Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Hunkeler Peter (KIUP 4)]

We've got Tectia SSH as a replacement for telnet to login to a
z/OS UNIX shell. Unfortunately, Tectia doesn't support the chcp
command, which makes it pretty much unusable for me.

We've got an elder release (5.3.7.21) so this may well have changed.
I tried to find a hint in the doc on their web site but had no
success.

I understand this thread us about TN3270, and this restriction may 
not even be present in their TN3270 client/server.

--
Peter Hunkeler
CREDIT SUISSE

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Binder API...broke or working as designed

[Chris Craddock]

On Tue, Aug 25, 2009 at 4:01 PM, Tony Harminc  wrote:

> 2009-08-25 William H. Blair  wrote:
>
> > Until the binder API can function as a full-fledged system
> > service, it can't be used by any code that, itself, has to
> > adhere to the previously-established and long-recognized
> > MVS systems integrity and security guidelines.
>
> TSO TEST/TESTAUTH is a (sometimes) successful system-key caller of the
> Binder API. It has had many problems over the years, but it mostly
> seems to get what it needs. Back in 1997 TEST evidently started using
> IEWBIND for everything, and that was soon pulled out for the normal
> case of running from a PDS, because of appalling performance. But it's
> certainly in there at least for the PDSE case, and seems to work.
>

My (potentially faulty) recollection was that calling the API in supervisor
state and/or with a PSW key other than the job step task's key (almost
always 8) very rapidly got you an abend. The reason for that seemed at the
time to be rather naieve choices of subpools for step level resources. At
the time those looked like pretty simple air-head coding choices that could
have been readily changed to something that would have worked correctly for
both privileged and non-privileged callers. But n. Couldn't do that.

-- 
This email might be from the
artist formerly known as CC
(or not) You be the judge.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: How much CPU will mainframe Firewall cost?

[Pinnacle]

- Original Message - 
From: "John Mattson" 

Newsgroups: bit.listserv.ibm-main
Sent: Tuesday, August 25, 2009 1:52 PM
Subject: How much CPU will mainframe Firewall cost?



   How can I get at SWAG on how much CPU will be taken up by
implementing a RACE/SecurityServer Firewall on the mainframe.  Currently
the mainframe is "inside" the communications firewall, but PCI and JSOX
are forcing further considerations.  Anyone have personal experiences to
relate, or can point me at manuals, white papers etc?  Thanks



Hey John,

Just hit a PCI presentation today at SHARE where the IBM speaker said the 
IBM Firewall Services do not meet PCI spec, because it is not a "stateful" 
firewall.  She recommended a hardware firewall.


Regards,
Tom Conley 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Pinnacle]

- Original Message - 
From: "Paul Gilmartin" 

Newsgroups: bit.listserv.ibm-main
Sent: Tuesday, August 25, 2009 12:50 PM
Subject: Re: Software delivery via internet or tape



On Tue, 25 Aug 2009 10:38:39 -0400, Pinnacle wrote:


The timeout issues occur because SMP/E spawns (forks?) a Unix process to
unspin the tarball.  For humongous tarballs, you can get S522 waiting for
the process to get back to the SMP/E batch job.  You can also run into
storage issues as well, as the old default of 64M just ain't enough 
anymore.

I submitted RCF's to have the SMP/E User's guide show TIME=1440 and
REGION=0M in the standard SMP/E JCL.  The book's been updated, so you 
should

be running in TIME=1440 or TIME=NOLIMIT, and REGION=0M.


Since some installations discourage REGION=0M (and NOLIMIT?)
specific values might be more useful.

-- gil



Gil,

We're talking systems programmers running SMP/E jobs.  If a site doesn't 
allow sysprogs to run TIME=1440 and/or REGION=0M, that is just plain wrong.


Regards,
Tom Conley 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Pinnacle]

- Original Message - 
From: "John Mattson" 

Newsgroups: bit.listserv.ibm-main
Sent: Tuesday, August 25, 2009 4:26 PM
Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable



EXCELLENT Question.   The kind on insight I need here.
   We use Rumba, running on a Windows server to talk allow 3270 type
communication from users on Windows boxes who need to access our  zOS
system, TSO, CICS, and some VTAM apps.
Problem is that PCI and JSOX do not think this is sucure... and it is
certainly not secure enough.  Users are on our internal net, or coming in
thru VPN to our internal net, firewalls on the network, not zOS.
   Management seems to believe that SSL is not sufficient, they must
have SSH and I am working on getting IBM Ported Tools installed.  Just
where the TN3270 would go, server or user PC... etc, most everything is up
in the air at this point.
I am also looking at what is involved in putting a firewall on
zOS, and framkly, I am WAY over my head.


Hey John,

I set up SSL for TN3270 by being my own certificate authority and running 
gskkyman to set up a key database.  Used port 1023 to point to the key 
database in TCPIP.PROFILE, and viola!  Full SSL encryption for everything in 
the TN3270 session.  Those who are demanding SSH know not what they do (to 
paraphrase a famous martyr).  I even set it up on my P390 at home running 
good old z/OS V1R4.  This satisfied the PCI audit requirement, but 
unfortunately, many PCI auditors are clueless when it comes to the 
mainframe.  As far as the emulator, the best $30 I ever spent was for Tom 
Brennan's Vista, www.tombrennansoftware.com.  I beat on Tom in the spring of 
2008 to add the SSL support and he came through big time.  Just my $.02.


Regards,
Tom Conley 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Enterprise Cobol 4.2

[Steve Comstock]

Frank Swarbrick wrote:

I was pleased to attend the SHARE session for the just announced Enterprise Cobol for 
z/OS 4.2.  I was especially pleased because it has satisfied a marketing requirement that 
I submitted (really just pushing for a SHARE requirement from some years back).  That is 
(quoting from the official announcement) "A new compiler option, BLOCK0, lets 
programs take advantage of system-determined block size for QSAM output files.  When a 
program is compiled using the BLOCK0 compiler option, an implicit BLOCK CONTAINS 0 clause 
is activated for all eligible QSAM files in the program, which can result in enhanced 
processing speed and minimized storage requirements for output files."

A small thing, perhaps, but from the discussion about it here a few months ago 
I think I am not the only one who will appreciate this enhancement.

Here is the official announcement:

http://www-01.ibm.com/common/ssi/ShowDoc.jsp?docURL=/common/ssi/rep_ca/1/877/ENUSZP09-0281/index.html&breadCrum=DET001PT022&url=buttonpressed=DET001PT116&page=1000&paneltext1=DET001PEF011&user+type=EXT&lang=en_GB&InfoType=AN&InfoSubType=CA&InfoDesc=Announcement+Letters&panelurl=index.wss%3Fbuttonpressed%3DDET001PT116%26page%3D1000%26paneltext1%3DDET001PEF011%26user%2Btype%3DEXT&paneltext=Announcement%20letter%20search

Another nice usability enhancement is the listing of the CICS compile options 
when using the CICS integrated pre-compiler.

The biggest enhancement looks to be XML validation.

Special thanks to Tom Ross for pushing for the BLOCK0 option!!

Frank



The information contained in this electronic communication and any document 
attached hereto or transmitted herewith is confidential and intended for the 
exclusive use of the individual or entity named above.  If the reader of this 
message is not the intended recipient or the employee or agent responsible for 
delivering it to the intended recipient, you are hereby notified that any 
examination, use, dissemination, distribution or copying of this communication 
or any part thereof is strictly prohibited.  If you have received this 
communication in error, please immediately notify the sender by reply e-mail 
and destroy this communication.  Thank you.



And, the new compiler features will be included in our
COBOL courses by next week.

--

Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-393-8716
http://www.trainersfriend.com

  z/OS Application development made easier
* Our classes include
   + How things work
   + Programming examples with realistic applications
   + Starter / skeleton code
   + Complete working programs
   + Useful utilities and subroutines
   + Tips and techniques

==> Ask about being added to our opt-in list:  <==
==>   * Early announcement of new courses  <==
==>   * Early announcement of new techincal papers <==
==>   * Early announcement of new promotions   <==

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Enterprise Cobol 4.2

[Scott Rowe]

Frank, I didn't know you were here!  I am going to have to find you and snub 
you, and maybe even answer every question you have about Sysplex - that'll larn 
ya!

>>> Frank Swarbrick  08/25/09 9:14 PM >>>
I was pleased to attend the SHARE session for the just announced Enterprise 
Cobol for z/OS 4.2.  I was especially pleased because it has satisfied a 
marketing requirement that I submitted (really just pushing for a SHARE 
requirement from some years back).  That is (quoting from the official 
announcement) "A new compiler option, BLOCK0, lets programs take advantage of 
system-determined block size for QSAM output files.  When a program is compiled 
using the BLOCK0 compiler option, an implicit BLOCK CONTAINS 0 clause is 
activated for all eligible QSAM files in the program, which can result in 
enhanced processing speed and minimized storage requirements for output files."

A small thing, perhaps, but from the discussion about it here a few months ago 
I think I am not the only one who will appreciate this enhancement.

Here is the official announcement:

http://www-01.ibm.com/common/ssi/ShowDoc.jsp?docURL=/common/ssi/rep_ca/1/877/ENUSZP09-0281/index.html&breadCrum=DET001PT022&url=buttonpressed=DET001PT116&page=1000&paneltext1=DET001PEF011&user+type=EXT&lang=en_GB&InfoType=AN&InfoSubType=CA&InfoDesc=Announcement+Letters&panelurl=index.wss%3Fbuttonpressed%3DDET001PT116%26page%3D1000%26paneltext1%3DDET001PEF011%26user%2Btype%3DEXT&paneltext=Announcement%20letter%20search

Another nice usability enhancement is the listing of the CICS compile options 
when using the CICS integrated pre-compiler.

The biggest enhancement looks to be XML validation.

Special thanks to Tom Ross for pushing for the BLOCK0 option!!

Frank


>>> 

The information contained in this electronic communication and any document 
attached hereto or transmitted herewith is confidential and intended for the 
exclusive use of the individual or entity named above.  If the reader of this 
message is not the intended recipient or the employee or agent responsible for 
delivering it to the intended recipient, you are hereby notified that any 
examination, use, dissemination, distribution or copying of this communication 
or any part thereof is strictly prohibited.  If you have received this 
communication in error, please immediately notify the sender by reply e-mail 
and destroy this communication.  Thank you.

-- 

Frank Swarbrick
Applications Architect - Mainframe Applications Development
FirstBank Data Corporation - Lakewood, CO  USA
P: 303-235-1403

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



CONFIDENTIALITY/EMAIL NOTICE: The material in this transmission contains 
confidential and privileged information intended only for the addressee.  If 
you are not the intended recipient, please be advised that you have received 
this material in error and that any forwarding, copying, printing, 
distribution, use or disclosure of the material is strictly prohibited.  If you 
have received this material in error, please (i) do not read it, (ii) reply to 
the sender that you received the message in error, and (iii) erase or destroy 
the material. Emails are not secure and can be intercepted, amended, lost or 
destroyed, or contain viruses. You are deemed to have accepted these risks if 
you communicate with us by email. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SHARE comments

[Scott Rowe]

Yes, I snubbed Mark, and Ed Jaffe, and many others to boot (trying to make up 
for lost time).  So far I have snubbed Bob Rodgers at least a dozen times ;-)

>>> Mark Zelden  08/25/09 7:02 PM >>>
On Tue, 25 Aug 2009 14:35:32 -0700, Edward Jaffe
 wrote:

>Scott Ford wrote:
>
>I got to snub Scott Ford in Denver. It was an honor. :-)
>

And I got snubbed by Scott Rowe who told me he hadn't been to SHARE
in 9 years.   I've also run into some first timers (not zNextGeners or
people new to the platform).  That includes someone from my company
that is at SHARE for the first time.

