse algorithm documented anywhere? It's more than a mere algorithm in the conventional sense. TERSE also bundles sufficient metadata to reconstruct a CKD data set or a PDS(E?) when it's un-TERSEd. (Does it do VSAM, too? Ironically it doesn't do HFS; not even for its archive files, which are flat.) Anyone hoping to offload his TERSE operations to a desktop system must have a scheme for transferring those metadata (as basic as block boundaries) between the mainframe and the desktop system. Another point: For the variety of uses to which IBM puts TERSE (e.g. uploading problem substantiation to testcase; binary files on service.software.ibm.com) it's irresponsible not to make TERSE a supported base OS component. And HFS support is needed. I once had a problem with Binder's handling of HFS files. Binder support requested substantiation, TERSEd, I tar'red the directory; TERSEd the tar archive and uploaded it to testcase. They dealt with it; I wonder how many experts they needed to bring in. (Is metadata plural? Is metadatum the singular?) -- gil -- StorageTek INFORMATION made POWERFUL -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: VSAM Recovery Help
FDR can backup an uncataloged VSAM cluster, and having a VVDS wth the wrong volser does not bother us (unless there is more than one VVDS in the VTOC). So try this job to copy the cluster to a new volume. It will allocate it and catalog it on the new volume. //COPY EXEC PGM=FDRCOPY,REGION=0M //SYSPRINT DD SYSOUT=* COPY TYPE=DSF SELECT DSN=cluster,VOL=inputvol,NVOL=outputvol -- Bruce A. Black Senior Software Developer for FDR Innovation Data Processing 973-890-7300 personal: [EMAIL PROTECTED] sales info: [EMAIL PROTECTED] tech support: [EMAIL PROTECTED] web: www.innovationdp.fdr.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: XML questions
Thank you Don. I saw the size in the PD, but wasn't sure if it was for the HFS or the AIXMHFS file. Being a contractor and not having access to normal support channels, not even sure what they are anymore, I opted to use the list, since its accessibility is not limited and the wealth of knowledge is high. What you did was very generous and appreciated. idealism In an ideal world, I would just be able to compose my question and send it to the vendor (IBM in this case), without having to know all of the ins and outs of component ids, support websites (i.e. ibmlink) etc. And the vendor would be continuously scanning the list and routing the question to the appropriate individuals (exactly as you did). Thus relieving the customer the onus of knowing/caring about the internal organization of the vendor. This also seems like it would free the vendor to optimize their support structure based upon the demand (OnDemand Support?). But alack and alas, history, volume, size, and other components make it difficult for the larger vendors to be as agile as perhaps the newer younger organizations. But one does gain stability, robustness and a host of other positive attributes. /idealism -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Don Ault Sent: Wednesday, January 04, 2006 4:31 PM To: IBM-MAIN@BAMA.UA.EDU Subject: XML questions I sent the questions on XML Toolkit to the XML team and have posted the answers below. They said normal support for XML would have answered these questions. Q1. where do I get sizing information, or is that AIXMHFS file allocated earlier somehow related (does not look like an HFS) ? A: On page 15 of the Program Directory it states that for the HFS Library you need to allocate at least 27,945 tracks (if using a 3390). This is different than the AIXMHFS file mentioned. Q2. is creating and mounting the HFS at /usr/lpp/ixm, the correct thing to do? A: The IXMMKDIR sample will create an IBM subdirectory at this point and this is where you should mount the HFS you allocated. Don Ault, 8-295-1750, 845-435-1750 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about TRSMAIN aks TERSE
On Thu, Jan 05, 2006 at 11:18:09AM -0700, Paul Gilmartin wrote: In a recent note, Jay Maynard said: Sounds like a reinvention of XMIT with compression added. Will TRSMAIN run on MVS 3.8? I doubt it, since it was written in an era of AMODE 31...but I might have to try it, if I can figure out a way to get it on my system. -- Jay Maynard, K5ZChttp://www.conmicro.cx http://www.hercules-390.org http://www.tronguy.net http://jmaynard.livejournal.com (Yes, that's me!) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about TRSMAIN aks TERSE
I feel obligated to point out, though, that the object code contains the following: TRSTRSMAIN-409,05/20/97,14.22Licensed Materials - Property of IBM -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Behalf Of Jay Maynard Sent: Thursday, January 05, 2006 1:22 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: [IBM-MAIN] Question about TRSMAIN aks TERSE On Thu, Jan 05, 2006 at 11:18:09AM -0700, Paul Gilmartin wrote: In a recent note, Jay Maynard said: Sounds like a reinvention of XMIT with compression added. Will TRSMAIN run on MVS 3.8? I doubt it, since it was written in an era of AMODE 31...but I might have to try it, if I can figure out a way to get it on my system. -- Jay Maynard, K5ZChttp://www.conmicro.cx http://www.hercules-390.org http://www.tronguy.net http://jmaynard.livejournal.com (Yes, that's me!) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html If you are not an intended recipient of this e-mail, please notify the sender, delete it and do not read, act upon, print, disclose, copy, retain or redistribute it. Click here for important additional terms relating to this e-mail. http://www.ml.com/email_terms/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SMS Question
