Re: LLA for non load modules
Jochen Roehrig jochen.roeh...@baloise.ch wrote in message news:listserv%200812150941220571.0...@bama.ua.edu... Hello everybody, I try to figure out if we could get rid off CA-PMO/QuickFetch and use LLA/VLF more intensively. We are running z/OS V1R8. Right now I am really not sure if LLA just handles load modules or if also fetching from e.g. REXXs/CLIST libraries could be improved by LLA. Manuals just talk about 'module fetch', does this imply 'LOAD module fetch'? Thanx in advance Jochen LLA and VLF are two separate applications. LLA caches direcories of PDS's, any PDS. VLF caches objects, provided to it by others, like LLA caches loadmodules in VLF, TSO caches CLISTs (after stage 1 interpretation) in VLF, CATALOG caches catalog information in VLF etc. etc. Check the different VLF classes for its supporters. Kees. ** For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286 ** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: how to check the msglevel/jobclass after z/os 1.7
On Tue, 16 Dec 2008 18:11:17 +0800, Tommy Tsui tommyt...@gmail.com wrote: Hi all, In z/os 1.9 when I issued the following command /D JOBCLASS(STC) /HASP837 JOBCLASS(STC) /HASP837 JOBCLASS(STC) QAFF=(ANY),XEQCOUNT=(), /HASP837 XEQMEMBER(SYSD)=(MAXIMUM=*, /HASP837 CURRENT=331) how can I display the msglevel?, msgclass? and other information which like z/os 1.7 /D JOBCLASS(STC)? try with ,long $djobclass(stc),long Bruno Sugliani zxnetconsult(at)free(dot)fr http://zxnetconsult.free.fr -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
IBM Red Alert APAR OA27386 Top-Secret or ACF2
Red Alert seems noteworthy for anyone running Top-Secret or ACF2. http://www14.software.ibm.com/webapp/set2/sas/f/redAlerts/20081215.html Partial Release of VSAM Extended Format Data sets on z/OS 1.10 using OEM Security Product, may cause loss of access to data sets due to an error in DADSM Partial Release processing. Description: In z/OS 1.10, when attempting to release space on VSAM extended format data set, an ABEND0C4 may occur in IGG020P1 or IGG020P2. On the subsequent Open, you may receive a message IEC331I, which indicates loss of access to the data set. If this occurs, please open a PMR with IBM and we can help regain access to the data set. APAR OA27386 HIPER DATALOSS has been created to resolve this issue. See the APAR text for additional details Recommended Actions: Apply fix for OA27386. Partial Release is controlled in the DFSMS Management Class. If it is possible, you can turn off Partial Release for the affected data sets. Are you signed up for Red Alerts? http://www14.software.ibm.com/webapp/set2/sas/f/redAlerts/home.html Best Regards, Sam Knutson This email/fax message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email/fax is prohibited. If you are not the intended recipient, please destroy all paper and electronic copies of the original message. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Display Active Users panel (DA)
On Tue, 16 Dec 2008 08:02:57 -0600, Tom Marchant wrote: On Mon, 15 Dec 2008 18:33:36 -0600, Paul Gilmartin wrote: I shudder whenever I read in the PoOp that bit 31 of the TOD clock toggles once per megamicrosecond (sic, IIRC). Ummm. I think it has always said that bit 51 increments every microsecond. It says that bit 31 increments every 1.048576 second. OK. Not in the PoOp, but certainly in the diagram on p. 3 of International Technical Support Organization Server Time Protocol Planning Guide December 2006 SG24-7280-00 http://www.redbooks.ibm.com/redbooks/pdfs/sg247280.pdf I know; it's merely a Redbook; not subject to the intense peer review of a RM. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: LLA for non load modules
I've used LLA for other libraries (like ISPF panels for example). It is possible to use LLA to cache the directory entries for any PDS (thus helping out BLDL and DESERV). You can't use LLA to cache the actual member unless it is a load module. Peter Relson z/OS Core Technology Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Display Active Users panel (DA)
On Tue, 16 Dec 2008 09:23:53 -0600, Paul Gilmartin wrote: On Tue, 16 Dec 2008 08:02:57 -0600, Tom Marchant wrote: On Mon, 15 Dec 2008 18:33:36 -0600, Paul Gilmartin wrote: I shudder whenever I read in the PoOp that bit 31 of the TOD clock toggles once per megamicrosecond (sic, IIRC). Ummm. I think it has always said that bit 51 increments every microsecond. It says that bit 31 increments every 1.048576 second. OK. Not in the PoOp, but certainly in the diagram on p. 3 of International Technical Support Organization Server Time Protocol Planning Guide December 2006 SG24-7280-00 http://www.redbooks.ibm.com/redbooks/pdfs/sg247280.pdf ARRRGH!!! This interval is sometimes called a mega-microsecond. oh, really? By whom? -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: DFRMM return to Scratch Pool
Bob, There are multiple reasons why a pending release volume will not be set to scratch status, including: - expected to be in TCDB, but is not - system managed, but library not available - CDS and catalogs are synched but you have not run EXPROC on the correct system - volume is neither in a library nor its home location - . See info apar II09162 which has soem details and check lists. Mike Wood RMM Development On Tue, 9 Dec 2008 19:21:42 -0600, Hale, Bob bob.h...@roundys.com wrote: Most of our tapes move to the scratch pool correctly but I have a few that will not move and stay in the Pending Release mode. I have tried numerous options like Confirm Action, Confirm Scratch and resetting the Expiration Date. All of the tapes are not cataloged and Expiration Dates have past. If the tape has multiple files on it I verified that all the files are not cataloged. I must be missing something, anybody got any ideas as to why they will not move to the scratch pool? Y last resort is to delete and re-add them to RMM. Bob -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: upgrade problem
McKown pretty well covered it, but I will add my experience. I just went from os390 2.10 to zOS 1.08 and the hardest part was the learning curve on ordering, SMPE internet install and such. It WAS necessary to get a 1.07 driving system to do the initial SMPE load, but that was really pretty simple. After that it was mostly little things, but then I am running a monoplex. Larry Macioce mace1...@gmail.com Sent by: IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu 12/16/2008 06:37 AM Please respond to IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu Expire Date: 12/16/2010 To IBM-MAIN@bama.ua.edu cc Subject upgrade problem We are a z/OS shop and I have a problem. For years we would order a new version of software I would lay it down,get an iplable test system and then get (hire) help to setup a production system and move catalogs,data and general upgrade things. Well I order z/OS1.7(we are a 1.6 shop) and there was a problem with the order. Management cut several things out like cobol, ispf and few minor players. So i scrapped the order and told management about the problem. By the time everything was solved they were at v1.9. Also I was told no help this time do it by myself(I am a 1 man shop z890/110) and according to IBM there is no upgrade path to 1.9 or 1.10 which is what I would go to. So I am wondering is there some kind of roadmap to get to were I need to be? I can hack my way through just about anything. thanks in advance Mace -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: LLA for non load modules
On Tue, 16 Dec 2008 07:16:08 -0500, Peter Relson rel...@us.ibm.com wrote: I've used LLA for other libraries (like ISPF panels for example). It is possible to use LLA to cache the directory entries for any PDS (thus helping out BLDL and DESERV). You can't use LLA to cache the actual member unless it is a load module. Of course. As I suggested to the OP, they should search the archives where information like that and a lot of other information has been discussed on more than one occasion. Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:mark.zel...@zurichna.com z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