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



CONFIDENTIALITY/EMAIL NOTICE: The material in this transmission contains 
confidential and privileged information intended only for the addressee.  If 
you are not the intended recipient, please be advised that you have received 
this material in error and that any forwarding, copying, printing, 
distribution, use or disclosure of the material is strictly prohibited.  If you 
have received this material in error, please (i) do not read it, (ii) reply to 
the sender that you received the message in error, and (iii) erase or destroy 
the material. Emails are not secure and can be intercepted, amended, lost or 
destroyed, or contain viruses. You are deemed to have accepted these risks if 
you communicate with us by email. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SHARE comments

[Scott Ford]

I agree with you. What I have seen of the Share presentation
Hi Linda,

I agree with you. What I have seen of the Share presentations are absolutely 
great. I am in high hopes to go to a share and meet some of the Listserv folks.
Unfortuately, I think a lot of folks are stuck the crazy economy and companies 
really dont have the capital to pay for a Share. This is a sin in my eyes. I 
think we all can learn a lot
from each other. Everyone has a different skill set and has a lot to offer. I 
think Share sounds like a perfect place to share experiences and of course make 
new friends...

 
Regards, 
Scott J Ford
 





From: Linda Mooney 
To: IBM-MAIN@bama.ua.edu
Sent: Tuesday, August 25, 2009 7:01:40 PM
Subject: Re: SHARE comments

Hi Scott, 



Respectfully, I also work for a company that has sometimes been able to send me 
and often, especially lately, not.  What I have learned at Share and from the 
folks and contacts made there has been priceless.  I too have learned a great 
deal of what I know from hard old-fas hioned work. B elieve me, I have an large 
appreciation for those who figure it out and keep on keeping on.  I do a lot of 
that stuff too.  



Thing is, I can get about a year's worth of 'digging it out' equivalalency 
along with the differing perspectives of those who have traveled that way 
before, just from one Share. Oft times, I can help somebody else out too.   



I have managed to get to nearly every Share the last few years.  Sadly, I 
couldn't make it to Denver, but I am planning on Seattle.  There is little 
doubt that I will have to pay my own way again.  I have my own  Share savings 
fund, and I hound the discounts. T he Share hotels often have extras if you 
join their hotel club - I got free internet every night in San Jose, otherwise 
$12.95 per night - and 3 free breakfasts.  In Austin, I used other discounts av 
ailable to me .  In Baltimore, I helped the hotel out with an evening IT 
problem and explained how to fix the root cause of the problem.  The manager 
gave me an extra  discount off the room rate.  In Tampa, the convention center 
had lots of deep discount and free entree coupons for walking distance 
restaurants.  There were lots more at the Tampa Welcome Center, also close by.  
If you take even just one class (online!) at your local college, you can sign 
up for a Student Advantage card and
 get all sorts of student discounts, especially travel discounts, everyday.  If 
you are a full time student (12 units), Share has a big discount for that.  If 
you are a student or new to mainframes or new to a specific area, get connected 
with zNextGen and/or the project for your chosen area - see the Share website. 



Don't forget the Share early registration discounts.  I try to use local 
transit from/to the airports unless the hotel has a complimentary shuttle.  If 
your company offers any type of educational/tuition reimbursement, you might be 
able to get at least partial reimburs ement there.  My company only grants 
tuition reimbursement with a certificate - so I look for a Share certificate 
track that contains the sessions I want to go to anyway.  Perhaps, you might 
try writing up a justification, along with some of the session specifics, to 
pursuade the boss.  Mayb e you can get him to give you the time 'on the 
clock'.  Maybe you might have to get there anyway you can the first time and 
bring back so much value that they pay the next time.  I also take info 
requests from my co-workers and try to get them as much of what they want as I 
can.  I don't necessarily do all of these, every time.  But these things have 
gotten me to the last 6 out of 8 Shares. 
 I know it can be difficult, but for me, it has been worth it. 



Just my opinion and my experience. YMMV. 



Linda Mooney 


- Original Message - 
From: "Scott Ford"  
To: IBM-MAIN@bama.ua.edu 
Sent: Tuesday, August 25, 2009 10:54:11 AM GMT -08:00 US/Canada Pacific 
Subject: Re: SHARE comments 

It would be nice to have information shared, i.e.; without a hook...no 
sales pitch, etc. Some of use work for companies that cant spring for Share... 
We had to learn z/OS and its components the old fashioned way. hard school of 
knocks 

  
Scott J Ford 
  




 
From: "Gibney, Dave"  
To: IBM-MAIN@bama.ua.edu 
Sent: Tuesday, August 25, 2009 11:41:53 AM 
Subject: Re: SHARE comments 

  Looks like the ultimate snub of those of us IBM-MAINers unable to 
attend SHARE.  :) 

> -Original Message- 
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On 
> Behalf Of Richards, Robert B. 
> Sent: Tuesday, August 25, 2009 3:30 AM 
> To: IBM-MAIN@bama.ua.edu 
> Subject: SHARE comments 
> 
> For those at SHARE who wish to share with the rest of us, Timothy 
Sipples 
> posted this on the MAINFRAME site: 
> 
> 
> Share Your Comments on SHARE 
> 
> SHARE holds its big conference this week in 
> beautif

Enterprise Cobol 4.2

[Frank Swarbrick]

I was pleased to attend the SHARE session for the just announced Enterprise 
Cobol for z/OS 4.2.  I was especially pleased because it has satisfied a 
marketing requirement that I submitted (really just pushing for a SHARE 
requirement from some years back).  That is (quoting from the official 
announcement) "A new compiler option, BLOCK0, lets programs take advantage of 
system-determined block size for QSAM output files.  When a program is compiled 
using the BLOCK0 compiler option, an implicit BLOCK CONTAINS 0 clause is 
activated for all eligible QSAM files in the program, which can result in 
enhanced processing speed and minimized storage requirements for output files."

A small thing, perhaps, but from the discussion about it here a few months ago 
I think I am not the only one who will appreciate this enhancement.

Here is the official announcement:

http://www-01.ibm.com/common/ssi/ShowDoc.jsp?docURL=/common/ssi/rep_ca/1/877/ENUSZP09-0281/index.html&breadCrum=DET001PT022&url=buttonpressed=DET001PT116&page=1000&paneltext1=DET001PEF011&user+type=EXT&lang=en_GB&InfoType=AN&InfoSubType=CA&InfoDesc=Announcement+Letters&panelurl=index.wss%3Fbuttonpressed%3DDET001PT116%26page%3D1000%26paneltext1%3DDET001PEF011%26user%2Btype%3DEXT&paneltext=Announcement%20letter%20search

Another nice usability enhancement is the listing of the CICS compile options 
when using the CICS integrated pre-compiler.

The biggest enhancement looks to be XML validation.

Special thanks to Tom Ross for pushing for the BLOCK0 option!!

Frank


>>> 

The information contained in this electronic communication and any document 
attached hereto or transmitted herewith is confidential and intended for the 
exclusive use of the individual or entity named above.  If the reader of this 
message is not the intended recipient or the employee or agent responsible for 
delivering it to the intended recipient, you are hereby notified that any 
examination, use, dissemination, distribution or copying of this communication 
or any part thereof is strictly prohibited.  If you have received this 
communication in error, please immediately notify the sender by reply e-mail 
and destroy this communication.  Thank you.

-- 

Frank Swarbrick
Applications Architect - Mainframe Applications Development
FirstBank Data Corporation - Lakewood, CO  USA
P: 303-235-1403

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Binder API...broke or working as designed

[Tony Harminc]

2009-08-25 William H. Blair  wrote:

> Until the binder API can function as a full-fledged system
> service, it can't be used by any code that, itself, has to
> adhere to the previously-established and long-recognized
> MVS systems integrity and security guidelines.

TSO TEST/TESTAUTH is a (sometimes) successful system-key caller of the
Binder API. It has had many problems over the years, but it mostly
seems to get what it needs. Back in 1997 TEST evidently started using
IEWBIND for everything, and that was soon pulled out for the normal
case of running from a PDS, because of appalling performance. But it's
certainly in there at least for the PDSE case, and seems to work.

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SHARE comments

[Mark Zelden]

On Tue, 25 Aug 2009 14:35:32 -0700, Edward Jaffe
 wrote:

>Scott Ford wrote:
>
>I got to snub Scott Ford in Denver. It was an honor. :-)
>

And I got snubbed by Scott Rowe who told me he hadn't been to SHARE
in 9 years.   I've also run into some first timers (not zNextGeners or
people new to the platform).  That includes someone from my company
that is at SHARE for the first time.

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SHARE comments

[Linda Mooney]

Hi Scott, 



Respectfully, I also work for a company that has sometimes been able to send me 
and often, especially lately, not.  What I have learned at Share and from the 
folks and contacts made there has been priceless.  I too have learned a great 
deal of what I know from hard old-fas hioned work. B elieve me, I have an large 
appreciation for those who figure it out and keep on keeping on.  I do a lot of 
that stuff too.  



Thing is, I can get about a year's worth of 'digging it out' equivalalency 
along with the differing perspectives of those who have traveled that way 
before, just from one Share. Oft times, I can help somebody else out too.   



I have managed to get to nearly every Share the last few years.  Sadly, I 
couldn't make it to Denver, but I am planning on Seattle.  There is little 
doubt that I will have to pay my own way again.  I have my own  Share savings 
fund, and I hound the discounts. T he Share hotels often have extras if you 
join their hotel club - I got free internet every night in San Jose, otherwise 
$12.95 per night - and 3 free breakfasts.  In Austin, I used other discounts av 
ailable to me .  In Baltimore, I helped the hotel out with an evening IT 
problem and explained how to fix the root cause of the problem.  The manager 
gave me an extra  discount off the room rate.  In Tampa, the convention center 
had lots of deep discount and free entree coupons for walking distance 
restaurants.  There were lots more at the Tampa Welcome Center, also close by.  
If you take even just one class (online!) at your local college, you can sign 
up for a Student Advantage card and get all sorts of student discounts, 
especially travel discounts, everyday.  If you are a full time student (12 
units), Share has a big discount for that.  If you are a student or new to 
mainframes or new to a specific area, get connected with zNextGen and/or the 
project for your chosen area - see the Share website. 



