Re: Storage ROTs

2007-01-09 Thread Vernooy, C.P. - SPLXM
"Walter Marguccio" <[EMAIL PROTECTED]> wrote in message
news:<[EMAIL PROTECTED]>...
> - Original Message 
> From: Mark Zelden <[EMAIL PROTECTED]>
> 
> > It depends on the time of day.  Looking at one of our
> > largest LPARs  ( > 50G), I see about 20% of the frames
> > available at the moment but I did see some demand paging
> > and the local page dsns (13) are about 15% utilized. But it's
> > still early in the day (local time) on that LPAR.
> 
> our average of 70% frames available does lower now and again
> when jobs which makes use if SORT run on the system.
> But that happens rarely during the day. 

Well, I think SORT is a complicating factor here. Just because Sort is
designed to take all at can get, this does not mean that you need what
Sort takes. It might run as efficiently with less storage, meaning that
you might have overallocated your storage even more than you think. 

On the other hand, you should determine the benefits of Sort's larger
storage during 4 hours per day versus the costs of managing largely
overallocated storage during 20 hours per day. So, as with all tuning
actions, this also appears to be more complex than it looked at first
glance.

Kees.


**
For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), 
its subsidiaries and/or its employees shall not be liable for the incorrect or 
incomplete transmission of this e-mail or any attachments, nor responsible for 
any delay in receipt.
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286 
**

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: How order PartnerWorld free software?

2007-01-09 Thread Phil Sidler
On Tue, 9 Jan 2007 16:23:48 -0800, Charles Mills <[EMAIL PROTECTED]> wrote:

>This note is addressed to software vendors with a FLEX development system
>through PartnerWorld for Developers.
>
>I believe we are entitled to no-cost licenses for a lot of IBM software.
>Some of it comes on the initial DVD, but I have the impression that if we
>want or need something that is not on the DVD we can order it, at no cost if
>it is eligible.
>
>Can anyone point me in the right direction?

see http://www-304.ibm.com/jct09002c/isv/zseries/adhocsw.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: How to debug WQE modification by SSI

2007-01-09 Thread Patrick O'Keefe
On Mon, 8 Jan 2007 18:22:59 -0600, Patrick O'Keefe <[EMAIL PROTECTED]>
wrote:

>...
>What WQE flags are turned on by setting LOGCMDRESP to "don't log" in
>an MCSOPER invocation.  (I'm assuming that WQE flags are set based on
>MCSOPER parms?  I could be wrong.   Where's that PLM?)
>
>How do flags WQEQFHC (Queue for Hard Copy) and WQENSYL (Do Not Send
>Message to SYSLOG) interact when both are set?
>
>Why is WQEQFHC set on all but the first line of a MLWTO?  Is that
>something weird at our shop?  (It's not set in an SSI.)
>
>If mutilple lines have different WQE flags set, which flag wins?
>In particular, if WQEQFHC is off on the title line but on in all other
>lines, is the message logged or not?
>...

And add another question to the list:
What related process would make commands entered from the same console
not be copied to SYSLOG?

I have these two very different, unintentional behavior on 2 LPARs.
On one LPAR something is setting WQEQFHC in the 2nd-nth lines in the
multiline messages, and WQENSYL is not producing the desired effect -
command responses are being written to SYSLOG.   

On the other LPAR nothing setting WQEQFHC, and WQENSYL is having the 
desired effect - command responses do not appear in SYSLOG.  But neither
do the command echoes for any additional commands until the console is
freed and reallocated.  Behavior is normal (all commands and responses
are written to SYSLOG) if WQENSYL is not turned on.

This makes absolutely no sense to me.  I suspect I'm still missing a
significant part of the puzzle.

Pat O'Keefe  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SubSystem Interface - IEFJRASP - help! - Really late reply...

2007-01-09 Thread Scott Fagen
A long while back Chris wrote:
>Scott said
>> ... there are many  that 'front-end' , ostensibly
>to
>> provide that product an unvarnished view of what's flowing over the
>SSI.
>>
>> The supported programmatic way to do this is to install a IEFJFRQ
>program
>> exit and ensure that your exit is always at the front of the queue.
>
>Aw c'mon Scott, using the dynamic exit facility is a no-brainer!
>Ensuring that your exit is always at the front of the queue is a little
>more challenging :-)
>
>Somebody has to be first and everybody else wants to be. The world might
>end abruptly if their product wasn't the first to see what flows over
>every last SSI call.
>
>
>
>Some things change. Some don't.

And Shmuel added these 2 cents:

>Sigh! What is the supported programmatic way to do this when there is
>more than one program involved? They can't both be at the front of the
>queue.
>
>The first rule of systems programming should be: whatever you're
>doing, don't assume that you're the only one with a need to do it.

And Scott took a long summer vacation and hasn't really looked back on the
archives for a while so he's getting around to it now...

Obviously there's no answer if more than one thing needs to be first.  But
I've seen plenty of dumps where various vendors all have stolen the vector
to the SSI and replaced it with a call to their front end which of course
was stolen by someone else's front end and so on...

So, if you want to 'front end the SSI' and 'make sure you are first' you
really need to do xx things:

1) Add your exit routine for the IEFJFRQ exit, specifying POS=FIRST.
2) Add an exit routine for the CSVDYNEX exit point.  Watch for instances of
programs attempting to install _their_ exit as POS=FIRST for IEFJFRQ.  When
this happens, signal an asynchronous process TO DO STUFF YOU SHOULDN'T DO IN
THE EXIT ROUTINE

Asynchronous process:
When signaled, use CSVDYNEX to delete your current active IEFJFRQ exit
routine.  Then use CSVDYNEX to reinstall your exit POS=FIRST.

Disclaimer:  If two or more processes use this algorithm, the system will
perform no useful work..

Of course, one can always alter the above algorithm to give up after some
number of iterations (and inform TPTB of the need for multiple 'first' guys).

Is that easy enough, Chris?

Or is there a need to have a r/o exit point prior to the r/w exit point to
ensure than anyone who needs to can see the SSI request before the unwashed
masses get their grubby hands on it?

Scott Fagen
z/OS Core Technology Design
IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Warning on IBM APAR OA17011

2007-01-09 Thread Russell Witt
I wanted to give a warning regarding APAR OA17011 (closed, with published
PTF's available). There has been a "hole" in IBM SMS Managed Tape for a long
time (day-1 possibly), were the "Retention Limit" value in the Management
Class was not enforced. So, if the Retention Limit was 0 and the JCL said
RETPD=10; it was allowed to have a 10-day retention. With OA17011, this hole
has been closed and the "Retention Limit" value is now enforced. This means,
if someone has a Retention Limit of 0 (instead of "NOLIMIT") and they create
a tape file with a RETPD=10 or EXPDT=99365 (think HSM) the actual JFCB
expiration date (and the date put into HDR1) will be zero as if no
expiration date had been specified at all.

If you have a tape management system (who doesn't), and the tape management
system has some retention rules (RDS for CA-1, RMF for TLMS, Vital Records
for DFSMSrmm); those will override and you will be safe. However, if you
have tape datasets that are SMS managed AND you do not override ALL JCL
specified retention values with rules, I would suggest you review your
Management Class definitions and make sure you do not have any Retention
Limit values that might have a negative impact.

I have had at least 2 clients lose many tapes (early expiration date means
early scratch) because of this.

Russell Witt
CA-1 Level-2 Support Manager

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Just another example of mainframe costs.

2007-01-09 Thread Ed Gould

On Jan 9, 2007, at 7:45 AM, Shmuel Metz (Seymour J.) wrote:


---SNIP-



Perhaps, but that doesn't address the question of why IBM would have
bothered had the 3838 been such a flop.



A long time ago I gave up trying to second guess IBM. At one time it  
used to make sense (360 & 370 time frame & Before) now the pc weenies  
have taken over and IBM seems to go its own way damn the torpedoes  
and full speed side ways or backwards (and at times forward). Once in  
a while you can guess and be right but probably even Phil  at times  
is left scratching his head.


Ed

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: So, OK, no more promotions from me - after this one

2007-01-09 Thread Charles Mills
With all the trivia and word games and nostalgia and nit-picking and such
that gets posted, how could anyone object to the announcement of a new
mainframe class?

I say "keep up the announcements, Steve." The people who need the classes
most are the least likely to sign up for the opt-in list. How will
tomorrow's newbie know? Are you going to re-post the "no more promotions"
announcement every six months? 

So far as I know, every PC comes equipped with an ANSI-standard delete key.

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Graeme Gibson
Sent: Tuesday, January 09, 2007 5:28 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: So, OK, no more promotions from me - after this one

There have been times in the last 12 months where I've felt that a 
few posters have strained the promotional envelope on IBM-MAIN.

Clearly it's all a matter of achieving balance.  So long as Steve's 
posts are offering useful explanations, corrections, examples or a 
nudge in the right direction that is relevant to the thread raised by 
the OP, then IMO it's ok to mention a relevant training offering that 
he has available.  "Relevant" would mean that it might have helped 
the OP avoid having to post at all and "mention" should be little 
more than a link to all the gory detail on a website.

I've always felt sympathy for Steve's awkward position here as the 
more detailed help he gives, the more effective IBM-MAIN is bailing 
newbies 'n wannabes out, and this can be seen by the shortsighted and 
the lazy as undercutting the need for his paid services.  Go Steve!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


z New Application License Charges (zNALC) Announced

2007-01-09 Thread Timothy Sipples
Apologies if this is already on the list:

http://www.ibm.com/common/ssi/rep_ca/6/897/ENUS207-006/ENUS207006.PDF

Looks all good.  A whole lot simpler, and it's (new) application-based
licensing rather than technology-based.  It was a little strange having
both NALC and z/OS.e, and now it's all unified.  I think it makes life
easier for the sysprog, too.

- - - - -
Timothy Sipples
IBM Consulting Enterprise Software Architect
Specializing in Software Architectures Related to System z
Based in Tokyo, Serving IBM Japan and IBM Asia-Pacific
E-Mail: [EMAIL PROTECTED]

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: So, OK, no more promotions from me - after this one

2007-01-09 Thread Eric N. Bielefeld
I really don't mind Steve's mentions of his courses, but I have to agree 
with what Graeme said quoted below also.  I know a few posters, specifically 
Bruce Black, often mention their products.  Bruce and Steve have so many 
good answers, that even if you don't like their promoting their products, 
they contribute a lot to the list.


By the way Steve, how is the market for your classes going?  I know a while 
back you weren't doing anything, and thinking of chucking the whole 
business.  Is it better now?


Eric Bielefeld
Sr. z/OS Systems Programmer
Lands End
Dodgeville, Wisconsin
414-475-7434


There have been times in the last 12 months where I've felt that a few 
posters have strained the promotional envelope on IBM-MAIN.


Clearly it's all a matter of achieving balance.  So long as Steve's posts 
are offering useful explanations, corrections, examples or a nudge in the 
right direction that is relevant to the thread raised by the OP, then IMO 
it's ok to mention a relevant training offering that he has available. 
"Relevant" would mean that it might have helped the OP avoid having to 
post at all and "mention" should be little more than a link to all the 
gory detail on a website.


I've always felt sympathy for Steve's awkward position here as the more 
detailed help he gives, the more effective IBM-MAIN is bailing newbies 'n 
wannabes out, and this can be seen by the shortsighted and the lazy as 
undercutting the need for his paid services.  Go Steve!


Seasons greetings and regards to all,
Graeme. 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Mainframe vs grid

2007-01-09 Thread Eric N. Bielefeld
I think my last company is a good example of old stuff costing more than 
new.  We built our datacenter in 1995.  We ended up buying a 3090-600S. 
That and all the real 3380 & 3390 dasd caused them to buy 4 big Liebert 
units.  At the time, the 9672 had been out for a while with about a 60 MIP 
processor.  They were coming out with a 100 MIP processor in September in 
the 9672 line, but there was no guarantee it would be available on time. 
September was the time we were originally going to open our datacenter. 
Management didn't want to bet the farm on IBM's coming out with the new 
model on time, so they went with the old 3090.


Had they gotten the 9672 and some of the dasd that was just coming out, they 
probably could have gotten 1 Liebert unit.  Maybe 2 for backup.  I'm sure 
the electricity costs over the years and the maintenance costs were way more 
than made up for the $23,000 we paid for the 3090.  We also got many strings 
of 3380s for maybe $1,000 a box.  Even 3390s would have been cheaper in the 
long run.


At least where I work now, they seem to be much more progressive in 
purchasing equipment.


Eric Bielefeld
Sr. z/OS Systems Programmer
Lands End
Dodgeville, Wisconsin
414-475-7434

- Original Message - 
From: "Hal Merritt" <[EMAIL PROTECTED]>

Subject: Re: Mainframe vs grid



In our experience, older boxes are more expensive to operate than new
ones. In our last couple of upgrades, our TCO was less each time.

I honestly believe that much of the cost of running a mainframe shop is
in the culture. Superstitions, baggage, management out of touch with the
reality, and a PC mentality.

I found it interesting that "... an aging mainframe couldn't cut it, so
the IT staff looked elsewhere." An astute, bottom line oriented
management would have insisted on price comparisons to include a new
mainframe. I submit that a hard nosed business decision would not have
gone with the grid.

That said, if you are one of our competitors, then, yes, the grid is for
you :-)

My $0.03 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: So, OK, no more promotions from me - after this one

2007-01-09 Thread Graeme Gibson
There have been times in the last 12 months where I've felt that a 
few posters have strained the promotional envelope on IBM-MAIN.