upgrade problem
We are a z/OS shop and I have a problem. For years we would order a new version of software I would lay it down,get an iplable test system and then get (hire) help to setup a production system and move catalogs,data and general upgrade things. Well I order z/OS1.7(we are a 1.6 shop) and there was a problem with the order. Management cut several things out like cobol, ispf and few minor players. So i scrapped the order and told management about the problem. By the time everything was solved they were at v1.9. Also I was told no help this time do it by myself(I am a 1 man shop z890/110) and according to IBM there is no upgrade path to 1.9 or 1.10 which is what I would go to. So I am wondering is there some kind of roadmap to get to were I need to be? I can hack my way through just about anything. thanks in advance Mace -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: upgrade problem
On Tue, 16 Dec 2008 08:26:55 -0600, Larry Macioce mace1...@gmail.com wrote: We are a z/OS shop and I have a problem. For years we would order a new version of software I would lay it down,get an iplable test system and then get (hire) help to setup a production system and move catalogs,data and general upgrade things. Well I order z/OS1.7(we are a 1.6 shop) and there was a problem with the order. Management cut several things out like cobol, ispf and few minor players. So i scrapped the order and told management about the problem. By the time everything was solved they were at v1.9. Also I was told no help this time do it by myself(I am a 1 man shop z890/110) and according to IBM there is no upgrade path to 1.9 or 1.10 which is what I would go to. So I am wondering is there some kind of roadmap to get to were I need to be? I can hack my way through just about anything. thanks in advance Mace One thing to remember. You can always upgrade. Any problems that could occur would be only if your upgrade does not go and updates something, like a catalog, which the downlevel system cannot handle. Or if you have a sandbox and try to share things between the 1.6 and the new 1.9/1.10 system. -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: upgrade problem
I hope when you said scrapped you didn't throw it out. You can use the cobol you had with 1.6. I didn't think ISPF was optional. It will at least give a 1.7 system to build your 1.9 system (if you have already received 1.9). If you get the 1.7 extended support you get some help and fixes. George From: IBM Mainframe Discussion List [ibm-m...@bama.ua.edu] On Behalf Of Larry Macioce [mace1...@gmail.com] Sent: Tuesday, December 16, 2008 9:26 AM To: IBM-MAIN@bama.ua.edu Subject: upgrade problem We are a z/OS shop and I have a problem. For years we would order a new version of software I would lay it down,get an iplable test system and then get (hire) help to setup a production system and move catalogs,data and general upgrade things. Well I order z/OS1.7(we are a 1.6 shop) and there was a problem with the order. Management cut several things out like cobol, ispf and few minor players. So i scrapped the order and told management about the problem. By the time everything was solved they were at v1.9. Also I was told no help this time do it by myself(I am a 1 man shop z890/110) and according to IBM there is no upgrade path to 1.9 or 1.10 which is what I would go to. So I am wondering is there some kind of roadmap to get to were I need to be? I can hack my way through just about anything. thanks in advance Mace -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Announcing Update to XMITIP to Version 08.12
XMITIP Version 08.12 has been posted at http://www.lbdsoftware.com. XMITIP has a long history starting with version 1.00 in 1993 and has developed over the years thanks in large part to the comments and suggestions and code contributions of many of you. As such I want to take this time to thank everyone who has taken the time to send me comments and suggestions that have led to added functionality or stability to XMITIP and to those who have contributed their time and energy in providing code updates that have made this package so popular. The updates included (mostly thanks again to Hartmut's efforts) are: V08.12 - 2008-12-15 - license update Change to use the GPL Version 3 License - exec updates EDITMAIL - updates for cosmetics and/or iso date (HB) LOGIT- updates for cosmetics and/or iso date (HB) SDSFEXT - updates for cosmetics and/or iso date (HB) SMTPSTAT - updates for cosmetics and/or iso date (HB) TESTCU - Support dateformat of 'E' - updates for cosmetics and/or iso date (HB) TXT2HTML - updates for cosmetics and/or iso date (HB) TXT2RTF - updates for cosmetics and/or iso date (HB) XMITIP - Update to handle MSGDS and HTML if the MSGDS is already in HTML format - updates for cosmetics and/or iso date (HB) XMITIPCU - Add comments on DST for those south of the equator - updates for cosmetics and/or iso date (HB) XMITIPMU - additional quotes XMITIPFE - updates for cosmetics and/or iso date (HB) XMITIPFV - updates for cosmetics and/or iso date (HB) XMITIPI - updates for cosmetics and/or iso date (HB) XMITIPIC - updates for cosmetics and/or iso date (HB) XMITIPID - updates for cosmetics and/or iso date (HB) XMITIPML - updates for cosmetics and/or iso date (HB) XMITIPMU - updates for cosmetics and/or iso date (HB) XMITIPSP - updates for cosmetics and/or iso date (HB) XMITIPTD - updates for cosmetics and/or iso date (HB) XMITIPTR - updates for cosmetics and/or iso date (HB) XMITIPZP - updates for cosmetics and/or iso date (HB) XMITIP00 - updates for cosmetics and/or iso date (HB) XMITLDAP - updates for cosmetics and/or iso date (HB) XMITSDSF - updates for cosmetics and/or iso date (HB) XMITSOCK - updates for cosmetics and/or iso date (HB) XMITZEX2 - updates for cosmetics and/or iso date (HB) Note the change in license to the GPL Version 3 license. No guarantee or warranty is provided with this package. It is a use at your own risk which means you should evaluate it for your environment and test as completely as possible prior to using for any business purpose. Lionel B. Dyck, Consultant/Specialist Enterprise Platform Services, Mainframe Engineering KP-IT Enterprise Engineering 925-926-5332 (8-473-5332) | E-Mail: lionel.b.d...@kp.org AIM: lbdyck | Yahoo IM: lbdyck Kaiser Service Credo: Our cause is health. Our passion is service. We?re here to make lives better.? ?Never attribute to malice what can be caused by miscommunication.? NOTICE TO RECIPIENT: If you are not the intended recipient of this e-mail, you are prohibited from sharing, copying, or otherwise using or disclosing its contents. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and permanently delete this e-mail and any attachments without reading, forwarding or saving them. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Unicode on Demand problem
cross posted to IBM-MAIN and DB2-L. We have just converted from z/OS 1.4 to z/OS 1.7 and are now using unicode on demand. As a result one of our Java applications is failing as follows - E5MSG: 2008-12-15 17:05:01,770 DEBUG E5Config::getDatabasePrefixFor:System [M30D] Return [M30D] com.ibm.db2.jcc.a.SqlException: DB2 SQL error: SQLCODE: -332, SQLSTATE: 57017, SQLERRMC: 1208;1252;DSNXRST at com.ibm.db2.jcc.a.sf.d(sf.java:1396) The output of d uni,all on z/OS 1.7 shows - D UNI,ALL CUN3000I 16.24.31 UNI DISPLAY 343 ENVIRONMENT: CREATED 12/09/2008 AT 13.51.12 MODIFIED 12/15/2008 AT 17.53.52 IMAGE CREATED 12/09/2008 AT 13.51.12 SERVICE: CHARACTER CASE NORMALIZATION COLLATION STORAGE: ACTIVE116 PAGES LIMIT 524287 PAGES CASECONV: NONE NORMALIZE: DISABLED COLLATE: DISABLED CONVERSION: 01146-00367-E 01146-00367-E 01208-00285-E 01208-00500-E 01146-01208-R 01208-01146-E 00285-01208-R 00367-01146-E 00367-01146-E 00500-01208-R 01047-00819-L 01047-00819-R ie with no code page 1252. Previously for z/OS 1.4 that code page was part of an image that was built specifically for DB2 Version 8 as per apars II13048/II13049. Since CP1252 is defined in our DSNHDECP as the ASCII CCSID I would have expected that to be loaded by unicode on demand but obviously not. Is the only way round this to revert to a specific pre-built image. Seems a backward step. Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Unicode on Demand problem