I'm trying to add a volume to a storage group and I can't seem to get this to work. It seems that it can't find the proper storage group (construct???). Below I've include a paste in of what I see in the panels. Any help will be greatly appreciate. This is now driving me crazy. Thanks. , ,STORAGE GROUP APPLICATION SELECTION, ,SG021 NOT FOUND ,Command ===, , ,To perform Storage Group Operations, Specify:, ,,,CDS Name . . . . . . .,'CPAC.Z14.DFSMS.ACDS' , ,,, ,,(1 to 44 character data set name or,'Active',), ,,,Storage Group Name . .,SG021 , ,(For Storage Group List, fully or ,, ,partially specified or * for all) ,,,Storage Group Type . ., , ,(VIO, POOL, DUMMY, OBJECT, OBJECT ,, ,BACKUP, or TAPE) , ,Select one of the following options :, ,,,4,,1.,List - Generate a list of Storage Groups , ,, ,2.,Define - Define a Storage Group , ,, ,3.,Alter - Alter a Storage Group , ,, ,4.,Volume - Display, Define, Alter or Delete Volume Information , , ,If List Option is chosen,, , ,,Enter / to select option , ,,Respecify View Criteria , , , , ,,Respecify Sort Criteria , ,Use ENTER to Perform Selection;, ,Use HELP Command for Help; Use END Command to Exit., ,-- VIEW ,CPAC.Z14.ACSLIB ,Row,1,of,00066, Command ===, ,Scroll ===,CSR , , Name , Prompt , Size,, Created ,, Changed ,, ID , _,SC029 ,*Viewed , 338 2005/05/20 2005/05/25 16:35:45 SHUUSR3 _,SG021 ,*Viewed , 230 2005/05/20 2005/05/25 16:35:25 SHUUSR3 - Yahoo! Photos Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMS Question
Sorry it's the SCDS I'm trying to get to. Howard Rifkind [EMAIL PROTECTED] wrote: I'm trying to add a volume to a storage group and I can't seem to get this to work. It seems that it can't find the proper storage group (construct???). Below I've include a paste in of what I see in the panels. Any help will be greatly appreciate. This is now driving me crazy. Thanks. , ,STORAGE GROUP APPLICATION SELECTION, ,SG021 NOT FOUND ,Command ===, , ,To perform Storage Group Operations, Specify:, ,,,CDS Name . . . . . . .,'CPAC.Z14.DFSMS.ACDS' , ,,, ,,(1 to 44 character data set name or,'Active',), ,,,Storage Group Name . .,SG021 , ,(For Storage Group List, fully or ,, ,partially specified or * for all) ,,,Storage Group Type . ., , ,(VIO, POOL, DUMMY, OBJECT, OBJECT ,, ,BACKUP, or TAPE) , ,Select one of the following options :, ,,,4,,1.,List - Generate a list of Storage Groups , ,, ,2.,Define - Define a Storage Group , ,, ,3.,Alter - Alter a Storage Group , ,, ,4.,Volume - Display, Define, Alter or Delete Volume Information , , ,If List Option is chosen,, , ,,Enter / to select option , ,,Respecify View Criteria , , , , ,,Respecify Sort Criteria , ,Use ENTER to Perform Selection;, ,Use HELP Command for Help; Use END Command to Exit., ,-- VIEW ,CPAC.Z14.ACSLIB ,Row,1,of,00066, Command ===, ,Scroll ===,CSR , , Name , Prompt , Size,, Created ,, Changed ,, ID , _,SC029 ,*Viewed , 338 2005/05/20 2005/05/25 16:35:45 SHUUSR3 _,SG021 ,*Viewed , 230 2005/05/20 2005/05/25 16:35:25 SHUUSR3 - Yahoo! Photos Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - Yahoo! DSL Something to write home about. Just $16.99/mo. or less -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMS Question
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Howard Rifkind Sent: Thursday, January 05, 2006 12:32 PM To: IBM-MAIN@BAMA.UA.EDU Subject: SMS Question I'm trying to add a volume to a storage group and I can't seem to get this to work. It seems that it can't find the proper storage group (construct???). Below I've include a paste in of what I see in the panels. Any help will be greatly appreciate. This is now driving me crazy. Thanks. , ,STORAGE GROUP APPLICATION SELECTION, ,SG021 NOT FOUND ,Command ===, , ,To perform Storage Group Operations, Specify:, ,,,CDS Name . . . . . . .,'CPAC.Z14.DFSMS.ACDS' , You cannot use an ACDS in this panel. You must use an SCDS. Try doing a 3.4 lookup on CPAC.Z14.DFSMS and see if their is a .SCDS or .SCDSn (where n is a number). snip -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF CPU% vs. ECPU%
Thank you for confirming my observations, Mark . . . but . . . since the previous postings I found were several years old, gotta wonder why this is still in the SDSF help text . . . CPU%Percent of CPU time used on behalf of this address space during the most recent interval measured CPU-TimeAccumulated CPU time (TCB plus SRB) consumed on behalf of the address space, for the current job step, in seconds ECPU-Time Accumulated CPU time consumed within the address space, for the current job step, in seconds ECPU% CPU usage consumed within the address space More specifically, the guidance I've been able to find so far (Mr. Jaffe ... are you still out there?) was quite specific as to the sources -- specifically including ASSBASST for CPU and ASSBPHTM for ECPU !!! Further, the Operation Customization manual clearly states CPU by and on behalf of the address space ECPUby and within the address space The reason I'm still pursuing this is that end users tend to believe the IBM documentation and then the phone starts ringing when the numbers they see on their screen indicate something other than what we're observing . . . [EMAIL PROTECTED] 2006-01-05 13:08:29 On Thu, 5 Jan 2006 12:24:35 -0500, Hugh Lapham [EMAIL PROTECTED] wrote: snip If my calculation is correct, I would suggest that the correct interpretation of the fields on my SDSF display (supposedly vanilla) are: CPU-Time is the CPU Time (TCB + SRB) for the address space, EXCLUDING any NP-SRB/Enclave time ECPU-Time is the CPU Time (TCB + SRB) for the address space, PLUS any NP-SRB/Enclave time [i.e. CPU used on behalf of this address space -- the SDSF definition of CPU-Time] I think the above is correct. In a nutshell: ECPU = CPU + enclave Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America and Farmers Insurance Group mailto: [EMAIL PROTECTED] Systems Programming expert at http://Search390.com/ateExperts/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about TRSMAIN aks TERSE