Clearly it's all a matter of achieving balance.  So long as Steve's 
posts are offering useful explanations, corrections, examples or a 
nudge in the right direction that is relevant to the thread raised by 
the OP, then IMO it's ok to mention a relevant training offering that 
he has available.  "Relevant" would mean that it might have helped 
the OP avoid having to post at all and "mention" should be little 
more than a link to all the gory detail on a website.


I've always felt sympathy for Steve's awkward position here as the 
more detailed help he gives, the more effective IBM-MAIN is bailing 
newbies 'n wannabes out, and this can be seen by the shortsighted and 
the lazy as undercutting the need for his paid services.  Go Steve!


Seasons greetings and regards to all,
Graeme.

At 04:00 AM 10/01/2007, you wrote:

Recently I got a post on the ISPF list objecting to my
posting announcements of new courses and offerings on
the list.





And I promise I will stop posting promotion-only emails
from now on. (I consider a sly pointer to a relevant course
as part of answering a question to be OK).


Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.
http://www.trainersfriend.com
[EMAIL PROTECTED]


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JCL to determine how dset was deleted is needed.

2007-01-09 Thread Ed Gould

Carol,

Look at the CBTTAPE it has several.

Ed

On Jan 9, 2007, at 7:05 AM, Carol Srna wrote:

Hello All.  Can someone share with me JCL to determine how a  
dataset was

deleted?
TIA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: How order PartnerWorld free software?

2007-01-09 Thread Chuck Arney
To do this I had to go thru my IBM/FLEX reseller.  Contact the reseller and
ask them to order the software for you.  At least in my case, the software
had to be ordered under the reseller's IBM customer number for use on the
machine they sold me.

Chuck Arney
illustro Systems International, LLC
http://www.illustro.com
Access 3270 data from anywhere with z/XML-Host
Access 3270 apps from the web with z/Web-Host
Access CMS minidisks from z/OS or z/VSE with CMSACCess
Voice: 972-296-6166
Fax:   214-451-6394
* * * * * * * * * * * * * * * * 
This e-mail is private and may be confidential and is for the intended
recipient only. If misdirected, please notify us by telephone and confirm
that it has been deleted from your system and any copies destroyed. If you
are not the intended recipient you are strictly prohibited from using,
printing, copying, distributing or disseminating 
this e-mail or any information contained in it.  
 * * * * * * * * * * * * * * * * * * * * * * * * * *  
We use reasonable measures to virus scan all E-mails leaving illustro but no
warranty is given that this E-mail and any attachments are virus free. You
should ensure you have adequate measures in place for your own virus
checking.

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
> Behalf Of Charles Mills
> Sent: Tuesday, January 09, 2007 6:24 PM
> To: IBM-MAIN@BAMA.UA.EDU
> Subject: How order PartnerWorld free software?
> 
> This note is addressed to software vendors with a FLEX development system
> through PartnerWorld for Developers.
> 
> 
> 
> I believe we are entitled to no-cost licenses for a lot of IBM software.
> Some of it comes on the initial DVD, but I have the impression that if we
> want or need something that is not on the DVD we can order it, at no cost
> if
> it is eligible.
> 
> 
> 
> My management types are having trouble figuring out how to do so. I know
> when I had a P/390 system through PID (basically the predecessor of FLEX
> through PWD) I was able to do this, but I don't have a clue what we had to
> do, and it might have changed. The IBM Web site is . ahem . a little bit
> of
> a magical mystery tour.
> 
> 
> 
> Can anyone point me in the right direction?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


How order PartnerWorld free software?

2007-01-09 Thread Charles Mills
This note is addressed to software vendors with a FLEX development system
through PartnerWorld for Developers.

 

I believe we are entitled to no-cost licenses for a lot of IBM software.
Some of it comes on the initial DVD, but I have the impression that if we
want or need something that is not on the DVD we can order it, at no cost if
it is eligible.

 

My management types are having trouble figuring out how to do so. I know
when I had a P/390 system through PID (basically the predecessor of FLEX
through PWD) I was able to do this, but I don't have a clue what we had to
do, and it might have changed. The IBM Web site is . ahem . a little bit of
a magical mystery tour.

 

Can anyone point me in the right direction?

 

Thanks,

Charles Mills



 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Mainframe vs. "Server" (Was Just another example of mainframe costs.)

2007-01-09 Thread Anne & Lynn Wheeler
Charles Mills wrote:
> Pet peeve. Saying mainframes versus servers is like saying Fords versus
> cars. A mainframe typically IS a server (often among other roles). The first
> definition Google comes up with for server is "A computer that delivers
> information and software to other computers linked by a network." I would
> quibble with that definition (server is also used to describe software) but
> it certainly fits most mainframes. IBM lists "System Z" under Servers on
> their home page so I think IBM agrees with this theory.
> 
> If we mean "**ix and Windows boxes" or "non-mainframe boxes" then let's say
> that.
> 
> I'm not just quibbling over semantics. When I read "vendors are promoting
> server solutions" I get a totally different image in my mind versus that
> which I get when I read "vendors are promoting **ix and Windows solutions."
> 
> While I'm here, I don't think non-mainframe platforms are inherently more
> profitable for software vendors. Indeed, the traditional mainframe software
> vendors have struggled trying to achieve the same profitability with their
> "other box" offerings. Non-mainframe platforms are attractive and profitable
> for software vendors because that is where BOD and CIO focus is.

this was long struggle/battle with the communication group. my wife
constantly ran into it, first when she co-authored AWP39, peer-to-peer
networking in the same timeframe as SNA was getting started. recent
posting referring to that period
http://www.garlic.com/~lynn/2006x.html#8 vmshare

... then later when she was con'ed into going to POK to be in charge of
loosely-coupled architecture and authored peer-coupled shared data
architecture
http://www.garlic.com/~lynn/subtopic.html#shareddata

which didn't see a lot of uptake, except for IMS hot-standby, until
sysplex. however, there was also constant battles with the communication
group ... pushing master/slave, dumb terminal paradigm. there was
eventually some truce where peer-to-peer could be used within glass
house walls ... but dumb terminal paradigm had exclusive control over
crossing glasshouse boundary.

along came PCs ... and dumb terminal emulation helped see PCs have quite
a bit of uptake early on. however, later when the PCs started to move
into client/server ... it started to really impact the dumb terminal
emulation install base.
http://www.garlic.com/~lynn/subnetwork.html#emulation

About the time we had come up with 3-tier architecture and was out
pushing it in customer executive presentations,
the communication group had come up with SAA. SAA could somewhat be
construed as attempts to put the client/server guinee back into the
bottle ... and were were taking lots of hits from SAA and the
communication group out pushing 3-tier
http://www.garlic.com/~lynn/subnetwork.html#3tier

in that same time-frame ... the disk division had come up with a number
of products that would have allowed extremely high-bandwidth between the
distributed environment and potential glasshouse servers. The
communication organization consistently managed to have such products
shot down (based on communication group "owning" everything crossing the
boundary with the glasshouse). Finally, one of the high-level senior
disk engineers managed to get a talk scheduled for the annual,
world-wide communication group's internal conference. However, it didn't
quite start out as advertised, since he opened the talk by stating that
the communication group was going to be responsible for the demise of
the disk division (because the strangle hold that the communication
group had on the glasshouse was resulting it huge leakage/replication of
glasshouse data out into the distributed environment, there were
hard numbers about the annual migration/leakage percentage over a number
of years). past posts mentioning the talk claiming demise of the disk
division.
http://www.garlic.com/~lynn/2001j.html#16 OT - Internet Explorer V6.0
http://www.garlic.com/~lynn/2002d.html#14 Mainframers: Take back the
light (spotlight, that is)
http://www.garlic.com/~lynn/2003p.html#39 Mainframe Emulation Solutions
http://www.garlic.com/~lynn/2005j.html#59 Q ALLOC PAGE vs. CP Q ALLOC vs
ESAMAP
http://www.garlic.com/~lynn/2005r.html#8 Intel strikes back with a
parallel x86 design
http://www.garlic.com/~lynn/2006k.html#25 Can anythink kill x86-64?
http://www.garlic.com/~lynn/2006l.html#4 Google Architecture
http://www.garlic.com/~lynn/2006l.html#38 Token-ring vs Ethernet - 10
years later
http://www.garlic.com/~lynn/2006r.html#4 Was FORTRAN buggy?
http://www.garlic.com/~lynn/2006r.html#20 50th Anniversary of invention
of disk drives
http://www.garlic.com/~lynn/2006x.html#7 vmshare

some somewhat related activity with regard to NSFNET
http://www.garlic.com/~lynn/2006w.html#21 SNA/VTAM for NSFNET
http://www.garlic.com/~lynn/2006x.html#33 NSFNET (long post warning)
http://www.garlic.com/~lynn/2007.html#19 NSFNET (long post warning)

--
For

Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Edward Jaffe

Ken Porowski wrote:

Can anyone tell if z/OS.e = zNALC z/OS = z/OS NALC pricing?
  


zNALC pricing is lower than z/OS.e.

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Edward Jaffe

Steve Comstock wrote:

Edward Jaffe wrote:

Steve Comstock wrote:


Is this a harbinger of simply getting rid of z/OS.e and
just using regular z/OS and pricing subsets of work at
lower rates? Maybe not so bad.



Harbinger? z/OS.e is no more.



Oh. I didn't get the memo on that one. When did that
happen?


Today.

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Bill Klein
"Tony Harminc" <[EMAIL PROTECTED]> wrote in message
news:<[EMAIL PROTECTED]>...
> McKown, John wrote:
> 
 
> I'm not sure if this is a good thing, but it will presumably eliminate the
> point of things like the COBOL compiler to JVM bytecodes that at least a
> couple of vendors provide(d), other than as an off-mainframe migration
aid.
> 

ACTUALLY, I think that MORE COBOL applications will now be eligible.  Rather
than being required to use a CEEPIPI "driver" program, all that one will
need to do is prove (?) that the same application is available on Windows,
Unix, HP-UX, etc.  Given the large number of compilers that claim to port
z/OS COBOL applications to these environments "seamlessly", I don't know how
IBM will distinguish between them and Java, C, whatever programs also
running on those platforms.

You can even run CICS and IMS programs on Windows with Micro Focus,
CA-Realia (and I think Fujitsu).

You can also run non-LE conforming Assembler with Micro Focus and Realia.

   ***

It wouldn't surprise me if the T&C's change before z/OS.e goes bye-bye, but
as announced today, this actually opens up MANY more applications than are
"legal" under z/OS.e.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: REXX EXECIO changing LOWERCASE TO UPPERCASE

2007-01-09 Thread Paul Gilmartin
In a recent note, John Mattson said:

> Date: Tue, 9 Jan 2007 13:18:28 -0800
> 
> I have a fairly simple REXX that reads record by record from a PDS member
> and then writes to a new file.  Basically a REXX ibegener. (Yes, I know
> there are better ways, but please humor me, I have reasons.)  Problem is
> that it reads in lowercase characters as UPERCASE. What I want to do is
> PRESERVE the case whatever it is...   Anyone have any ideas no how to fix
> this?
> 
>"EXECIO 1 DISKR FM"
>IF RC>0 THEN LEAVE
>PULL RECORD
>SAY "RECORD BEFORE:" RECORD
>SAY "RECORD AFTER :" RECORD
>PUSH RECORD
>"EXECIO 1 DISKW TO"
>
Use, instead:

 "EXECIO 1 DISKR FM (stem RECORD."
 IF RC>0 THEN LEAVE
 SAY "RECORD BEFORE:" RECORD.1
 SAY "RECORD AFTER :" RECORD.1
 "EXECIO 1 DISKW TO (stem RECORD."

Two instructions fewer to work correctly.

-- gil
-- 
StorageTek
INFORMATION made POWERFUL

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: REXX EXECIO changing LOWERCASE TO UPPERCASE

2007-01-09 Thread Ted MacNEIL
>Put PARSE before your ARG and you'll be sorted.

ITYM "... before your PULL".

  
Yaw tee pucketty!
Rum ting clue!
Ni! Ni! Ni!
Arrooo!  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: REXX EXECIO changing LOWERCASE TO UPPERCASE

2007-01-09 Thread Kenny Fogarty
Put PARSE before your ARG and you'll be sorted. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of John Mattson
Sent: 09 January 2007 21:18
To: IBM-MAIN@BAMA.UA.EDU
Subject: REXX EXECIO changing LOWERCASE TO UPPERCASE

I have a fairly simple REXX that reads record by record from a PDS member
and then writes to a new file.  Basically a REXX ibegener. (Yes, I know
there are better ways, but please humor me, I have reasons.)  Problem is
that it reads in lowercase characters as UPERCASE. What I want to do is 
PRESERVE the case whatever it is...   Anyone have any ideas no how to fix 
this? 