Don't forget the Share early registration discounts.  I try to use local 
transit from/to the airports unless the hotel has a complimentary shuttle.  If 
your company offers any type of educational/tuition reimbursement, you might be 
able to get at least partial reimburs ement there.  My company only grants 
tuition reimbursement with a certificate - so I look for a Share certificate 
track that contains the sessions I want to go to anyway.  Perhaps, you might 
try writing up a justification, along with some of the session specifics, to 
pursuade the boss.  Mayb e you can get him to give you the time 'on the 
clock'.  Maybe you might have to get there anyway you can the first time and 
bring back so much value that they pay the next time.  I also take info 
requests from my co-workers and try to get them as much of what they want as I 
can.  I don't necessarily do all of these, every time.  But these things have 
gotten me to the last 6 out of 8 Shares.  I know it can be difficult, but for 
me, it has been worth it. 



Just my opinion and my experience. YMMV. 



Linda Mooney 


- Original Message - 
From: "Scott Ford"  
To: IBM-MAIN@bama.ua.edu 
Sent: Tuesday, August 25, 2009 10:54:11 AM GMT -08:00 US/Canada Pacific 
Subject: Re: SHARE comments 

It would be nice to have information shared, i.e.; without a hook...no 
sales pitch, etc. Some of use work for companies that cant spring for Share... 
We had to learn z/OS and its components the old fashioned way. hard school of 
knocks 

  
Scott J Ford 
  




 
From: "Gibney, Dave"  
To: IBM-MAIN@bama.ua.edu 
Sent: Tuesday, August 25, 2009 11:41:53 AM 
Subject: Re: SHARE comments 

  Looks like the ultimate snub of those of us IBM-MAINers unable to 
attend SHARE.  :) 

> -Original Message- 
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On 
> Behalf Of Richards, Robert B. 
> Sent: Tuesday, August 25, 2009 3:30 AM 
> To: IBM-MAIN@bama.ua.edu 
> Subject: SHARE comments 
> 
> For those at SHARE who wish to share with the rest of us, Timothy 
Sipples 
> posted this on the MAINFRAME site: 
> 
> 
> Share Your Comments on SHARE 
> 
> SHARE holds its big conference this week in 
> beautiful Denver, Colorado. It's one of the biggest mainframe-focused 
> conferences in the world and arguably the most enjoyable. (But there 
are 
> plenty of seminars on a broad range of IT topics.) 
> 
> Are you attending this SHARE? Learn anything new and interesting? See 
> anything particularly impressive in the exhibit hall? Did you see any 
old 
> friends or make any new ones? Consider this an open thread to post 
your 
> comments. 
> 
> 
> 
> To post your comments, go to: http://mainframe.typepad.com/ 
> 
> Bob 
> 
> 
> 
> -- 
> For IBM-MAIN subscribe / signoff / archive access instructions, 
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO 
> Search the archives at http

Re: SHARE comments

[Scott Ford]

___
geeez , thx :)
 
Scott J Ford
 





From: Edward Jaffe 
To: IBM-MAIN@bama.ua.edu
Sent: Tuesday, August 25, 2009 5:35:32 PM
Subject: Re: SHARE comments

Scott Ford wrote:

I got to snub Scott Ford in Denver. It was an honor. :-)

-- Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
edja...@phoenixsoftware.com
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Binder API...broke or working as designed

[William H. Blair]

William Blair wrote:

> Until the binder API can function
> as a full-fledged system service, it can't be used by any
> code that, itself, has to adhere to long-established MVS 
> integrity and authority guidelines.  

That could have been better worded, as follows:

Until the binder API can function as a full-fledged system 
service, it can't be used by any code that, itself, has to 
adhere to the previously-established and long-recognized 
MVS systems integrity and security guidelines.  

--
WB

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SHARE comments

[Edward Jaffe]

Scott Ford wrote:

I got to snub Scott Ford in Denver. It was an honor. :-)

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
edja...@phoenixsoftware.com
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Sysplex dis/advantages

[Stephen Y Odo]

Arthur Gutowski wrote:
> Merging existing systems is a necessity, and it needs to be staged in 
> manageable chunks.  I think most of the various groups in IBM understand 
> that (growing pains and scars).  As a sysprog's job goes largely unnoticed 
> (until something goes wrong), more so goes that of e Software Developer.  
>   

That's exactly what I was hoping to get out of this when I posted my
"how-to Sysplex?" message ...

What are those manageable chunks and in what order should I do them.  I
want to get there without too much disruption ... but don't know where
to start ...

i.e. what is the "safe" path?  or is there such a thing?

Thanks.

--Stephen

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Sysplex dis/advantages

[Arthur Gutowski]

Whew.  Barbara, thanks for the subject change; that was getting ornery.

Chris, I don't think anyone argues the advantages of horizontal scaling and 
availability nor Sysplex as "the" means to provide it within System z.  My vote 
is for IBM to continue to develop and support it.

I *think* bubbling up from these threads are complaints about hurdles to 
getting to Sysplex from an established environment.  As a former IBM sysprog-
for-hire, I can recall only one customer that ever built a sysplex from 
scratch, 
then migrated workload to it (and that was for a Domino/390 customer moving 
from *nix/WIntel, not MVS-to-MVS).  

Nobody's going to get there on Day One.  A wise colleague of mine, when I 
walked into this shop seven years ago, that "maybe together we can drag 'em 
kicking and screaming into the 90s."  I gather from other learned posters in 
this group that we are the norm, rather than the exception.  Change of this 
magnatude, for organizations of comparable (or larger size), is a slow and 
often painful process.

Merging existing systems is a necessity, and it needs to be staged in 
manageable chunks.  I think most of the various groups in IBM understand 
that (growing pains and scars).  As a sysprog's job goes largely unnoticed 
(until something goes wrong), more so goes that of e Software Developer.  
There are few notable stragglers (Logger, RACF), but IMHO, *all* (except GRS 
& XCF for itself, right) should support sub-plexing, or else provide mitigating 
functionality for customers making the deliberate pilgrimmage to the holy land.

Of course, as I posted in another thread (which I think eventually spawned 
this one), IBM marketing types (note the use of the polite adjective here) do 
not make this any easier with pricing incentives to promote a technical 
architecture.  I want to enable sysplex to the fullest extent possible because 
I 
know it will save time, effort, space, and possibly even a few hard and soft $$ 
(balanced against the expense of implementation).  We (technicians) spent 7 
years lobbying for it, and was finally starting to make some headway, then 
IBM came in and dangled the $$ carrot in front of the PHBs, and suddenly we 
merged seven systems in eight months.  We're still dealing with a variety of 
issues from this slam-dunk project.

Ah, but at least it's a start next up:  DASD & SMS (if we can ever get 
through the list of other Priority 1 projects)!

Regards,
Art Gutowski
Ford Motor Company

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Hal Merritt]

Your management has been misinformed. Many argue that TLS is the more secure.  

Perhaps that's why you see a lot of free SSH ports, but not many free TLS 
ports. And yet TLS (certificate based authentication and encryption) is 
everywhere. 

Just one issue I've noted is that SSH stows its private/secret keys in the open 
in ordinary files. TLS uses the RACF database or the ICF. 

Use of 'man in the middle' servers may not be PCI compliant, or, if they are, 
may not be so for long. Seems that MITM servers may be a soft target and become 
popular attack vector. 

VPN is a good solution, but not PCI compliant. You shouldn't have sensitive 
data flowing over a network in the open. Period. You would use VPN to gain 
access to the network, but layer another solution such as TLS on top. 

HTH and good luck. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
John Mattson
Sent: Tuesday, August 25, 2009 3:25 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable

EXCELLENT Question.   The kind on insight I need here. 
We use Rumba, running on a Windows server to talk allow 3270 type 
communication from users on Windows boxes who need to access our  zOS 
system, TSO, CICS, and some VTAM apps. 
Problem is that PCI and JSOX do not think this is sucure... and it is 
certainly not secure enough.  Users are on our internal net, or coming in 
thru VPN to our internal net, firewalls on the network, not zOS. 
Management seems to believe that SSL is not sufficient, they must 
have SSH and I am working on getting IBM Ported Tools installed.  Just 
where the TN3270 would go, server or user PC... etc, most everything is up 
in the air at this point. 
 I am also looking at what is involved in putting a firewall on 
zOS, and framkly, I am WAY over my head. 



"Patrick O'Keefe"  
Sent by: IBM Mainframe Discussion List 
08/25/2009 12:43 PM
Please respond to
IBM Mainframe Discussion List 
Expire Date: 08/25/2011


To
IBM-MAIN@bama.ua.edu
cc

Subject
Re: Need new 3270 emulator: SSH, inexpensive, reliable




On Tue, 25 Aug 2009 10:35:18 -0700, John Mattson 
 wrote:
> ...   Management ... now wants a SSH based >3270 emulation for 
accessing mainframe TSO, CICS, and such apps.  >...
> Uh, something I've missed in the thread so far: What are you going to 
talk to?  Does some vendor produce an SSH-based Tn3270 server?  Or are you 

> going to talk with some server that includes a Tn3270 client that then 
connects to the local z/CS Tn3270 server?  (Maybe something sort of like 
HATS > except with  some special SSH client rather than a browser.)  Or 
something else I can't envision?
> It looks to me like somebody has tried to define a solution rather 
defining the problem and then looking for solutions that address it.
> Pat O'Keefe


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Anne & Lynn Wheeler]

l...@garlic.com (Anne & Lynn Wheeler) writes:
> we had been called in to consult with a small client/server startup that
> wanted to do payment transactions on their server ... and the startup
> had invented this technology called SSL that they wanted to use. As part
> of that deployment ... now frequently called "electronic commerce"
> ... we had to investigate some number of these new operations called
> "Certification Authorities" that were issuing things called "digital
> certificates".

re:
http://www.garlic.com/~lynn/2009m.html#5 Need new 3270 emulator: SSH, 
inexpensive, reliable
http://www.garlic.com/~lynn/2009m.html#7 Need new 3270 emulator: SSH, 
inexpensive, reliable

for a little x-over from this recent thread:
http://www.garlic.com/~lynn/2009l.html#66 ACP, One of the Oldest Open Source 
Apps

two of the people mentioned in this reference to Jan92 meeting
http://www.garlic.com/~lynn/95.html#13

latter left and show up at the small client/server startup responsible
for something called "commerce server" ... and wanting to do payment
transactions on their server (by that time we had also left) ...  now
frequently referred to as "electronic commerce".

the resultig "payment gateway" gateway ... I periodically refer to as
the original SOA
http://www.garlic.com/~lynn/subnetwork.html#gateway

-- 
40+yrs virtualization experience (since Jan68), online at home since Mar1970

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Binder API...broke or working as designed

[William H. Blair]

Leona Baumgart stated: 

>  If LE is not available

Uh ... since LE is part of the BCP, how, exactly, would it ever
be "not available?"  I am not disputing that there is, perhaps,
some test that the binder code makes, but I cannot imagine what
that test is. 

> will re-contact both Chris and William Blair about their list 
> of concerns.

Looking forward to it. But - perhaps to save you some work - you
should be aware that the resolution of most (if not all) of the
issues identified in the past will be of absolutely no value to
us whatsoever unless and until the restriction that the binder
[API] cannot be invoked by a key zero routine in ANY arbitrary
address space (within reason -- we are not expecting to do this
inside of PCAUTH, for example) in a task whose TCB key is _not_
also zero. In other words, unless we can invoke the binder API
in key zero (for the binder API to run in key zero) in a TCB 
whose TCB key is, say, 4, 8, 1, 6, or 7, and possibly even 2,
3, or 5, then any fixes or workarounds for all of the other 
issues would not be of any benefit (except, possibly, to some
others). 