Chase, John wrote: -Original Message- From: IBM Mainframe Discussion List On Behalf Of Hall, Ken (GTI) I feel obligated to point out, though, that the object code contains the following: TRSTRSMAIN-409,05/20/97,14.22Licensed Materials - Property of IBM Long time since I downloaded it, but there is probably a TC document and license agreement to whicn one must click I Agree before being allowed to complete the download. IMHO it's hard to prove law violation. For sure nobody would bother himself about it. It is publicly available. AFAIR you don't even need to logon to the page. It's IBM page, not hacker/warez page. You probably clicked Agree by accident ;-) I did it, but I don't understand English, just clicked some button. ;-) I's not stolen, it's downloaded from owner's page. IBM enbeld it for download. In some countries it's enough to sleep safe. In others any legal contracts, terms, conditions have to be in local language, otherwise it's not valid. -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Copy Extended-format VSAM Sphere
Perform a logical backup of the base cluster and ensure that sphere is included. When you restore the dataset ensure that sphere is included. It should work. I assume that you are using DFDSS. Chase, John [EMAIL PROTECTED] wrote: Hi, All, We have need to copy an extended-format VSAM sphere consisting of the base cluster, one alternate index and one path from one image to another, changing the HLQ and target catalog in the process. So far we've successfully DUMPed the sphere (logical dump) to tape using DFSMSdss, but all attempts so far to RESTORE it (with RENUNC) to the target system have failed. Both images are at z/OS 1.5; both images are members of the same Parallel Sysplex; and the source image's *Catalog* is accessible on the target image (but the source image's volumes are offline to it) (maybe that's the show-stopper?). Most of the failed attempts are requesting that the source volumes be mounted on the target image, but we want the RESTORE to go to target image volumes. Can this be done using DFSMSdss DUMP / RESTORE? or should we look at (perhaps) IDCAMS EXPORT / IMPORT? or maybe just REPRO the base cluster to tape, DEFINE an empty cluster on the target image, REPRO from tape, DEFINE the alternate index and path, and BLDINDEX? TIA for any ideas, -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - Yahoo! Photos Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Assembler training / books?/
Andy, Have this sites : http://www.wynsoft.co.uk/mainframe/assembler.htm http://www.wynsoft.co.uk/mainframe/Assembler/hints-and-tips.htm http://www.sysprog.net/hlasm.html http://www.wiu.edu/users/mflll/cs310/head.html http://home.clara.net/andywrobertson/mvsinstasm.html http://www.simotime.com/indexasm.htm Good Luck Sergio Lima Costa System Consultant Caixa Economica Federal Sao Paulo - Brazil Andy Robertson [EMAIL PROTECTED] escreveu: I learned Assembler so long ago I have forgot from whence Anyone know a good book I can give a newbie to teach him Assembler?? Information about non-IBM Courses would also useful - (we are contacting IBM to chase up their offerings, of course). Note, we are in the UK -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - Yahoo! doce lar. Faça do Yahoo! sua homepage. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Noob question regarding zFS
I'm installing my first zOS system. zOS 1.7. I have a very old OS390 2.8 system, installed by a previous person, that I will eventually migrate the users from. My question concerns zFS - the old system has HFS and other than the pre-req of having it for USS it serves no other purpose. Is there any reason I would need or want to install zFS on the new system rather than just sticking with HFS? Thanks. Mark D Pace Senior Systems Engineer Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317 Office: 850.219.5184 Fax: 888.221.9862 http://www.mainline.com This e-mail and files transmitted with it are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you are not one of the named recipient(s) or otherwise have reason to believe that you received this message in error, please immediately notify sender by e-mail, and destroy the original message. Thank You. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMS Question
Thanks John, Did it...got it. Thanks again. McKown, John [EMAIL PROTECTED] wrote: -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Howard Rifkind Sent: Thursday, January 05, 2006 12:32 PM To: IBM-MAIN@BAMA.UA.EDU Subject: SMS Question I'm trying to add a volume to a storage group and I can't seem to get this to work. It seems that it can't find the proper storage group (construct???). Below I've include a paste in of what I see in the panels. Any help will be greatly appreciate. This is now driving me crazy. Thanks. , ,STORAGE GROUP APPLICATION SELECTION, ,SG021 NOT FOUND ,Command ===, , ,To perform Storage Group Operations, Specify:, ,,,CDS Name . . . . . . .,'CPAC.Z14.DFSMS.ACDS' , You cannot use an ACDS in this panel. You must use an SCDS. Try doing a 3.4 lookup on CPAC.Z14.DFSMS and see if their is a .SCDS or .SCDSn (where n is a number). -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - Yahoo! DSL Something to write home about. Just $16.99/mo. or less -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Pace Sent: Thursday, January 05, 2006 1:25 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Noob question regarding zFS I'm installing my first zOS system. zOS 1.7. I have a very old OS390 2.8 system, installed by a previous person, that I will eventually migrate the users from. My question concerns zFS - the old system has HFS and other than the pre-req of having it for USS it serves no other purpose. Is there any reason I would need or want to install zFS on the new system rather than just sticking with HFS? Thanks. Mark D Pace opinion type=personal HFS, as best as I can tell, is still needed for your root filesystem. If you're not really using UNIX, then you don't need anything else, so in that case, I'd use HFS. But enabling zFS is very simple and costs very little. So, if it were me, I'd make all my non-root filesystems zFS. It is more reliable than HFS. All new facilities will be added to zFS. And you'll be kewl! /opinion -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Erase IBM 3590 Cartridges
