z/OS UNICODE migration consideration
Dears , as the subject ,would like to plan the MF unicode migrtion. 1) What are major considerations you will raise ? - UTF 8 , UTF 16 , or UTF 32 support on MF ? - COBOL pgm migration ? support UTF16 only ? - PL/I PGM migration ? - DB (IMS DB / VSAM DB /DB2 DB ) migration? - data exchange migration ? MQ / FTP / ..etc - does DFSORT support UTFx sorting ? - PSF printing ,how to have the user report display correctly as migration to UTF16? 2) Any shop done MF UNICODE migration before ? Appreciated your kindly thoughts ... Regards, Laurence -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
GIMUNZIP SYSUT1 alloc problem (urgent)
Hi Try to install z/OS 1.12 via WEB download and got allocation errors in GIMUNZIP for SYSUT1 as: GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IKJ56893I FILE SYSUT1 NOT ALLOCATED+. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IGD17040I ERROR IN DADSM PROCESSING ON VOLUME UNKNWN FOR DATA SET. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SYS11054.T091005.RA000.IBM1IN1B.R017. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - HISTORIC RETURN CODE IS 196 DIAGNOSTIC INFORMATION IS 0C060090. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IGD306I UNEXPECTED ERROR DURING IGGDAC02 PROCESSING. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - RETURN CODE 12 REASON CODE 144. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - THE MODULE THAT DETECTED THE ERROR IS IGDVTSDA. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SMS MODULE TRACE BACK - VTSDA VTSCR SSIRT. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SYMPTOM RECORD CREATED, PROBLEM ID IS IGD0. GIM47800S ** AN ERROR OCCURRED WHILE GIMUNZIP WAS PROCESSING ARCHIVE AAOPEXEC.100. GIM20501IGIMUNZIP PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12. (Thank you in advance, We need z/OS 1.12 urgently, so a solution would be important for us) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
On Wed, Feb 23, 2011 at 7:42 AM, Andrew Armstrong androidarmstr...@gmail.com wrote: Jim, The EZY1300E message reports that errno 54 (Connection Reset by Peer) was returned on a RECV socket call by the CICS listener (CSKL). I'd conclude that the remote client has, for one reason or another, decided to drop the connection - probably after the SSL handshake as completed since the listener wouldn't see any action until after that (this would be the Application Transparent part of AT-TLS). I've found in the past that using Wireshark (www.wireshark.org) really helps in situations like this. I either use Wireshark to capture the trace on the client side, or take a CTRACE on z/OS (SYSTCPDA) and use IPCS to format the trace into SNIFFER format which I download (in binary) to my PC and let Wireshark decode it. At least you will see how far the SSL handshake progressed. Unfortunately, after you have an encrypted connection decoding the payload is difficult...but not impossible - if you can feed Wireshark your certificate info then it can decrypt the payload too! Although I have to admit to never getting that to work. Another thing you can try is to temporarily turn off encryption by allowing CipherSpec NULL to be negotiated during the SSL handshake. BTW what version of z/OS do you have? I remember trying to set up AT-TLS on a 1.7 system only to find that certificates with keys longer than 1024 bits were not supported by RACF at that level. Cheers, Andrew. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html Andrew, thanks for that good info. We are on z/OS 1.11. Also, I've found another message which I missed previously which is this - EZD1286I TTLS Error GRPID: 0001 ENVID: 0006 CONNID: LOCAL: **N/A** REMOTE: **N/A** JOBNAME: **N/A** USERID: Z30DUSR RULE: **N/A** RC: 202 Environment Master Init The 202 RC is a permission error on the keyring which is much better. I'll check out that this afternoon. Thanks again. Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Writing a Systems Programmer Resume
It's a pity for the people who are in Europe :( -Mensaje original- De: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] En nombre de Richards, Robert B. Enviado el: martes, 22 de febrero de 2011 18:25 Para: IBM-MAIN@bama.ua.edu Asunto: Re: Writing a Systems Programmer Resume I met Joe about 31 years ago. I can highly recommend *him* in addition to the services he provides. Bob snippage I'd known Joe for nearly 20 years, but we'd never met, so I attended his session in Boston. HIGHLY recommended. Joe's suggestions will give you a leg up in this increasingly brutal job market. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: GIMUNZIP SYSUT1 alloc problem (urgent)
The below link would have more information: http://www-01.ibm.com/support/docview.wss?uid=isg1IO12183 Thanks, Prathap Miklos Szigetvari miklos.szigetv...@isis-papyrus.com Sent by: IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu 02/23/2011 02:12 PM Please respond to IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu To IBM-MAIN@bama.ua.edu cc Subject GIMUNZIP SYSUT1 alloc problem (urgent) Hi Try to install z/OS 1.12 via WEB download and got allocation errors in GIMUNZIP for SYSUT1 as: GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IKJ56893I FILE SYSUT1 NOT ALLOCATED+. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IGD17040I ERROR IN DADSM PROCESSING ON VOLUME UNKNWN FOR DATA SET. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SYS11054.T091005.RA000.IBM1IN1B.R017. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - HISTORIC RETURN CODE IS 196 DIAGNOSTIC INFORMATION IS 0C060090. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IGD306I UNEXPECTED ERROR DURING IGGDAC02 PROCESSING. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - RETURN CODE 12 REASON CODE 144. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - THE MODULE THAT DETECTED THE ERROR IS IGDVTSDA. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SMS MODULE TRACE BACK - VTSDA VTSCR SSIRT. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SYMPTOM RECORD CREATED, PROBLEM ID IS IGD0. GIM47800S ** AN ERROR OCCURRED WHILE GIMUNZIP WAS PROCESSING ARCHIVE AAOPEXEC.100. GIM20501IGIMUNZIP PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12. (Thank you in advance, We need z/OS 1.12 urgently, so a solution would be important for us) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html Information Classification: Public -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: GIMUNZIP SYSUT1 alloc problem (urgent)