That may be why some of the dialog (in the past) was not 
continued or completed. Until the binder API can function
as a full-fledged system service, it can't be used by any
code that, itself, has to adhere to long-established MVS 
integrity and authority guidelines.  

--
WB

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

WHOIS

[gsg]

Does anyone use the WHOIS proc that you can provides a users name that is 
associated with a USERID?  The command that we use is 'TSO WHOIS userid'.  
I think that it was written for a 7 character userid, but we have some that are 
6 characters.  Was wondering if anyone ever fixed this or if anyone has 
something similar.

TIA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[John Mattson]

EXCELLENT Question.   The kind on insight I need here. 
We use Rumba, running on a Windows server to talk allow 3270 type 
communication from users on Windows boxes who need to access our  zOS 
system, TSO, CICS, and some VTAM apps. 
Problem is that PCI and JSOX do not think this is sucure... and it is 
certainly not secure enough.  Users are on our internal net, or coming in 
thru VPN to our internal net, firewalls on the network, not zOS. 
Management seems to believe that SSL is not sufficient, they must 
have SSH and I am working on getting IBM Ported Tools installed.  Just 
where the TN3270 would go, server or user PC... etc, most everything is up 
in the air at this point. 
 I am also looking at what is involved in putting a firewall on 
zOS, and framkly, I am WAY over my head. 



"Patrick O'Keefe"  
Sent by: IBM Mainframe Discussion List 
08/25/2009 12:43 PM
Please respond to
IBM Mainframe Discussion List 
Expire Date: 08/25/2011


To
IBM-MAIN@bama.ua.edu
cc

Subject
Re: Need new 3270 emulator: SSH, inexpensive, reliable




On Tue, 25 Aug 2009 10:35:18 -0700, John Mattson 
 wrote:
> ...   Management ... now wants a SSH based >3270 emulation for 
accessing mainframe TSO, CICS, and such apps.  >...
> Uh, something I've missed in the thread so far: What are you going to 
talk to?  Does some vendor produce an SSH-based Tn3270 server?  Or are you 

> going to talk with some server that includes a Tn3270 client that then 
connects to the local z/CS Tn3270 server?  (Maybe something sort of like 
HATS > except with  some special SSH client rather than a browser.)  Or 
something else I can't envision?
> It looks to me like somebody has tried to define a solution rather 
defining the problem and then looking for solutions that address it.
> Pat O'Keefe


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Stephen Y Odo]

John Mattson wrote:
> I am learning this as I go. As I understand it, SSH supports 
> higher security levels (management wants this) than SSL/TLS.  And SSL 
>   
??? but SSH uses the very same SSL under the covers ... how does it
support higher security levels?
> requires Certificate authority and such which management does not want to 
>   
we generate our own Certificate Authority certificate and all of our
server certificates via RACF/RACDCERT.  all of our emulators
(Hummingbird HostExplorer, x3270, Brown-tn3270, etc.) have had no
problems with it.
> pay for.  Attachmate website "says" they can do SSH with their emulator, 
> so at least someone thinks it is possible. 
>   
you could always tunnel plain tn3270 over SSH ... but just using the
built-in tn3270E with SSL/TLS and any number of free or commercial
tn3270E clients will be much easier and be just as secure ...

--Stephen


-- 
 
-
Stephen Y. Odo
Systems Engineeringe-mail: step...@hawaii.edu
Information Technology Services phone:  (808)956-2383
University of Hawai'i FAX:  (808)956-2412
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
U5 Girls/Boys Master Coach
U16/U19 Girls Age Group Coordinator
Assistant Region Registrar 
AYSO Honolulu Region 178   e-mail:   s...@lava.net
-

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: How much CPU will mainframe Firewall cost?

[Clark, Kevin]

John, 

I don't have any idea on how much. But to qualify the usage of the
firewall on the mainframe, if the business Firewall(s) are still in
place and stopping extra erroneous traffic. 

There should me minimal CPU usage. Corporate Firewalls on PC servers
don't consume much CPU.  

Redbooks: http://www.redbooks.ibm.com/redbooks/pdfs/sg246235.pdf


I would think that if you are doing something with Crypto authentication
that there may be overhead there. 

Kevin Clark 


-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of John Mattson
Sent: Tuesday, August 25, 2009 1:52 PM
To: IBM-MAIN@bama.ua.edu
Subject: How much CPU will mainframe Firewall cost?


How can I get at SWAG on how much CPU will be taken up by 
implementing a RACE/SecurityServer Firewall on the mainframe.  Currently

the mainframe is "inside" the communications firewall, but PCI and JSOX 
are forcing further considerations.  Anyone have personal experiences to

relate, or can point me at manuals, white papers etc?  Thanks 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


This e-mail message and any attachments transmitted with it are confidential 
and are intended solely for the use of its authorized recipient(s). If you are 
not an intended or authorized recipient, you are hereby notified that any 
disclosure, copying, distribution or taking any action in reliance on the 
information contained in this e-mail is prohibited. If you have received this 
message in error or are not authorized to receive it, please immediately notify 
the sender and delete the original message and all copies of it from your 
computer.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Anne & Lynn Wheeler]

gib...@wsu.edu (Gibney, Dave) writes:
>   You are not correct. You can make SSL optional and therefore clear if
> it is not used, if the connection is secure, all data (including
> Userid/password) is encrypted.

re:
http://www.garlic.com/~lynn/2009m.html#5 Need new 3270 emulator: SSH, 
inexpensive, reliable

most SSL implementations just has the client validating the server's
digital certificate and then validating whether or not the domain name
claimed in the digital certificate corresponds to the domain name in the
URL used to contact the server (countermeasure to ip-address
hijacking). then the server's public key is used to exchange a symmetric
key ... for encryption of the actual session (des, aes, blowfish,
whatever). then, once the encrypted session is established, client
typically presents userid/password for authentication.

we had been called in to consult with a small client/server startup that
wanted to do payment transactions on their server ... and the startup
had invented this technology called SSL that they wanted to use. As part
of that deployment ... now frequently called "electronic commerce"
... we had to investigate some number of these new operations called
"Certification Authorities" that were issuing things called "digital
certificates".

Also as part of deploying a payment gateway ... requiring SSL for
payment transactions between the webserver and the payment network
... we mandated "mutual authentication" ... which hadn't yet been
implemented at the time (aka client does public key authentication of
the server ... and the server does public key authnetication of the
client ... no passwords). By the time we were done ... the payment
gateway operation looked much more like SSH ... since both the payment
gateway and the webservers had preregistered information about each
other (the things called "digital certificates" became purely artificial
side-effect of the SSL code library being used). misc. past posts
mentioning original payment gateway deployment
http://www.garlic.com/~lynn/subnetwork.html#gateway

SSH has the advantage (compared to typical SSL use) that both parties
does "mutual" public key authentication of the other party w/o requiring
digital certificates and w/o requiring passwords.

some number of generic past posts mentioning public key operations w/o
using (redundant and superfluous) digital certificates.
http://www.garlic.com/~lynn/subpubkey.html#certless

the other issue with SSL ... was that there were some number of
requirements about how it was implemented and deployed in order to
satisfy security requirements ... many of which were almost immediately
violated ... and have subsequently, over the past 15 yrs or so ... have
led to a whole lot of exploits and compromises. part of it involves the
complexity and indirection introduced by these things called "digital
certificates". some number of past posts mentioning SSL (domain name)
digital certificates
http://www.garlic.com/~lynn/subpubkey.html#sslcerts

and from long ago and far away ... nearly three decade old email
discussing for a PGP-like (certificate-less) public key implementation
on the internal network:
http://www.garlic.com/~lynn/2007d.html#email810506
http://www.garlic.com/~lynn/2006w.html#email810516

-- 
40+yrs virtualization experience (since Jan68), online at home since Mar1970

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Librarian to Endevor Conversion--Need Pull all Archive Levels from Librarian

[Anton Britz]

Build different PDS'se with the date in the PDS name, for the different 
 Librarian Archive levels and then HSM and ENDEVOR can handle it..


VSAM file ?  You need to write more code.. and for what..

Anton

Hessong, Keith wrote:

Greetings:

 


My shop is converting from Librarian to Endevor.

 


Librarian today has 255 archive levels at my shop.  On our initial
conversion we need a way to pull off all archive levels for my source
programs and store them away some place.

 


We don't have the Librarian piece for Endevor and cannot purchase this
piece.

 


Has anybody ran into this situation before and willing to share what
they did or even source code for what they are using?

 


Tossed around thoughts about using FAIR Librarian routines to pull off
archive levels and build a VSAM file with key of Program Name and Line
Number to satisfy our needs.  Of course, would need to build a program
to read the VSAM file and pull a program listing back of course.

 


Thanks,

Keith Hessong

(317) 715-7681


This email, including attachments, may include confidential and/or proprietary 
information, and may be used only by the person or entity to which it is 
addressed.  If the reader of this e-mail is not the intended recipient or his 
or her authorized agent, the reader is hereby notified that any dissemination, 
distribution or copying of this e-mail is prohibited.  If you have received 
this e-mail in error, please notify the sender by replying to this message and 
delete this e-mail immediately.
Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Librarian to Endevor Conversion--Need Pull all Archive Levels from Librarian

[Hessong, Keith]

Greetings:



My shop is converting from Librarian to Endevor.



Librarian today has 255 archive levels at my shop.  On our initial
conversion we need a way to pull off all archive levels for my source
programs and store them away some place.



We don't have the Librarian piece for Endevor and cannot purchase this
piece.



Has anybody ran into this situation before and willing to share what
they did or even source code for what they are using?



Tossed around thoughts about using FAIR Librarian routines to pull off
archive levels and build a VSAM file with key of Program Name and Line
Number to satisfy our needs.  Of course, would need to build a program
to read the VSAM file and pull a program listing back of course.



Thanks,

Keith Hessong

(317) 715-7681


This email, including attachments, may include confidential and/or proprietary 
information, and may be used only by the person or entity to which it is 
addressed.  If the reader of this e-mail is not the intended recipient or his 
or her authorized agent, the reader is hereby notified that any dissemination, 
distribution or copying of this e-mail is prohibited.  If you have received 
this e-mail in error, please notify the sender by replying to this message and 
delete this e-mail immediately.
Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Patrick O'Keefe]

On Tue, 25 Aug 2009 10:35:18 -0700, John Mattson 
 wrote:

> ...   Management ... now wants a SSH based
>3270 emulation for accessing mainframe TSO, CICS, and such apps.  
>...

Uh, something I've missed in the thread so far: What are you 
going to talk to?  Does some vendor produce an SSH-based 
Tn3270 server?  Or are you going to talk with some server that 
includes a Tn3270 client that then connects to the local z/CS 
Tn3270 server?  (Maybe something sort of like HATS except with 
some special SSH client rather than a browser.)  Or something
else I can't envision?