Here is an example, Using the following file as input: 
AFITJLM.ALC.TSTFTP(TSTFTP)
*
UPPERCASE
lowercase 

Here is what I get when I run the REXX 

EXECUTING MSYS.ISPF.REXX(ALC#VST) 
PDQ : D 
SYS : CAM 
IDS : 'AFITJLM.ALC.TSTFTP(TSTFTP)' 
ODS : 'DALC.FTPCTL(TSTFTP)' 
RECORD BEFORE: UPPERCASE
RECORD AFTER : UPPERCASE
RECORD BEFORE: LOWERCASE
RECORD AFTER : LOWERCASE 

Here is the REXX
/* REXX */
TRLEVEL = 'I' 
TRLEVEL = '' 
INTERPRET TRACE TRLEVEL
SIGNAL ON HALT
TRACE
ARG PDQ SYS IDS ODS
PDQ = STRIP(PDQ)
SYS = STRIP(SYS)
IDS = STRIP(IDS)
ODS = STRIP(ODS)
IDS = "'"IDS"'" 
ODS = "'"ODS"'" 
SAY " " 
SAY "EXECUTING MSYS.ISPF.REXX(ALC#VST)" 
SAY "PDQ :" PDQ 
SAY "SYS :" SYS 
SAY "IDS :" IDS 
SAY "ODS :" ODS 
INTERPRET TRACE TRLEVEL 
 
/* DOES THE USER'S DSN & MEMBER EXIST ? */ TRACE INTERPRET TRACE TRLEVEL
ADDRESS TSO 
 
IF SYSDSN(IDS) ¬= "OK" THEN
DO 
   TRACE 
   SAY "***" 
   SAY "*** COPY-FROM DS(MEMBER) DOES NOT EXIST, TRY AGAIN" 
   SAY "***" 
   INTERPRET TRACE TRLEVEL 
   SIGNAL BADEND
END 
 
FMTO: ADDRESS TSO 
 
"ALLOC DD(FM) DSN("IDS") SHR " 
"ALLOC DD(TO) DSN("ODS") SHR " 
 
   TRACE
"NEWSTACK" 
DO X=1 BY 1 UNTIL X>999 
   "EXECIO 1 DISKR FM" 
   IF RC>0 THEN LEAVE 
   PULL RECORD 
   SAY "RECORD BEFORE:" RECORD 
   SAY "RECORD AFTER :" RECORD 
   PUSH RECORD 
   "EXECIO 1 DISKW TO" 
END
INTERPRET TRACE TRLEVEL
"EXECIO 0 DISKR FM (FINIS" 
"EXECIO 0 DISKW TO (FINIS" 
"FREE  DD(FM TO)" 
 
/* "ISPEXEC EDIT DATASET("ODS")"   */ 
 
SIGNAL THEEND
BADEND: 
ADDRESS TSO
"FREE  DD(X)" 
"FREE ALL" 
EXIT () 
 
THEEND: 
ADDRESS TSO
"FREE ALL" 
EXIT 

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html

--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.432 / Virus Database: 268.16.8/621 - Release Date: 09/01/2007
13:37
 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.432 / Virus Database: 268.16.8/621 - Release Date: 09/01/2007
13:37
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Storage ROTs

2007-01-09 Thread Walter Marguccio
- Original Message 
From: Mark Zelden <[EMAIL PROTECTED]>

> It depends on the time of day.  Looking at one of our
> largest LPARs  ( > 50G), I see about 20% of the frames
> available at the moment but I did see some demand paging
> and the local page dsns (13) are about 15% utilized. But it's
> still early in the day (local time) on that LPAR.

our average of 70% frames available does lower now and again
when jobs which makes use if SORT run on the system.
But that happens rarely during the day. We don't have any paging activity at 
all.
This is a small shop, our PROD LPAR has one tenth of CS compared to yours ...

>  I don't think I want to check all the production LPARs.   :-)

You don't need to! Thanks for giving such details.


Walter Marguccio
z/OS Systems Programmer
Munich - Germany

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Mainframe vs grid

2007-01-09 Thread Hal Merritt
In our experience, older boxes are more expensive to operate than new
ones. In our last couple of upgrades, our TCO was less each time.  

I honestly believe that much of the cost of running a mainframe shop is
in the culture. Superstitions, baggage, management out of touch with the
reality, and a PC mentality. 

I found it interesting that "... an aging mainframe couldn't cut it, so
the IT staff looked elsewhere." An astute, bottom line oriented
management would have insisted on price comparisons to include a new
mainframe. I submit that a hard nosed business decision would not have
gone with the grid.  

That said, if you are one of our competitors, then, yes, the grid is for
you :-)   

My $0.03


-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Howard Brazee
Sent: Friday, January 05, 2007 7:56 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Mainframe vs grid

Slashdot had this article today:

http://linux.slashdot.org/linux/07/01/05/0538224.shtml

"IBM touted 2006 as a resurgence year for the mainframe, but not so
fast. At R.L. Polk and Co., one of the oldest automobile analytics
firms in the U.S., an aging mainframe couldn't cut it, so the IT staff
looked elsewhere. Their search led to a grid computing environment -
more specifically, a grid computing environment running Linux on more
than 120 Dell servers. The mainframe's still there, apparently, but
after an internal comparison showed the Linux grid outperforming the
mainframe by 70% with a 65% reduction in hardware costs, Polk seemed
content banishing the big box to a dark, lonely corner for more medial
tasks."

With a link to:
http://searchopensource.stage.techtarget.com/originalContent/0,289142,si
d39_gci1237399,00.html

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended exclusively
for the individual or entity to which it is addressed. The message, together 
with any attachment, may contain confidential and/or privileged
information. Any unauthorized review, use, printing, saving, copying, 
disclosure 
or distribution is strictly prohibited. If you have received this message in 
error, please immediately
advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Tony Harminc
McKown, John wrote:

> Again, from my reading, IBM does not expect people to really run
> any "legacy" work on a zNALC system. Yes, I know about the code that
> allows COBOL programs to legally run under z/OS.e and I would guess that
> it would still work on a zNALC system.

IBM points out in the presentation I saw that while z/OS.e provides
technical enforcement of the rules, zNALC provides legal (Ts & Cs)
enforcement. Further, what is an "eligible" workload is pretty much up to
IBM's discretion, and you have to agree to their doing audits if they want
to.

I'm not sure if this is a good thing, but it will presumably eliminate the
point of things like the COBOL compiler to JVM bytecodes that at least a
couple of vendors provide(d), other than as an off-mainframe migration aid.

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Ken Porowski
The way I read it is it's a way to do away with the 'crippled' z/OS.e
and allow you to run full z/OS with the same pricing (FSVO same).

Can anyone tell if z/OS.e = zNALC z/OS = z/OS NALC pricing?

The restriction is:

z/OS is eligible for zNALC pricing when running in an LPAR where the
Qualified Application is executing. The only other products that may
execute in this LPAR are those products that support the Qualified
Application. The LPAR must be used exclusively for the Qualified
Application and for programs that support the Qualified Application and
for no other purpose.  

So maybe I can run COBOL and a bunch of TSO sessions and be in a
parallel sysplex after all.

Ken Porowski
AVP Systems Software
CIT Group
E: [EMAIL PROTECTED]



-Original Message-
McKown, John

OK, I'm stupid. From what I gather, IBM positions this for "new work"
only. And from reading, it is basically to get people to not invest in a
UNIX or NT solutions, but to use this (my opinion) "crippled" version of
z/OS instead. Why would I do that? If I wanted to stay with the System z
processor, I would strongly look at Linux under z/VM. I will grant that
z/OS has some real strengths over Linux. But I just don't see the
reason. Again, from my reading, IBM does not expect people to really run
any "legacy" work on a zNALC system. Yes, I know about the code that
allows COBOL programs to legally run under z/OS.e and I would guess that
it would still work on a zNALC system. But I'm just bumfuzzled about
this. I can understand running Websphere on my normal z/OS system. But
if I'm going to segregate the Websphere workload onto a zNALC system,
why not just go whole hog and use Linux (on System z or even some other
hardware)?

Or have I just not had enough sleep lately? (my dog keeps waking me up
every 3 hours at night - but he is 16 and is allowed).

John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage Administrative Services Group
Information Technology

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: REXX EXECIO changing LOWERCASE TO UPPERCASE

2007-01-09 Thread Imbriale, Donald (Exchange)
PULL is a short form of PARSE UPPER PULL.  Use PARSE PULL instead of
PULL.

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of John Mattson
Sent: Tuesday, January 09, 2007 4:18 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: REXX EXECIO changing LOWERCASE TO UPPERCASE

I have a fairly simple REXX that reads record by record from a PDS
member 
and then writes to a new file.  Basically a REXX ibegener. (Yes, I know 
there are better ways, but please humor me, I have reasons.)  Problem is

that it reads in lowercase characters as UPERCASE. What I want to do is 
PRESERVE the case whatever it is...   Anyone have any ideas no how to
fix 
this? 



***
Bear Stearns is not responsible for any recommendation, solicitation, 
offer or agreement or any information about any transaction, customer 
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: REXX EXECIO changing LOWERCASE TO UPPERCASE

2007-01-09 Thread McKown, John
> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:[EMAIL PROTECTED] On Behalf Of John Mattson
> Sent: Tuesday, January 09, 2007 3:18 PM
> To: IBM-MAIN@BAMA.UA.EDU
> Subject: REXX EXECIO changing LOWERCASE TO UPPERCASE
> 
> 
> I have a fairly simple REXX that reads record by record from 
> a PDS member 
> and then writes to a new file.  Basically a REXX ibegener. 
> (Yes, I know 
> there are better ways, but please humor me, I have reasons.)  
> Problem is 
> that it reads in lowercase characters as UPERCASE. What I 
> want to do is 
> PRESERVE the case whatever it is...   Anyone have any ideas 
> no how to fix 
> this? 
> 

WAD.

PULL RECORD

is short for 

PARSE PULL UPPER RECORD

You need

PARSE PULL RECORD

to maintain the upper/lower case. I learned this the hard way, myself.

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread McKown, John
OK, I'm stupid. From what I gather, IBM positions this for "new work"
only. And from reading, it is basically to get people to not invest in a
UNIX or NT solutions, but to use this (my opinion) "crippled" version of
z/OS instead. Why would I do that? If I wanted to stay with the System z
processor, I would strongly look at Linux under z/VM. I will grant that
z/OS has some real strengths over Linux. But I just don't see the
reason. Again, from my reading, IBM does not expect people to really run
any "legacy" work on a zNALC system. Yes, I know about the code that
allows COBOL programs to legally run under z/OS.e and I would guess that
it would still work on a zNALC system. But I'm just bumfuzzled about
this. I can understand running Websphere on my normal z/OS system. But
if I'm going to segregate the Websphere workload onto a zNALC system,
why not just go whole hog and use Linux (on System z or even some other
hardware)?

Or have I just not had enough sleep lately? (my dog keeps waking me up
every 3 hours at night - but he is 16 and is allowed).

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


REXX EXECIO changing LOWERCASE TO UPPERCASE

2007-01-09 Thread John Mattson
I have a fairly simple REXX that reads record by record from a PDS member 
and then writes to a new file.  Basically a REXX ibegener. (Yes, I know 
there are better ways, but please humor me, I have reasons.)  Problem is 
that it reads in lowercase characters as UPERCASE. What I want to do is 
PRESERVE the case whatever it is...   Anyone have any ideas no how to fix 
this? 

Here is an example, Using the following file as input: 
AFITJLM.ALC.TSTFTP(TSTFTP)
* 
UPPERCASE 
lowercase 

Here is what I get when I run the REXX 

EXECUTING MSYS.ISPF.REXX(ALC#VST) 
PDQ : D 
SYS : CAM 
IDS : 'AFITJLM.ALC.TSTFTP(TSTFTP)' 
ODS : 'DALC.FTPCTL(TSTFTP)' 
RECORD BEFORE: UPPERCASE 
RECORD AFTER : UPPERCASE 
RECORD BEFORE: LOWERCASE 
RECORD AFTER : LOWERCASE 

Here is the REXX 
/* REXX */ 
TRLEVEL = 'I' 
TRLEVEL = '' 
INTERPRET TRACE TRLEVEL 
SIGNAL ON HALT 
TRACE 
ARG PDQ SYS IDS ODS 
PDQ = STRIP(PDQ) 
SYS = STRIP(SYS) 
IDS = STRIP(IDS) 
ODS = STRIP(ODS) 
IDS = "'"IDS"'" 
ODS = "'"ODS"'" 
SAY " " 
SAY "EXECUTING MSYS.ISPF.REXX(ALC#VST)" 
SAY "PDQ :" PDQ 
SAY "SYS :" SYS 
SAY "IDS :" IDS 
SAY "ODS :" ODS 
INTERPRET TRACE TRLEVEL 
 
/* DOES THE USER'S DSN & MEMBER EXIST ? */ 
TRACE 
INTERPRET TRACE TRLEVEL 
ADDRESS TSO 
 
IF SYSDSN(IDS) ¬= "OK" THEN 
DO 
   TRACE 
   SAY "***" 
   SAY "*** COPY-FROM DS(MEMBER) DOES NOT EXIST, TRY AGAIN" 
   SAY "***" 
   INTERPRET TRACE TRLEVEL 
   SIGNAL BADEND 
END 
 
FMTO: ADDRESS TSO 
 
"ALLOC DD(FM) DSN("IDS") SHR " 
"ALLOC DD(TO) DSN("ODS") SHR " 
 
   TRACE 
"NEWSTACK" 
DO X=1 BY 1 UNTIL X>999 
   "EXECIO 1 DISKR FM" 
   IF RC>0 THEN LEAVE 
   PULL RECORD 
   SAY "RECORD BEFORE:" RECORD 
   SAY "RECORD AFTER :" RECORD 
   PUSH RECORD 
   "EXECIO 1 DISKW TO" 
END 
INTERPRET TRACE TRLEVEL 
"EXECIO 0 DISKR FM (FINIS" 
"EXECIO 0 DISKW TO (FINIS" 
"FREE  DD(FM TO)" 
 
/* "ISPEXEC EDIT DATASET("ODS")"   */ 
 
SIGNAL THEEND 
BADEND: 
ADDRESS TSO 
"FREE  DD(X)" 
"FREE ALL" 
EXIT () 
 
THEEND: 
ADDRESS TSO 
"FREE ALL" 
EXIT 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Dynamically Activate additional CUs on Shark

2007-01-09 Thread Hal Merritt
Correct. Each step will require a different IODF:

1. Config channels 1 and 2 offline. 
2. Activate IODF+1 that redefines channels 1 and 2. 
3. Config channels 1 and 2 online. 
4. Be happy with what you see so far.
5. Config channels 3 and 4 offline. 
6. Activate IODF+2 that is your desired endpoint. 
7. Config channels 3 and 4 online. 
8. Humbly accept accolades from coworkers and management :-) 

Note: at step 4, you should have four paths to your old DASD as well as
two paths to your new. You can stop there for a while if you like.   
  