Hi Thank you the problem is with this VOLUME UNKNWN If we add volume parameter to archdef it works On 2/23/2011 10:39 AM, Prathap Srinivasan wrote: The below link would have more information: http://www-01.ibm.com/support/docview.wss?uid=isg1IO12183 Thanks, Prathap Miklos Szigetvarimiklos.szigetv...@isis-papyrus.com Sent by: IBM Mainframe Discussion ListIBM-MAIN@bama.ua.edu 02/23/2011 02:12 PM Please respond to IBM Mainframe Discussion ListIBM-MAIN@bama.ua.edu To IBM-MAIN@bama.ua.edu cc Subject GIMUNZIP SYSUT1 alloc problem (urgent) Hi Try to install z/OS 1.12 via WEB download and got allocation errors in GIMUNZIP for SYSUT1 as: GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IKJ56893I FILE SYSUT1 NOT ALLOCATED+. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IGD17040I ERROR IN DADSM PROCESSING ON VOLUME UNKNWN FOR DATA SET. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SYS11054.T091005.RA000.IBM1IN1B.R017. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - HISTORIC RETURN CODE IS 196 DIAGNOSTIC INFORMATION IS 0C060090. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - IGD306I UNEXPECTED ERROR DURING IGGDAC02 PROCESSING. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - RETURN CODE 12 REASON CODE 144. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - THE MODULE THAT DETECTED THE ERROR IS IGDVTSDA. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SMS MODULE TRACE BACK - VTSDA VTSCR SSIRT. GIM54701S ** ALLOCATION FAILED FOR SYSUT1 - SYMPTOM RECORD CREATED, PROBLEM ID IS IGD0. GIM47800S ** AN ERROR OCCURRED WHILE GIMUNZIP WAS PROCESSING ARCHIVE AAOPEXEC.100. GIM20501IGIMUNZIP PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12. (Thank you in advance, We need z/OS 1.12 urgently, so a solution would be important for us) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html Information Classification: Public -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RACF Resource Classes
In ncbblknfeephcaamofkliehbmgaa.r.han...@rshconsulting.com, on 02/22/2011 at 05:56 AM, Robert S. Hansel (RSH) r.han...@rshconsulting.com said: If you do not activate either the TAPEVOL class or DEVSUPxx TAPEAUTHDSN=YES, and if you do not also define profile ICHBLP to the FACILITY class, then RACF is not guarding the use of BLP and anyone can use BLP with RMM. I believe that the point at issue is what happens if you define ICHBLP in the FACILITY class but do not activate either the TAPEVOL class or DEVSUPxx TAPEAUTHDSN=YES. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RACF Resource Classes
Shmuel Metz (Seymour J.) wrote: I believe that the point at issue is what happens if you define ICHBLP in the FACILITY class but do not activate either the TAPEVOL class or DEVSUPxx TAPEAUTHDSN=YES. Robert S. Hansel (RSH) wrote: If you do not activate either the TAPEVOL class or DEVSUPxx TAPEAUTHDSN=YES, and if you do not also define profile ICHBLP to the FACILITY class, then RACF is not guarding the use of BLP and anyone can use BLP with RMM. What about this JES2 init statement with above combination(s)? JOBCLASS(?),BLP=YES(or NO) What will happens when BLP is YES or when it is NO? Just curious, because I can't test it for a while. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: What is Toronto
In f5ff22ced304764eaac97a43706235b7174cb62...@corpexmbx.bekco.com, on 02/22/2011 at 04:40 PM, Greg Shirey wgshi...@benekeith.com said: Right...how many city airports are actually in that city? Is LAX in LA? I thought it was? is Flushing (JFK) in NYC? (It is in a borough) Do you mean NYC or Manhattan? I thought that NYC was made up of the boroughs. National (Reagan) is only technically in DC (if memory serves, it's officially in DC even though geographically it's not, since it's across the river). Are Alaska and Hawaii in the USA? They're not contiguous. Geographically, all locations that are technically part of DC are part of DC. Note: Arlington used to be part of DC, and it wasn't contiguous either. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RACF Resource Classes
Elardus Engelbrecht pisze: Shmuel Metz (Seymour J.) wrote: I believe that the point at issue is what happens if you define ICHBLP in the FACILITY class but do not activate either the TAPEVOL class or DEVSUPxx TAPEAUTHDSN=YES. Robert S. Hansel (RSH) wrote: If you do not activate either the TAPEVOL class or DEVSUPxx TAPEAUTHDSN=YES, and if you do not also define profile ICHBLP to the FACILITY class, then RACF is not guarding the use of BLP and anyone can use BLP with RMM. What about this JES2 init statement with above combination(s)? JOBCLASS(?),BLP=YES(or NO) What will happens when BLP is YES or when it is NO? Just curious, because I can't test it for a while. ICHBLP is RACF mechanism, with regular USER/GROUP access lists. In simple words JOHN has no right to BLP, while FRANK is allowed to use BLP. JES2 JOBCLASS BLP parameter is all or nothing. No authorized people. In case of BLP=YES everyone can use it (but other mechanisms like RACF still apply!). For BLP=NO every BLP request is chaged to NL. It can be veeery misleading - BTDT in approx 2002. ;-) RMM can further add its own BLP protection mechanism... BTW: IMHO it's good idea to define one JOBLCASS with BLP=YES and protect the jobclass in RACF using some exit, like IEFUJI. In such scenario BLP is protected (and available for authorized persons!) despite type of configuration of RMM (other TMS) and RACF TAPEVOL. My €0.02 -- Radoslaw Skorupka Lodz, Poland -- BRE Bank SA ul. Senatorska 18 00-950 Warszawa www.brebank.pl Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237 NIP: 526-021-50-88 Wedug stanu na dzie 16.07.2010 r. kapita zakadowy BRE Banku SA (w caoci wpacony) wynosi 168.248.328 zotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: cascading catalog dataset aliases.
In 45e5f2f45d7878458ee5ca6796973355b85...@usdaexch01.kbm1.loc, on 02/22/2011 at 08:21 AM, Staller, Allan allan.stal...@kbmg.com said: I suggest the JCL include statement. Much easier to use and less to change (After the initial pain). Change the JCLLIB statement to point to the appropriate STEPLIBS member. Modify the STEPLIBS member as required. That's okay if the product only has one library. For the general case I'd advice an INCLUDE of a member with a SET for the appropriate version, with symbolic references in the invoking JCL. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: s0c4 in INIT TCBCMP field not related to any known problem
Thanks for the explanations, and suggestions. What I was observing, even if it was residual data, seemed different, either for v1.11 itself, or some other component added last year to our systems in support of v1.11. I had not been successful with a SLIP, earlier, but I was able to observe the TCBCMP fields of the INIT tasks using Mainview and I was able to see that certain batch jobs caused this field to change, on a fresh initiator, with the first execution of a batch job, so I set a SLIP to the ASID of the INIT and obtained a LOGREC, and set another SLIP to get a full DUMP. There really is a s0C4 in module PRS30610 at the 06/23/10 10.23 assembly level, reg6 is bad, and the INIT task recovers, and except for the residual data (and the overhead of processing the interrupt, etc.), no one is the wiser. PRS30610 is intercepting a dynamic allocation out of IGGDADSM. PRS30610 is part of Mainview SRM, which used at both sites whose dumps showed this INIT TCBCMP s0c4. I will take this problem to the vendor (severity level 4). regards, Joe D'Alessandro -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Does ROUND dataset allocation mean cylinder boundary?