It looks to me like somebody has tried to define a solution rather
defining the problem and then looking for solutions that address it.

Pat O'Keefe
  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Bill Johnson]

We in MF tech support agree with you. Our manager is not a MF person. Our 
security dept. is anal but ONLY handles the MF security. We've been fighting 
this battle and losing for years.





From: Ted MacNEIL 
To: IBM-MAIN@bama.ua.edu
Sent: Tuesday, August 25, 2009 1:36:09 PM
Subject: Re: Software delivery via internet or tape

>Fqirst off, our security group will not allow a direct FTP connection to IBM 
>for internet delivery.

It's time to document why you need it, and have management duke it out.
Why are PC's 'safer' than the m/f?
Security is only implementing management policy, so if you truly need it, you 
should be able to convince your management.
(Or, one would hope!)
-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
  

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Gibney, Dave]

  You are not correct. You can make SSL optional and therefore clear if
it is not used, if the connection is secure, all data (including
Userid/password) is encrypted.

Dave Gibney
Information Technology Services
Washington State University


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf Of John Mattson
> Sent: Tuesday, August 25, 2009 12:33 PM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable
> 
> Am I correct in that SSL sends UID and Passwords in the clear, but SSH
> does not?
> Do not PCI and JSOX require these to be encrypted?
> 
> 
> 
> 
> "Gibney, Dave" 
> Sent by: IBM Mainframe Discussion List 
> 08/25/2009 11:29 AM
> Please respond to
> IBM Mainframe Discussion List 
> Expire Date: 08/25/2011
> 
> 
> To
> IBM-MAIN@bama.ua.edu
> cc
> 
> Subject
> Re: Need new 3270 emulator: SSH, inexpensive, reliable
> 
> 
> 
> 
> > I'm not an encryption expert, but I seriously doubt SSH (which has
> always seemed flakey to me) is more secure than SSL.
> 
> 
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Mark Pace]

No, because the SSL handhake occurs before the TN3270 session is
established.

On Tue, Aug 25, 2009 at 3:32 PM, John Mattson wrote:

> Am I correct in that SSL sends UID and Passwords in the clear, but SSH
> does not?
> Do not PCI and JSOX require these to be encrypted?
>
>
>
>
> "Gibney, Dave" 
> Sent by: IBM Mainframe Discussion List 
> 08/25/2009 11:29 AM
> Please respond to
> IBM Mainframe Discussion List 
> Expire Date: 08/25/2011
>
>
> To
> IBM-MAIN@bama.ua.edu
> cc
>
> Subject
> Re: Need new 3270 emulator: SSH, inexpensive, reliable
>
>
>
>
> > I'm not an encryption expert, but I seriously doubt SSH (which has
> always seemed flakey to me) is more secure than SSL.
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>



-- 
Mark Pace
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[John Mattson]

Am I correct in that SSL sends UID and Passwords in the clear, but SSH 
does not? 
Do not PCI and JSOX require these to be encrypted? 




"Gibney, Dave"  
Sent by: IBM Mainframe Discussion List 
08/25/2009 11:29 AM
Please respond to
IBM Mainframe Discussion List 
Expire Date: 08/25/2011


To
IBM-MAIN@bama.ua.edu
cc

Subject
Re: Need new 3270 emulator: SSH, inexpensive, reliable




> I'm not an encryption expert, but I seriously doubt SSH (which has 
always seemed flakey to me) is more secure than SSL. 




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Anne & Lynn Wheeler]

mp...@novell.com (Mark Post) writes:
> SSH depends on SSL to do its encryption.

SSH & SSL both do public key operations

SSL(/TLS) has bunch of stuff in the protocol with (public key) digital
certificates.

SSH protocol doesn't require digital certificates for its public key
operations.

some "open" ssh references:
http://www.openssh.com/
http://en.wikipedia.org/wiki/OpenSSH

"features"
http://www.openssh.com/features.html

the above describes that OpenSSH supports the following symmetric
cryptography (after exchanging symmetric cryptography key using public
key operation): 3DES, Blowfish, AES, Arcfour.

It does mention that some code for licensed or patented components may
be from external libraries (like OpenSSL) ... although not 3DES,
Blowfish, AES, or Arcfour.

I guess that wouldn't preclude a totally different SSH implementation
from borrowing something like AES (or Blowfish) encryption
implementation from a SSL library (and depending how packaged
... possibly dependent on SSL package to work ... as opposed to
including the code in SSH package).

reference to OpenSSH Public Key Authentication
http://sial.org/howto/openssh/publickey-auth/

some "open" SSL references:
http://www.openssl.org/
http://en.wikipedia.org/wiki/OpenSSL

the above mentions that OpenSSL supports the following symmetric
cryptography (after exchanging symmetric cryptography key using public
key operation): Blowfish, Camellia, DES, RC2, RC4, RC5, IDEA, AES.

also (symmetric cryptography) DES wiki page
http://en.wikipedia.org/wiki/Data_Encryption_Standard
AES wiki page
http://en.wikipedia.org/wiki/Advanced_Encryption_Standard
Blowfish wiki page
http://en.wikipedia.org/wiki/Blowfish_%28cipher%29

-- 
40+yrs virtualization experience (since Jan68), online at home since Mar1970

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SHARE comments

[Scott Ford]

It would be nice to have information shared, i.e.; without a hook...no 
sales pitch, etc. Some of use work for companies that cant spring for Share...
We had to learn z/OS and its components the old fashioned way. hard school of 
knocks

 
Scott J Ford
 





From: "Gibney, Dave" 
To: IBM-MAIN@bama.ua.edu
Sent: Tuesday, August 25, 2009 11:41:53 AM
Subject: Re: SHARE comments

  Looks like the ultimate snub of those of us IBM-MAINers unable to
attend SHARE.  :) 

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf Of Richards, Robert B.
> Sent: Tuesday, August 25, 2009 3:30 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: SHARE comments
> 
> For those at SHARE who wish to share with the rest of us, Timothy
Sipples
> posted this on the MAINFRAME site:
> 
> 
> Share Your Comments on SHARE
> 
> SHARE holds its big conference this week in
> beautiful Denver, Colorado. It's one of the biggest mainframe-focused
> conferences in the world and arguably the most enjoyable. (But there
are
> plenty of seminars on a broad range of IT topics.)
> 
> Are you attending this SHARE? Learn anything new and interesting? See
> anything particularly impressive in the exhibit hall? Did you see any
old
> friends or make any new ones? Consider this an open thread to post
your
> comments.
> 
> 
> 
> To post your comments, go to: http://mainframe.typepad.com/
> 
> Bob
> 
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html





--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Mark Post]

>>> On 8/25/2009 at  2:27 PM, "Gibney, Dave"  wrote: 
-snip- 
>  I'm not an encryption expert, but I seriously doubt SSH (which has
> always seemed flakey to me) is more secure than SSL. 

SSH depends on SSL to do its encryption.


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Gibney, Dave]

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf Of John Mattson
> Sent: Tuesday, August 25, 2009 10:58 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable
> 
> 
> I am learning this as I go. As I understand it, SSH supports
> higher security levels (management wants this) than SSL/TLS.  And SSL

 I'm not an encryption expert, but I seriously doubt SSH (which has
always seemed flakey to me) is more secure than SSL. 

> requires Certificate authority and such which management does not want
> to

  I do it as my own Certificate Authority (using RACF). I've also
succeeded getting a certificate signed by our local M$ AD authority.

> pay for.  Attachmate website "says" they can do SSH with their
> emulator,
> so at least someone thinks it is possible.

I will be sure not to mention this. We've almost jumped the political
hoops to mandate SSL Clients for all Tn3270 connections. All I need now
is for someone to throw SSH into the mix :)

> 
> > Date:Tue, 25 Aug 2009 10:40:28 -0700
> > From:"Gibney, Dave" 
> > Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable
> > I don't know (never looked) of any SSH TN3270. I would suggest a VPN
> tunnel.
> > Why SSH, TLS/SSL is almost trivial to implement these days, and the
> are
> many SSL TN3280 clients.
> > Dave Gibney Information Technology Services Washington State
> University
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Binder API...broke or working as designed

[Thomas David Rivers]

Bill Klein wrote:

*JUST* on the issue of the Binder API requiring the LE run-time, I have a
question for you (WB)

Were your discussions with "STL" done before or after "Metal-C" became
available?  It would seem to me (and I certainly could be ENTIRELY wrong on
this), that a SHARE requirement to provide a "Metal-C" (no LE library
required) version of the Binder API *might* receive a positive IBM response
NOW.  While asking for a "no LE version" of the Binder API *before* Metal-C
was available received a negative response.

As I have said before, I just don't see the "harm" in creating a SHARE
requirement for this (or any other Binder "enhancement").  Occassionally
(not all that often) IBM does provide solutions for SHARE requirements where
"similar" individual site marketting requests get rejected.

"William H. Blair"  wrote in message
news:...


Just to keep from loosing some perspective - Dignus' Systems/C
has been available for some time... one might imagine someone
choosing that for an implementation before Metal-C was available.

Metal-C seems to be adopting many of Systems/C features as it
evolves...

- Dave Rivers -


--
riv...@dignus.comWork: (919) 676-0847
Get your mainframe programming tools at http://www.dignus.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Mark T. Regan, K8MTR]

I think SSH can do it. They do it using their "SSH Tectia Connector on Windows" 
product, in conjunction with their SSH product on the mainframe. Reference:

https://www.ssh.com/support/documentation/online/ssh/adminguide-zos/54/Tunneling_TN3270.html
 Mark T. Regan, K8MTR
CTO1 USNR-Retired (1969-1991) 





From: John Mattson 
To: IBM-MAIN@bama.ua.edu
Sent: Tuesday, August 25, 2009 1:35:18 PM
Subject: Need new 3270 emulator: SSH, inexpensive, reliable

        Management is jumping for PCI and JSOX, and now wants a SSH based 
3270 emulation for accessing mainframe TSO, CICS, and such apps.  Please 
feel free to contact me off-list, or phone 562-290-4163,  I am looking for 
actual user/installer endorsements and experiences, good or bad.  Vendors 
OK too.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Mark Pace]

You do not *have* to pay for an SSL certificate.  You can self-sign a
certificate if all you want out of this is encryption.

On Tue, Aug 25, 2009 at 1:57 PM, John Mattson wrote:

>I am learning this as I go. As I understand it, SSH supports
> higher security levels (management wants this) than SSL/TLS.  And SSL
> requires Certificate authority and such which management does not want to
> pay for.  Attachmate website "says" they can do SSH with their emulator,
> so at least someone thinks it is possible.
> 
> > Date:Tue, 25 Aug 2009 10:40:28 -0700
> > From:"Gibney, Dave" 
> > Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable
> > I don't know (never looked) of any SSH TN3270. I would suggest a VPN
> tunnel.
> > Why SSH, TLS/SSL is almost trivial to implement these days, and the are
> many SSL TN3280 clients.
> > Dave Gibney Information Technology Services Washington State University
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>



-- 
Mark Pace
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[John Kelly]

wants a SSH based 3270 emulation for accessing mainframe TSO, CICS, and 
such apps


We're getting sent to the SecureAgent 3270 emulator and it's fairly awful, 
so I'd be interest in any emulators that you find.