Have you looked at the SETUNI command in MVS? It may do what you need. Have you opened an ETR to IBM? If you have established Unicode on Demand, then my understanding is that when a new code is requested, it gets built. Lizette -Original Message- From: Jim McAlpine jim.mcalp...@gmail.com Sent: Dec 16, 2008 11:48 AM To: IBM-MAIN@bama.ua.edu Subject: Unicode on Demand problem cross posted to IBM-MAIN and DB2-L. We have just converted from z/OS 1.4 to z/OS 1.7 and are now using unicode on demand. As a result one of our Java applications is failing as follows - E5MSG: 2008-12-15 17:05:01,770 DEBUG E5Config::getDatabasePrefixFor:System [M30D] Return [M30D] com.ibm.db2.jcc.a.SqlException: DB2 SQL error: SQLCODE: -332, SQLSTATE: 57017, SQLERRMC: 1208;1252;DSNXRST at com.ibm.db2.jcc.a.sf.d(sf.java:1396) The output of d uni,all on z/OS 1.7 shows - D UNI,ALL CUN3000I 16.24.31 UNI DISPLAY 343 ENVIRONMENT: CREATED 12/09/2008 AT 13.51.12 MODIFIED 12/15/2008 AT 17.53.52 IMAGE CREATED 12/09/2008 AT 13.51.12 SERVICE: CHARACTER CASE NORMALIZATION COLLATION STORAGE: ACTIVE116 PAGES LIMIT 524287 PAGES CASECONV: NONE NORMALIZE: DISABLED COLLATE: DISABLED CONVERSION: 01146-00367-E 01146-00367-E 01208-00285-E 01208-00500-E 01146-01208-R 01208-01146-E 00285-01208-R 00367-01146-E 00367-01146-E 00500-01208-R 01047-00819-L 01047-00819-R ie with no code page 1252. Previously for z/OS 1.4 that code page was part of an image that was built specifically for DB2 Version 8 as per apars II13048/II13049. Since CP1252 is defined in our DSNHDECP as the ASCII CCSID I would have expected that to be loaded by unicode on demand but obviously not. Is the only way round this to revert to a specific pre-built image. Seems a backward step. Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Kudos, IBMLink
Here, here! Saves me the trouble of logging in if all that happened was someone opend the ETR... Regards, Art Gutowski Ford Motor Company -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Unicode on Demand problem
On Tue, 16 Dec 2008 16:48:40 +, Jim McAlpine jim.mcalp...@gmail.com wrote: cross posted to IBM-MAIN and DB2-L. We have just converted from z/OS 1.4 to z/OS 1.7 and are now using unicode on demand. As a result one of our Java applications is failing as follows - E5MSG: 2008-12-15 17:05:01,770 DEBUG E5Config::getDatabasePrefixFor:System [M30D] Return [M30D] com.ibm.db2.jcc.a.SqlException: DB2 SQL error: SQLCODE: -332, SQLSTATE: 57017, SQLERRMC: 1208;1252;DSNXRST at com.ibm.db2.jcc.a.sf.d(sf.java:1396) The output of d uni,all on z/OS 1.7 shows - D UNI,ALL CUN3000I 16.24.31 UNI DISPLAY 343 ENVIRONMENT: CREATED 12/09/2008 AT 13.51.12 MODIFIED 12/15/2008 AT 17.53.52 IMAGE CREATED 12/09/2008 AT 13.51.12 SERVICE: CHARACTER CASE NORMALIZATION COLLATION STORAGE: ACTIVE116 PAGES LIMIT 524287 PAGES CASECONV: NONE NORMALIZE: DISABLED COLLATE: DISABLED CONVERSION: 01146-00367-E 01146-00367-E 01208-00285-E 01208-00500-E 01146-01208-R 01208-01146-E 00285-01208-R 00367-01146-E 00367-01146-E 00500-01208-R 01047-00819-L 01047-00819-R ie with no code page 1252. Previously for z/OS 1.4 that code page was part of an image that was built specifically for DB2 Version 8 as per apars II13048/II13049. Since CP1252 is defined in our DSNHDECP as the ASCII CCSID I would have expected that to be loaded by unicode on demand but obviously not. Is the only way round this to revert to a specific pre-built image. Seems a backward step. Jim McAlpine Jim, Do you have the SRB support APAR on? The original APAR / PTF was OA14231 / UA27251 but that one went PE and was fixed by OA19072 / UA32754 on z/OS 1.7. Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:mark.zel...@zurichna.com z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
GIMUNZIP and archid
What level of SMP/E supports 'archid'? I am attempting to do an unzip and getting an error GIM20313S ** THERE IS A SYNTAX ERROR IN THE CONTROL STATEMENT FROM DD STATEMENT SYSIN AT COLUMN 10. It has the following syntax ARCHDEF archid=Common - Special Instructions for ESD..I am thinking my level of smp/e does not support the archid...I am running Z/os 1.4 smp/e displays as 31.25. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone using JAVA 6.0 on z/OS?
ROFL... Let us now consult the Gospels of System z, the Book of Timothy, Chapter 5, Verses 12:21... Echoes of The Quest for the Holy Grail... Pies les u dominae... clunk Don a es Requiem... clunk... Cheers, Art Gutowski Ford Motor Company On Sat, 13 Dec 2008 07:30:23 -0500, Richards, Robert B. robert.richa...@opm.gov wrote: Bill, Not only here! To keep the biblical theme going...we see Tim's revelations all over Mainframe at: http://mainframe.typepad.com/ :-) The latest one with the chicken was pretty entertaining AND informativebut then again, I am easily amused! LOL Keep preaching, Tim! :-) -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Bill Seubert On Fri, 12 Dec 2008 20:03:54 +1000, Shane ibm-m...@tpg.com.au wrote: Timothy Sipples wrote (and wrote ...): but, to elaborate That's not an elaboration, it's an epistle. Shane ... And you're just seeing what he writes HERE. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: upgrade problem
Unfortunately I did toss it after a while. I didn't know I could use the 1.6 cobol, I was told by IBM that any software we didn't have maintenace with and used that we'd be running illegal software. I thought I 'd reorder when management go things in order. It took a long time before it was cleared up. But is there some kind od roadmap or recipe for updaing a system? thanks Larry -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Unicode on Demand problem
On Tue, Dec 16, 2008 at 4:58 PM, Mark Zelden mark.zel...@zurichna.comwrote: Jim, Do you have the SRB support APAR on? The original APAR / PTF was OA14231 / UA27251 but that one went PE and was fixed by OA19072 / UA32754 on z/OS 1.7. Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:mark.zel...@zurichna.com z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.htmlhttp://home.flash.net/%7Emzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html Mark, that looks spot on, I don't have either of those applied. Thanks Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SDSF Security
My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The diagnosis procedure in the FM for the error message wasn't productive. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Could someone fax me a clue? J Thanks. NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
In 6.2.1.2.2.20081211140035.05aac...@127.0.0.1, on 12/11/2008 at 02:13 PM, Arthur T. ibmm...@intergate.com said: It's been a long time since IBM went OCO. When they did, didn't they promise better documentation to make up for the inability to see what the programs are actually doing? ObFlounder Yes, and they broke that promise before the ink was dry. In some cases the documentation actually got worse. He deserves better than being talked down to. He is rude enough that I don't see where he has a valid claim to curtesy. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Unicode on Demand problem