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Tom Sipusic
Sent: Monday, January 08, 2007 10:49 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Dynamically Activate additional CUs on Shark

It seems to me that Hal Merrit's stepwise approach will work. I think it

will, however, require an intermediate IODF, in which the 2 new CUs are 
only defined to  the two channels that will be offline when I do the 
first activation. (Also the two CUs I want to get rid of will only be 
deleted from the two off line channels.)  Then I vary those two channels

online and the other two channels offline and activate the configuration

I really want, the one with the two new CUs that will handle the new 
DASD and the two CUs  that have been handling all the old DASD volumes.

and with the two new CUs defined to all four channels. (Gone too will be

the  two CUs  that I am deleting.)
Tom Sipusic
 
NOTICE: This electronic mail message and any files transmitted with it are 
intended exclusively
for the individual or entity to which it is addressed. The message, together 
with any attachment, may contain confidential and/or privileged
information. Any unauthorized review, use, printing, saving, copying, 
disclosure 
or distribution is strictly prohibited. If you have received this message in 
error, please immediately
advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Steve Comstock

David Andrews wrote:

On Tue, 2007-01-09 at 13:42 -0700, Steve Comstock wrote:


Edward Jaffe wrote:


Steve Comstock wrote:
Harbinger? z/OS.e is no more.


When did that happen?



It's in the zNALC announcement at:
http://www-306.ibm.com/common/ssi/fcgi-bin/ssialias?infotype=AN&subtype=CA&htmlfid=897/ENUS207-006&appname=USN


 > Statement of general direction



In 2007, IBM
intends: For
z/OS.e Version 1
Release 8 to be
the final release
of the z/OS.e
operating system.




Ohhh. Whewww. I just received my email notice of todays
announcements, just before your post. Thought I had missed
something vital through inattention. But it's new.

That's good, I think.

Kind regards,

-Steve Comstock

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Mainframe vs. "Server" (Was Just another example of mainframe costs.)

2007-01-09 Thread Ted MacNEIL
>Pet peeve. Saying mainframes versus servers is like saying Fords versus cars.

I call them mainframes vs 'alternate platforms'.
Or, mainframes, mid-range, NT & Toys.

  
Yaw tee pucketty!
Rum ting clue!
Ni! Ni! Ni!
Arrooo!  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread David Andrews
On Tue, 2007-01-09 at 13:42 -0700, Steve Comstock wrote:
> Edward Jaffe wrote:
> > Steve Comstock wrote:
> > Harbinger? z/OS.e is no more.
> When did that happen?

It's in the zNALC announcement at:
http://www-306.ibm.com/common/ssi/fcgi-bin/ssialias?infotype=AN&subtype=CA&htmlfid=897/ENUS207-006&appname=USN





Statement of general direction


In 2007, IBM
intends: For
z/OS.e Version 1
Release 8 to be
the final release
of the z/OS.e
operating system.

-- 
David Andrews
A. Duda and Sons, Inc.
[EMAIL PROTECTED]

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Wayne Driscoll
See todays announcement letters from IBM, 1.8 is the final release of
z/OS.e, replaced, as you guessed, by zNALC.
Wayne Driscoll
Product Developer
JME Software LLC
NOTE: All opinions are strictly my own.
  

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Steve Comstock
Sent: Tuesday, January 09, 2007 2:42 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

Edward Jaffe wrote:
> Steve Comstock wrote:
> 
>> Is this a harbinger of simply getting rid of z/OS.e and just using 
>> regular z/OS and pricing subsets of work at lower rates? Maybe not so

>> bad.
> 
> 
> Harbinger? z/OS.e is no more.
> 

Oh. I didn't get the memo on that one. When did that happen?

Kind regards,

-Steve Comstock

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Steve Comstock

Edward Jaffe wrote:

Steve Comstock wrote:


Is this a harbinger of simply getting rid of z/OS.e and
just using regular z/OS and pricing subsets of work at
lower rates? Maybe not so bad.



Harbinger? z/OS.e is no more.



Oh. I didn't get the memo on that one. When did that
happen?

Kind regards,

-Steve Comstock

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Imbriale, Donald (Exchange)
Then you are probably using the CEEDOPT module or are linking in a
CEEUOPT into your program.  Run the program and include /RPTOPTS(ON) in
your PARM to list the LE run-time options in effect during program
execution.

Also, check if your program is checking for file status key 96 on the
file open.

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Robert Pelletier
Sent: Tuesday, January 09, 2007 3:38 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

Don't have one:
EDIT SYS1.PROD.PARMLIB 
Command ===>   
   Name Prompt 
. CAISEC00 
. CEEIPCSP 
. CLOCK00  
. CLRPARM   





***
Bear Stearns is not responsible for any recommendation, solicitation, 
offer or agreement or any information about any transaction, customer 
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JES2 performance problem - z/OS 1.7

2007-01-09 Thread Marty French
I ran into the same thing on a non MAS issuing the following command 
(purging all output > then 3 days old).  $POJQ,ALL,DA>3.  z/OS 1.7.  

This was on a TEST LPAR.  I changed come parameters on the MASDEF per the 
Redbook below and then issued the command $POJQ,ALL,DA>2.  The message did 
not appear. 1) I had purged enough jobs on the spool volumes on the first 
command or 2) The change may have helped.  I will wait until the spool 
usage gets high again and see if I can recreate the problem under the new 
MASDEF parms. 

Redbook:

http://www.redbooks.ibm.com/abstracts/REDP3940.html?Open

Original message:

*$HASP9207 JES2 CHECKPOINT LOCK HELD 769 
 DURATION-000:00:27.66   
*$HASP9203 LONG PCE DISPATCH 770 
 DURATION-000:00:49.47 PCE-COMM EXIT-NONE JOB ID-S0007014
 COMMAND-$POJQ,ALL,DA>3  
 $HASP9301 JES2 MAIN TASK ALERTS CLEARED 
 $HASP9302 JES2 CHECKPOINT LOCK RELEASED 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Edward Jaffe

Steve Comstock wrote:

Is this a harbinger of simply getting rid of z/OS.e and
just using regular z/OS and pricing subsets of work at
lower rates? Maybe not so bad.


Harbinger? z/OS.e is no more.

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Robert Pelletier
Don't have one:
EDIT SYS1.PROD.PARMLIB 
Command ===>   
   Name Prompt 
. CAISEC00 
. CEEIPCSP 
. CLOCK00  
. CLRPARM   


Have a Nice Day !
 
Bob Pelletier
Connecticut Student Loan Foundation
Rocky Hill, Ct.
-Original Message-
From: Imbriale, Donald (Exchange) [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, January 09, 2007 3:23 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

CEEPRMxx, not CEEIPCSP

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Robert Pelletier
Sent: Tuesday, January 09, 2007 3:13 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

Yes but much is commented out:
EDIT   SYS1.PROD.PARMLIB(CEEIPCSP) - 01.00 Columns 1



***
Bear Stearns is not responsible for any recommendation, solicitation,
offer or agreement or any information about any transaction, customer
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html



Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Imbriale, Donald (Exchange)
CEEPRMxx, not CEEIPCSP

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Robert Pelletier
Sent: Tuesday, January 09, 2007 3:13 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

Yes but much is commented out:
EDIT   SYS1.PROD.PARMLIB(CEEIPCSP) - 01.00 Columns 1



***
Bear Stearns is not responsible for any recommendation, solicitation, 
offer or agreement or any information about any transaction, customer 
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Robert Pelletier
Yes but much is commented out:
EDIT   SYS1.PROD.PARMLIB(CEEIPCSP) - 01.00 Columns 1
0007
Command ===>  Scroll
===> CSR
51

52  /*
 *
53  /* IPCS Verb Exits
*
54  /*
 *
55

56 EXIT EP(CEEERRIP) VERB(LEDATA) ABSTRACT(+

57 'Language Environment formatter') PARM('CEEDUMP')
/[EMAIL PROTECTED]
58

59  /*
 *
60  /* Formatting exits--invoked in the order listed for each block
*
61  /*
 *
62

63

64  /*
 *
65  /* CBSTAT exits--invoked in the order listed for each block
*
66  /*
 * 


Have a Nice Day !
 
Bob

Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Imbriale, Donald (Exchange)
. . . and you are using a CEE PARMLIB member.

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Mark Zelden
Sent: Tuesday, January 09, 2007 2:49 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

On Tue, 9 Jan 2007 14:31:18 -0500, Steven Conway
<[EMAIL PROTECTED]> wrote:

>MVS Command D CEE,CEEDOPT shows you your 31-bit runtime options, D
>CEE,CELQUPT gives your 64-bit options.
>
>Either shows your CEE PARMLIB member prefix as the 2nd line of the
>CEE3745I response.
>

Good advise -- if you preface it by saying "if you are running
z/OS 1.7 or above"...




***
Bear Stearns is not responsible for any recommendation, solicitation, 
offer or agreement or any information about any transaction, customer 
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Robert Pelletier
Ok. Thanks all. I'll try the suggestions. 


Have a Nice Day !
 
Bob Pelletier
Connecticut Student Loan Foundation
Rocky Hill, Ct.

Robert Pelletier wrote:
> This is what I have so will the job run even if there is a missing dd
> statement:
>  CBLOPTS=((ON),OVR),
>  CBLPSHPOP=((ON),OVR),  
>  CBLQDA=((OFF),OVR),
>  CHECK=((ON),OVR),  
>  COUNTRY=((US),OVR),
>  DEBUG=((OFF),OVR),  
> 

Going by these settings, you should abend in OPEN if there is a missing
DD statement. However, it is possible to have the CBLQDA parameter
overridden (the "OVR" value) either in a runtime parameter list or a
CEEUOPTS module bound (link
edited) into your program module (or, perhaps even an operator command).

"OFF" is what you want; you might consider specifying
CBLQDA=((OFF),NOVR) and re-Assembling and binding this CEEDOPT module
with this setting.

Kind regards,

-Steve Comstock

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html



Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Mark Zelden
On Tue, 9 Jan 2007 14:31:18 -0500, Steven Conway
<[EMAIL PROTECTED]> wrote:

>MVS Command D CEE,CEEDOPT shows you your 31-bit runtime options, D
>CEE,CELQUPT gives your 64-bit options.
>
>Either shows your CEE PARMLIB member prefix as the 2nd line of the
>CEE3745I response.
>

Good advise -- if you preface it by saying "if you are running
z/OS 1.7 or above"...

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - GITO
mailto:[EMAIL PROTECTED]
z/OS and OS390 expert at http://searchDataCenter.com/ateExperts/
Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Message ICP150I

2007-01-09 Thread Mark Pace

On 1/9/07, Miller, Pat <[EMAIL PROTECTED]> wrote:

 RESOURCE

PARTITION=((CSS(0),(BEST,2),(PROD,1),(TEST,4),(Y2K,3)*
)),MAXDEV=((CSS(0),16384,0))

ICP115I DELIMITER ERROR, EXPECT RIGHT PARENTHESIS - ,0))




Missing a (  after 16384,(0))



--
Mark Pace
Mainline Information Systems

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Steve Comstock

Robert Pelletier wrote:

This is what I have so will the job run even if there is a missing dd
statement:
 CBLOPTS=((ON),OVR),
 CBLPSHPOP=((ON),OVR),  
 CBLQDA=((OFF),OVR),
 CHECK=((ON),OVR),  
 COUNTRY=((US),OVR),
 DEBUG=((OFF),OVR),  



Going by these settings, you should abend in
OPEN if there is a missing DD statement. However,
it is possible to have the CBLQDA parameter
overridden (the "OVR" value) either in a runtime
parameter list or a CEEUOPTS module bound (link
edited) into your program module (or, perhaps
even an operator command).

"OFF" is what you want; you might consider specifying
CBLQDA=((OFF),NOVR) and re-Assembling and binding this
CEEDOPT module with this setting.

Kind regards,

-Steve Comstock

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: z/OS TCP/IP

2007-01-09 Thread McKown, John
> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:[EMAIL PROTECTED] On Behalf Of Ronald G wells
> Sent: Tuesday, January 09, 2007 1:22 PM
> To: IBM-MAIN@BAMA.UA.EDU
> Subject: Fw: z/OS TCP/IP
> 
> 
> thought I'd try over here on this list 
> Needing help on tn3270ssl setup...think we are missing 
> something...but 
> what???
> 
> - Forwarded by Ron Wells/AGFS/AGFin on 01/09/2007 01:20 PM -
> 
> Ron Wells/AGFS/AGFin
> 01/09/2007 09:50 AM
> 
> To
> IBM TCP/IP List <[EMAIL PROTECTED]>
> cc
> 
> Subject
> Re: z/OS TCP/IP
> 
> 
> 
> 
> 
> Getting following starting tn3270 
> 
> EZZ6035I TELNET DEBUG PROFILE WARNING,LINE: *N/A* MOD: EZBTMCVV 715 
>   RCODE: 600F-00  System SSL initiation failed. 
>   PARM1: 00CA PARM2:  PARM3: GSK_ENVIRONMENT_INIT 
> 
> Not seeing this in manuals...anyone ever get this not 
> getting into ibm 
> site for seaching??? guess other problems there.lol

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1D150/SPTW
Q872


600F System SSL initialization failed.
The setup of the security interface task failed. Secure ports will
not be available, but basic Telnet is available. The Telnet interface
task was set up, code began to run, but an error occurred during
initialization. PARM1 contains the hexadecimal security task return
code. If the reason code you receive is not listed or you are unable to
determine the cause of the failure, refer to the z/OS Cryptographic
Service System Secure Sockets Layer Programming. These codes are passed
to Telnet by System SSL. If PARM1 is one of the following values try the
appropriate action before calling the IBM Software Support Center. The
keyring file name is case sensitive. When adding the keyring name to the
Telnet profile, be sure that the correct case is used. If KEYRING SAF
was specified in the TN3270 profile, ensure that the TN3270 server has
access to the IRR.DIGCERT.LISTRING resource in the FACILITY class.