In 77142d37c0c3c34da0d7b1da7d7ca34308822...@nwt-s-mbx2.rocketsoftware.com, on 02/22/2011 at 04:06 PM, Bill Fairchild bi...@mainstar.com said: CONTIG and ROUND are/were independent, but they both addressed I/O performance improvement. One purpose of ROUND was to reduce DASD revolutions that did not transfer any data. CONTIG would provide the same result, but less often than ROUND, by reducing the number of times that the EOV service would have to be called to switch from one allocated extent to the next. The EOV macro results in an SVC, which, in the ancient days of OS/360 and SLEDs, might have involved loading the SVC code into the transient SVC area again (not sure which SVC type it was), which could result in an extra revolution on the user's data device. Support for CKD I/O is a bit more complicated than that. EOV is a type 4 SVC, but it is not invoked just to switch extents. However, an end-of-extent appendage is invoked, so there is some CPU saving in minimizing extents. ECKD, of course, significantly changed the performance tradeoffs. It does not, however, eliminate the EOV needed to allocate a new extent. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
In 031b01cbd2c6$62366280$26a32780$@org, on 02/22/2011 at 11:26 AM, Charles Mills charl...@mcn.org said: Do the same restrictions on static system symbols exist for dynamic allocation as exist for JCL in the same environment I've seen no documentation for such a restriction, and the excuses IBM gave for not allowing arbitrary system symbols in batch JCL do not apply to execution time. That seems to be what I am seeing but I don't see that restriction I would create a PMR. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
Nobody knows, or is this too obvious a question to warrant an answer? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Charles Mills Sent: Tuesday, February 22, 2011 11:26 AM To: IBM-MAIN@bama.ua.edu Subject: System symbols in dynamic allocation Do the same restrictions on static system symbols exist for dynamic allocation as exist for JCL in the same environment -- in other words, in DSN allocation in a job you can use SYSUID but not SYSNAME? That seems to be what I am seeing but I don't see that restriction explicitly in the Authorized Assembler Services Guide. It seems to imply a lack of restrictions: You can use system symbols to represent data set names, member names, and path names in text units. It refers you over to Initialization and Tuning and the restriction for dynamic allocation may be stated there but I have not found it. Would I be correct in inferring then that you could use SYSNAME in dynamic allocation from within a started task? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
TS41 TDQ triggering before program finishes writing to it
Just went from TS22 to TS41 and have a surprise problem. Our program writes a report to a TDQ, and when the report is complete leaves the TDQ, which has a Trigger level of 1. At this point TRANSID starts since the trigger level is reached and it process the record in the TDQ. Up to TS41 it worked fine. Now, it works alright if we do the transactions one at a time (manually). However, if we batch a bunch of them to run right after another then the TDQ is sometimes triggered before the report record is completly sent to the TDQ, and then the TDQ is read, cleared by the TRANSID trans. The the rest of the record report is written to the TDQ and then read, and a mess is created. Note: The TDQ is INTRA partition, has a TRANSID value, and Tirggerlevel is 1. Note: This system has worked fine until going to TS41 and zOS 1.11 Note: My knowledge of CICS programming is limited. Question is: 1) is this a bug? 2) now do we go about preventing it from happening? Basically the report writing program must remain 'in control' of the TDQ until it completes a full report. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
Thanks. Your reply crossed in the mail with my follow-up. FWIW in the case in question I am not using SVC 99 directly but rather using C fopen(); Yeah, the fact that you can't code SYSNAME in JCL seems pretty lame. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Shmuel Metz (Seymour J.) Sent: Wednesday, February 23, 2011 6:55 AM To: IBM-MAIN@bama.ua.edu Subject: Re: System symbols in dynamic allocation In 031b01cbd2c6$62366280$26a32780$@org, on 02/22/2011 at 11:26 AM, Charles Mills charl...@mcn.org said: Do the same restrictions on static system symbols exist for dynamic allocation as exist for JCL in the same environment I've seen no documentation for such a restriction, and the excuses IBM gave for not allowing arbitrary system symbols in batch JCL do not apply to execution time. That seems to be what I am seeing but I don't see that restriction I would create a PMR. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
ISMF QUESTION - DATA SET NAMES TRUNCATED
G'day, When I generate a list of dsns - ISMF Option 1.2 for a HLQ I receive the expected list. However, I notice that all of the DATA SET NAMEs are truncated. Is there a way of having the dsns in their full name i.e. avoid truncation? Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
On Wed, Feb 23, 2011 at 9:04 AM, Jim McAlpine jim.mcalp...@gmail.comwrote:
On Wed, Feb 23, 2011 at 7:42 AM, Andrew Armstrong
androidarmstr...@gmail.com wrote:
Jim,
The EZY1300E message reports that errno 54 (Connection Reset by Peer) was
returned on a RECV socket call by the CICS listener (CSKL). I'd conclude
that the remote client has, for one reason or another, decided to drop the
connection - probably after the SSL handshake as completed since the
listener wouldn't see any action until after that (this would be the
Application Transparent part of AT-TLS).
I've found in the past that using Wireshark (www.wireshark.org) really
helps
in situations like this. I either use Wireshark to capture the trace on
the
client side, or take a CTRACE on z/OS (SYSTCPDA) and use IPCS to format
the
trace into SNIFFER format which I download (in binary) to my PC and let
Wireshark decode it.
At least you will see how far the SSL handshake progressed. Unfortunately,
after you have an encrypted connection decoding the payload is
difficult...but not impossible - if you can feed Wireshark your
certificate
info then it can decrypt the payload too! Although I have to admit to
never
getting that to work.
Another thing you can try is to temporarily turn off encryption by
allowing
CipherSpec NULL to be negotiated during the SSL handshake.
BTW what version of z/OS do you have? I remember trying to set up AT-TLS
on
a 1.7 system only to find that certificates with keys longer than 1024
bits
were not supported by RACF at that level.
Cheers,
Andrew.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Andrew, thanks for that good info. We are on z/OS 1.11. Also, I've found
another message which I missed previously which is this -
EZD1286I TTLS Error GRPID: 0001 ENVID: 0006 CONNID:
LOCAL: **N/A** REMOTE: **N/A** JOBNAME: **N/A** USERID: Z30DUSR RULE:
**N/A** RC: 202 Environment Master Init
The 202 RC is a permission error on the keyring which is much better. I'll
check out that this afternoon.
Thanks again.
Jim McAlpine
This is doing my head in. I'm using the redbook to set up the certificates
and keyring. I'm using section 3.4.2 Shared site certificate and shared
keyring so I've run the 6 jobs specified. So I've then ftp'd the self
signed CA certificate to the client but when I try and connect I get the 202
error which says -
The key ring cannot be opened because the user does not have permission.
However the error message says -
BPXF024I (TCPIP) Feb 21 10:03:11 TTLSÝ65578¨: 11:03:11 TCPIP 158
EZD1286I TTLS Error GRPID: 0001 ENVID: 0002 CONNID:
LOCAL: **N/A** REMOTE: **N/A** JOBNAME: **N/A** USERID: Z30DUSR RULE:
**N/A** RC: 202 Environment Master Init
which includes the userid of Z30DUSR, and if I do RACDCERT LISTRING, I get
the following -
RACDCERT LISTRING(*) ID(Z30DUSR)
Digital ring information for user Z30DUSR:
Ring:
SHAREDRING1
Certificate Label Name Cert Owner USAGE DEFAULT
---
S0W1 CA1 CERTAUTH CERTAUTH NO
S0W1 SHAREDSITE1 SITE PERSONAL YES
which would seem to be OK. Can anyone tell me what I may be missing, or
what else I can check.