Jack Kelly
202-502-2390 (Office)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[John Mattson]

I am learning this as I go. As I understand it, SSH supports 
higher security levels (management wants this) than SSL/TLS.  And SSL 
requires Certificate authority and such which management does not want to 
pay for.  Attachmate website "says" they can do SSH with their emulator, 
so at least someone thinks it is possible. 

> Date:Tue, 25 Aug 2009 10:40:28 -0700
> From:"Gibney, Dave" 
> Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable
> I don't know (never looked) of any SSH TN3270. I would suggest a VPN 
tunnel.
> Why SSH, TLS/SSL is almost trivial to implement these days, and the are 
many SSL TN3280 clients.
> Dave Gibney Information Technology Services Washington State University

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

How much CPU will mainframe Firewall cost?

[John Mattson]

How can I get at SWAG on how much CPU will be taken up by 
implementing a RACE/SecurityServer Firewall on the mainframe.  Currently 
the mainframe is "inside" the communications firewall, but PCI and JSOX 
are forcing further considerations.  Anyone have personal experiences to 
relate, or can point me at manuals, white papers etc?  Thanks 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[shai hess]

HI,

MFNetDisk emulate now 3490E tape and 3390 disk. Currently the tape format is
very the same like AWS but with more data (TM) in the header to enable fast
access to any label in any tape size.

Yes, I think that if IBM will put in one of their PC, MFNetDisk 3390 disk or
MFNetDisk tape with MFNetDisk run in the PC. and put their data (Z/OS PTFs
or  new Z/OS version ) in this PC, they will save the money to distribute
tapes and DVD and everyone will be able to access the tape or the disk
without playing FTP or whatever.


Thanks,
Shai

On Tue, Aug 25, 2009 at 10:39 AM, McKown, John wrote:

> Hum, just thinking out loud, here. Shai has MFNetDisk. I wonder how
> successful would be a "MFNetTape" which would emulate a 3490E type drive via
> TCPIP. The PC itself would run software where the tape could be in AWS or
> HET format (Hercules/P390), FakeTape format (Funsoft - FlexES), or maybe OMA
> (don't remember what did OMA). Just run the software on either a server or a
> desktop and pop the CD/DVD in the drive.
>
> --
> John McKown
> Systems Engineer IV
> IT
>
> Administrative Services Group
>
> HealthMarkets(r)
>
> 9151 Boulevard 26 * N. Richland Hills * TX 76010
> (817) 255-3225 phone * (817)-961-6183 cell
> john.mck...@healthmarkets.com * 
> www.HealthMarkets.com
>
> Confidentiality Notice: This e-mail message may contain confidential or
> proprietary information. If you are not the intended recipient, please
> contact the sender by reply e-mail and destroy all copies of the original
> message. HealthMarkets(r) is the brand name for products underwritten and
> issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake
> Life Insurance Company(r), Mid-West National Life Insurance Company of
> TennesseeSM and The MEGA Life and Health Insurance Company.SM
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Binder API...broke or working as designed

[Leona Baumgart]

I just want to add a few comments to Peter Relson's post.  

1. The binder and LE: The binder uses LE only to produce the C++ demangled
name/mangled name cross reference in the listing.  If LE is not available,
the only consequence is that an informational message is issued and the
report is not written.
2. I am working on updating the lengthy note I sent to Chris last October
and will re-contact both Chris and William Blair about their list of concerns.
3. I am also looking into David Day's original complaint. The current
documentation of the behavior is in the SECTION parameter description under
GETD and GETE in the Program Management Advanced Facilities manual. I am
checking its accuracy. At a minimum I think some clarification and
additional words would make it more useful to the API user.  This
investigation could take me a few days to complete.   

I agree with Peter that SHARE requirements would be very useful in getting
prioity for new functions.

Leona Baumgart
z/OS Binder Development

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Mark Pace]

I've never seen and SSH based TN3270 client.  For secure connections I've
seen TLS/SSL clients.

On Tue, Aug 25, 2009 at 1:40 PM, Gibney, Dave  wrote:

>  I don't know (never looked) of any SSH TN3270. I would suggest a VPN
> tunnel.
>
>  Why SSH, TLS/SSL is almost trivial to implement these days, and the
> are many SSL TN3280 clients.
>
> Dave Gibney
> Information Technology Services
> Washington State University
>
>
> > -Original Message-
> > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> > Behalf Of John Mattson
> > Sent: Tuesday, August 25, 2009 10:35 AM
> > To: IBM-MAIN@bama.ua.edu
> > Subject: Need new 3270 emulator: SSH, inexpensive, reliable
> >
> >
> > Management is jumping for PCI and JSOX, and now wants a SSH
> > based
> > 3270 emulation for accessing mainframe TSO, CICS, and such apps.
> > Please
> > feel free to contact me off-list, or phone 562-290-4163,  I am looking
> > for
> > actual user/installer endorsements and experiences, good or bad.
> > Vendors
> > OK too.
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> > Search the archives at http://bama.ua.edu/archives/ibm-main.html
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>



-- 
Mark Pace
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Need new 3270 emulator: SSH, inexpensive, reliable

[Gibney, Dave]

  I don't know (never looked) of any SSH TN3270. I would suggest a VPN
tunnel.

  Why SSH, TLS/SSL is almost trivial to implement these days, and the
are many SSL TN3280 clients.

Dave Gibney
Information Technology Services
Washington State University


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf Of John Mattson
> Sent: Tuesday, August 25, 2009 10:35 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Need new 3270 emulator: SSH, inexpensive, reliable
> 
> 
> Management is jumping for PCI and JSOX, and now wants a SSH
> based
> 3270 emulation for accessing mainframe TSO, CICS, and such apps.
> Please
> feel free to contact me off-list, or phone 562-290-4163,  I am looking
> for
> actual user/installer endorsements and experiences, good or bad.
> Vendors
> OK too.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[McKown, John]

Hum, just thinking out loud, here. Shai has MFNetDisk. I wonder how successful 
would be a "MFNetTape" which would emulate a 3490E type drive via TCPIP. The PC 
itself would run software where the tape could be in AWS or HET format 
(Hercules/P390), FakeTape format (Funsoft - FlexES), or maybe OMA (don't 
remember what did OMA). Just run the software on either a server or a desktop 
and pop the CD/DVD in the drive.

--
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * (817)-961-6183 cell
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Ted MacNEIL]

>Fqirst off, our security group will not allow a direct FTP connection to IBM 
>for internet delivery.

It's time to document why you need it, and have management duke it out.
Why are PC's 'safer' than the m/f?
Security is only implementing management policy, so if you truly need it, you 
should be able to convince your management.
(Or, one would hope!)
-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Need new 3270 emulator: SSH, inexpensive, reliable

[John Mattson]

Management is jumping for PCI and JSOX, and now wants a SSH based 
3270 emulation for accessing mainframe TSO, CICS, and such apps.  Please 
feel free to contact me off-list, or phone 562-290-4163,  I am looking for 
actual user/installer endorsements and experiences, good or bad.  Vendors 
OK too. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Ted MacNEIL]

>Since some installations discourage REGION=0M (and NOLIMIT?) specific values 
>might be more useful.

The only way to get around coding NOLIMIT to avoid S522 abends is to code an 
SMF exit.
-
Too busy driving to stop for gas!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Jeff Holst]

A couple of comments based upon what I have heard at Share.

The reason for the discontinuation of 34XX tapes is because they are no 
longer being manufactured. IBM has a stock of them, but when they are gone, 
there is no more.

Somebody mentioned using the HMC to load from a DVD. According to one of 
the IBM speakers, this is not supported for z/OS tapes.

Alledgedly, there have been improvements on the download function. Haven't 
tried it, but that was the claim.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: how-to Sysplex? - the LOGR and exploiters part

[Arthur Gutowski]

On Tue, 25 Aug 2009 00:38:48 -0500, Barbara Nitz  
wrote:

>Don,
>[...]
>>OFFLOAD_SYSTEMS(
>>  [INCLUDE(sysname1 [,sysname2]...)]
>>  [EXCLUDE(sysname1 [,sysname2]...)]
>>)
>
>This was written so nicely :-), I went and checked the books if it's a function
>in 1.11. Pity it isn't. I like the idea, though. Now who is going to write the
>requirement?!? 

Yep, he got me, too... 

Art Gutowski

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Bill Johnson]

First off, our security group will not allow a direct FTP connection to IBM for 
internet delivery. So we have to perform the download to the PC and upload to 
the mainframe. Even that sometimes is blocked via the firewall.

But the thing that bothers us is that every vendor now has a different process 
for internet delivery. Instead of getting a tape and running the same 
pre-configured jobs to load the contents of the tape, each vendor has a 
completely different process for getting the product to us. At our ages, the 
less we have to remember between upgrades, the better.

Bill
MF Tech Support





From: Barbara Nitz 
To: IBM-MAIN@bama.ua.edu
Sent: Monday, August 24, 2009 2:46:46 AM
Subject: Software delivery via internet or tape

This is probably a bad time to enquire about it (as most of you are at Share), 
but here goes:

I read in the SOD:
"IBM plans to discontinue delivery of software on 3480, 3480 Compressed 
(3480C), and 3490E tape media. IBM recommends using Internet delivery when 
ordering your z/OS products or service which eliminates tape handling. If you 
must use physical delivery, you may continue to choose 3590 or 3592 tape 
media. Internet delivery is IBM's flagship delivery method; therefore, future 
software delivery enhancements will be focused on Internet delivery. "

Seeing how 'internet delivery' is the prefered method, how many of you are 
allowed to have a direct ftp connection to IBM? We certainly are NOT allowed 
to have that! So 'internet delivery' means downloading to a PC (provided there 
is enough space on the PC, and I don't even know if the 'toaster' - citrix 
clients - can download via ftp), then uploading to z/OS again, provided there 
is enough space there, too. Takes hours, is full of errors. How are others 
handling this?

Best regards, Barbara

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
  

Re: Software delivery via internet or tape

[Paul Gilmartin]

On Tue, 25 Aug 2009 10:38:39 -0400, Pinnacle wrote:
>
>The timeout issues occur because SMP/E spawns (forks?) a Unix process to
>unspin the tarball.  For humongous tarballs, you can get S522 waiting for
>the process to get back to the SMP/E batch job.  You can also run into
>storage issues as well, as the old default of 64M just ain't enough anymore.
>I submitted RCF's to have the SMP/E User's guide show TIME=1440 and
>REGION=0M in the standard SMP/E JCL.  The book's been updated, so you should
>be running in TIME=1440 or TIME=NOLIMIT, and REGION=0M.
>
Since some installations discourage REGION=0M (and NOLIMIT?)
specific values might be more useful.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SHARE comments

[Gibney, Dave]

   Looks like the ultimate snub of those of us IBM-MAINers unable to
attend SHARE.  :) 

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf Of Richards, Robert B.
> Sent: Tuesday, August 25, 2009 3:30 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: SHARE comments
> 
> For those at SHARE who wish to share with the rest of us, Timothy
Sipples
> posted this on the MAINFRAME site:
> 
> 
> Share Your Comments on SHARE
> 
> SHARE holds its big conference this week in
> beautiful Denver, Colorado. It's one of the biggest mainframe-focused
> conferences in the world and arguably the most enjoyable. (But there
are
> plenty of seminars on a broad range of IT topics.)
> 
> Are you attending this SHARE? Learn anything new and interesting? See
> anything particularly impressive in the exhibit hall? Did you see any
old
> friends or make any new ones? Consider this an open thread to post
your
> comments.
> 
> 
> 
> To post your comments, go to: http://mainframe.typepad.com/
> 
> Bob
> 
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Hal Merritt]

Rather than dance around and come up with some expensive, fragile kludge, why 
not just document the business / technical requirement and let management duke 
it out. 