...

 202 (X'CA')

Keyring file open failed

* Unable to open the keyring file or the keyring's password
stash file, which are required for secure communications. If
CRLLDAPSERVER is specified, the LDAP server might not be accessible.
* Secure communications cannot continue.
* Verify that the hfs file system is operating correctly.
* If an hfs keyring is used, verify the stash file is in the
same directory as the keyring file.
* If the keyring file is an MVS data set, verify that the stash
file is also an MVS data set.
* Ensure that the file permissions on the keyring file are
correct.
* Verify that the LDAP server, if specified, can be accessed
from this stack.



--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: PATTERN DSCB RECORD

2007-01-09 Thread Tom Marchant
On Tue, 9 Jan 2007 14:11:22 -0500, Imbriale, Donald wrote:

>Check the volume on which the catalog which contains the DSN resides.

Not in an SMS environment.

>
>Don Imbriale
>
>-Original Message-
>From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
>Behalf Of willie bunter
>Sent: Tuesday, January 09, 2007 1:56 PM
>To: IBM-MAIN@BAMA.UA.EDU
>Subject: PATTERN DSCB RECORD
>
>Hallo To All,
>
>  A batch job was executed successfully.  The job was creating a gdg
>dsn.  I noticed that the jcl did not contain the PATTERN DSCB RECORD.  I
>checked the SMS rules but found nothing (SC, MC & DC).  Can anybody tell
>me where else I should look?
>
>  Below is a snippet of the jcl:
>
>  //IDMSJNLA DD DSN=IFDB31.VARY.JOURNAL(+1),
>//DCB=(RECFM=F,LRECL=19068,BLKSIZE=19068),
> //UNIT=3480,DISP=(NEW,CATLG,DELETE)
>

The JCL provided the RECFM, LRECL and BLKSIZE.  The purpose of the
pattern (or model) DSCB is to fill in DCB information.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Fw: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Steven Conway
MVS Command D CEE,CEEDOPT shows you your 31-bit runtime options, D 
CEE,CELQUPT gives your 64-bit options. 

Either shows your CEE PARMLIB member prefix as the 2nd line of the 
CEE3745I response.


Cheers,,,Steve

Steve Conway
Lead Systems Programmer
Information Systems & Services Division
Computer & Network Operations
Phone:   (703) 450-3156
Fax:(703) 450-3197

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Message ICP150I

2007-01-09 Thread Miller, Pat
I'm trying to build an IOCDS in preparation for upgrade from a z/890 to a z9 
business class (D/T 2096).  I'm getting a message (ICP150I) I can't seem to 
locate.  I suspect that IOCP doesn't recognize D/T 2096, even though I've 
pulled the PSP buckets and applied the atypically modest amount of recommended 
maintenance.  



STATEMENTS PROCESSED BY ICP IOCP VERSION 1 RELEASE 3.0
  IDMSG1='A2IODF01',MSG2='SYS2.IODF01 - 2007-01-02 14:53',  * 
SYSTEM=(2096,1),* 
TOK=('P007500E',0082A8EF2086145342170107002F* 
,,'07-01-02','14:53:42','SYS2','IODF01')  
  
ICP150I INVALID SYSTEM PARAMETER  
  
  RESOURCE PARTITION=((CSS(0),(BEST,2),(PROD,1),(TEST,4),(Y2K,3)* 
)),MAXDEV=((CSS(0),16384,0))  
  
ICP115I DELIMITER ERROR, EXPECT RIGHT PARENTHESIS - ,0))  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Fw: z/OS TCP/IP

2007-01-09 Thread Ronald G wells
thought I'd try over here on this list 
Needing help on tn3270ssl setup...think we are missing something...but 
what???

- Forwarded by Ron Wells/AGFS/AGFin on 01/09/2007 01:20 PM -

Ron Wells/AGFS/AGFin
01/09/2007 09:50 AM

To
IBM TCP/IP List <[EMAIL PROTECTED]>
cc

Subject
Re: z/OS TCP/IP





Getting following starting tn3270 

EZZ6035I TELNET DEBUG PROFILE WARNING,LINE: *N/A* MOD: EZBTMCVV 715 
  RCODE: 600F-00  System SSL initiation failed. 
  PARM1: 00CA PARM2:  PARM3: GSK_ENVIRONMENT_INIT 

Not seeing this in manuals...anyone ever get this not getting into ibm 
site for seaching??? guess other problems there.lol

--
Email Disclaimer
This  E-mail  contains  confidential  information  belonging to the sender, 
which  may be legally privileged information.  This information is intended 
only  for  the use of the individual or entity addressed above.  If you are not 
 the  intended  recipient, or  an  employee  or  agent responsible for 
delivering it to the intended recipient, you are hereby notified that any 
disclosure,  copying, distribution, or the taking of any action in reliance on 
the contents of the E-mail or attached files is strictly prohibited.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Imbriale, Donald (Exchange)
First, verify the LE run-time options in effect by including
/RPTOPTS(ON) in the PARM field on the EXEC statement.

Second, you should be getting a file status key of 96:

For QSAM file: An OPEN statement with the OUTPUT phrase was attempted,
or
an OPEN statement with the I-O or EXTEND phrase was attempted for an

optional file but no DD statement was specified for the file and the

CBLQDA(OFF) runtime option was specified.


Does your program check for that file status key?

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Robert Pelletier
Sent: Tuesday, January 09, 2007 2:09 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

Yes.  



CBLQDA will apply to COBOL programs only.  Is your program COBOL?

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Robert Pelletier
Sent: Tuesday, January 09, 2007 1:43 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

This is what I have so will the job run even if there is a missing dd
statement:
 CBLOPTS=((ON),OVR),
 CBLPSHPOP=((ON),OVR),  
 CBLQDA=((OFF),OVR),
 CHECK=((ON),OVR),  
 COUNTRY=((US),OVR),
 DEBUG=((OFF),OVR),  





***
Bear Stearns is not responsible for any recommendation, solicitation, 
offer or agreement or any information about any transaction, customer 
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: PATTERN DSCB RECORD

2007-01-09 Thread Imbriale, Donald (Exchange)
Check the volume on which the catalog which contains the DSN resides.

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of willie bunter
Sent: Tuesday, January 09, 2007 1:56 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: PATTERN DSCB RECORD

Hallo To All,
   
  A batch job was executed successfully.  The job was creating a gdg
dsn.  I noticed that the jcl did not contain the PATTERN DSCB RECORD.  I
checked the SMS rules but found nothing (SC, MC & DC).  Can anybody tell
me where else I should look?  
   
  Below is a snippet of the jcl:
   
  //IDMSJNLA DD DSN=IFDB31.VARY.JOURNAL(+1),  
//DCB=(RECFM=F,LRECL=19068,BLKSIZE=19068),  
 //UNIT=3480,DISP=(NEW,CATLG,DELETE)

 __



***
Bear Stearns is not responsible for any recommendation, solicitation, 
offer or agreement or any information about any transaction, customer 
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Tim Hare
I would look into FILE-STATUS-CODE in FILE-CONTROL; I believe LE sets a 
value for this case (but don't have my COBOL manuals with me so I can't 
check it out).

Tim Hare
Senior Systems Programmer
Florida Department of Transportation
(850) 414-4209

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Robert Pelletier
Yes.  



CBLQDA will apply to COBOL programs only.  Is your program COBOL?

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Robert Pelletier
Sent: Tuesday, January 09, 2007 1:43 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

This is what I have so will the job run even if there is a missing dd
statement:
 CBLOPTS=((ON),OVR),
 CBLPSHPOP=((ON),OVR),  
 CBLQDA=((OFF),OVR),
 CHECK=((ON),OVR),  
 COUNTRY=((US),OVR),
 DEBUG=((OFF),OVR),  


Have a Nice Day !
 
Bob Pelletier
Connecticut Student Loan Foundation
Rocky Hill, Ct.
  
On Jul 26, 2002, Don Imbriale pointed out,  in response to a similar
query, "LE run-time option CBLQDA(ON) allows dynamic allocation of QSAM
files. 
Check the option to see if you allow it. 




***
Bear Stearns is not responsible for any recommendation, solicitation,
offer or agreement or any information about any transaction, customer
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html



Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: PATTERN DSCB RECORD

2007-01-09 Thread McKown, John
> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:[EMAIL PROTECTED] On Behalf Of willie bunter
> Sent: Tuesday, January 09, 2007 12:56 PM
> To: IBM-MAIN@BAMA.UA.EDU
> Subject: PATTERN DSCB RECORD
> 
> 
> Hallo To All,
>
>   A batch job was executed successfully.  The job was 
> creating a gdg dsn.  I noticed that the jcl did not contain 
> the PATTERN DSCB RECORD.  I checked the SMS rules but found 
> nothing (SC, MC & DC).  Can anybody tell me where else I 
> should look?  
>
>   Below is a snippet of the jcl:
>
>   //IDMSJNLA DD DSN=IFDB31.VARY.JOURNAL(+1),  
> //DCB=(RECFM=F,LRECL=19068,BLKSIZE=19068),
>   
>  //UNIT=3480,DISP=(NEW,CATLG,DELETE)
> 

The DATACLAS assigned to the dataset is often used in stead of the old
"model dscb". The output of the job should show you which DATACLAS was
used. Remember that DATACLAS applies even to nonSMS managed datasets.

Something like:

IGD100I 0626 ALLOCATED TO DDNAME OUTDD
STORCLAS (SCVTAPE2) MGMTCLAS (MCNOMIG) DATACLAS (DCSTD1)

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Imbriale, Donald (Exchange)
CBLQDA will apply to COBOL programs only.  Is your program COBOL?

Don Imbriale

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Robert Pelletier
Sent: Tuesday, January 09, 2007 1:43 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

This is what I have so will the job run even if there is a missing dd
statement:
 CBLOPTS=((ON),OVR),
 CBLPSHPOP=((ON),OVR),  
 CBLQDA=((OFF),OVR),
 CHECK=((ON),OVR),  
 COUNTRY=((US),OVR),
 DEBUG=((OFF),OVR),  


Have a Nice Day !
 
Bob Pelletier
Connecticut Student Loan Foundation
Rocky Hill, Ct.
  
On Jul 26, 2002, Don Imbriale pointed out,  in response to a similar
query, "LE run-time option CBLQDA(ON) allows dynamic allocation of QSAM
files. 
Check the option to see if you allow it. 




***
Bear Stearns is not responsible for any recommendation, solicitation, 
offer or agreement or any information about any transaction, customer 
account or account activity contained in this communication.
***

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


PATTERN DSCB RECORD

2007-01-09 Thread willie bunter
Hallo To All,
   
  A batch job was executed successfully.  The job was creating a gdg dsn.  I 
noticed that the jcl did not contain the PATTERN DSCB RECORD.  I checked the 
SMS rules but found nothing (SC, MC & DC).  Can anybody tell me where else I 
should look?  
   
  Below is a snippet of the jcl:
   
  //IDMSJNLA DD DSN=IFDB31.VARY.JOURNAL(+1),  
//DCB=(RECFM=F,LRECL=19068,BLKSIZE=19068),  
 //UNIT=3480,DISP=(NEW,CATLG,DELETE)

 __
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Robert Pelletier
This is what I have so will the job run even if there is a missing dd
statement:
 CBLOPTS=((ON),OVR),
 CBLPSHPOP=((ON),OVR),  
 CBLQDA=((OFF),OVR),
 CHECK=((ON),OVR),  
 COUNTRY=((US),OVR),
 DEBUG=((OFF),OVR),  


Have a Nice Day !
 
Bob Pelletier
Connecticut Student Loan Foundation
Rocky Hill, Ct.
  
On Jul 26, 2002, Don Imbriale pointed out,  in response to a similar
query, "LE run-time option CBLQDA(ON) allows dynamic allocation of QSAM
files. 
Check the option to see if you allow it. 

Cheers,,,Steve

Steve Conway
Lead Systems Programmer
Information Systems & Services Division
Computer & Network Operations
Phone:   (703) 450-3156
Fax:(703) 450-3197

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html



Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Robert Pelletier
Where would I look for this option? Would you get the message "dd
statement missing" if it was on or off? 



-Original Message-
From: Steven Conway [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, January 09, 2007 12:59 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

  
On Jul 26, 2002, Don Imbriale pointed out,  in response to a similar
query, "LE run-time option CBLQDA(ON) allows dynamic allocation of QSAM
files. 
Check the option to see if you allow it. 