I have some IBM 3590 cartridges, J K, which I need to ensure all the data is off of them. Does any know of any utility which will write binary zeros all down the cartridge until the end. I still have an old program from the US Air Force which would go down to the end two tapemarks, skip over them and write binary zeros out to the end. This worked well on ugly round tape and I do not remember if I tried it on cartridges. I would have probably specified TRTCH=NOCOMP to override compressing all them zeros. I have no clue what compression would do for things if I tried it on IBM 3590s. I suggested that we just degauss the cartridges and write a new label. My SYSPROGs seem to think IBM maintains some cartridge statistics internal to the cartridge itself and these would be lost. Any guidance would be appreciated on this. Jim Marshall -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Invalid DSN in Catalog
Shmuel Metz , Seymour J. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]... In [EMAIL PROTECTED], on 01/03/2006 at 11:26 AM, Binyamin Dissen [EMAIL PROTECTED] said: Something builds it. Are you sure about that? Have you seen an SIOT for a dynamically allocated data set? Please note that beginning in z/OS 1.3 (HDZ11G0 for DFSMS) that you can do MODIFY CATALOG,ENABLE(DSNCHECK) which will NOT allow any invalid names to be cataloged. Thanks, Mark Thomen Catalog/IDCAMS/VSAM Development -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Erase IBM 3590 Cartridges
Jim Marshall wrote: I have some IBM 3590 cartridges, J K, which I need to ensure all the data is off of them. Does any know of any utility which will write binary zeros all down the cartridge until the end. I still have an old program from the US Air Force which would go down to the end two tapemarks, skip over them and write binary zeros out to the end. This worked well on ugly round tape and I do not remember if I tried it on cartridges. I would have probably specified TRTCH=NOCOMP to override compressing all them zeros. I have no clue what compression would do for things if I tried it on IBM 3590s. I suggested that we just degauss the cartridges and write a new label. My SYSPROGs seem to think IBM maintains some cartridge statistics internal to the cartridge itself and these would be lost. Any guidance would be appreciated on this. 1. Do not degauss the tapes, unless you want to destroy them. 3590's have servo tracks tah would be destroyed. 2. 3590 drive can erase the tape without getting any datastream from host. This feature is exploited by tape manegement systems like RMM or CA-1. Do you have any ? 3. If you don't have any TMS, just concatenate some trash data and IEBEGENER it to the tape. It can be even your photo file transmitted to the host. JPEG is tend to compress poor, so it would be easy to estimate number of concatenations required. Method 2 is better, because it's not error prone and does not involve any host I/O activity. binary zeroes are generated by the drive itself. Bothe methods require DRIVE TIME. Probably 20-30 min. per cart. -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Invalid DSN in Catalog
Shmuel Metz , Seymour J. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]... In [EMAIL PROTECTED], on 01/03/2006 at 11:26 AM, Binyamin Dissen [EMAIL PROTECTED] said: Something builds it. Are you sure about that? Have you seen an SIOT for a dynamically allocated data set? Oh - and I forgot to mention: syntax checking is automatically enabled beginning in HDZ11G0 (z/os 1.3), unless the installation disables it. So no invalid data set names should get cataloged. Thanks, Mark Thomen Catalog/IDCAMS/VSAM Development -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
In a message dated 1/5/2006 2:21:33 P.M. Central Standard Time, [EMAIL PROTECTED] writes: reason I would need or want to install zFS on the new system rather than just sticking with HFS? You'll still need HFS. z/FS is the z/ replacement for NFS. You might want to install it just so you can keep receiving maintenace when PHB's decide it's something required for the survival of the Company. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Tn3270 SSL/TLS and ACF2
We're just starting to look into secure Tn3270 and are fighting our way through the doc. Most IBM doc is RACF oriented ad we're an ACF2 shop. And we're in mainfraim communication support group, not the security group, so we don't understand all we're reading. We're probably going to test using a self-signed certificate, then switch to a Verisign certificate once we get a better feel for what we're doing. At this point we have no plans for client authentication - we're mostly after ecryption because we're anticipating a mandate from on high that all Tn3270 connections be ecrypted. Has anyone out there implemented secure Tn3270 using ACF2 to hold key data? Is there an ACF2 equivalent to RACDCERT, or did you have to do all the work outside of ACF2 and then import the data into ACF2? I've found information about this on the web but almost all of it has been for secure FTP or CICS. I assume much of that transfers to Tn3270, but don't know for sure. Thanks in advance. Pat O'Keefe -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Ed Finnell Sent: Thursday, January 05, 2006 2:29 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Noob question regarding zFS snip You'll still need HFS. z/FS is the z/ replacement for NFS. You might want to install it just so you can keep receiving maintenace when PHB's decide it's something required for the survival of the Company. HUH? zFS is a replacement for NFS? Is that only within a single Sysplex? If not, how would I do an NFS-like share between zFS and zLinux (Or Linux/Intel or Solaris)? -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