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Jim McAlpine On Tue, Dec 16, 2008 at 4:58 PM, Mark Zelden wrote: Jim, Do you have the SRB support APAR on? The original APAR / PTF was OA14231 / UA27251 but that one went PE and was fixed by OA19072 / UA32754 on z/OS 1.7. Mark, that looks spot on, I don't have either of those applied. You may find that, even with those fixes applied, you still need to code a CUNUNIxx member to cope with CP 1252. We had to do that at z/OS 1.7, and did not test without it when we upgraded to 1.9 so I don't know if it's still needed (doesn't seem to hurt anything). Here's what we coded: BROWSESYS1.PARMLIB(CUNUNI00) - 01.01 Command === * Top of Data ** ADD FROM=37 TO=1208 ADD FROM=37 TO=1252 ADD FROM=1208 TO=1252 ADD FROM=1252 TO=1208 ADD FROM=1252 TO=37 Bottom of Data And add an entry in IEASYSxx: UNI=00 -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
On 16 Dec 2008 09:10:39 -0800, shmuel+ibm-m...@patriot.net (Shmuel Metz , Seymour J.) wrote: He deserves better than being talked down to. He is rude enough that I don't see where he has a valid claim to curtesy. There is some value in being courteous for your own sake. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
On Tue, 16 Dec 2008 11:27:11 -0600, Hal Merritt hmerr...@jackhenry.com wrote: My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The diagnosis procedure in the FM for the error message wasn't productive. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Could someone fax me a clue? J Perhaps AUTH=SR Class Access SDSF Resource Name Description SDSF READ ISFCMD.ODSP.SR.system Gives user authority to issue the SR command. Appendix B. SAF equivalents for ISFPARMS Bruno Sugliani zxnetconsult(at)free(dot)fr http://zxnetconsult.free.fr -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: upgrade problem
In a message dated 12/16/2008 11:38:22 A.M. Central Standard Time, mace1...@gmail.com writes: But is there some kind od roadmap or recipe for updating a system? Talk to your ISV/SE. Normally they'll send you a starter system that will be at a support level current enough to build your new system. Here's the migration manuals link: _http://www-03.ibm.com/systems/z/os/zos/bkserv/zos_migration_manuals.html_ (http://www-03.ibm.com/systems/z/os/zos/bkserv/zos_migration_manuals.html) **Make your life easier with all your friends, email, and favorite sites in one place. Try it now. (http://www.aol.com/?optin=new-dpicid=aolcom40vanityncid=emlcntaolcom0010) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
AUTO: Howard Turetzky/Boulder/IBM is out of the office until 03/05/2001. (returning 01/02/2009)
I am out of the office until 01/02/2009. Vacation. If urgent, try 303 550-8123. Note: This is an automated response to your message IBM-MAIN Digest - 14 Dec 2008 to 15 Dec 2008 (#2008-350) sent on 12/15/08 22:00:01. This is the only notification you will receive while this person is away. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
how to check the msglevel/jobclass after z/os 1.7
Hi all, In z/os 1.9 when I issued the following command /D JOBCLASS(STC) /HASP837 JOBCLASS(STC) /HASP837 JOBCLASS(STC) QAFF=(ANY),XEQCOUNT=(), /HASP837 XEQMEMBER(SYSD)=(MAXIMUM=*, /HASP837 CURRENT=331) how can I display the msglevel?, msgclass? and other information which like z/os 1.7 /D JOBCLASS(STC)? best regards -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: DFSMShsm ML1 ML2
You have hit upon the correct solution, change the Management Class. I suggest the use of PRIMARY DAYS and LEVEL1 DAYS in lieu of generations on primary. If the generations on primary setting causes the GDG to be held on primary for more that Level1 days, this could cause your situation. When the dataset is finally eligible for migration due to generations on primary is has exceeded Level1 days, and will thus go directly to ML2, in your case, tape. If the generations on primary is set to a small number or blank, the dataset may be eligible for migration in less than Level 1 days, the dataset will make an interim stop at ML1 until Level 1 days has expired and then move to ML2. After you make this change, ensure you have sufficient ML1 space to hold the additional data. BTW, I do not think you can direct some ML2 to tape and some to disk. IIRC it is all or nothing. Existing ML2 data on tape will remain there, but new ML2 data will go to the tape or disk as specified in the SETSYS command. Recycle output will go to the destination specified in SETSYS RECYCLEOUTPUT. HTH, snip Hi Listers, We would like to reduce the tape utilisation of HSM by adding more DASD for migration. The question is whether to add more as ML1 or add some as ML2. If we just add more as ML1 then I don't see too much benefit. Currently there is not much migration occurring ML1 to ML2 on a daily basis. Approx 75% of all migration is Primary direct to ML2 tape. I believe that this is mostly GDS datasets migrating due to generations on primary setting in the management class. Is anybody mixing DASD and TAPE for ML2? If so how do you control the migration? We don't want to convert all our ML2 to tape. Alternatively, is there a way to force these direct Primary to ML2 migrations to be directed to ML1 instead of ML2? snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Display Active Users panel (DA)
On Mon, 15 Dec 2008 18:33:36 -0600, Paul Gilmartin wrote: I shudder whenever I read in the PoOp that bit 31 of the TOD clock toggles once per megamicrosecond (sic, IIRC). Ummm. I think it has always said that bit 51 increments every microsecond. It says that bit 31 increments every 1.048576 second. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
I just had this conversation with someone. We used use source code and PLMs to understand the workings of a lot of the VM and MVS components. Thats how a lot of us dinos evolvedlol Scott J Ford From: Shmuel Metz (Seymour J.) shmuel+ibm-m...@patriot.net To: IBM-MAIN@bama.ua.edu Sent: Tuesday, December 16, 2008 11:59:07 AM Subject: Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions) In 6.2.1.2.2.20081211140035.05aac...@127.0.0.1, on 12/11/2008 at 02:13 PM, Arthur T. ibmm...@intergate.com said: It's been a long time since IBM went OCO. When they did, didn't they promise better documentation to make up for the inability to see what the programs are actually doing? ObFlounder Yes, and they broke that promise before the ink was dry. In some cases the documentation actually got worse. He deserves better than being talked down to. He is rude enough that I don't see where he has a valid claim to curtesy. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: DFSMShsm ML1 ML2
Hi Listers, We would like to reduce the tape utilisation of HSM by adding more DASD for migration. The question is whether to add more as ML1 or add some as ML2. . Alternatively, is there a way to force these direct Primary to ML2 migrations to be directed to ML1 instead of ML2? Can't say I've ever heard of someone mixing DASD Tape for ML2 nor of anyone ever using DASD as ML2 - I guess I'd have to ask why you'd want to? Why have 2 different levels of migration on DASD? Why not just increase the amount of Level 1? As far as you 2nd question about directing Primary to ML2 migrations to go to ML1 instead of ML2 - If you're an SMS shop, you need to look at your management class definitions as your PRIMARY DAYS LEVEL 1 DAYS parameters are what controls which datasets migrate to ML1 and which migrate to ML2. As an aside, I just recently went the other way and changed my parameters so that more of my datasets migrated directly to ML2 rather than ML1 - we had larger #'s of datasets which sat around on ML1 without ever being recalled and then being migrated a 2nd time to ML2. Plus as a user of virtual tapes, the recalls from virtual tape are not that big an impact to our shop. dd keller ** This e-mail message and all attachments transmitted with it may contain legally privileged and/or confidential information intended solely for the use of the addressee(s). If the reader of this message is not the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, forwarding or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete this message and all copies and backups thereof. Thank you. ** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Batch ISPF Copy w/append?