Cheers,,,Steve

Steve Conway
Lead Systems Programmer
Information Systems & Services Division
Computer & Network Operations
Phone:   (703) 450-3156
Fax:(703) 450-3197

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html



Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Anne & Lynn Wheeler

Rick Fochtman wrote:
The nature of our business was such that we handled large amounts of 
other people's money on a daily, and even hourly, basis. When I started 
there, in 1981, I was told that we processed enough money in a week to 
pay the National Debt. Needless to say, security and employee integrity 
were incredibly important aspects in running the business. Nobody who 
couldn't be bonded was even considered for employment. Any kind of 
criminal record, other than traffic violations, was also a "career 
limiting factor". Even downloading a file to a diskette was forbidden 
except with management approval; and the actual download was done by the 
Security staff!


previous post:
http://www.garlic.com/~lynn/2007b.html#6 Special characters in passwords

when we were working on the stuff that has since come to be called e-commerce
http://www.garlic.com/~lynn/aadsm5.htm#asrn2
http://www.garlic.com/~lynn/aadsm5.htm#asrn3

one of the things we tried to specify was FBI background checks on all 
employees of merchant e-commerce business ... it never happened. a few old 
references:
http://www.garlic.com/~lynn/aadsm6.htm#terror3 [FYI] Did Encryption Empower 
These Terrorists?
http://www.garlic.com/~lynn/aadsm21.htm#34 X.509 / PKI, PGP, and IBE Secure 
Email Technologies
http://www.garlic.com/~lynn/aadsm22.htm#18 "doing the CA statement shuffle" and 
other dances
http://www.garlic.com/~lynn/2001j.html#5 E-commerce security
http://www.garlic.com/~lynn/2001j.html#54 Does "Strong Security" Mean Anything?
http://www.garlic.com/~lynn/2005v.html#4 ABN Tape - Found
http://www.garlic.com/~lynn/2006.html#33 The new High Assurance SSL Certificates
http://www.garlic.com/~lynn/2006d.html#28 Caller ID "spoofing"
http://www.garlic.com/~lynn/2006d.html#30 Caller ID "spoofing"

now, one of the things that should be done is an end-to-end threat analysis ... 
and then you define your security countermeasures to the analyzed threats ... 
slightly related blog discussion:
http://www.garlic.com/~lynn/aadsm26.htm#9 Who has a Core Competency in Security?
http://www.garlic.com/~lynn/aadsm26.htm#10 Who has a Core Competency in 
Security?
http://www.garlic.com/~lynn/aadsm26.htm#12 Who has a Core Competency in 
Security?
http://www.garlic.com/~lynn/aadsm26.htm#13 Who has a Core Competency in 
Security?
http://www.garlic.com/~lynn/aadsm26.htm#14 Who has a Core Competency in 
Security?

part of the threat analysis is understanding the magnitude of the threat ... so 
that
it is possible to design security proportional to the risk ... old e-commerce 
risk
magnitude analysis
http://www.garlic.com/~lynn/2001h.html#61

now, you can have all sort of vulnerabilities and exploits ... when there has 
been
inadequate analysis of the end-to-end threats ... and possibly only concentrate
on a single (or at most a few) *point* countermeasures (w/o actually having done
the end-to-end threat analysis)
http://www.garlic.com/~lynn/aadsm25.htm#20

recent post about this scenario involving the "yes card" exploits:
http://www.garlic.com/~lynn/aadsm26.htm#21

lots of "yes card" past posts
http://www.garlic.com/~lynn/subintegrity.html#yescard

and, of course, one of the major issues has always been "insider threats" ... 
which typically have always been considered larger risk than outsider attacks ... recent 
posts including
some statistics on insider threats:
http://www.garlic.com/~lynn/aadsm26.htm#7 
http://www.garlic.com/~lynn/aadsm26.htm#11


reference to old event involving internet box for the largest online service 
provider (at the time)
http://www.garlic.com/~lynn/aadsm26.htm#17 Changing the Mantra -- RFC 4732 on 
rethinking DOS

part of the issue was that this specific problem went on for two months while they had a 
large number of "experts" come in to look at the problem. When they came to us 
(after two months), it was readily apparent ... in part because we had earlier done 
detailed vulnerability and threat analysis as part of turning out ha/cmp product
http://www.garlic.com/~lynn/subtopic.html#hacmp

a more recent issue in the press is a lot of the data breaches and security 
breaches ... especially involving account numbers ... recent post outline 
diametrically opposing requirements for account numbers (post that looks at 
this threat as well as several others)
http://www.garlic.com/~lynn/2006v.html#49
http://www.garlic.com/~lynn/aadsm26.htm#8

and that even if the planet was buried under miles of information hiding 
encryption, it still wouldn't stop account number leakage
ttp://www.garlic.com/~lynn/aadsm25.htm#24 DDA cards may address the UK Chip&Pin 
woes
http://www.garlic.com/~lynn/2005v.html#2 ABN Tape - Found
http://www.garlic.com/~lynn/2006e.html#44 Does the Data Protection Act of 2005 
Make Sense
http://www.garlic.com/~lynn/2006k.html#5 Value of an old IBM PS/2 CL57 SX Laptop
http://www.garlic.com/~lynn/2006k.html#18 Value of an old IBM PS/2 CL57 SX 
Laptop
http://www.garlic.com/~lynn/2006y.html#8 Securing financial transactions a

Mainframe vs. "Server" (Was Just another example of mainframe costs.)

2007-01-09 Thread Charles Mills
Pet peeve. Saying mainframes versus servers is like saying Fords versus
cars. A mainframe typically IS a server (often among other roles). The first
definition Google comes up with for server is "A computer that delivers
information and software to other computers linked by a network." I would
quibble with that definition (server is also used to describe software) but
it certainly fits most mainframes. IBM lists "System Z" under Servers on
their home page so I think IBM agrees with this theory.

If we mean "**ix and Windows boxes" or "non-mainframe boxes" then let's say
that.

I'm not just quibbling over semantics. When I read "vendors are promoting
server solutions" I get a totally different image in my mind versus that
which I get when I read "vendors are promoting **ix and Windows solutions."

While I'm here, I don't think non-mainframe platforms are inherently more
profitable for software vendors. Indeed, the traditional mainframe software
vendors have struggled trying to achieve the same profitability with their
"other box" offerings. Non-mainframe platforms are attractive and profitable
for software vendors because that is where BOD and CIO focus is.

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Bill Richter
Sent: Tuesday, January 09, 2007 7:09 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Just another example of mainframe costs.

Many hardware and software vendors maximize profits by promoting server 
solutions verus mainframe.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Steven Conway
  
On Jul 26, 2002, Don Imbriale pointed out,  in response to a similar 
query, "LE run-time option CBLQDA(ON) allows dynamic allocation of QSAM 
files. 
Check the option to see if you allow it. 

Cheers,,,Steve

Steve Conway
Lead Systems Programmer
Information Systems & Services Division
Computer & Network Operations
Phone:   (703) 450-3156
Fax:(703) 450-3197

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread David Andrews
On Tue, 2007-01-09 at 12:09 -0500, Robert Pelletier wrote:
> Can anyone tell me how to cause an abend when the above
> condition occurs?

I'd probably SVC-screen WTO, presuming that you can wrap the offending
program with a mother task.  Failing that, you can front-end WTO at the
system level.

Others have suggested ABENDing from within the SSI, but I'm not sure
that's a good idea.  By then you're inside WTO rather than OPEN.

-- 
David Andrews
A. Duda and Sons, Inc.
[EMAIL PROTECTED]

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Binyamin Dissen
On Tue, 9 Jan 2007 12:09:20 -0500 Robert Pelletier <[EMAIL PROTECTED]>
wrote:

:> Hi all. Can anyone tell me how to cause an abend when the above
:>condition occurs? Thanks all.

MPF exit?

Do you have access to the source?

But - why do you want to cause an abend? Since the program causing the message
did not abend, it is obviously able to handle the case of the missing DD
statement. If it did not, it would have gotten an 0C1 when trying to read or
write a record (Q/BSAM).

--
Binyamin Dissen <[EMAIL PROTECTED]>
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Howard Brazee
On 9 Jan 2007 07:39:00 -0800, [EMAIL PROTECTED] (Schramm, Rob)
wrote:

>Bruce Schneier has argued that encryption and passwords are only tools
>like anything else.  Most of the real problems come with the people who
>are trained or not trained in more "secure" mindset. 

Remember that they are tools, not the product.   They are relatively
easy to implement - but they are not doing the job well.

We can make better and better hammers to break a board in two - or we
can invent a saw.But we know how to make hammers and we have the
materials and infrastructure for hammers, so we try to make our
carpenters experts at breaking a board with a hammer.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Storage ROTs

2007-01-09 Thread Mark Zelden
On Tue, 9 Jan 2007 07:26:24 -0800, Walter Marguccio
<[EMAIL PROTECTED]> wrote:

>- Original Message 
>From: Mark Zelden <[EMAIL PROTECTED]>
>
>> There's over allocating and then there is OVER ALLOCATING.
>
>Having about 70% of storage frames available, I'd say we are over allocated
>(lower case). What is the % of frames available on your systems?
>

It depends on the time of day.  Looking at one of our
largest LPARs  ( > 50G), I see about 20% of the frames
available at the moment but I did see some demand paging
and the local page dsns (13) are about 15% utilized. But it's
still early in the day (local time) on that LPAR.  I don't
think I want to check all the production LPARs.   :-)

We tend not to add memory unless there is a need.

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - GITO
mailto:[EMAIL PROTECTED]
z/OS and OS390 expert at http://searchDataCenter.com/ateExperts/
Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread McKown, John
> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:[EMAIL PROTECTED] On Behalf Of Robert Pelletier
> Sent: Tuesday, January 09, 2007 11:09 AM
> To: IBM-MAIN@BAMA.UA.EDU
> Subject: JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING
> 
> 
>  Hi all. Can anyone tell me how to cause an abend when the above
> condition occurs? Thanks all.
> 
> 
> Have a Nice Day !
>  
> Bob Pelletier

If you mean "in general, regardless of what program is running", then I
don't know of any way. In fact, some programs are written so that some
DD statements are totally optional. So if you could "hook" open to cause
an abend due to "dd statement not found", then they would incorrectly
abend.

Now, if it is your program, then simply check to see if the DD opened
and issue an ABEND macro if it did not. I'd likely do this by checking
R15 upon return from the OPEN macro. Another way is to check some bits
in the DCB (I forget which ones off-hand).

Of course, you could "trap" the message using your automated operator
and issue a CANCEL command to the job which got the message. That is an
abend. But likely not what you would want because it is irrecoverable.

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Just another example of mainframe costs.

2007-01-09 Thread Shmuel Metz (Seymour J.)
In <[EMAIL PROTECTED]>, on 01/07/2007
   at 08:18 PM, Ed Gould <[EMAIL PROTECTED]> said:

>Never heard of it so I guess it, that doesn't mean it never existed  
>just an extremely small audience.

Perhaps, but that doesn't address the question of why IBM would have
bothered had the 3838 been such a flop.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


JOB07040 IEC130I SLFVDDIL DD STATEMENT MISSING

2007-01-09 Thread Robert Pelletier
 Hi all. Can anyone tell me how to cause an abend when the above
condition occurs? Thanks all.


Have a Nice Day !
 
Bob Pelletier
Connecticut Student Loan Foundation
Rocky Hill, Ct.


Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Steve Comstock

Al Sherkow wrote:
IBM announced zNALC today (http://ibm.com/systems/z/) though some of the 
links are not working. This allows NALC pricing for z/OS in an LPAR 
rather than a dedicated machine without some restrictions, but less than 
earlier NALC offerings




So I read that as "customers moving to or running newer
stuff get in cheap; customers running COBOL apps get to
continue paying the higher prices." Is that about right?
Or did my cynical switch kick in again too soon?

Is this a harbinger of simply getting rid of z/OS.e and
just using regular z/OS and pricing subsets of work at
lower rates? Maybe not so bad.


Kind regards,

-Steve Comstock

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: PARM= C compiler Options

2007-01-09 Thread Shmuel Metz (Seymour J.)
In <[EMAIL PROTECTED]>, on 01/07/2007
   at 11:23 AM, Paul Gilmartin <[EMAIL PROTECTED]> said:

>It was explained to me on this list many months ago that instream
>data are stripped out of the JCL stream early in conversion, perhaps
>in a separate pass, before much other parsing is done.

Not even early in conversion; JES2 and JES3 handle instream data well
before they call the Converter.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


So, OK, no more promotions from me - after this one

2007-01-09 Thread Steve Comstock

Recently I got a post on the ISPF list objecting to my
posting announcements of new courses and offerings on
the list.

In response, I've gotten a number of emails both on- and
off-list from people who say they don't mind seeing my announcements 
from time to time. As well as a few who say

they agree with the objections to my doing this.

At the same time, I understand and respect the tradition
of usenets and listservs being mostly promotion-free
forums for the exchanging of ideas.

So one idea someone suggested was to build an opt-in
list of people who wish to be kept current on courses
and other offerings we have available. So if anyone else is
interested in being on my opt-in list, let me know.

(Aside from Rob, Amy, John K., John McK., and Bob H.)

And I promise I will stop posting promotion-only emails
from now on. (I consider a sly pointer to a relevant course
as part of answering a question to be OK).


Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.
http://www.trainersfriend.com
[EMAIL PROTECTED]

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


zNALC in an LPAR and z/VSE V4 Sub-Capacity Pricing

2007-01-09 Thread Al Sherkow
IBM announced zNALC today (http://ibm.com/systems/z/) though some of the 
links are not working. This allows NALC pricing for z/OS in an LPAR 
rather than a dedicated machine without some restrictions, but less than 
earlier NALC offerings


Also z/VSE V4.1 with sub-capacity pricing.