McKown, John wrote: -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Pace Sent: Thursday, January 05, 2006 1:25 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Noob question regarding zFS I'm installing my first zOS system. zOS 1.7. I have a very old OS390 2.8 system, installed by a previous person, that I will eventually migrate the users from. My question concerns zFS - the old system has HFS and other than the pre-req of having it for USS it serves no other purpose. Is there any reason I would need or want to install zFS on the new system rather than just sticking with HFS? Thanks. Mark D Pace opinion type=personal HFS, as best as I can tell, is still needed for your root filesystem. If you're not really using UNIX, then you don't need anything else, so in that case, I'd use HFS. But enabling zFS is very simple and costs very little. So, if it were me, I'd make all my non-root filesystems zFS. It is more reliable than HFS. All new facilities will be added to zFS. And you'll be kewl! /opinion snip zFS is supported as the root filesystem starting with z/OS R7, and the ServerPac installation dialog should support using a zFS root for an R7 system. -- John Eells z/OS Technical Marketing IBM Poughkeepsie [EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Invalid DSN in Catalog
In a recent note, Mark Thomen said: Date: Thu, 5 Jan 2006 12:27:01 -0800 Oh - and I forgot to mention: syntax checking is automatically enabled beginning in HDZ11G0 (z/os 1.3), unless the installation disables it. So no invalid data set names should get cataloged. Will it continue to allow invalid data set names to be deleted/uncatalogued even when syntax checking is enabled? The semantics confuses me. Why was anything ever permitted but deemed invalid? -- gil -- StorageTek INFORMATION made POWERFUL -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about TRSMAIN aks TERSE
On Thu, 5 Jan 2006 19:47:59 +0100, R.S. [EMAIL PROTECTED] wrote: ... IMHO it's hard to prove law violation. For sure nobody would bother himself about it. It is publicly available. AFAIR you don't even need to logon to the page. It's IBM page, not hacker/warez page. You probably clicked Agree by accident ;-) I did it, but I don't understand English, just clicked some button. ;-) I's not stolen, it's downloaded from owner's page. IBM enbeld it for download. In some countries it's enough to sleep safe. In others any legal contracts, terms, conditions have to be in local language, otherwise it's not valid. ... And interesting idea in theory, but I'm sure nobody would ever follow such suggestions. Proving anything would be, um, a herculean task. IBM might not be interested in persuing it but certain others seem intent on seeing improprieties around every corner. They could make a real payne, I mean pain, of themselves. Pat O'Keefe -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about TRSMAIN aks TERSE
On Thu, 5 Jan 2006 11:04:49 -0600, Jay Maynard wrote: On Thu, Jan 05, 2006 at 10:42:33AM -0600, Bill Godfrey wrote: I don't know of any supported terse programs for the PC. Is the terse algorithm documented anywhere? I am not certain , but I think terse uses a modified Lempel-Ziv algorithm, either patent number 4,814,746 or 5,001,478. IBM owns both. The details of the patents can be seen at http://www.uspto.gov/ (click on search under patents, and on the next screen click on patent number search, and on the next screen enter the patent number and click on search. The second patent inventor's name shows up on the help screen of the OS/2 terse program, and in the messages of the VSE terse program (messages which I saw in a VSE listserv post). I read somewhere that terse uses the algorithm in the first patent. Bill Godfrey -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
Ed Finnell wrote: You'll still need HFS. z/FS is the z/ replacement for NFS. You might want to install it just so you can keep receiving maintenace when PHB's decide it's something required for the survival of the Company. Not true. zFS is the replacement for HFS, which has been stabilized. -- - | Edward E. Jaffe|| | Mgr, Research Development| [EMAIL PROTECTED]| | Phoenix Software International | Tel: (310) 338-0400 x318 | | 5200 W Century Blvd, Suite 800 | Fax: (310) 338-0801| | Los Angeles, CA 90045 | http://www.phoenixsoftware.com | - -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SMS Question Backing up the Current ACDS
I have made my changes and validated them, all O.K. I would now like to back up the current ACDS using the SETSMS command and I see that this has never been done. I have to pre alocate the ACDS back up dataset. Should this just be a plain flat file or what should be the DSORG? The current ACDS is a VSAM file primary allocation of 12 cylinders about half used base on the HI and LO RBA stats. Thanks. - Yahoo! Photos Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