Jim McAlpine
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISMF QUESTION - DATA SET NAMES TRUNCATED
This is what placing the cursor on the datasetname heading and pressing PF1 says. I think you want unfolded (however you accomplish that). An exercise left to the reader :) Alan The value in this data column represents the data set name of each data set in the list. The DATA SET NAME can be up to 44 characters long. The data column can be 27 or 44 characters long. If the list is in folded mode and the data set name is longer than 27 characters, the extra characters appear on a second line. Multi-volume data sets contain one entry in the list for each unique volume serial number on which the data set resides. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of John Dawes Sent: Wednesday, February 23, 2011 10:05 To: IBM-MAIN@bama.ua.edu Subject: ISMF QUESTION - DATA SET NAMES TRUNCATED G'day, When I generate a list of dsns - ISMF Option 1.2 for a HLQ I receive the expected list. However, I notice that all of the DATA SET NAMEs are truncated. Is there a way of having the dsns in their full name i.e. avoid truncation? Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISMF QUESTION - DATA SET NAMES TRUNCATED
G'day, When I generate a list of dsns - ISMF Option 1.2 for a HLQ I receive the expected list. However, I notice that all of the DATA SET NAMEs are truncated. Is there a way of having the dsns in their full name i.e. avoid truncation? Thanks. Could you cut and paste what you are seeing. The field in ISMF as far as I know is the full dataset name. You could be seeing it wrapped or extended. Did you FOLD the panel? I either see this (with FOLD) LINEALLOC A OPERATOR DATA SET NAME SPACE U ---(1) (2) ---(3)--- - DB2..SYSCOPY.P001. 12450K XXAF.D2011051 DB2..SYSCOPY.P001. 830K XXAL.D2011051 Or this without folding Enter Line Operators below: LINE ALLOC OPERATOR DATA SET NAME SPACE ---(1) (2)- ---(3)--- DB2..SYSCOPY.P001.XXAF.D2011051 12450K DB2..SYSCOPY.P001.XXAL.D2011051 830K Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
Looks like there are a few examples on the CBTTAPE. File 573: IEFUJV exit for System Symbolic substitution in JCL FILE 785: Substitute system symbols into JCL - K-H Doppelfeld Rob On Wed, Feb 23, 2011 at 11:00 AM, Charles Mills charl...@mcn.org wrote: Thanks. Your reply crossed in the mail with my follow-up. FWIW in the case in question I am not using SVC 99 directly but rather using C fopen(); Yeah, the fact that you can't code SYSNAME in JCL seems pretty lame. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Shmuel Metz (Seymour J.) Sent: Wednesday, February 23, 2011 6:55 AM To: IBM-MAIN@bama.ua.edu Subject: Re: System symbols in dynamic allocation In 031b01cbd2c6$62366280$26a32780$@org, on 02/22/2011 at 11:26 AM, Charles Mills charl...@mcn.org said: Do the same restrictions on static system symbols exist for dynamic allocation as exist for JCL in the same environment I've seen no documentation for such a restriction, and the excuses IBM gave for not allowing arbitrary system symbols in batch JCL do not apply to execution time. That seems to be what I am seeing but I don't see that restriction I would create a PMR. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- Rob Schramm Senior Systems Engineer w: 513.305.6224 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISMF QUESTION - DATA SET NAMES TRUNCATED
Alan, Thanks. It works. I noticed also when I put the cursor under List the option 3. --- On Thu, 24/2/11, Field, Alan C. alan.c.fi...@supervalu.com wrote: From: Field, Alan C. alan.c.fi...@supervalu.com Subject: Re: ISMF QUESTION - DATA SET NAMES TRUNCATED To: IBM-MAIN@bama.ua.edu Received: Thursday, 24 February, 2011, 3:11 AM This is what placing the cursor on the datasetname heading and pressing PF1 says. I think you want unfolded (however you accomplish that). An exercise left to the reader :) Alan The value in this data column represents the data set name of each data set in the list. The DATA SET NAME can be up to 44 characters long. The data column can be 27 or 44 characters long. If the list is in folded mode and the data set name is longer than 27 characters, the extra characters appear on a second line. Multi-volume data sets contain one entry in the list for each unique volume serial number on which the data set resides. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of John Dawes Sent: Wednesday, February 23, 2011 10:05 To: IBM-MAIN@bama.ua.edu Subject: ISMF QUESTION - DATA SET NAMES TRUNCATED G'day, When I generate a list of dsns - ISMF Option 1.2 for a HLQ I receive the expected list. However, I notice that all of the DATA SET NAMEs are truncated. Is there a way of having the dsns in their full name i.e. avoid truncation? Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISMF QUESTION - DATA SET NAMES TRUNCATED
Lizette, This is exactly what I got. I tried the Fold option and it worked. The dsns are no longer truncated. Thanks and thank you to all who responded. --- On Thu, 24/2/11, Lizette Koehler stars...@mindspring.com wrote: From: Lizette Koehler stars...@mindspring.com Subject: Re: ISMF QUESTION - DATA SET NAMES TRUNCATED To: IBM-MAIN@bama.ua.edu Received: Thursday, 24 February, 2011, 3:15 AM G'day, When I generate a list of dsns - ISMF Option 1.2 for a HLQ I receive the expected list. However, I notice that all of the DATA SET NAMEs are truncated. Is there a way of having the dsns in their full name i.e. avoid truncation? Thanks. Could you cut and paste what you are seeing. The field in ISMF as far as I know is the full dataset name. You could be seeing it wrapped or extended. Did you FOLD the panel? I either see this (with FOLD) LINE ALLOC A OPERATOR DATA SET NAME SPACE U ---(1) (2) ---(3)--- - DB2..SYSCOPY.P001. 12450K XXAF.D2011051 DB2..SYSCOPY.P001. 830K XXAL.D2011051 Or this without folding Enter Line Operators below: LINE ALLOC OPERATOR DATA SET NAME SPACE ---(1) (2)- ---(3)--- DB2..SYSCOPY.P001.XXAF.D2011051 12450K DB2..SYSCOPY.P001.XXAL.D2011051 830K Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu wrote on 2011.02.23
11:08:19:
On Wed, Feb 23, 2011 at 9:04 AM, Jim McAlpine
jim.mcalp...@gmail.comwrote:
This is doing my head in. I'm using the redbook to set up the
certificates
and keyring. I'm using section 3.4.2 Shared site certificate and shared
keyring so I've run the 6 jobs specified. So I've then ftp'd the self
signed CA certificate to the client but when I try and connect I get the
202
error which says -
The key ring cannot be opened because the user does not have
permission.
However the error message says -
BPXF024I (TCPIP) Feb 21 10:03:11 TTLSÝ65578¨: 11:03:11 TCPIP 158
EZD1286I TTLS Error GRPID: 0001 ENVID: 0002 CONNID:
LOCAL: **N/A** REMOTE: **N/A** JOBNAME: **N/A** USERID: Z30DUSR RULE:
**N/A** RC: 202 Environment Master Init
which includes the userid of Z30DUSR, and if I do RACDCERT LISTRING, I
get
the following -
RACDCERT LISTRING(*) ID(Z30DUSR)
Digital ring information for user Z30DUSR:
Ring:
SHAREDRING1
Certificate Label Name Cert Owner USAGE DEFAULT
---
S0W1 CA1 CERTAUTH CERTAUTH NO
S0W1 SHAREDSITE1 SITE PERSONAL YES
which would seem to be OK. Can anyone tell me what I may be missing, or
what else I can check.
Jim McAlpine
1. If the RDATALIB class is active, does the user have access to
Z30DUSR.SHAREDRING1.LST?
2. If RDATALIB is not active, or the above profile does not exist, does
the user have READ access to IRR.DIGTCERT.LISTRING?