Al

--
Al Sherkow, I/S Management Strategies, Ltd.
Consulting Expertise on Capacity Planning, Performance Tuning,
WLC, LPARs, IRD and LCS Software
Seminars on IBM SW Pricing, LPARs, and IRD
Voice: +1 414 332-3062 
Web: www.sherkow.com


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Sharing OSA in QDIO mode - TRLE question

2007-01-09 Thread Pat Schlehuber
Chris, 

I had the issue on a z890 running z/OS 1.5. Sounds like it matches what you 
wrote from the docs:



>
>z/OS, VSE/ESA, and TPF require a port name, which must be the same when the
>OSA port is shared with the same operating system in different images or in
>a mixed OS environment. In addition, the port name must match the device
>name.
>

I definately had to make the PORTNAME exactly the same on all the LPARs 
sharing this OSA.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: special characters in passwords

2007-01-09 Thread Binyamin Dissen
On Tue, 9 Jan 2007 11:00:18 -0500 Gerhard Postpischil <[EMAIL PROTECTED]>
wrote:

:>Chase, John wrote:
:>> I believe chess, go, etc., would be exceptions to that observation
:>> because the players cannot "conceal" any part of their positions.  TMK
:>> the result of perfect play by both players at chess has not been
:>> determined.

:>But it is possible for a good player, who can afford to give up 
:>one move, to make a "senseless" one to throw the opponent off 
:>track. And sometimes this "senseless" move turns out to be a key 
:>play ten moves down the line.

Perhaps you are referring to a "waiting move"?

That happens when the opponent does not have any good next move and you have
the ability to make a "useless" move that does not give them any more options.

Often done in pawn end games.

--
Binyamin Dissen <[EMAIL PROTECTED]>
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Just another example of mainframe costs.

2007-01-09 Thread Steve Comstock

Rick Fochtman wrote:

--
Sigh... no it wasn't I have just plain forgotten his name. All I can  
tell was that he was not of American heritage. I had heard he left  the 
company and was doing consultant type work (and that is NOT why I  
posted the earlier sysprog entry). This was 30 or so years ago. I too  
showed him in the dump the offending instruction and that one o the  
fields was corrupted. It was just plain that he wanted NOT to do his  
job and pawn the responsibility off to some one else.


This happened in Chicago in the early 70's .
-
The first time I made a system upgrade at my last job, I was told that 
my new system had caused production data to be corrupted to where a S0C7 
was caused in a long-standing accounting system. The language of my 
comments caused the phone to melt right out of the programmer's hand!


The following morning I showed him how to use ICETOOL to find the 
offending data field and back-track it to the source.


My technical reputation got a boost; unfortunately, so did my "grouch 
factor". :-)


Yeah, ya' gotta' watch the impact of the "grouch factor", as
I've learned. So from now on it's all smiles and laughs for
me. You betcha.


Kind regards,

-Steve Comstock

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: special characters in passwords

2007-01-09 Thread Gerhard Postpischil

Chase, John wrote:

I believe chess, go, etc., would be exceptions to that observation
because the players cannot "conceal" any part of their positions.  TMK
the result of perfect play by both players at chess has not been
determined.


But it is possible for a good player, who can afford to give up 
one move, to make a "senseless" one to throw the opponent off 
track. And sometimes this "senseless" move turns out to be a key 
play ten moves down the line.



Gerhard Postpischil
Bradford, VT

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Just another example of mainframe costs.

2007-01-09 Thread Rick Fochtman

--
Sigh... no it wasn't I have just plain forgotten his name. All I can  
tell was that he was not of American heritage. I had heard he left  the 
company and was doing consultant type work (and that is NOT why I  
posted the earlier sysprog entry). This was 30 or so years ago. I too  
showed him in the dump the offending instruction and that one o the  
fields was corrupted. It was just plain that he wanted NOT to do his  
job and pawn the responsibility off to some one else.


This happened in Chicago in the early 70's .
-
The first time I made a system upgrade at my last job, I was told that 
my new system had caused production data to be corrupted to where a S0C7 
was caused in a long-standing accounting system. The language of my 
comments caused the phone to melt right out of the programmer's hand!


The following morning I showed him how to use ICETOOL to find the 
offending data field and back-track it to the source.


My technical reputation got a boost; unfortunately, so did my "grouch 
factor". :-)


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Rick Fochtman

--
Or, someone will write a Rexx program that generates conforming 
passwords using some simple (and predictable) algorithm.  Eventually 
everyone ends up using the same "strong" password.  :-)


I've never understood why security administrators are so fond of 
dreaming up password rules that only serve to reduce the domain of 
acceptable passwords, thereby making them *easier* to crack rather than 
harder.


I think we had a pretty good set of rules:

1. Had to be 6-8 characters (enforced via RACF)

2. Could not be anagram of the userid (enforced by RACF exit)

3. Could not start or end with a single numeric; had to be at least 2 
numerics if ANY numerics were to start or end the password. (enforced by 
RACF exit)


4. JOB statements with passwords present were automatically refused as a 
JCL error. (enforced by JES2 exit)


And managers would walk around at random times just looking for 
passwords written on Post-It's; guilty parties were warned and faced 
suspension or termination for repeat occurences. Having a "single 
signon" product helped immensely by reducing the number of passwords a 
user needed to remember.


The nature of our business was such that we handled large amounts of 
other people's money on a daily, and even hourly, basis. When I started 
there, in 1981, I was told that we processed enough money in a week to 
pay the National Debt. Needless to say, security and employee integrity 
were incredibly important aspects in running the business. Nobody who 
couldn't be bonded was even considered for employment. Any kind of 
criminal record, other than traffic violations, was also a "career 
limiting factor". Even downloading a file to a diskette was forbidden 
except with management approval; and the actual download was done by the 
Security staff!


Passwords are a very important part of security, but a comprehensive 
security plan covers much more ground than just passwords. How many 
shops use copies of production data for testing of new 
applications/systems? How carefully are production datasets and 
databases secured? What about physical security? Locks and keys? Who has 
keys, and to what? Are accesses to the offices logged? Are you watching 
who carries what into and out of the office space? Password management 
is an important part of security, but it isn't a comprehensive security 
plan.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Schramm, Rob
Bruce Schneier has argued that encryption and passwords are only tools
like anything else.  Most of the real problems come with the people who
are trained or not trained in more "secure" mindset. 

I am an advocate for some password rules.  
Too many rules:
* start to eliminate possibilities.. meaning it becomes easier to "try"
knowing the format.
* makes it needlessly difficult on the users.. who you want to be on
"your side" to be effective.

Too few rules:
* "" is just too easy... "MONDAY" isn't much better.
* and "A" is bordering on the criminal

Luckily, any mainframe shop worth anything is going to have password
violation rules probably in the 3 - 6 tries and "your account is
suspended/locked".  Which takes care of the brute force methods of
cracking passwords.  Hopefully, everyone has fairly good controls
surrounding the security data base to avoid scenerios like Walt
described.  

Of course most of the integrated shops should have similar controls on
the WinTel and Unix side as well.

But advocating strong education within your organization for
security/risk consciousness is some of the most effective effort that
can be done.

Don't get me wrong, technology around security is a lot of fun.  But the
only truly secure system is one that no one uses.

Rob Schramm


This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Anne & Lynn Wheeler

[EMAIL PROTECTED] (Arthur T.) writes:

 You pick ease over security.  At my old shop, we had several
RACF-protected systems plus one VM system that held the password
unencrypted.  Most people used the same password on all, making them
none of them secure.  Many people also used the same password on a
client's system which also kept the passwords unencrypted; that let
the password totally out of the company.  I also found that NDM let
remote sites find your password; if that was a multi-use password,
you've compromised yourself everywhere.


the issue isn't so much that none of them were secure ... 


there is the issue that passwords are shared secrets ... and the same
value that is used to authenticate/verify ... is also used to
originate.  the recommendation for unique shared secret (password,
pin, etc) for each unique security domain is countermeasure to
cross-domain security attacks (i.e. local garage isp attacking you
place of business or online banking).
http://www.garlic.com/~lynn/subintegrity.html#secrets

there is somewhat separate issue of making the passwords hard to guess
(and therefor hard to remember) and changing them frequently (making
them even harder to remember), in addition to having unique ones for
every security domain (having scores of things that are impossible to
remember).

old april first corporate directive on passwords from 1984
http://www.garlic.com/~lynn/2001d.html#52 OT Re: A beautiful morning in AFM.
http://www.garlic.com/~lynn/2001d.html#53 April Fools Day

some even tried to blame me ... but it had originated in POK and I
only distributed it local ... I didn't print it on corporate
letterhead, placing them around plant site corporate bulletin boards
over the weekend.

one of the justification for public key is that the value used for
verification (of digital signature) is not the same that is used to
originate (the digital signature). that eliminates needing to have
unique public key for every security domain (as countermeasure to
cross-domain attacks).

reference to old public key proposal from 1981
http://www.garlic.com/~lynn/2006w.html#12 more secure communication over the 
network

some recent related (security) topic drift
http://www.garlic.com/~lynn/2007.html#0 Securing financial transactions a high 
priority for 2007
http://www.garlic.com/~lynn/aadsm26.htm#18 SSL (https, really) acceleators for 
Linux/Apache?
http://www.garlic.com/~lynn/aadsm26.htm#20 Tamperproof, yet playing Tetris

lots of past posts on threats, vulnerabilities, exploits, fraud, etc
http://www.garlic.com/~lynn/subintegrity.html#fraud

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Storage ROTs

2007-01-09 Thread Walter Marguccio
- Original Message 
From: Mark Zelden <[EMAIL PROTECTED]>

> There's over allocating and then there is OVER ALLOCATING. 

Having about 70% of storage frames available, I'd say we are over allocated 
(lower case). What is the % of frames available on your systems?

Cheers.

Walter Marguccio
z/OS Systems Programmer
Munich - Germany

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Nigel Hadfield
Or you could make the rules so complex that there is only one valid
password.

Nigel


On 9/1/07 15:11, "Ted MacNEIL" <[EMAIL PROTECTED]> wrote:

>> Why don't they use single sign-on and passtickets?  Also, the fact that they
>> pander to what people want doesn't make "what people want" good.
> 
> What people want is to be able to sign on easily, and not have to call
> somebody because the rules make it difficult to remember passwords.
> 
> This kind of cr*p is what make IT difficult to the business (the people we are
> here to serve; not the other way around).
> 
> Have you ever seen somebody try to manage their sign-ons in 'over-secure'
> sites?
> I have! It isn't pretty!
> 
> No wonder people start using sticky notes.
> Instead of carping about what they should be doing, let's attempt the unique.
> Let's make it easy to use a secure system, rather than insisting on difficult
> to use rules.
> 
> A minimum length (6+).
> A maximum period before you have to change.
> An "N" strikes rule.
> 
> Let's see a dictionary attack get through that!
> 
>   
> Yaw tee pucketty!
> Rum ting clue!
> Ni! Ni! Ni!
> Arrooo!  
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JES2 OFFLOAD CART

2007-01-09 Thread Robert Pelletier
I caught that one. Thanks again. 


Have a Nice Day !
 
Bob Pelletier
Connecticut Student Loan Foundation
Rocky Hill, Ct.
-Original Message-
From: Mark Zelden [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, January 09, 2007 10:05 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: JES2 OFFLOAD CART

On Tue, 9 Jan 2007 09:29:40 -0500, Robert Pelletier
<[EMAIL PROTECTED]>
wrote:

>Thanks to you and Lizette and all. Your suggestions worked and saved us
>:)

You're welcome.  Just for the record, I just realized my DEFINE example
below wouldn't work since there is no generic for 3590.  This would
work:

DEF  NVSAM(NAME(SYS1.JES2.OFFLOAD.TAPE) -
DEVT(3590-1) -
FSEQN(1)   -
VOL(123456))


>
>I hope you are just asking if there is
>a way to reload an uncataloged tape.   If so, the answer is no but
>you can easily re-catalog the tape and then issue the appropriate $T 
>OFFLOAD commands to use it.
>
>You can use IEFBR14 or IDCAMS DEFINE NONVSAM.
>
>DEF  NVSAM(NAME(SYS1.JES2.OFFLOAD.TAPE) -
>   DEVT(3590) -
>   FSEQN(1)   -
>   VOL(123456))

>

Mark
--

Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead Zurich North America
/ Farmers Insurance Group - GITO mailto:[EMAIL PROTECTED] z/OS
and OS390 expert at http://searchDataCenter.com/ateExperts/
Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html



Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Howard Brazee
On 8 Jan 2007 17:25:55 -0800, [EMAIL PROTECTED] (Arthur T.) wrote:

>  BTW, respected security experts have started saying 
>that you *should* write down your passwords.  With the 
>number of different passwords the average worker needs, the 
>workers will either:
>
>1.  choose the same password for multiple applications (a 
>definite no-no); or
>
>2.  choose weak, but memorable passwords (another no-no); 
>or
>
>3.  forget their passwords; or
>
>4.  write their passwords.

Which is why the technology needs to go beyond passwords.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Just another example of mainframe costs.

2007-01-09 Thread Bill Richter
Many hardware and software vendors maximize profits by promoting server 
solutions verus mainframe.

SAS is an interesting software vendor to extend this inquiry to.  Does SAS 
maximize profits by not licensing their products to Linux for zSeries?

On the hardware side, do DASD vendors maximize profits by promoting server 
solutions where there is a lack of hierarchical storage management versus 
mainframe.

In both cases I believe profits are maximized by promoting server solutions.
If true, then part of the mainframe cost dilemma is mainframe solutions are 
not as profitable for hardware and software vendors and therefore they will 
promote the server solution.

FYIW.

Bill

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Ted MacNEIL
>Why don't they use single sign-on and passtickets?  Also, the fact that they 
>pander to what people want doesn't make "what people want" good.

What people want is to be able to sign on easily, and not have to call somebody 
because the rules make it difficult to remember passwords.

This kind of cr*p is what make IT difficult to the business (the people we are 
here to serve; not the other way around).