Hi, I worked with the IBM support people. I intermittenly was receiving a 550 that after tracing I could not get to reproduce. I appended 115 members together with no fauilure. Yet sometimes I can't get two in a row to work. IBM mentioned something about the dataset in use that could cause this type of error. But if you want to use TCP/IP to append files: QUEUE 'OWL0' === FTP Host QUEUE 'xx xx' === Protect the innocent QUEUE AP 'SY4019.JCL.PROCLIB.OLD(TMLSSHBR)' 'SY4019.JCL.PROCLIB.OLD(X)' QUEUE AP 'SY4019.JCL.PROCLIB.OLD(TMONCICS)' 'SY4019.JCL.PROCLIB.OLD(X)' QUEUE 'QUIT' FTP I know I can use a netrc and not have passwords in here , but this simple example can work. Thank you, Dave Hansen Sr. System Programmer Hennepin County Gerhard Postpischil gerh...@valley.net Sent by: IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu To IBM-MAIN@bama.ua.edu cc 12/04/2008 03:00 PM Subject Re: Batch ISPF Copy w/append? Please respond to IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu John McKown wrote: I will start off by saying that there is absolutely NO way to append data to the end of an existing member in a PDS or PDSE. Period. No discussion. All generalities are false, including this one g You are correct in the general sense, however it should be obvious that when a PDS member is the last, it can be opened with BPAM, blocks added at the end, and a STOW REPLACE will create an appended member. Or you could use plain BSAM, EXCP, or STARTIO, write blocks at the end, update DS1LSTAR, and not even touch the directory entry. Gerhard Postpischil Bradford, VT -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html Disclaimer: Information in this message or an attachment may be government data and thereby subject to the Minnesota Government Data Practices Act, Minnesota Statutes, Chapter 13, may be subject to attorney-client or work product privilege, may be confidential, privileged, proprietary, or otherwise protected, and the unauthorized review, copying, retransmission, or other use or disclosure of the information is strictly prohibited. If you are not the intended recipient of this message, please immediately notify the sender of the transmission error and then promptly delete this message from your computer system. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: upgrade problem
Mace, there is no supported path from 1.6 to 1.10. But with 1.10 (or any other system) you can get customized offering driver which is no charge. You need at least 1.8 to install 1.10, there were some important changes in Binder as I was told by z/OS folk (hi John E.). Marian Gasparovic IBM Slovakia On Tue, Dec 16, 2008 at 3:26 PM, Larry Macioce mace1...@gmail.com wrote: We are a z/OS shop and I have a problem. For years we would order a new version of software I would lay it down,get an iplable test system and then get (hire) help to setup a production system and move catalogs,data and general upgrade things. Well I order z/OS1.7(we are a 1.6 shop) and there was a problem with the order. Management cut several things out like cobol, ispf and few minor players. So i scrapped the order and told management about the problem. By the time everything was solved they were at v1.9. Also I was told no help this time do it by myself(I am a 1 man shop z890/110) and according to IBM there is no upgrade path to 1.9 or 1.10 which is what I would go to. So I am wondering is there some kind of roadmap to get to were I need to be? I can hack my way through just about anything. thanks in advance Mace -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Unicode on Demand problem
Jim, we use unicode on demand but z/OS R9 without any problem. Perhaps you miss some service? AFAIR SRB mode was supported in the first version of unicode on demand. Maybe you should raise a PMR Roland cross posted to IBM-MAIN and DB2-L. We have just converted from z/OS 1.4 to z/OS 1.7 and are now using unicode on demand. As a result one of our Java applications is failing as follows - E5MSG: 2008-12-15 17:05:01,770 DEBUG E5Config::getDatabasePrefixFor:System [M30D] Return [M30D] com.ibm.db2.jcc.a.SqlException: DB2 SQL error: SQLCODE: -332, SQLSTATE: 57017, SQLERRMC: 1208;1252;DSNXRST at com.ibm.db2.jcc.a.sf.d(sf.java:1396) The output of d uni,all on z/OS 1.7 shows - D UNI,ALL CUN3000I 16.24.31 UNI DISPLAY 343 ENVIRONMENT: CREATED 12/09/2008 AT 13.51.12 MODIFIED 12/15/2008 AT 17.53.52 IMAGE CREATED 12/09/2008 AT 13.51.12 SERVICE: CHARACTER CASE NORMALIZATION COLLATION STORAGE: ACTIVE116 PAGES LIMIT 524287 PAGES CASECONV: NONE NORMALIZE: DISABLED COLLATE: DISABLED CONVERSION: 01146-00367-E 01146-00367-E 01208-00285-E 01208-00500-E 01146-01208-R 01208-01146-E 00285-01208-R 00367-01146-E 00367-01146-E 00500-01208-R 01047-00819-L 01047-00819-R ie with no code page 1252. Previously for z/OS 1.4 that code page was part of an image that was built specifically for DB2 Version 8 as per apars II13048/II13049. Since CP1252 is defined in our DSNHDECP as the ASCII CCSID I would have expected that to be loaded by unicode on demand but obviously not. Is the only way round this to revert to a specific pre-built image. Seems a backward step. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
- Original Message - From: Hal Merritt hmerr...@jackhenry.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 12:28 PM Subject: SDSF Security My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Hal, SDSF does so many RACROUTEs that it suppresses nearly all ICH408I messages for security failures. To fix this, you need to turn on the SDSF security trace (I forget the details, RTFM), run your command, turn off the trace, then look at the output. It will show you the RACROUTE call, the resource, and the return codes, so you can code up the proper PERMIT. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
Good suggestions on the trace. Could one just put RACF in warn mode, try the command and determine what is causing the command to fail. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 1:21 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security - Original Message - From: Hal Merritt hmerr...@jackhenry.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 12:28 PM Subject: SDSF Security My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Hal, SDSF does so many RACROUTEs that it suppresses nearly all ICH408I messages for security failures. To fix this, you need to turn on the SDSF security trace (I forget the details, RTFM), run your command, turn off the trace, then look at the output. It will show you the RACROUTE call, the resource, and the return codes, so you can code up the proper PERMIT. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
- Original Message - From: Cebell, David cebe...@aafes.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 3:05 PM Subject: Re: SDSF Security Good suggestions on the trace. Could one just put RACF in warn mode, try the command and determine what is causing the command to fail. David, Interesting question! My take is that the high number of classes checked by SDSF (OPERCMDS, FACILITY, WRITER, JESSPOOL, etc.) make a WARN mode problematic (I assume you're talking warn mode at the CLASS level and not NOPROTECTALL). Also, I believe SDSF would still suppress the ICH408I messages even in warn mode. You would get the warn mode records cut to SMF, but that's a big PITA and a delay compared to the SDSF security trace. My $.02, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
On Tue, 16 Dec 2008 10:47:29 -0800, Scott Ford scott_j_f...@yahoo.com wrote: ... source code and PLMs to understand the workings of a lot of the VM and MVS components. ... PLMs. sigh IBM's promise to improve the doc included getting rid of PLMs. That way there wasn't as much information to go obsolete. We are so much off now without all that confusing (and occassionally incorrect) detail. We should all be happy. I guess. Pat O'Keefe -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
On Tue, 16 Dec 2008 14:28:53 -0600, Patrick O'Keefe patrick.oke...@wamu.net wrote: On Tue, 16 Dec 2008 10:47:29 -0800, Scott Ford scott_j_f...@yahoo.com wrote: ... source code and PLMs to understand the workings of a lot of the VM and MVS components. ... PLMs. sigh IBM's promise to improve the doc included getting rid of PLMs. That way there wasn't as much information to go obsolete. We are so much off now without all that confusing (and occassionally incorrect) detail. We should all be happy. I guess. Pat O'Keefe A bit off, but has anybody else here looked at the i system (nee AS/400)? You want to talk about OCO! It has some really interesting capabilities. But it has NO way to write anything in assembler. The OS is basically divided in two. The high level part is called OS/400 (i5/OS). It is written at the MI (Machine Independent) level. The low level part is called the SLIC (System Licensed Internal Code). None of this code is ever shown outside of the AS/400 development lab. You cannot even write your own language! Because you cannot create a program object. And something can be executed only if it is marked as a program object. This is not a system for bits-n-bytes techies! You simply cannot get to the bits-n-bytes level. -- John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