Hayim
_
Hayim Sokolsky, CISSP
Mainframe Security Architect
DTCC Corporate Information Security
18301 Bermuda Green Dr, MS 1-CIS
Tampa FL 33647-1760
Tel. (813) 470-2177
Classification: DTCC Non-Confidential (White)
BR_
FONT size=2BR
DTCC DISCLAIMER: This email and any files transmitted with it are
confidential and intended solely for the use of the individual or
entity to whom they are addressed. If you have received this email
in error, please notify us immediately and delete the email and any
attachments from your system. The recipient should check this email
and any attachments for the presence of viruses. The company
accepts no liability for any damage caused by any virus transmitted
by this email./FONT
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
On Wed, Feb 23, 2011 at 4:08 PM, Jim McAlpine jim.mcalp...@gmail.comwrote:
This is doing my head in. I'm using the redbook to set up the certificates
and keyring. I'm using section 3.4.2 Shared site certificate and shared
keyring so I've run the 6 jobs specified. So I've then ftp'd the self
signed CA certificate to the client but when I try and connect I get the 202
error which says -
The key ring cannot be opened because the user does not have permission.
However the error message says -
BPXF024I (TCPIP) Feb 21 10:03:11 TTLSÝ65578¨: 11:03:11 TCPIP 158
EZD1286I TTLS Error GRPID: 0001 ENVID: 0002 CONNID:
LOCAL: **N/A** REMOTE: **N/A** JOBNAME: **N/A** USERID: Z30DUSR RULE:
**N/A** RC: 202 Environment Master Init
which includes the userid of Z30DUSR, and if I do RACDCERT LISTRING, I get
the following -
RACDCERT LISTRING(*) ID(Z30DUSR)
Digital ring information for user Z30DUSR:
Ring:
SHAREDRING1
Certificate Label Name Cert Owner USAGE DEFAULT
---
S0W1 CA1 CERTAUTH CERTAUTH NO
S0W1 SHAREDSITE1 SITE PERSONAL YES
which would seem to be OK. Can anyone tell me what I may be missing, or
what else I can check.
Jim McAlpine
I should have added the the policy files contains the following -
TTLSKeyringParms TTLSRNG1
{
KEYRING SAF Z30DUSR/SHAREDRING1
}
Jim McAlpine
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
They also need the resource that allows for listing of keyrings. Important: Any z/OS-based client or server that uses an RACF key ring issues internal RACDCERT LIST and RACDCERT LISTRING commands. The RACF user ID associated with the server must therefore be granted READ access to the RACF profiles controlling these commands, which are IRR.DIGTCERT.LIST and IRR.DIGTCERT.LISTRING. PERMIT IRR.DIGTCERT.LIST CLASS(FACILITY) ID(TCPIP) ACCESS(READ) PERMIT IRR.DIGTCERT.LISTRING CLASS(FACILITY) ID(TCPIP) ACCESS(READ) SETR RACLIST(FACILITY) REFRESH Rob On Wed, Feb 23, 2011 at 11:08 AM, Jim McAlpine jim.mcalp...@gmail.com wrote: On Wed, Feb 23, 2011 at 9:04 AM, Jim McAlpine jim.mcalp...@gmail.comwrote: On Wed, Feb 23, 2011 at 7:42 AM, Andrew Armstrong androidarmstr...@gmail.com wrote: Jim, The EZY1300E message reports that errno 54 (Connection Reset by Peer) was returned on a RECV socket call by the CICS listener (CSKL). I'd conclude that the remote client has, for one reason or another, decided to drop the connection - probably after the SSL handshake as completed since the listener wouldn't see any action until after that (this would be the Application Transparent part of AT-TLS). I've found in the past that using Wireshark (www.wireshark.org) really helps in situations like this. I either use Wireshark to capture the trace on the client side, or take a CTRACE on z/OS (SYSTCPDA) and use IPCS to format the trace into SNIFFER format which I download (in binary) to my PC and let Wireshark decode it. At least you will see how far the SSL handshake progressed. Unfortunately, after you have an encrypted connection decoding the payload is difficult...but not impossible - if you can feed Wireshark your certificate info then it can decrypt the payload too! Although I have to admit to never getting that to work. Another thing you can try is to temporarily turn off encryption by allowing CipherSpec NULL to be negotiated during the SSL handshake. BTW what version of z/OS do you have? I remember trying to set up AT-TLS on a 1.7 system only to find that certificates with keys longer than 1024 bits were not supported by RACF at that level. Cheers, Andrew. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html Andrew, thanks for that good info. We are on z/OS 1.11. Also, I've found another message which I missed previously which is this - EZD1286I TTLS Error GRPID: 0001 ENVID: 0006 CONNID: LOCAL: **N/A** REMOTE: **N/A** JOBNAME: **N/A** USERID: Z30DUSR RULE: **N/A** RC: 202 Environment Master Init The 202 RC is a permission error on the keyring which is much better. I'll check out that this afternoon. Thanks again. Jim McAlpine This is doing my head in. I'm using the redbook to set up the certificates and keyring. I'm using section 3.4.2 Shared site certificate and shared keyring so I've run the 6 jobs specified. So I've then ftp'd the self signed CA certificate to the client but when I try and connect I get the 202 error which says - The key ring cannot be opened because the user does not have permission. However the error message says - BPXF024I (TCPIP) Feb 21 10:03:11 TTLSÝ65578¨: 11:03:11 TCPIP 158 EZD1286I TTLS Error GRPID: 0001 ENVID: 0002 CONNID: LOCAL: **N/A** REMOTE: **N/A** JOBNAME: **N/A** USERID: Z30DUSR RULE: **N/A** RC: 202 Environment Master Init which includes the userid of Z30DUSR, and if I do RACDCERT LISTRING, I get the following - RACDCERT LISTRING(*) ID(Z30DUSR) Digital ring information for user Z30DUSR: Ring: SHAREDRING1 Certificate Label Name Cert Owner USAGE DEFAULT --- S0W1 CA1 CERTAUTH CERTAUTH NO S0W1 SHAREDSITE1 SITE PERSONAL YES which would seem to be OK. Can anyone tell me what I may be missing, or what else I can check. Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- Rob Schramm Senior Systems Engineer w: 513.305.6224 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: z/OS UNICODE migration consideration
On 2/23/2011 1:36 AM, Tsai Laurence wrote: Dears , as the subject ,would like to plan the MF unicode migrtion. 1) What are major considerations you will raise ? - UTF 8 , UTF 16 , or UTF 32 support on MF ? - COBOL pgm migration ? support UTF16 only ? - PL/I PGM migration ? - DB (IMS DB / VSAM DB /DB2 DB ) migration? - data exchange migration ? MQ / FTP / ..etc - does DFSORT support UTFx sorting ? - PSF printing ,how to have the user report display correctly as migration to UTF16? 2) Any shop done MF UNICODE migration before ? Appreciated your kindly thoughts ... Regards, Laurence I'm not clear on what you mean by MF unicode migration. Do you plan to migrate all your data to Unicode code pages? If so, how is your data currently stored? Here are some observations ... zArchitecture supports UTF-8, UTF-16, and UTF-32 in the hardware - that is, there are machine instructions for converting between all three encodings - but there are currently more hardware instructions that work with UTF-16 data than with UTF-8 or UTF-32, depending on what operations you will be doing z/OS supports all three encodings, but UTF-32 seems to have the least support; this may change, but you need to deal with how things are today. COBOL supports UTF-16 best, but can work with UTF-8 to some degree. See our two day course Enterprise COBOL Unicode and XML Support, details at: http://www.trainersfriend.com/COBOL_Courses/d705descr.htm The latest Enterprise PL/I compiler (V4R1) supports UTF-8, UTF-16, and UTF-32. We would construct a PL/I course along the lines of the COBOL Unicode course if there were any demand. DFSORT deals with Unicode using locales, but there are restrictions on what facilities support locales, and I'm not sure if the Unicode locales are supplied or if you would have to create your own. (Left as an exercise to the student. :-) ) DB2 is more complex. Of course, the DB2 catalog is encoded in UTF-8. After that the details are more complicated. I assume you know of this site: http://www-01.ibm.com/support/docview.wss?uid=swg27019288 which lets you choose the version of DB2 you are working with; then look specifically at the Installation Guide and the Internationalization Guide. VSAM does not recognize Unicode as far as I can tell; but maybe that's OK, unless you need Unicode values for keys; but you can probably just use the binary value: specify a starting location and length as always; the value can be Unicode or anything else, really. I have no clue about IMS or PSF printing. Still, there are vast areas where you won't be able to use Unicode: program names, data set names, member names, JCL; not sure about ISPF support, although I know there's some codepage support in ISPF. TSO. Not sure about z/OS UNIX file names. This is an enormous task, it would seem, but if you define your parameters and boundaries carefully and have plenty of time, it should be do-able. We would be happy to participate in such a process, in terms of research, testing, development, and training. I imagine there are others on this list who would also be interested. -- Kind regards, -Steve Comstock The Trainer's Friend, Inc. 303-393-8716 http://www.trainersfriend.com * To get a good Return on your Investment, first make an investment! + Training your people is an excellent investment * Try our new tool for calculating your Return On Investment for training dollars at http://www.trainersfriend.com/ROI/roi.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