This is, after all, a political issue. I would expect some push pack from the 
PC folks and the more clueless auditors, but your business/technical case is 
pretty straightforward. 

And, no, SSH is not a mainframe quality solution. Keep in mind that FTP like 
services can be, in fact, a serious exposure to Windows servers and (to a 
lesser degree) other non MF servers. 'Man in the middle' servers (using some 
sort of store and forward strategy) seem to be surprisingly 'soft' targets and 
seem to be popular attack vectors. PCI compliance seems to favor point to point 
over MITM solutions.  

I would compose a simple memo with that same quote (along with a link to the 
source document) to frame the question to management. You might note that you 
have queried the community and found that a significant number of shops have 
embraced FTP as a strategic business direction. And many of those shops are PCI 
compliant. And your competitors.   

HTH and good luck. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Barbara Nitz
Sent: Monday, August 24, 2009 1:47 AM
To: IBM-MAIN@bama.ua.edu
Subject: Software delivery via internet or tape

This is probably a bad time to enquire about it (as most of you are at Share), 
but here goes:

I read in the SOD:
"IBM plans to discontinue delivery of software on 3480, 3480 Compressed 
(3480C), and 3490E tape media. IBM recommends using Internet delivery when 
ordering your z/OS products or service which eliminates tape handling. If you 
must use physical delivery, you may continue to choose 3590 or 3592 tape 
media. Internet delivery is IBM's flagship delivery method; therefore, future 
software delivery enhancements will be focused on Internet delivery. "

Seeing how 'internet delivery' is the prefered method, how many of you are 
allowed to have a direct ftp connection to IBM? We certainly are NOT allowed 
to have that! So 'internet delivery' means downloading to a PC (provided there 
is enough space on the PC, and I don't even know if the 'toaster' - citrix 
clients - can download via ftp), then uploading to z/OS again, provided there 
is enough space there, too. Takes hours, is full of errors. How are others 
handling this?

Best regards, Barbara

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Pinnacle]

- Original Message - 
From: "Mark Pace" 

Newsgroups: bit.listserv.ibm-main
Sent: Tuesday, August 25, 2009 8:20 AM
Subject: Re: Software delivery via internet or tape


The timeouts are the exact reason I swtiched to downloading to an NFS 
server

and then doing RECEIVE FROM NTS.  An FTP or Download-Director download is
much faster and reliable than RECEIVE ORDER.  I had a couple of orders 
that
had to be restarted after it had almost completed, wasting a vast amount 
of

time.



The timeout issues occur because SMP/E spawns (forks?) a Unix process to 
unspin the tarball.  For humongous tarballs, you can get S522 waiting for 
the process to get back to the SMP/E batch job.  You can also run into 
storage issues as well, as the old default of 64M just ain't enough anymore. 
I submitted RCF's to have the SMP/E User's guide show TIME=1440 and 
REGION=0M in the standard SMP/E JCL.  The book's been updated, so you should 
be running in TIME=1440 or TIME=NOLIMIT, and REGION=0M.


I was an early adopter of SUF, and glommed onto RECEIVE ORDER, FROMNETWORK, 
and FROMNTS as soon as they were available.  They were all light years ahead 
of tape, SLDPAC, etc.  Electronic delivery is definitely the way to go.


Regards,
Tom Conley 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SMP/E RECEIVE ORDER & REPORT ERRSYSMODS for HIPERs

[Andrew Metcalfe]

Thanks Kurt

Is there any likelihood of a change in this area? 

Am I correct in thinking that the BEGIN/ENDATE operands are unusable with
REPORT ERRSYSMODS if I am using RECEIVE ORDER processing?

Thanks

Andrew Metcalfe
Global z/OS Systems Programming Team
Barclays Bank Plc 
Ground Floor, Block 10
Radbroke Hall
Knutsford
WA16 9EU

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Kurt Quackenbush
Sent: 25 August 2009 15:17
To: IBM-MAIN@bama.ua.edu
Subject: Re: SMP/E RECEIVE ORDER & REPORT ERRSYSMODS for HIPERs

> ... to compare against "last week's" data and produce a 
> report of "this week's" HIPERs. ...
> 
> I thought I could do this employing the BEGINDATE/ENDDATE operands of 
> REPORT ERRSYSMODS command. However, as RECEIVE ORDER automatically 
> grabs the last two year's HOLDDATA (every night), it doesn't appear to buy

> me anything.
> 
> Am I missing something simple here?

No, you're not missing anything simple, unfortunately.

Kurt Quackenbush -- IBM, SMP/E Development

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

This e-mail and any attachments are confidential and intended solely for the 
addressee and may also be privileged or exempt from disclosure under applicable 
law. If you are not the addressee, or have received this e-mail in error, 
please notify the sender immediately, delete it from your system and do not 
copy, disclose or otherwise act upon any part of this e-mail or its attachments.

Internet communications are not guaranteed to be secure or virus-free.
The Barclays Group does not accept responsibility for any loss arising from 
unauthorised access to, or interference with, any Internet communications by 
any third party, or from the transmission of any viruses. Replies to this 
e-mail may be monitored by the Barclays Group for operational or business 
reasons.

Any opinion or other information in this e-mail or its attachments that does 
not relate to the business of the Barclays Group is personal to the sender and 
is not given or endorsed by the Barclays Group.

Barclays Bank PLC.Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.

Barclays Bank PLC is authorised and regulated by the Financial Services 
Authority.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: SMP/E RECEIVE ORDER & REPORT ERRSYSMODS for HIPERs

[Kurt Quackenbush]

... to compare against "last week's" data and produce a 
report of "this week's" HIPERs. ...


I thought I could do this employing the BEGINDATE/ENDDATE operands of 
REPORT ERRSYSMODS command. However, as RECEIVE ORDER automatically 
grabs the last two year's HOLDDATA (every night), it doesn't appear to buy 
me anything.


Am I missing something simple here?


No, you're not missing anything simple, unfortunately.

Kurt Quackenbush -- IBM, SMP/E Development

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Mark Zelden]

On Tue, 25 Aug 2009 08:31:53 -0500, Mark Zelden 
wrote:

>On Tue, 25 Aug 2009 08:19:33 -0400, Mark Pace  wrote:
>
>>The timeouts are the exact reason I swtiched to downloading to an NFS server
>>and then doing RECEIVE FROM NTS.  An FTP or Download-Director download is
>>much faster and reliable than RECEIVE ORDER.  I had a couple of orders that
>>had to be restarted after it had almost completed, wasting a vast amount of
>>time.
>>
>
>Are you aware of the WAIT keyword for RECEIVE ORDER?  The default is
>120 minutes, but I have been running with  WAIT(300)  since I first started
>using RECEIVE ORDER after some orders timed out.  I'm sure there were
>more problems then than now.
>

Sorry,  I didn't read your post carefully.  WAIT won't help for that type of
problem.  FWIW, I've had very little problems with RECEIVE ORDER 
(especially in recent history) and I use it almost every day.

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Who has z/Linux, z/VM and Oracle

[Craig Otway]

We have z/vm 5.4, SUSE 9.3 & 10.2 with Oracle 10g running as a DB server for
a data warehouse on a 2096 with two IFLs. Shoot me an email sometime to this
address craig.ot...@region10.org . 

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Richards, Robert B.
Sent: Tuesday, August 25, 2009 7:13 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Who has z/Linux, z/VM and Oracle

Lizette,

Based on prior posts, David Kreuter can probably answer a lot of your
questions based on his engagement with the Quebec government. First, Google
his name and Quebec.

Bob
-

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Lizette Koehler
Sent: Tuesday, August 25, 2009 8:05 AM
To: IBM-MAIN@bama.ua.edu
Subject: Who has z/Linux, z/VM and Oracle

My management has asked me to see if anyone is using this configuration,
Oracle running under z/Linux with z/VM.  If so, would you be willing to talk
to me offlist about it?

Thanks Lizette
lizette.koeh...@mindspring.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Mark Zelden]

On Tue, 25 Aug 2009 08:19:33 -0400, Mark Pace  wrote:

>The timeouts are the exact reason I swtiched to downloading to an NFS server
>and then doing RECEIVE FROM NTS.  An FTP or Download-Director download is
>much faster and reliable than RECEIVE ORDER.  I had a couple of orders that
>had to be restarted after it had almost completed, wasting a vast amount of
>time.
>

Are you aware of the WAIT keyword for RECEIVE ORDER?  The default is
120 minutes, but I have been running with  WAIT(300)  since I first started
using RECEIVE ORDER after some orders timed out.  I'm sure there were
more problems then than now.  

Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:mark.zel...@zurichna.com
z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html


 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Binder API...broke or working as designed

[Peter Relson]

Given the rather violent discussion on this topic, I urge folks to step
back. Especially given that the thread now is going down a path that is
based on incorrect assertions, namely that the binder uses LE even if no
C/C++ code is involved. I asked, and they said that it does not, except to
resolve things such as mangled names that are related to use of C/C++ and
LE.

Several of the posts seem to be based on a premise that the poster's use is
the only way one would want to use a function, so when that is not
available, therefore the function is useless. It's obviously not as useful
as one would want but that can be a far distance from useless.

If there are functions that are hard to use, is it because of poor
documentation? I fully believe that there is always lots of room for
improvement of our documentation, and specific suggestions are usually
well-taken to heart, as opposed to something like "improve the
documentation".

If there are functions that are not available or do not do what you want,
then I suggest that you submit suitable requirements, and the more backing
you can get for them, naturally, the better. A requirement from Share is
going to get more weight than a requirement from an individual.

Note to CC: Leona attempted to have a dialog with you last year about your
concerns and got no response from you, so presumed you were no longer
interested in the topic. Perhaps the note got lost...

The binder team will surely get in contact with those who care to have a
forward-going dialog.

As to David Day's initial post of this thread: I don't know what to
'expect' but apparently the behavior is documented, for what that's worth.
I actually looked at the output posted and thought "maybe they do it in
alphabetical order".  That's what it appeared like from the small sample,
but that's not the answer either.

Peter Relson
z/OS Core Technology Design
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: IBM-MAIN Digest - 23 Aug 2009 to 24 Aug 2009 (#2009-236)

[Jim Holloway]

On Monday, August 24, 2009 6:55 AM Barbara Nitz wrote:
>Let's restate the question:
>How many of you can use RECEIVE FROMNETWORK directly, without starting
>other supporting programs?