The constant thing about change is change. I saw your note about SOA. That is why I started getting educated ( on my own ) into the web technologies. My kids still need shoes to wear, so hence i have work like everone else to make money, can't retire yet...sigh Scott J Ford From: Patrick O'Keefe patrick.oke...@wamu.net To: IBM-MAIN@bama.ua.edu Sent: Tuesday, December 16, 2008 3:28:53 PM Subject: Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions) On Tue, 16 Dec 2008 10:47:29 -0800, Scott Ford scott_j_f...@yahoo.com wrote: ... source code and PLMs to understand the workings of a lot of the VM and MVS components. ... PLMs. sigh IBM's promise to improve the doc included getting rid of PLMs. That way there wasn't as much information to go obsolete. We are so much off now without all that confusing (and occassionally incorrect) detail. We should all be happy. I guess. Pat O'Keefe -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
Just some profiles I played with when installing 1.8; 1. Authorize CK command in SDSF. a. Added ISFCMD.** to SDSF CLASS. UACC(NONE) b. Added ISFCMD.DSP.SCHENV.** to SDSF CLASS. UACC(NONE) c. Added ISFCMD.FILTER.** to SDSF CLASS. UACC(READ) d. Added ISFCMD.DSP.** to SDSF CLASS. UACC(READ) e. Activated SDSF CLASS Maybe this will give you a starting point. Jimmy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
On Tue, 16 Dec 2008 14:38:32 -0600, John McKown wrote: A bit off, but has anybody else here looked at the i system (nee AS/400)? You want to talk about OCO! It has some really interesting capabilities. But it has NO way to write anything in assembler. The OS is basically divided in two. The high level part is called OS/400 (i5/OS). It is written at the MI (Machine Independent) level. The low level part is called the SLIC (System Licensed Internal Code). None of this code is ever shown outside of the AS/400 development lab. You cannot even write your own language! Because you cannot create a program object. And something can be executed only if it is marked as a program object. This is not a system for bits-n-bytes techies! You simply cannot get to the bits-n-bytes level. So no ISVs? Or they code at the MI level. But I could draw a parallel to z: SLIC == microcode, millicode MI == assembler for z. Mac OS was somewhat like that, through OS 6 or so. But ISVs were allowed to span the boundary, and produced languages that allowed end users to span the gap likewise. OK. Through OS 6, Mac was sold with no networking software and no way to create an executable. But it could read PC diskettes. And nerds of a certain persuasion flamed about being unable to download software to PCs and run it on Macs, because it was not marked executable on the PC disk. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
I activated the SAF trace (mask 80) and saw nothing. Nothing at all. I'm beginning to wonder if SDSF is calling RACF at all. Why wouldn't it? The FM does not mention any kind of switch to turn that on or off. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Cebell, David Sent: Tuesday, December 16, 2008 2:00 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Good suggestions on the trace. Could one just put RACF in warn mode, try the command and determine what is causing the command to fail. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 1:21 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security - Original Message - From: Hal Merritt hmerr...@jackhenry.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 12:28 PM Subject: SDSF Security My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Hal, SDSF does so many RACROUTEs that it suppresses nearly all ICH408I messages for security failures. To fix this, you need to turn on the SDSF security trace (I forget the details, RTFM), run your command, turn off the trace, then look at the output. It will show you the RACROUTE call, the resource, and the return codes, so you can code up the proper PERMIT. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
On Tue, 16 Dec 2008 15:23:08 -0600, Paul Gilmartin paulgboul...@aim.com wrote: So no ISVs? Or they code at the MI level. Sorry. There are ISVs. But only for application level code, not system level. IBM supplies compilers for COBOL, RPG, CL (similar to CLIST), C/C++, Java, and maybe other languages. But you cannot create a compiler because the interface to create an MI level program does not exist (no assembler). You could write a interpreter in C/C++, I guess. But that would slow down the language. But I could draw a parallel to z: SLIC == microcode, millicode Right. Remember all the microcode assists for the various OSes on various models of the S/370? The AS/400 is like that, but even more so. A great deal of the OS (including the database) is embedded in the SLIC. MI == assembler for z. Right. Except no HLASM-like language and so no way to program in assembler (at the MI level). snip -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
Did you enter the complete TRACE function? In SDSF, enter TRACE ON followed by TRACE 0080. Then in SDSF select the job/command you are interested in and enter TRACE OFF. There will be an ISFTRACE dataset created under your TSU id in JES2 output. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Hal Merritt Sent: Tuesday, December 16, 2008 3:31 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security I activated the SAF trace (mask 80) and saw nothing. Nothing at all. I'm beginning to wonder if SDSF is calling RACF at all. Why wouldn't it? The FM does not mention any kind of switch to turn that on or off. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Cebell, David Sent: Tuesday, December 16, 2008 2:00 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Good suggestions on the trace. Could one just put RACF in warn mode, try the command and determine what is causing the command to fail. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 1:21 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security - Original Message - From: Hal Merritt hmerr...@jackhenry.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 12:28 PM Subject: SDSF Security My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Hal, SDSF does so many RACROUTEs that it suppresses nearly all ICH408I messages for security failures. To fix this, you need to turn on the SDSF security trace (I forget the details, RTFM), run your command, turn off the trace, then look at the output. It will show you the RACROUTE call, the resource, and the return codes, so you can code up the proper PERMIT. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
Did as you suggesed. No ISFTRACE. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Dennis Trojak Sent: Tuesday, December 16, 2008 3:54 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Did you enter the complete TRACE function? In SDSF, enter TRACE ON followed by TRACE 0080. Then in SDSF select the job/command you are interested in and enter TRACE OFF. There will be an ISFTRACE dataset created under your TSU id in JES2 output. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Hal Merritt Sent: Tuesday, December 16, 2008 3:31 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security I activated the SAF trace (mask 80) and saw nothing. Nothing at all. I'm beginning to wonder if SDSF is calling RACF at all. Why wouldn't it? The FM does not mention any kind of switch to turn that on or off. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Cebell, David Sent: Tuesday, December 16, 2008 2:00 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Good suggestions on the trace. Could one just put RACF in warn mode, try the command and determine what is causing the command to fail. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 1:21 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security - Original Message - From: Hal Merritt hmerr...@jackhenry.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 12:28 PM Subject: SDSF Security My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Hal, SDSF does so many RACROUTEs that it suppresses nearly all ICH408I messages for security failures. To fix this, you need to turn on the SDSF security trace (I forget the details, RTFM), run your command, turn off the trace, then look at the output. It will show you the RACROUTE call, the resource, and the return codes, so you can code up the proper PERMIT. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