On Thu, 5 Jan 2006 13:31:16 -0600, McKown, John [EMAIL PROTECTED] wrote: opinion type=personal HFS, as best as I can tell, is still needed for your root filesystem. In z/OS 1.7 that is no longer true. The root can be a zFS if you want. If you're not really using UNIX, then you don't need anything else, so in that case, I'd use HFS. But enabling zFS is very simple and costs very little. So, if it were me, I'd make all my non-root filesystems zFS. Agree that enablement is fairly simple. Not sure I agree on make all filesystems zFS at this point. It is more reliable than HFS. I think the jury is out on that one still. Until there is more usage and acceptance, at this point I'm not sure how much I trust zFS so I only have limited use (there have been problems but I think z/OS 1.7 made some RAS improvements). Not all that much different than PDSE was in the not so distant past (even though PDSE has been around since MVS/ESA). HFS may still be more stable/reliable for mission critical applications at this point even though there are no improvements planned. Anyone care to comment on personal experiences (good or bad)? All new facilities will be added to zFS. Fact, not opinion. :-) /opinion -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America and Farmers Insurance Group mailto: [EMAIL PROTECTED] Systems Programming expert at http://Search390.com/ateExperts/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
Mark Zelden wrote: It is more reliable than HFS. I think the jury is out on that one still. Until there is more usage and acceptance, at this point I'm not sure how much I trust zFS so I only have limited use (there have been problems but I think z/OS 1.7 made some RAS improvements). Not all that much different than PDSE was in the not so distant past (even though PDSE has been around since MVS/ESA). HFS may still be more stable/reliable for mission critical applications at this point even though there are no improvements planned. Anyone care to comment on personal experiences (good or bad)? Our file server resides on z/OS and uses zFS file systems. zFS has been very fast (much faster than HFS) and reliable, but somewhat lacking in functionality. I believe z/OS 1.7 eliminates most of the restrictions. All new facilities will be added to zFS. Fact, not opinion. :-) HFS is stabilized. -- - | Edward E. Jaffe|| | Mgr, Research Development| [EMAIL PROTECTED]| | Phoenix Software International | Tel: (310) 338-0400 x318 | | 5200 W Century Blvd, Suite 800 | Fax: (310) 338-0801| | Los Angeles, CA 90045 | http://www.phoenixsoftware.com | - -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMS Question Backing up the Current ACDS
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Howard Rifkind Sent: Thursday, January 05, 2006 3:12 PM To: IBM-MAIN@BAMA.UA.EDU Subject: SMS Question Backing up the Current ACDS I have made my changes and validated them, all O.K. I would now like to back up the current ACDS using the SETSMS command and I see that this has never been done. I have to pre alocate the ACDS back up dataset. Should this just be a plain flat file or what should be the DSORG? The current ACDS is a VSAM file primary allocation of 12 cylinders about half used base on the HI and LO RBA stats. Thanks. What I do is: On TSO execute the command: DEF CLUSTER(NAME(new.acds.name) MODEL(current.acds.name)) On the MVS console enter the command: SETSMS SAVEACDS(new.acds.name) -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
As I keep saying, the problem is that the customer does not want to do that, and arguing with the customer is not sales-enhancing. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Barry Schwarz Sent: Thursday, January 05, 2006 12:23 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: FTP userid propagation What is the problem with a userid.NETRC with a UACC of NONE [and maybe an additional PE ID(*) ACC(NONE)]? Except for someone with OPERATIONS, everyone but the user should be locked out. Charles Mills [EMAIL PROTECTED] wrote: I just posted the NETRC question but perhaps I should instead ask the fundamental underlying question. Here is what I want to do. I want to have a program ABC running in a normal batch job that might be submitted by any of a large number of TSO users invoke FTP and have it log on to a remote z/OS FTP server and, among other things, submit a job. I have complete control over the INPUT (command) file which is built on the fly. Here is the key question: I would like the FTP logon to be with the userid of the original user who submitted the batch job. Do any of you creative souls want to suggest a reasonable way to do this? A file with possible userids and the associated remote passwords fulfills the letter of the above specs but is obviously totally unacceptable from a security point of view. I don't think NETRC does the job because a local NETRC is a security disaster and a global NETRC file would only provide one userid and password for the remote machine -- my whole point is I want to propagate each individual user id. Please don't ask why do you want to do it that way? The answer is I don't, the customer does. Charles Mills -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - Yahoo! DSL Something to write home about. Just $16.99/mo. or less -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
Charles, I am curious what security disaster exists with each of the users that will use this process having a userid.NETRC file with a UACC(NONE) be? If it is the OPERATIONS ATTRIBUTE users being able to access the files that is hte problem, if they are all in a single group (or limited groups) give that group(s) access of NONE and even the users with OPERATIONS attributes will not be able to access the NETRC files. I am not trying to be difficult but we currently do something very much like this and I can't see where this causes any security exposure. It is a little bit of a pain for the users to maintain the password in the NETRC file but so far they are living with that. What did I miss and what exposure do I now have? Thank you, Greg -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Barry Schwarz Sent: Thursday, January 05, 2006 12:23 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: FTP userid propagation What is the problem with a userid.NETRC with a UACC of NONE [and maybe an additional PE ID(*) ACC(NONE)]? Except for someone with OPERATIONS, everyone but the user should be locked out. I don't think NETRC does the job because a local NETRC is a security disaster and a global NETRC file would only provide one userid and password for the remote machine -- my whole point is I want to propagate each individual user id. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