On Wed, Feb 23, 2011 at 4:20 PM, Hayim Sokolsky hsokol...@dtcc.com wrote: 1. If the RDATALIB class is active, does the user have access to Z30DUSR.SHAREDRING1.LST? 2. If RDATALIB is not active, or the above profile does not exist, does the user have READ access to IRR.DIGTCERT.LISTRING? Hayim _ Hayim Sokolsky, CISSP Mainframe Security Architect DTCC Corporate Information Security 18301 Bermuda Green Dr, MS 1-CIS Tampa FL 33647-1760 Tel. (813) 470-2177 Classification: DTCC Non-Confidential (White) The RDATALIB class is not active and user Z30DUSR has UPDATE access to IRR.DIGTCERT.LISTRING. Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: What is Toronto
On 22 February 2011 20:30, Ted MacNEIL eamacn...@yahoo.ca wrote: Downsview and Buttonville are all in the GTA Downsview hasn't existed for years. Strange - it was there on Monday evening when I last visited. It was dark, and the red obstruction lights stood out quite clearly. Google Maps also thinks it's there, and in my experience it's not unusual to fly over it on a westbound approach into Pearson. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
Thanks. I have no interest in improving JCL. I want to be able to use a single common control file to specify the name of a file for an STC that could be unique across systems: MYFILE=MY.SYSNAME..DATA.FILE MY.SYSNAME..DATA.FILE would ultimately end up in an fopen(): fopen(MY.SYSNAME..DATA.FILE, ...); // would actually be a chr* variable not a literal Yes, I could just write an STC to try it with but gee, isn't the point of documentation so that you can know how things work WITHOUT having to run experiments? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Rob Schramm Sent: Wednesday, February 23, 2011 8:17 AM To: IBM-MAIN@bama.ua.edu Subject: Re: System symbols in dynamic allocation Looks like there are a few examples on the CBTTAPE. File 573: IEFUJV exit for System Symbolic substitution in JCL FILE 785: Substitute system symbols into JCL - K-H Doppelfeld Rob -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
On Wed, Feb 23, 2011 at 4:22 PM, Rob Schramm rob.schr...@gmail.com wrote: They also need the resource that allows for listing of keyrings. Important: Any z/OS-based client or server that uses an RACF key ring issues internal RACDCERT LIST and RACDCERT LISTRING commands. The RACF user ID associated with the server must therefore be granted READ access to the RACF profiles controlling these commands, which are IRR.DIGTCERT.LIST and IRR.DIGTCERT.LISTRING. PERMIT IRR.DIGTCERT.LIST CLASS(FACILITY) ID(TCPIP) ACCESS(READ) PERMIT IRR.DIGTCERT.LISTRING CLASS(FACILITY) ID(TCPIP) ACCESS(READ) SETR RACLIST(FACILITY) REFRESH Rob I didn't have acces to IRR.DIGTCERT.LIST specified but I've now done that and I'm still getting the same symptoms. Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
IBM Mainframe Discussion List IBM-MAIN@bama.ua.edu wrote on 2011.02.23 11:51:23: On Wed, Feb 23, 2011 at 4:22 PM, Rob Schramm rob.schr...@gmail.com wrote: They also need the resource that allows for listing of keyrings. Important: Any z/OS-based client or server that uses an RACF key ring issues internal RACDCERT LIST and RACDCERT LISTRING commands. The RACF user ID associated with the server must therefore be granted READ access to the RACF profiles controlling these commands, which are IRR.DIGTCERT.LIST and IRR.DIGTCERT.LISTRING. PERMIT IRR.DIGTCERT.LIST CLASS(FACILITY) ID(TCPIP) ACCESS(READ) PERMIT IRR.DIGTCERT.LISTRING CLASS(FACILITY) ID(TCPIP) ACCESS(READ) SETR RACLIST(FACILITY) REFRESH Rob I didn't have acces to IRR.DIGTCERT.LIST specified but I've now done that and I'm still getting the same symptoms. Jim McAlpine It sounds like you've touched most if not all of the bases. I would review the certificate, to check on the private key of the SITE certificate, and see if ICSF is involved as well. (CSFKEYS, CSFSERV in RACF.) Check to make sure the certificate is trusted on both sides of the fence. Last but not least, I would recommend running SAFTRACE at this point for the Address Space(s) in question. That will tell you what's going on under the covers, and what is failing. Hayim _ Hayim Sokolsky, CISSP Mainframe Security Architect DTCC Corporate Information Security 18301 Bermuda Green Dr, MS 1-CIS Tampa FL 33647-1760 Tel. (813) 470-2177 Classification: DTCC Non-Confidential (WHITE) BR_ FONT size=2BR DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email./FONT -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Hayim Sokolsky [ snip ] 1. If the RDATALIB class is active, does the user have access to Z30DUSR.SHAREDRING1.LST? 2. If RDATALIB is not active, or the above profile does not exist, does the user have READ access to IRR.DIGTCERT.LISTRING? No. 2 above is in the FACILITY class. -jc- Hayim _ Hayim Sokolsky, CISSP Mainframe Security Architect DTCC Corporate Information Security 18301 Bermuda Green Dr, MS 1-CIS Tampa FL 33647-1760 Tel. (813) 470-2177 Classification: DTCC Non-Confidential (White) BR_ FONT size=2BR DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email./FONT -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: AT-TLS security for SSL sockets
On Wed, Feb 23, 2011 at 5:12 PM, Hayim Sokolsky hsokol...@dtcc.com wrote: It sounds like you've touched most if not all of the bases. I would review the certificate, to check on the private key of the SITE certificate, and see if ICSF is involved as well. (CSFKEYS, CSFSERV in RACF.) Check to make sure the certificate is trusted on both sides of the fence. Last but not least, I would recommend running SAFTRACE at this point for the Address Space(s) in question. That will tell you what's going on under the covers, and what is failing. Hayim _ Hayim Sokolsky, CISSP Mainframe Security Architect DTCC Corporate Information Security 18301 Bermuda Green Dr, MS 1-CIS Tampa FL 33647-1760 Tel. (813) 470-2177 Thanks for your input. Both the local CA certificate and the SITE certificate have the following attribute - Private Key Type: Non-ICSF Which certificate should I be exporting to the client end, the local CA one or the SITE one. Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: What is Toronto
Downsview hasn't existed for years. Strange - it was there on Monday evening when I last visited. It was dark, and the red obstruction lights stood out quite clearly. The airport was shut down before the turn of the millenium. The base is mothballed. - Ted MacNEIL eamacn...@yahoo.ca -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: What is Toronto
As I head to the bomb shelter in preparation of the replies. Downsview is actually still open, sort of. It is being used by Canadair for final assembly of the Q-400 DASH. So while the 'base' is not open (well there are still military presence there) a runway still exists, and planes fly in and out regularly ENOUGH And the only reason I con't this is for accuracy sake Robert Galambos CIPP/C CIPP/IT Compuware Senior Technical Specialist IBM Certified Solutions Expert - DB2 UDB for OS/390 Database Administration Certified Information Privacy Professional/Canada Certified Information Privacy Professional/Information Technology robert.galam...@compuware.com Tel: +1 905 886 7000 Toll Free: +1 800 263 7189 Fax: +1 905 886 7023 Quebec: +1 877-281-1888 Compuware Canada Service is our best product The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it. From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Ted MacNEIL Sent: Wednesday, February 23, 2011 12:26 PM To: IBM-MAIN@bama.ua.edu Subject: Re: What is Toronto Downsview hasn't existed for years. Strange - it was there on Monday evening when I last visited. It was dark, and the red obstruction lights stood out quite clearly. The airport was shut down before the turn of the millenium. The base is mothballed. - Ted MacNEIL eamacn...@yahoo.ca -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: What is Toronto