Ignore my last. The trace was in the SDSF address space. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Dennis Trojak Sent: Tuesday, December 16, 2008 3:54 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Did you enter the complete TRACE function? In SDSF, enter TRACE ON followed by TRACE 0080. Then in SDSF select the job/command you are interested in and enter TRACE OFF. There will be an ISFTRACE dataset created under your TSU id in JES2 output. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Hal Merritt Sent: Tuesday, December 16, 2008 3:31 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security I activated the SAF trace (mask 80) and saw nothing. Nothing at all. I'm beginning to wonder if SDSF is calling RACF at all. Why wouldn't it? The FM does not mention any kind of switch to turn that on or off. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Cebell, David Sent: Tuesday, December 16, 2008 2:00 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Good suggestions on the trace. Could one just put RACF in warn mode, try the command and determine what is causing the command to fail. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 1:21 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security - Original Message - From: Hal Merritt hmerr...@jackhenry.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 12:28 PM Subject: SDSF Security My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Hal, SDSF does so many RACROUTEs that it suppresses nearly all ICH408I messages for security failures. To fix this, you need to turn on the SDSF security trace (I forget the details, RTFM), run your command, turn off the trace, then look at the output. It will show you the RACROUTE call, the resource, and the return codes, so you can code up the proper PERMIT. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
ServerPac Merging Datasets
I am currently installing z/OS 1.9. I'm merging all of the ISPF libraries. 1. In Modify System Layout, I go to option C - View and Change Data Sets 2. I select Element Type 3. I select MSG MSGENU. 4. I enter M on 1 line, and it gives me a bunch of datasets I can merge. 5. I enter S on most of the lines to merge all of the MSG and MSGENU datasets. My question is: After I merge them, and go back to the previous panel, it shows several datasets that are of the same type, but it didn't allow me to merge them. This is what was left: REXX.SEAGMENUMSGENU Z19RES SYS1.ISPMLIB MSGENU Z19RES SYS1.MSGENP MSGENU Z19RES SYS1.MSGENU MSGENU Z19RES SYS1.SBLSMSG0MSG Z19RES SYS1.SHASMENUMSGENU Z19RES SYS1.SICEMENUMSGENU Z19RES SYS1.ISPMLIB is my renamed merged dataset. All the other ones weren't listed, so I couldn't merge them. How can I merge them also? Eric -- Eric Bielefeld Systems Programmer Washington University St Louis, Missouri 314-935-3418 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
Are you sure you're using RACF to control authority in SDSF? You can also use a compiled ISFPARMS module, or an ISFPRMxx parmlib member. If you're using the SDSF server, as you seem to be, you have to be using the ISFPRMxx member. Kevin McKenzie External Phone: 845-435-8282, Tie-line: 8-295-8282 z/OS BCP SVT, Dept FXKA, Bldg 706/2D38 Hal Merritt hmerr...@jackhenry.com Sent by: IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu 12/16/2008 04:31 PM Please respond to IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu To IBM-MAIN@bama.ua.edu cc Subject Re: SDSF Security I activated the SAF trace (mask 80) and saw nothing. Nothing at all. I'm beginning to wonder if SDSF is calling RACF at all. Why wouldn't it? The FM does not mention any kind of switch to turn that on or off. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Cebell, David Sent: Tuesday, December 16, 2008 2:00 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Good suggestions on the trace. Could one just put RACF in warn mode, try the command and determine what is causing the command to fail. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 1:21 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security - Original Message - From: Hal Merritt hmerr...@jackhenry.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 12:28 PM Subject: SDSF Security My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Hal, SDSF does so many RACROUTEs that it suppresses nearly all ICH408I messages for security failures. To fix this, you need to turn on the SDSF security trace (I forget the details, RTFM), run your command, turn off the trace, then look at the output. It will show you the RACROUTE call, the resource, and the return codes, so you can code up the proper PERMIT. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
PLMs. sigh IBM's promise to improve the doc included getting rid of PLMs. That way there wasn't as much information to go obsolete. We are so much off now without all that confusing (and occassionally incorrect) detail. We should all be happy. I guess. That's not exactly how things happened. For OCO components, the PLMs and microfiche were colored pink, given a rather high security classification, and made available only within IBM with a lot of security rigimarole. But we did continue to produce external (for non-OCO stuff) and pink pages (for OCO stuff) PLMs up to about SP5.2.0. By then we were into the do more with less cost of the mid 1990s, and somewhere around then production of PLMs (internal and external) ceased in order to reduce development costs. Jim Mulder z/OS System Test IBM Corp. Poughkeepsie, NY -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ServerPac Merging Datasets
- Original Message - From: Eric Bielefeld eric-ibmm...@wi.rr.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 5:12 PM Subject: ServerPac Merging Datasets I am currently installing z/OS 1.9. I'm merging all of the ISPF libraries. 1. In Modify System Layout, I go to option C - View and Change Data Sets 2. I select Element Type 3. I select MSG MSGENU. 4. I enter M on 1 line, and it gives me a bunch of datasets I can merge. 5. I enter S on most of the lines to merge all of the MSG and MSGENU datasets. My question is: After I merge them, and go back to the previous panel, it shows several datasets that are of the same type, but it didn't allow me to merge them. This is what was left: REXX.SEAGMENUMSGENU Z19RES SYS1.ISPMLIB MSGENU Z19RES SYS1.MSGENP MSGENU Z19RES SYS1.MSGENU MSGENU Z19RES SYS1.SBLSMSG0MSG Z19RES SYS1.SHASMENUMSGENU Z19RES SYS1.SICEMENUMSGENU Z19RES SYS1.ISPMLIB is my renamed merged dataset. All the other ones weren't listed, so I couldn't merge them. How can I merge them also? Eric, Eric, Eric, WTF are you doing this? Why aren't you using Dynamic ISPF instead of the BAIL (Big Ass ISPF Library)method? Merging ISPF libraries is a terrible solution for so many reasons. Grab my Dynamic ISPF presentation at my web site below if you forgot about it. Regards, Thomas Conley, President/CEO Pinnacle Consulting Group, Inc. 59 Applewood Drive Rochester, NY 14612-3501 P: (585)720-0012 F: (585)723-3713 http://home.roadrunner.com/~pinncons/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
Why all this work with SAFTRACE and SDSF trace? Why not look in the log. If you are using RACF and have the proper profile then you should see: ICH408I USER(USERA ) GROUP(HZSXXX ) NAME(TEST ID FOR G FOGG ) 987 ISFCMD.ODSP.SR.BOST CL(SDSF) INSUFFICIENT ACCESS AUTHORITY FROM ISFCMD.ODSP.SR.** (G) ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) George Fogg -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Hal Merritt Sent: Tuesday, December 16, 2008 2:01 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Ignore my last. The trace was in the SDSF address space. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Dennis Trojak Sent: Tuesday, December 16, 2008 3:54 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Did you enter the complete TRACE function? In SDSF, enter TRACE ON followed by TRACE 0080. Then in SDSF select the job/command you are interested in and enter TRACE OFF. There will be an ISFTRACE dataset created under your TSU id in JES2 output. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Hal Merritt Sent: Tuesday, December 16, 2008 3:31 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security I activated the SAF trace (mask 80) and saw nothing. Nothing at all. I'm beginning to wonder if SDSF is calling RACF at all. Why wouldn't it? The FM does not mention any kind of switch to turn that on or off. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Cebell, David Sent: Tuesday, December 16, 2008 2:00 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security Good suggestions on the trace. Could one just put RACF in warn mode, try the command and determine what is causing the command to fail. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 1:21 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security - Original Message - From: Hal Merritt hmerr...@jackhenry.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 12:28 PM Subject: SDSF Security My operations folks would like to use the SR panel to manage WTOR's. All of the applicable RACF profiles seem to be in place and they can issue the replies from the LOG screen. The error message returned is Not authorized for cmd. Nothing else even though WTPMSG is in effect. Hal, SDSF does so many RACROUTEs that it suppresses nearly all ICH408I messages for security failures. To fix this, you need to turn on the SDSF security trace (I forget the details, RTFM), run your command, turn off the trace, then look at the output. It will show you the RACROUTE call, the resource, and the return codes, so you can code up the proper PERMIT. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use,
Re: SDSF Security