I'm not a security guy. I have no idea what the exposures are. I suspect they are between minimal and none. The prospect has simply stated that generic userids are unacceptable and that the remote process must be run under the ID of the originator. That's what I am responding to. I am not in the business of arguing with prospects. You don't make sales arguing with prospects who raise security objections. We have multiple customers doing it the way we do it now with a single highly-restricted generic (to use this prospect's term) ID and no one has reported any problems. No one has had any objections until now. Perhaps I am not understanding you. If you are saying give each user their own NETRC file with UACC(NONE) I think the objection would be the maintenance headache. Each user's password would have to be maintained once in RACF (two instances) and once in their NETRC. I can try proposing that, but what I would REALLY like is what I asked for: some automated way of getting a user here signed on automatically there. It looks like PassTicket will do exactly that but I am a little boggled by all of the details - it would be great to have a Redbook-style cookbook - and I'd really like to understand the possible applicability of SSL/TLS. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Greg Saccomanno Sent: Thursday, January 05, 2006 2:17 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: FTP userid propagation Charles, I am curious what security disaster exists with each of the users that will use this process having a userid.NETRC file with a UACC(NONE) be? If -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: FTP userid propagation
Charles, Thank you for your reply. It sounds like the individual NETRC files may not really be a security disaster but more of a maintenance disaster. I would agree, it is very inconvenient to require each user to update the NETRC file each time the password(s) on the remote system(s) change. Not perfect but so far not causing that much pain here (at least not that I am aware of). I hope as you progress through your solution I see more details here on IBM MAIN. Who knows, maybe I'll get a chance to change our process once you work out all the details and create the cook book for me :) Regards, Greg Perhaps I am not understanding you. If you are saying give each user their own NETRC file with UACC(NONE) I think the objection would be the maintenance headache. Each user's password would have to be maintained once in RACF (two instances) and once in their NETRC. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
At SHARE, I heard from a zFS presentation that one major RAS improvement in zFS for z/OS 1.7 was the addition of an End of Memory resource manager routine to protect zFS resources. The MVS-internals types on this list can perhaps expound upon the RAS value of zFS having (in z/OS 1.7) an EOM resource manager, or conversely, the possible RAS impact of (in z/OS 1.6 and below) having *no* EOM resource manager. It sounded to me like zFS grew up in z/OS 1.7. Brian On Thu, 5 Jan 2006 15:14:28 -0600, Mark Zelden [EMAIL PROTECTED] wrote: On Thu, 5 Jan 2006 13:31:16 -0600, McKown, John [EMAIL PROTECTED] wrote: It is more reliable than HFS. I think the jury is out on that one still. Until there is more usage and acceptance, at this point I'm not sure how much I trust zFS so I only have limited use (there have been problems but I think z/OS 1.7 made some RAS improvements). Not all that much different than PDSE was in the not so distant past (even though PDSE has been around since MVS/ESA). HFS may still be more stable/reliable for mission critical applications at this point even though there are no improvements planned. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Erase IBM 3590 Cartridges
On Jan 5, 2006, at 2:21 PM, R.S. wrote: SNIP 1. Do not degauss the tapes, unless you want to destroy them. 3590's have servo tracks tah would be destroyed. 2. 3590 drive can erase the tape without getting any datastream from host. This feature is exploited by tape manegement systems like RMM or CA-1. Do you have any ? 3. If you don't have any TMS, just concatenate some trash data and IEBEGENER it to the tape. It can be even your photo file transmitted to the host. JPEG is tend to compress poor, so it would be easy to estimate number of concatenations required. Method 2 is better, because it's not error prone and does not involve any host I/O activity. binary zeroes are generated by the drive itself. Bothe methods require DRIVE TIME. Probably 20-30 min. per cart. I always used IEBDG to create the binary zero blocks of data. I don't have the control cards handy but its a quick 5 minute read and 1 minute in ISPF. Ed -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Erase IBM 3590 Cartridges
Ed Gould wrote: I always used IEBDG to create the binary zero blocks of data. I don't have the control cards handy but its a quick 5 minute read and 1 minute in ISPF. DSDOUTPUT=(ddname) FD NAME=DATA,FILL=X'FF',LENGTH=blksize CREATE NAME=(DATA),QUANTITY= Abend D37 is expected. -- - | Edward E. Jaffe|| | Mgr, Research Development| [EMAIL PROTECTED]| | Phoenix Software International | Tel: (310) 338-0400 x318 | | 5200 W Century Blvd, Suite 800 | Fax: (310) 338-0801| | Los Angeles, CA 90045 | http://www.phoenixsoftware.com | - -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