We do all IBM maintenence downloads via network receive excluding our 
annual Serverpac install, the download for
which is submitted via the Serverpac dialogs.  I set up digital 
certificates, annually download a new key from shopz, 
connected all my team members to the resulting keyring.  I can then submit 
a job requesting any of the supported download types from the batch 
SMPCNTL DD.  I love the fact that I don't have fire up my browser and sign 
on to shopz in order
to initiate an order.  We've built this into our monthly maintenence 
process and use it throughout.

Jim Holloway - MetLife
The information contained in this message may be CONFIDENTIAL and is for the 
intended addressee only.  Any unauthorized use, dissemination of the 
information, or copying of this message is prohibited.  If you are not the 
intended addressee, please notify the sender immediately and delete this 
message.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Mark Pace]

The timeouts are the exact reason I swtiched to downloading to an NFS server
and then doing RECEIVE FROM NTS.  An FTP or Download-Director download is
much faster and reliable than RECEIVE ORDER.  I had a couple of orders that
had to be restarted after it had almost completed, wasting a vast amount of
time.

On Tue, Aug 25, 2009 at 4:38 AM, Walter Marguccio <
walter_marguc...@yahoo.com> wrote:

> - Original Message 
> From: Barbara Nitz nitz-...@gmx.net
>
> > Let's restate the question:
> > How many of you can use RECEIVE FROMNETWORK directly, without starting
> > other supporting programs?
>
> to download PTFs we use Internet Service Delivery, that is, RECEIVE ORDER.
> Simply great, no manual steps at all as with ShopzSeries.
>
> I downloaded my z/OS 1.9 using the CustomPac dialog jobs, and I find it
> also
> very good. The job to download the order had to be restarted a couple of
> times
> (timeout, IIRC), but this was the only manual intervention required.
> I find the whole process far better than tapes.
>
>
> Walter Marguccio
> z/OS Systems Programmer
> BELENUS LOB Informatic GmbH
> Munich - Germany
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>



-- 
Mark Pace
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Sysplex dis/advantages, was: Re: how-to Sysplex? - the LOGR and exploiters part

[Walter Marguccio]

- Original Message 
From: Barbara Nitz nitz-...@gmx.net

> Isn't this a very human trait: Don't change the way I have always done this, 
> I 
> am used to it, I am getting older and it is harder to learn new things? 

Indeed is human. But this way of thinking can literally kill a company.

My 2 cents, of course.

Walter Marguccio
z/OS Systems Programmer
BELENUS LOB Informatic GmbH
Munich - Germany


  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Who has z/Linux, z/VM and Oracle

[Richards, Robert B.]

Lizette,

Based on prior posts, David Kreuter can probably answer a lot of your questions 
based on his engagement with the Quebec government. First, Google his name and 
Quebec.

Bob
-

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Lizette Koehler
Sent: Tuesday, August 25, 2009 8:05 AM
To: IBM-MAIN@bama.ua.edu
Subject: Who has z/Linux, z/VM and Oracle

My management has asked me to see if anyone is using this configuration,
Oracle running under z/Linux with z/VM.  If so, would you be willing to talk
to me offlist about it?

Thanks Lizette
lizette.koeh...@mindspring.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Paul Gilmartin]

On Tue, 25 Aug 2009 06:22:25 -0500, Barbara Nitz wrote:
>
>Sounds like this is where I stopped when I had to install a 1.4 refresh.
>Admittedly, there wasn't a receive fromnts back then. But I fought hard to
>mount my hard drive as an NTS to z/OS - the OMVS part. I still had a lot of
>problems with missing space in HFSs...
>
Hmmm.  I thought FROMNTS and FROMNETWORK appeared simultaneously.  Looking
at publibz for z/OS 1.2, I see:

   CHANGES "SMP/E V3R1.0 Commands"
   __

 | Summary of Changes
 | for SA22-7771-01
 | SMP/E Version 3
 ...
 * | New DELETEPKG, FROMNETWORK, and FROMNTS operands have been added to
   | Chapter 13, "The RECEIVE Command" in topic 13.0. Also, new sections
   | "Restarting RECEIVE FROMNETWORK" in topic 13.4.3, "Defining SERVER and
   | CLIENT Data Sets for RECEIVE FROMNETWORK Processing" in topic 13.4.5,
   | "Processing for RECEIVE FROMNETWORK" in topic 13.8, and "Processing
   | for RECEIVE FROMNTS" in topic 13.9 have been added to this chapter.

And, IIRC, SMP/E V3R1.0 was made available as an upgrade at no charge
for customers of earlier releases of z/OS.

>And from the time of these replies - sounds like a long night at Share? :-)
>
Plus some laptop housekeeping.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Who has z/Linux, z/VM and Oracle

[Lizette Koehler]

My management has asked me to see if anyone is using this configuration,
Oracle running under z/Linux with z/VM.  If so, would you be willing to talk
to me offlist about it?

Thanks Lizette
lizette.koeh...@mindspring.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Barbara Nitz]

>The DVD would go in your PC / workstation.  Other vendors have been 
>delivering z/OS software this way for a long time.  I don't know the details,
>but I would guess you would either FTP to your HFS or zFS in place of
>RECEIVE FROMNETWORK or perhaps you could NFS mount the DVD
>on your workstation. 
.
>But running an FTP server on the desktop (native on Linux or OS X;
>IIS or Filezilla or ... on Windows) should work.  If you have
>John McK's peculiar species of PHB, you can run NFS server on Linux
>and use 127.0.0.1 as the server for RECEIVE FROMNETWORK.
>
>I have done RECEIVE FROMNETWORK (of a product not from IBM) with
>OS X and Filezilla on Windows XP as servers.  (This saves procedural
>steps, but no HFS space compared to staging to HFS and doing
>RECEIVE FROMNTS.)
>
>Just think of OpenSolaris, OS X, or Linux as a network-attached
>DVD control unit.

Sounds like this is where I stopped when I had to install a 1.4 refresh. 
Admittedly, there wasn't a receive fromnts back then. But I fought hard to 
mount my hard drive as an NTS to z/OS - the OMVS part. I still had a lot of 
problems with missing space in HFSs...

And from the time of these replies - sounds like a long night at Share? :-)

Barbara

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Sysplex dis/advantages, was: Re: how-to Sysplex? - the LOGR and exploiters part

[Barbara Nitz]

Chris, 

>it doesn't really alter the point I was making
>that sysplex design is predicated on sharing resources everywhere. That
>design philosophy is what removes single points of failure and enables the
>sysplex' marquee features of high availability and in theory, horizontal
>scaling. It is equally obvious that that design philosophy is STILL (nearly
>20 years on) at odds with the way people by and large continue to use those
>systems.

Don't I know it! And I agree that in theory sysplex is a good idea for 
horizontal 
growth and availability. And for sharing. In theory. I have learned the hard 
way (with a lot of scars still hurting!) when I left the IBM software support 
glasshouse that 'the real world' doesn't care about the theory. All they want 
is 
to go on the way they always did it. But they also want to use 'the good 
things' (namely the pricing advantages that were introduced to push the idea 
of sysplex forward). Use the new stuff, but don't change anything! 

Isn't this a very human trait: Don't change the way I have always done this, I 
am used to it, I am getting older and it is harder to learn new things? (I am 
sticking with analogue photography, I don't want to deal with the newfangled 
digital stuff!)

>To be utterly blunt, there are many open
>systems (and even  windows systems) out in the big wide world
>running
>business critical workloads that absolutely run rings around typical z/OS
>systems configured in 1989 fashion. And no, I am not kidding about that.
>Trust me.

I believe you, without seeing proof, and that's saying something! . 
Unfortunately, it is very expensive to set things up sysplex-wise to be really 
really available and reconfigurable at the drop of a hat. One buys the high 
availability with a lot of redundancy. Only the very big installations can 
afford 
that these days, I think. 

>I will be the last person to defend software extortion but candidly the
>complexity (and development cost) of these products is so high 
Are they? I have always found the 'sysplex primitives' very straight forward 
and easy to grasp. I have never really understood why others don't feel like I 
do :-( 

>and their addressable market is so small that

now *that* I can really believe!

>So I'll throw the question to the assembled throng; should IBM abandon
>sysplex as the centerpiece of their growth/automation/availability strategy
>for z/OS workloads, or should they remove the barriers (real and imagined)
>to genuine sysplex adoption and exploitation? But if you vote for abandoning
>sysplex, what's your other plan?

I want to work in z/OS until I retire, so I opt for removing barriers by making 
sub-sysplexing more of a strategy. :-) As that is what the PHBs all want. But 
to me it looks like the future may hold a z-Box, but not necessarily z/OS. IBM 
appears to push for zLinux, and z/OS falls down. Or the other platforms win 
making z obsolete, not because they're better, but because they're less 
expensive. But then, what was first - the high prices or the smaller market? 

Best regards, Barbara

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

SHARE comments

[Richards, Robert B.]

For those at SHARE who wish to share with the rest of us, Timothy Sipples 
posted this on the MAINFRAME site:


Share Your Comments on SHARE

SHARE holds its big conference this week in beautiful 
Denver, Colorado. It's one of the biggest mainframe-focused conferences in the 
world and arguably the most enjoyable. (But there are plenty of seminars on a 
broad range of IT topics.)

Are you attending this SHARE? Learn anything new and interesting? See anything 
particularly impressive in the exhibit hall? Did you see any old friends or 
make any new ones? Consider this an open thread to post your comments.



To post your comments, go to: http://mainframe.typepad.com/

Bob



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reminder: Deadline to Order z/OS 1.10

[Timothy Sipples]

With the announcement of z/OS 1.11 and its scheduled general availability
next month, the date rapidly approaches when z/OS 1.10 will no longer be
available for ordering.

If you would like to place an order for z/OS 1.10, IBM recommends
submitting your ServerPac or CBPDO order no later than October 13, 2009.
(SystemPac orders can be placed for a few months after that.) In most
countries you can place an order using Shopz.

Note that some functions in the new z/OS Management Facility are compatible
with z/OS 1.10, so you can order the no-charge z/OS Management Facility
(5655-S28) at the same time -- or separately if you already have z/OS 1.10.
More information on the z/OS Management Facility is now posted here:

http://www.ibm.com/systems/z/os/zos/zosmf/

- - - - -
Timothy Sipples
IBM Consulting Enterprise Software Architect
Based in Tokyo, Serving IBM Japan / Asia-Pacific
E-Mail: timothy.sipp...@us.ibm.com
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Software delivery via internet or tape

[Walter Marguccio]

- Original Message 
From: Barbara Nitz nitz-...@gmx.net

> Let's restate the question: 
> How many of you can use RECEIVE FROMNETWORK directly, without starting 
> other supporting programs?

to download PTFs we use Internet Service Delivery, that is, RECEIVE ORDER.
Simply great, no manual steps at all as with ShopzSeries.

I downloaded my z/OS 1.9 using the CustomPac dialog jobs, and I find it also 
very good. The job to download the order had to be restarted a couple of times
(timeout, IIRC), but this was the only manual intervention required. 
I find the whole process far better than tapes.
  

Walter Marguccio
z/OS Systems Programmer
BELENUS LOB Informatic GmbH
Munich - Germany


  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html