- Original Message - From: George Fogg gf...@nwlink.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 8:16 PM Subject: Re: SDSF Security Why all this work with SAFTRACE and SDSF trace? Why not look in the log. If you are using RACF and have the proper profile then you should see: ICH408I USER(USERA ) GROUP(HZSXXX ) NAME(TEST ID FOR G FOGG ) 987 ISFCMD.ODSP.SR.BOST CL(SDSF) INSUFFICIENT ACCESS AUTHORITY FROM ISFCMD.ODSP.SR.** (G) ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) George, That's a negatory Pigpen. SDSF generates hundreds of RACROUTE calls per screen, so they actively suppress about 99.99% of the ICH408I messages that would otherwise be issued. Every now and then you will get the ICH408I as you did above, but the vast majority of the time in SDSF, you won't see a thing. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
On Tue, 16 Dec 2008 18:04:13 -0500, Jim Mulder d10j...@us.ibm.com wrote: PLMs. sigh IBM's promise to improve the doc included getting rid of PLMs. That way there wasn't as much information to go obsolete. ... That's not exactly how things happened. I assume nobody will be surprised to hear I didn't believe what I wrote, but I didn't know what emoticon to attach to it. Is there a sarcasty? ... the mid 1990s, and somewhere around then production of PLMs (internal and external) ceased in order to reduce development costs. Uh, reduce cost by eliminating Program Logic doc? I assume the PLM was replaced by something else for internal use. Eliminating doc for program logic seems like a good way to also eliminate program logic. BTW, I vaguely recall the before the external PLMs disappeared, some of them had changed format, with diagrams of logic flow being replaced with something else. HIPO diagrams or something like that? That helped lessen the blow of the PLM's demise. First replace it with something useless; then ease the pain by removing the PLM altogether. [insert a scarcasty here if you have one.] Was I the only one that did not like that change? Pat O'Keefe -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ServerPac Merging Datasets
Tom, in one of his more conciliatory moments, wrote: WTF are you doing this? Why aren't you using Dynamic ISPF instead of the BAIL (Big Ass ISPF Library)method? Merging ISPF libraries is a terrible solution for so many reasons. Grab my Dynamic ISPF presentation at my web site below if you forgot about it. The use of advert tags must have completely slipped his mind ;-) Shane ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SDSF Security
Pigpen?--I'm a pig pin? SDSF did 31 RACROUTE REQUEST=AUTHs when I entered SDSF and issued the DA, LOG and ST commands. I didn't see hundreds of RACROUTE calls as you say but I suppose if you enter SDSF commands all day then hundreds may be found. Of the 31 RACROUTE calls, 26 specified LOG=NOSTAT so no ICH408Is if failures. Four of the 31 calls had LOG=ASIS so you would see ICH408I messages on failures. I still suggest to look at the log first before spending time with traces. As I stated in my original post, he would have found the ICH408I message showing the SDSF resource name and profile that failed for the SR command. George Fogg -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 6:07 PM To: IBM-MAIN@bama.ua.edu Subject: Re: SDSF Security - Original Message - From: George Fogg gf...@nwlink.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 8:16 PM Subject: Re: SDSF Security Why all this work with SAFTRACE and SDSF trace? Why not look in the log. If you are using RACF and have the proper profile then you should see: ICH408I USER(USERA ) GROUP(HZSXXX ) NAME(TEST ID FOR G FOGG ) 987 ISFCMD.ODSP.SR.BOST CL(SDSF) INSUFFICIENT ACCESS AUTHORITY FROM ISFCMD.ODSP.SR.** (G) ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) George, That's a negatory Pigpen. SDSF generates hundreds of RACROUTE calls per screen, so they actively suppress about 99.99% of the ICH408I messages that would otherwise be issued. Every now and then you will get the ICH408I as you did above, but the vast majority of the time in SDSF, you won't see a thing. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ServerPac Merging Datasets
Hmmm - I did forget about that. I still like putting all of the panels in several big libraries. I even attended your presentation a long time ago. Eric Pinnacle pinnc...@rochester.rr.com wrote: - Original Message - From: Eric Bielefeld eric-ibmm...@wi.rr.com Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 5:12 PM Subject: ServerPac Merging Datasets I am currently installing z/OS 1.9. I'm merging all of the ISPF libraries. 1. In Modify System Layout, I go to option C - View and Change Data Sets 2. I select Element Type 3. I select MSG MSGENU. 4. I enter M on 1 line, and it gives me a bunch of datasets I can merge. 5. I enter S on most of the lines to merge all of the MSG and MSGENU datasets. My question is: After I merge them, and go back to the previous panel, it shows several datasets that are of the same type, but it didn't allow me to merge them. This is what was left: REXX.SEAGMENUMSGENU Z19RES SYS1.ISPMLIB MSGENU Z19RES SYS1.MSGENP MSGENU Z19RES SYS1.MSGENU MSGENU Z19RES SYS1.SBLSMSG0MSG Z19RES SYS1.SHASMENUMSGENU Z19RES SYS1.SICEMENUMSGENU Z19RES SYS1.ISPMLIB is my renamed merged dataset. All the other ones weren't listed, so I couldn't merge them. How can I merge them also? Eric, Eric, Eric, WTF are you doing this? Why aren't you using Dynamic ISPF instead of the BAIL (Big Ass ISPF Library)method? Merging ISPF libraries is a terrible solution for so many reasons. Grab my Dynamic ISPF presentation at my web site below if you forgot about it. Regards, Thomas Conley, President/CEO Pinnacle Consulting Group, Inc. 59 Applewood Drive Rochester, NY 14612-3501 P: (585)720-0012 F: (585)723-3713 http://home.roadrunner.com/~pinncons/ -- Eric Bielefeld Systems Programmer Washington University St Louis, Missouri 314-935-3418 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: OCO, documentation, support from IBM-Main, etc. (was Re: Health Checker questions)
IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu wrote on 12/16/2008 09:57:39 PM: ... the mid 1990s, and somewhere around then production of PLMs (internal and external) ceased in order to reduce development costs. Uh, reduce cost by eliminating Program Logic doc? I assume the PLM was replaced by something else for internal use. Eliminating doc for program logic seems like a good way to also eliminate program logic. PLMs were not internally replaced by any coherant strategy. Some components maintained theirs for a while in TSO data sets, other components did other things (component workbooks, whatever). Others did nothing. Now with worries about an aging carbon-based life form knowledge base, and Wikis being all the rage, now and then there is some excitmemnt about trying to organize that kind of information for internal use. A lot of labor went into writing, maintaining, and producing PLMs, so eliminating them of course immediately reduced some costs. Now, whether or not the benefits of PLMs provided a positive return on investment, and more was lost than was saved by eliminating them, I don't know how to measure that. I am just trying to relate a little of the history as I recall it. BTW, I vaguely recall the before the external PLMs disappeared, some of them had changed format, with diagrams of logic flow being replaced with something else. HIPO diagrams or something like that? That helped lessen the blow of the PLM's demise. First replace it with something useless; then ease the pain by removing the PLM altogether. [insert a scarcasty here if you have one.] Was I the only one that did not like that change? For assembler programs, there was program called FL1 or some such thing that produced flowcharts from special block comment comments imbedded in the code. That is why you would see comments like */* P RESET SVC FLIH SUPER BIT, RESTORE NORMAL FRR STACK */@G381PXU */* P ENABLE PSW FOR I/O EXTERNAL INTERRUPTS */@G381PXU */* D (NO,SVCENTPT,YES,CMSCK) ANY MORE LOCKS */@G381PXU I never coded this stuff myself - I would guess that P produced a process box, and D produced a decision box. This was already falling out of use when I got here in 1979, and the amount of assembler source was continuing to diminish in favor of PL/whatever. HIPOs were becoming the rage in the IBM internal programming classes for new hires, and I probably still have a green plastic HIPO template (similar to to old plastic flowchart templates) stuffed in a drawer somewhere. There was a program called the logic tool that produced HIPO-ish stuff for PLMs from block comments in PL/whatever source code. That is why you may have seen block comments starting with Title: or Logic: , and line comments starting with L: . Some development groups were very much into this stuff, others were not. The PIG (Processor Interface Group, that owned MVS reconfiguration, SADMP, machine check handler, etc in the mid 1980s) loved this stuff, and would develop new modules by first writing the block comments, and then hold design reviews in their meeting room (the PIG pen) of the logic tool output, with great attention to detail on the esthetic beauty of the results. Of course, the ratio of amount of code to programmers was drastically lower in those days. Jim Mulder z/OS System Test IBM Corp. Poughkeepsie, NY -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