I've just checked the z/OS 1.7 UNIX System Services manual, and it still says the root file system must be an HFS (Chapter 7, fourth paragraph, second bullet under heading Rules). Now I'm questioning my memory Brian On Thu, 5 Jan 2006 18:10:58 -0600, Brian Peterson [EMAIL PROTECTED] wrote: At SHARE, I heard from a zFS presentation that one major RAS improvement in zFS (blah blah blah) Brian -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Noob question regarding zFS
http://www.redbooks.ibm.com/redbooks/pdfs/sg246580.pdf : Second Edition (April 2005) This edition applies to Version 1 Release 6 of z/OS (5694-A01) and to all subsequent releases and modifications until otherwise indicated in new editions. chapter 3(migrating to zFS), section 2 - Original Message - From: Brian Peterson [EMAIL PROTECTED] Newsgroups: bit.listserv.ibm-main To: IBM-MAIN@BAMA.UA.EDU Sent: Thursday, January 05, 2006 7:48 PM Subject: Re: Noob question regarding zFS I've just checked the z/OS 1.7 UNIX System Services manual, and it still says the root file system must be an HFS (Chapter 7, fourth paragraph, second bullet under heading Rules). Now I'm questioning my memory Brian On Thu, 5 Jan 2006 18:10:58 -0600, Brian Peterson [EMAIL PROTECTED] wrote: At SHARE, I heard from a zFS presentation that one major RAS improvement in zFS (blah blah blah) Brian -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SHOWMVS 712 performance issue
Starting with version SHOWzOS 712 introduced a display for the CDR via IOSCDR. Unfortunally the IOSCDR service even with READ=NOIO, in the way SHOWzOS use it, can cause performance problems and slow down the display at all. I'm working on a fix to provide a switsch to display/enable this display during assembly time. Local fix: BRASL R14,CDR00 Config Data RecordRS0705 change this to *BRASL R14,CDR00 Config Data RecordRS0705 Regards Roland Schiradin ALTE LEIPZIGER Lebensversicherung auf Gegenseitigkeit IT Betrieb - DB/DC Tel. (06171) 66-4095, Fax (06171) 66-7500-4095 mailto:[EMAIL PROTECTED] http://www.Alte-Leipziger.de -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Tn3270 SSL/TLS and ACF2
We just did this last month. Both ACF2 6.5 and 8.0 under z/OS 1.6. First, download the ACF2 Cookbook PDF from the CAI support site. Chapter 4 is all about cert handling in ACF2 including RACDCERT to ACF2 translation and some good examples. Don't know about self-signed as we used our Verisign cert. One gottcha is that the cert to be imported into ACF2 *MUST* be a VB dataset. Basicly you want to 1) use CHKCERT DSN(dsn) to verify ACF2 can read the cert. 2) insert the cert. SET PROFILE(USER) DIV(CERTDATA) INSERT . create a keyring. SET PROFILE(USER) DIV(KEYRING) INSERT RINGNAME() note: *IS* case sensitive 3) connect the cert to the keyring inserted above. CONNECT ... 4) refresh. F ACF2,REBUILD(USR),CLASS(P) F ACF2,OMVS 5) add the keyring to your secure port telnetparms config keyring saf keyring (from above and *IS* case sensitive) I found we did have to have the ICSF STC running before the TN320 stc would work. Otherwise it got an initialization error. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Looking for credible documented evidence that a MVS or later op sys has ever been hacked
Odd coincidence. Back on 30 January 2004 Microsoft posted a $250,000 reward for the author of the MyDoom worm, and on the same day you asked here about possible z/OS vulnerabilities: http://groups.google.com/group/bit.listserv.ibm-main/browse_thread/thread/d7f241b5d0ea21/3f02bd980870b55e?lnk=stq=john+regusrnum=12#3f02bd980870b55e http://www.theregister.co.uk/2004/01/30/ms_posts_250_000_mydoom/ Then lo and behold, a year later, they expose their corporate customers to the WMF vulnerability and you redevelop the same interest on the same day again: http://news.zdnet.co.uk/internet/security/0,39020375,39245875,00.htm 'In addition, Microsoft is releasing the update early in response to strong customer sentiment that the release should be made available as soon as possible,' the company said. Hmmm. I can imagine. _W_T_F_!??!?! or something very similar from some reasonably powerful people who are now perhaps wondering what kind of OS supplier they are now in bed with.. Also on Thursday, Microsoft said that older versions of Windows are immune to the latest wave of attacks targeting the operating system. While Windows 2000, Windows XP and Windows Server 2003 are vulnerable, Windows 98 and Windows Millennium Edition are not exposed to the same threats that exploit the WMF flaw, according to an update to a Microsoft security advisory on the issue. Anyone heard of Steve Barkto? -- Phil Payne http://www.isham-research.co.uk +44 7833 654 800 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Erase IBM 3590 Cartridges
The advantage of using the ERASE CCW command directly (which is what the CA-1, CA-Dynam/TLMS, DFSMSrmm utilities all do) and something like IEBDG is the number of CCW's sent down the channel. With the ERASE CCW command, one CCW is sent and the device just humms along for 30-45 minutes doing its thing. So other devices on the same channel don't have any contention with all the x'ff' or x'00' going down the channel. Of course I would STRONGLY recommend you check your MIH values before doing this. The manual gives you the values you need to specify for 3590's. An extended-length 3590 on a 3590-H drive will take a good solid 45 minutes for this one CCW to complete; which is usually longer then the default MIH values you probably have specified. Russell Witt CA-1 Level-2 Support Manager -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Behalf Of Edward E. Jaffe Sent: Thursday, January 05, 2006 6:45 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Erase IBM 3590 Cartridges Ed Gould wrote: I always used IEBDG to create the binary zero blocks of data. I don't have the control cards handy but its a quick 5 minute read and 1 minute in ISPF. DSDOUTPUT=(ddname) FD NAME=DATA,FILL=X'FF',LENGTH=blksize CREATE NAME=(DATA),QUANTITY= Abend D37 is expected. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