http://en.wikipedia.org/wiki/Toronto/Downsview_Airport Current is a private airport for Bombadier manufacturing and testing. On Wed, Feb 23, 2011 at 10:35 AM, Tony Harminc t...@harminc.net wrote: On 22 February 2011 20:30, Ted MacNEIL eamacn...@yahoo.ca wrote: Downsview and Buttonville are all in the GTA Downsview hasn't existed for years. Strange - it was there on Monday evening when I last visited. It was dark, and the red obstruction lights stood out quite clearly. Google Maps also thinks it's there, and in my experience it's not unusual to fly over it on a westbound approach into Pearson. Tony H. -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: What is Toronto
Geez...we flew our covered wagon into Malton way back when... John Donnelly National Semiconductor Corporation 2900 Semiconductor Drive Santa Clara, CA 95051 408-721-5640 408-470-8364 Cell cjp...@nsc.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Ted MacNEIL Sent: Tuesday, February 22, 2011 6:24 PM To: IBM-MAIN@bama.ua.edu Subject: Re: What is Toronto Sigh! Pearson is in Mississauga, which is in Peel Region, which is part of the GTA. Not according to the maps I use. Yes! It's in Peel, but it's near Torbram road, which is the boundary between Brampton an Toronto. It's actually in Malton. By the time you get to Airport Road, you've left Mississauga. Used to work just off Indian Line. But, this is getting way off topic. - Ted MacNEIL eamacn...@yahoo.ca -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Question about wiping a DS8100
Hi All, I am new to this list. I have a DS8100 that we are decommissioning and using as a trade-in. We need to make sure that all the data on this system is erased before we ship it off. Do any of you have any thoughts on how to accomplish this at little or no expense? Has anyone already dealt with this issue? Thanks! Nancy Brizuela Systems Programmer, Senior University of Wyoming IBM/Unix Systems Group -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about wiping a DS8100
I believe New Era has a product that you may use, lease for not too much money that will do the trick. We did three writes across everything with different patterns when we collapsed one a couple of years ago, old DOD standards. That is the basic deed, three write patterns to erase, cover the old data. Hope that helps kinda. Claude -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Nancy R. Brizuela Sent: Wednesday, February 23, 2011 12:50 PM To: IBM-MAIN@bama.ua.edu Subject: Question about wiping a DS8100 Hi All, I am new to this list. I have a DS8100 that we are decommissioning and using as a trade-in. We need to make sure that all the data on this system is erased before we ship it off. Do any of you have any thoughts on how to accomplish this at little or no expense? Has anyone already dealt with this issue? Thanks! Nancy Brizuela Systems Programmer, Senior University of Wyoming IBM/Unix Systems Group -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about wiping a DS8100
Delete the CKD/FB volumes, extentpools, ranks, arrays, and arraysites. The logical pieces can't be put back together again. On Wed, Feb 23, 2011 at 12:49 PM, Nancy R. Brizuela brizu...@uwyo.eduwrote: Hi All, I am new to this list. I have a DS8100 that we are decommissioning and using as a trade-in. We need to make sure that all the data on this system is erased before we ship it off. Do any of you have any thoughts on how to accomplish this at little or no expense? Has anyone already dealt with this issue? Thanks! Nancy Brizuela Systems Programmer, Senior University of Wyoming IBM/Unix Systems Group -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- Mark D Pace Senior Systems Engineer Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about wiping a DS8100
Nancy, I believe the ICKDSF TRKFMT command will do what you need. It has an Erase parameter. David O'Brien NIH Contractor -Original Message- From: Nancy R. Brizuela [mailto:brizu...@uwyo.edu] Sent: Wednesday, February 23, 2011 12:50 PM To: IBM-MAIN@bama.ua.edu Subject: Question about wiping a DS8100 Hi All, I am new to this list. I have a DS8100 that we are decommissioning and using as a trade-in. We need to make sure that all the data on this system is erased before we ship it off. Do any of you have any thoughts on how to accomplish this at little or no expense? Has anyone already dealt with this issue? Thanks! Nancy Brizuela Systems Programmer, Senior University of Wyoming IBM/Unix Systems Group -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about wiping a DS8100
Probably just convert LCU to what it isn't; i.e., if it's MVS cnvt to *Nix, if it's *Nix cnvt to MVS. CE has wiping tool but they charge depending on contract fine print. In a message dated 2/23/2011 12:06:37 P.M. Central Standard Time, pacemainl...@gmail.com writes: Delete the CKD/FB volumes, extentpools, ranks, arrays, and arraysites. The logical pieces can't be put back together again. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about wiping a DS8100
Ask your friendly CE. I am told that they have effective ways to sanitize the unit. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Nancy R. Brizuela Sent: Wednesday, February 23, 2011 11:50 AM To: IBM-MAIN@bama.ua.edu Subject: Question about wiping a DS8100 Hi All, I am new to this list. I have a DS8100 that we are decommissioning and using as a trade-in. We need to make sure that all the data on this system is erased before we ship it off. Do any of you have any thoughts on how to accomplish this at little or no expense? Has anyone already dealt with this issue? Thanks! Nancy Brizuela Systems Programmer, Senior University of Wyoming IBM/Unix Systems Group -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
On Wed, 23 Feb 2011 08:00:50 -0800, Charles Mills charl...@mcn.org wrote: Thanks. Your reply crossed in the mail with my follow-up. FWIW in the case in question I am not using SVC 99 directly but rather using C fopen(); Yeah, the fact that you can't code SYSNAME in JCL seems pretty lame. I code it in lots of JCL. -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS mailto:mzel...@flash.net Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html Systems Programming expert at http://expertanswercenter.techtarget.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
On Wed, 23 Feb 2011 08:43:31 -0800, Charles Mills charl...@mcn.org wrote: Thanks. I have no interest in improving JCL. I want to be able to use a single common control file to specify the name of a file for an STC that could be unique across systems: MYFILE=MY.SYSNAME..DATA.FILE MY.SYSNAME..DATA.FILE would ultimately end up in an fopen(): fopen(MY.SYSNAME..DATA.FILE, ...); // would actually be a chr* variable not a literal You could use the symbol service in a assembler program to figure it out yourself and pass that along to your fopen. -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS mailto:mzel...@flash.net Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html Systems Programming expert at http://expertanswercenter.techtarget.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about wiping a DS8100
On Wed, Feb 23, 2011 at 12:04 PM, O'Brien, David W. (NIH/CIT) [C] obrie...@mail.nih.gov wrote: Nancy, I believe the ICKDSF TRKFMT command will do what you need. It has an Erase parameter. David O'Brien NIH Contractor That is what we do. It writes 3 patterns, Repeating 00's, 11's, and 01's for the whole track. -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
System symbols in batch jobs
Hello List,
This post is related to the existing discussion but does not address the C
fopen() issue.