Have you ever seen somebody try to manage their sign-ons in 'over-secure' sites?
I have! It isn't pretty!

No wonder people start using sticky notes.
Instead of carping about what they should be doing, let's attempt the unique.
Let's make it easy to use a secure system, rather than insisting on difficult 
to use rules.

A minimum length (6+).
A maximum period before you have to change.
An "N" strikes rule.

Let's see a dictionary attack get through that!

  
Yaw tee pucketty!
Rum ting clue!
Ni! Ni! Ni!
Arrooo!  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JES2 OFFLOAD CART

2007-01-09 Thread Mark Zelden
On Tue, 9 Jan 2007 09:29:40 -0500, Robert Pelletier <[EMAIL PROTECTED]>
wrote:

>Thanks to you and Lizette and all. Your suggestions worked and saved us
>:)

You're welcome.  Just for the record, I just realized my DEFINE example
below wouldn't work since there is no generic for 3590.  This would
work:

DEF  NVSAM(NAME(SYS1.JES2.OFFLOAD.TAPE) -
DEVT(3590-1) -
FSEQN(1)   -
VOL(123456))


>
>I hope you are just asking if there is
>a way to reload an uncataloged tape.   If so, the answer is no but
>you can easily re-catalog the tape and then issue the appropriate
>$T OFFLOAD commands to use it.
>
>You can use IEFBR14 or IDCAMS DEFINE NONVSAM.
>
>DEF  NVSAM(NAME(SYS1.JES2.OFFLOAD.TAPE) -
>   DEVT(3590) -
>   FSEQN(1)   -
>   VOL(123456))

>

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - GITO
mailto:[EMAIL PROTECTED]
z/OS and OS390 expert at http://searchDataCenter.com/ateExperts/
Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: special characters in passwords

2007-01-09 Thread Ted MacNEIL
>If you have no password rules, most people will pick 
a simple word.  If you require at least one digit, most 
people will put it at the beginning or end.  Both are easy prey to dictionary 
attacks.

FUD!
Pick a minimum length.
Allow anything and an "N"-Strikes rule.

The dictionary attack dies after "N" attempts.

  
Yaw tee pucketty!
Rum ting clue!
Ni! Ni! Ni!
Arrooo!  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Arthur T.
On 9 Jan 2007 05:41:41 -0800, in bit.listserv.ibm-main 
(Message-ID:<[EMAIL PROTECTED]>) 
[EMAIL PROTECTED] (Ted MacNEIL) wrote:


1.  choose the same password for multiple applications (a 
definite no-no);


In your 'expert' opinion?


 No, true experts' opinions.  See, for instance:
http://netsecurity.about.com/cs/generalsecurity/a/aa112103b.htm

http://www.popularmechanics.com/technology/how_to/4199876.html 
has text:


'"I raised the issue with Bruce Schneier of Counterpane 
Internet Security. "It's a question about what you trust 
more," he says. "Personally, I secure my computer from 
others so I store most of my passwords on my PC. And for 
logins on high-security Web sites such as those of banks 
and credit card companies, I don't use the same password 
twice because I don't want the compromise of one to affect 
them all." Whatever you choose, Schneier offers this easy 
way to short-circuit snoops: "If you don't want to store 
passwords on your PC, write them down. We already have a 
protocol for storing small, valuable pieces of paper: a 
wallet."'


 There are many other cites.  I chose my search with 
Schneier's name as he's a well-known, trusted security 
expert.


Packages like P-Synch, and Vanguard's password 
administrator depend on/work with that.


Session Managers (TPX, SuperSession) work with it, too.


 Why don't they use single sign-on and 
passtickets?  Also, the fact that they pander to what 
people want doesn't make "what people want" good.


I'd rather have a single password, than write them down, 
or store them.


 You pick ease over security.  At my old shop, we had 
several RACF-protected systems plus one VM system that held 
the password unencrypted.  Most people used the same 
password on all, making them none of them secure.  Many 
people also used the same password on a client's system 
which also kept the passwords unencrypted; that let the 
password totally out of the company.  I also found that NDM 
let remote sites find your password; if that was a 
multi-use password, you've compromised yourself everywhere.


All these rules make it very difficult to come up with a 
new one.

It took me 20 minutes to create one on one site.
(Of course, in this case, it wouldn't tell me what rules 
it was using; I had to guess).


 I've run into that, too.  On one system, I was told 
to use something like my userid followed by a digit and 
another letter.  It was the only pattern that people had 
found to work.  Obviously, too small a password space.



--
I cannot receive mail at the address this was sent from.
To reply directly, send to ar23hur "at" intergate "dot" com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JES2 OFFLOAD CART

2007-01-09 Thread Robert Pelletier
Thanks to you and Lizette and all. Your suggestions worked and saved us
:) 


Have a Nice Day !
 
Bob Pelletier
Connecticut Student Loan Foundation
Rocky Hill, Ct.

-Original Message-
From: Mark Zelden [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 08, 2007 3:40 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: JES2 OFFLOAD CART

On Mon, 8 Jan 2007 14:43:20 -0500, Robert Pelletier
<[EMAIL PROTECTED]>
wrote:

>Happy New Year to the Group. Would anyone know if there is a way to 
>reload a JES2 offload cart after it has expired from the JES2 catalog 
>feature? User needs reports from over a month ago and cart has NOT been

>overwritten.Thanks all.
>
>

The JES2 catalog feature?   I hope you are just asking if there is 
a way to reload an uncataloged tape.   If so, the answer is no but
you can easily re-catalog the tape and then issue the appropriate
$T OFFLOAD commands to use it.   

You can use IEFBR14 or IDCAMS DEFINE NONVSAM.


DEF  NVSAM(NAME(SYS1.JES2.OFFLOAD.TAPE) -
   DEVT(3590) -  
   FSEQN(1)   -  
   VOL(123456))


Mark
--

Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead Zurich North America
/ Farmers Insurance Group - GITO mailto:[EMAIL PROTECTED] z/OS
and OS390 expert at http://searchDataCenter.com/ateExperts/
Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

  

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html



Confidentiality Notice
 
Unless expressly stated otherwise, this message is confidential and may be 
privileged.  It is intended for the addressee(s) only.   Access to this e-mail 
by anyone else is unauthorized.  If you are not an addressee, any disclosure or 
copying of the contents of this e-mail or any action taken (or not taken) in 
reliance on it is unauthorized and may be unlawful.   If you are not an 
addressee, please inform the sender immediately and delete this message from 
your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: special characters in passwords

2007-01-09 Thread Arthur T.
On 8 Jan 2007 19:15:46 -0800, in bit.listserv.ibm-main 
(Message-ID:<[EMAIL PROTECTED]>) 
[EMAIL PROTECTED] (Paul Gilmartin) wrote:



By using password rules, rather than choosing randomly, I
defend myself against an intruder who counts on my biasing
my choice toward passwords that violate the rules, at the
cost of increased vulnerability to an intruder who counts
on my obeying the rules.


 If you have no password rules, most people will pick 
a simple word.  If you require at least one digit, most 
people will put it at the beginning or end.  Both are easy 
prey to dictionary attacks.


 If you require a digit in the middle of the password, 
you've complicated the makeup of the dictionary, and 
increased its size.  (Some people will throw a digit into 
the middle of a word and some will throw it in between two 
shorter words.  Of course, there are always a few who pick 
good passwords, regardless of the rules.)


 With a domain of only about 5*(10**12) passwords, you 
can't keep out a determined intruder, but you can 
inconvenience him.  (Lockout after too many bad passwords, 
and auditing password failures will help you.)  The idea is 
to make things sufficiently difficult that the intruder 
will try elsewhere.


 Note that RACF is more secure than many other systems 
with a similarly small password space.  With some systems, 
you can create a dictionary of all encrypted passwords and 
compare them to the password file (if you can get your 
hands on it).  That doesn't work with RACF because the 
password is not encrypted; the password is used as a key to 
encrypt the userid.  Thus, brute force is required on each 
userid to be cracked, rather than once for all userids.


 Note:  I am not a security professional, but I have 
played one at some of my previous jobs.  (My favorite 
variation on that is "I'm not an actor, but I play one on 
TV.")


--
I cannot receive mail at the address this was sent from.
To reply directly, send to ar23hur "at" intergate "dot" com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Passwordrules.

2007-01-09 Thread Paul Gilmartin
In a recent note, Walt Farrell said:

> Date: Tue, 9 Jan 2007 08:01:11 -0500
> 
> The major exposure, I believe, is if someone gets physical access to the
>   database that contains the passwords, even if they're encrypted, and
> performs an off-line, brute-force attack.  In that case, with
> 8-character passwords you have a problem, and only longer passwords (or
> password phrases, as z/OS R8 has started to support) or some
> non-password-based authentication mechanism can solve that problem.
> 
Does RACF store the entire password phrase (encrypted)? or a hash
value?  In either case, how many bits maximum?

-- gil
-- 
StorageTek
INFORMATION made POWERFUL

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JCL to determine how dset was deleted is needed.

2007-01-09 Thread Knutson, Sam
Hi Carol,

DAF reads a variety of SMF Records and reports the results and can
answer a question about who deleted a data set.

Dataset Audit Facility (DAF) most current

http://www.geocities.com/michaeljosephcleary/

http://www.cbttape.org/ftp/updates/CBT094.zip

http://www.cbttape.org/updates.htm

http://www.cbttape.org

Best Regards,

Sam Knutson, GEICO
Performance and Availability Management
(office) 301.986.3574

If you tell the truth, you don't have to remember anything.

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Carol Srna
Sent: Tuesday, January 09, 2007 8:05 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: JCL to determine how dset was deleted is needed.

Hello All.  Can someone share with me JCL to determine how a dataset was
deleted?
TIA

This email/fax message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution of this
email/fax is prohibited. If you are not the intended recipient, please
destroy all paper and electronic copies of the original message.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JCL to determine how dset was deleted is needed.

2007-01-09 Thread Carol Srna
Thank You Roberto.  I will try that.  Carol.




Roberto Halais <[EMAIL PROTECTED]> 
Sent by: IBM Mainframe Discussion List 
01/09/2007 08:13 AM
Please respond to
IBM Mainframe Discussion List 


To
IBM-MAIN@BAMA.UA.EDU
cc

Subject
Re: JCL to determine how dset was deleted is needed.






I think in CBT TAPE there is a Dataset Audit Facility (DAF) which you can
download and find the info you want.

On 1/9/07, Carol Srna <[EMAIL PROTECTED]> wrote:
>
> Hello All.  Can someone share with me JCL to determine how a dataset was
> deleted?
> TIA
>



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: JCL to determine how dset was deleted is needed.

2007-01-09 Thread Roberto Halais

File # 094 CBT TAPE at www.cbttape.org.



On 1/9/07, Carol Srna <[EMAIL PROTECTED]> wrote:


Hello All.  Can someone share with me JCL to determine how a dataset was
deleted?
TIA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html





--
"I am as you, in you, for you. One as you in all, as all, forever. My call
is your call."

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Special characters in passwords was Re: RACF - Password rules.

2007-01-09 Thread Ted MacNEIL
>1.  choose the same password for multiple applications (a definite no-no);

In your 'expert' opinion?

Packages like P-Synch, and Vanguard's password administrator depend on/work 
with that.

Session Managers (TPX, SuperSession) work with it, too.

I'd rather have a single password, than write them down, or store them.

All these rules make it very difficult to come up with a new one.
It took me 20 minutes to create one on one site.
(Of course, in this case, it wouldn't tell me what rules it was using; I had to 
guess).

We have a "three strikes" policy, with a minimum length. And, that appears to 
be adequate.

We also have 35% of our calls to the help desk as password resets. This was so 
expensive, we out sourced it to Manilla and are now payin 15-20% of the cost.

Additional complexity just raises the price.
  
Yaw tee pucketty!
Rum ting clue!
Ni! Ni! Ni!
Arrooo!  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: special characters in passwords

2007-01-09 Thread Chase, John
> -Original Message-
> From: IBM Mainframe Discussion List On Behalf Of Paul Gilmartin
> 
> [ snip ]
> 
> I had (mis)understood it to mean to bet in such manner as to 
> provide one's opponent with deliberately misleading information.
> But:
> 
>Optimal bluffing also requires that the bluffs must be performed in
>such a manner that opponents cannot tell when a player is bluffing
>or not. ...
> 
> I.e. one's bets should convey no information, neither correct 
> nor misleading.
> 
> And I was largely motivated by the (astonishing) result that 
> in some (most? all?) games of strategy, a perfect player does 
> no better against a very poor opponent than against a 
> opponent who also plays perfectly.

I believe chess, go, etc., would be exceptions to that observation
because the players cannot "conceal" any part of their positions.  TMK
the result of perfect play by both players at chess has not been
determined.

-jc-

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Help - Placement of IGDSMS00

2007-01-09 Thread Binyamin Dissen
On Mon, 8 Jan 2007 15:16:35 -0500 Lizette Koehler <[EMAIL PROTECTED]>
wrote:

:>My brain is not working and my searches have not provided the answer.

:>When specifiying my Subsystem entry for SMS

:>SUBSYS SUBNAME(SMS) INITRTN(IGDSSIIN)
:>INITPARM(',PROMPT=DISPLAY')

:>Is it required for it to be placed in a specific spot in the IEFSSN?  Or can 
it be anywhere? 

:>I have normally seen it specified as First (before any other subsystem)  but 
cannot find my notes that cites it that way.

Someone has already given you the IBM recommendation. But to your question -
the IEFSSN entries are executed in order and the previous INITRTN has to
complete before the next is executed.

--
Binyamin Dissen <[EMAIL PROTECTED]>
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


  1   2   >