I have, on occasion, needed a static system symbol in batch JCL that could not
be easily incorporated into a symbolicrelate alias. To that end, I wrote a
small NetView REXX that is executed shortly after IPL and after IEASYMUP is
used to modify a static system symbol. I thought I'd share it for those
interested parties who have NetView.
/* Always practice safe REXX*/
//
/* */
/* * Description * */
/* */
/* Create a member of SYS2.PROCLIB that sets JCL symbols to the */
/* value of their corresponding MVS static system symbol. It may*/
/* be INCLUDEd into batch jobs, allowing them access to the MVS */
/* symbol definitions: */
/* */
/* // INCLUDE MEMBER=MVSVARS */
/* */
/*--*/
/* */
/* Activity log:*/
/* */
/* 08/11/08 ALS Initial incarnation */
/* */
//
Parse Source where what myname ddname junk
my_rc = 0
cc1 = '//'copies('*',68)
cc2 = '//* 'date('U')' 'time('N')
cc3 = '//*'
cc4 = '//* The following set statements define JCL symbolics which'
cc5 = '//* correspond to the values of all MVS static system symbols'
cc6 = '//*'
cc7 = '//'copies('*',68)
Pipe (Name getvars End ¬) ,
| MVS D SYMBOLS ,
| CORRWAIT 10 ,
| SEPARATE ,
| DROP FIRST 1 LINES ,
| CHANGE / // ,
| CHANGE //'/ ,
| CHANGE ''// SET ' ,
| CHANGE /.// ,
| LITERAL 'cc7' ,
| LITERAL 'cc6' ,
| LITERAL 'cc5' ,
| LITERAL 'cc4' ,
| LITERAL 'cc3' ,
| LITERAL 'cc2' ,
| LITERAL 'cc1' ,
| QSAM (DSN) SYS2.PROCLIB(MVSVARS)
Member MVSVARS in SYS2.PROCLIB (which is in the standard JES concatenation)
looks like this:
//
//* 09/05/10 21:57:51
//*
//* THE FOLLOWING SET STATEMENTS DEFINE JCL SYMBOLICS WHICH
//* CORRESPOND TO THE VALUES OF ALL MVS STATIC SYSTEM SYMBOLS
//*
//
// SET SYSALVL='2'
// SET SYSCLONE='Y1'
// SET SYSNAME='SY1'
// SET SYSPLEX='WAWPLEX'
// SET SYSR1='RES2E1'
// SET CNMDOMN='CNM10'
// SET CNMHLQ#='3'
// SET CNMNETID='PERS'
// SET CNMRODM='EKGRODM'
// SET CNMSA='10'
// SET CNMTCPN='TCPIP'
// SET DASDSTAT='LIST'
// SET ID='2'
// SET LPAR='PA2'
// SET MODOCE1='FSS666A'
Re: System symbols in dynamic allocation
On Wed, 23 Feb 2011 08:43:31 -0800, Charles Mills wrote: I want to be able to use a single common control file to specify the name of a file for an STC that could be unique across systems: You can use system symbols in started task JCL. Yes, I could just write an STC to try it with but gee, isn't the point of documentation so that you can know how things work WITHOUT having to run experiments? Sure, but it only works if you read it. It is in the JCL reference. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
Charles, Are you looking for something like... S CICS,JOBNAME=CICSSYSNAME. Or am I just completely not understanding what you are looking for... There is a section in the JCL Reference on System Symbols which after a few rules refers the reader to the JCL Symbols section and the Init and Tuning Reference. Rob On Wed, Feb 23, 2011 at 3:00 PM, Tom Marchant m42tom-ibmm...@yahoo.com wrote: On Wed, 23 Feb 2011 08:43:31 -0800, Charles Mills wrote: I want to be able to use a single common control file to specify the name of a file for an STC that could be unique across systems: You can use system symbols in started task JCL. Yes, I could just write an STC to try it with but gee, isn't the point of documentation so that you can know how things work WITHOUT having to run experiments? Sure, but it only works if you read it. It is in the JCL reference. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- Rob Schramm Senior Systems Engineer w: 513.305.6224 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about wiping a DS8100
Thanks for such prompt responses, David, Claude, Mark, Ed, and Hal. I neglected to mention that the DS8100 is no longer attached to a mainframe and that we no longer have a CE. Alas, our mainframe was shipped off in a truck four or five years ago and a couple years ago our managers discovered they could save a lot of money by gong with a 3rd party maintenance provider, so we are no longer with IBM. Nevertheless, this gives me some good leads. I'll contact my former CE and investigate some of the other options. Thanks so much! From: Nancy R. Brizuela Sent: Wednesday, February 23, 2011 10:50 AM To: 'IBM-MAIN@BAMA.UA.EDU' Subject: Question about wiping a DS8100 Hi All, I am new to this list. I have a DS8100 that we are decommissioning and using as a trade-in. We need to make sure that all the data on this system is erased before we ship it off. Do any of you have any thoughts on how to accomplish this at little or no expense? Has anyone already dealt with this issue? Thanks! Nancy Brizuela Systems Programmer, Senior University of Wyoming IBM/Unix Systems Group -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Question about wiping a DS8100
You may want to check with your 3rd party maintenance provider as well. We are in a similar situation as yours, and our 3rd party provider presented a few options. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Nancy R. Brizuela Sent: Wednesday, February 23, 2011 3:34 PM To: IBM-MAIN@bama.ua.edu Subject: Re: Question about wiping a DS8100 Thanks for such prompt responses, David, Claude, Mark, Ed, and Hal. I neglected to mention that the DS8100 is no longer attached to a mainframe and that we no longer have a CE. Alas, our mainframe was shipped off in a truck four or five years ago and a couple years ago our managers discovered they could save a lot of money by gong with a 3rd party maintenance provider, so we are no longer with IBM. Nevertheless, this gives me some good leads. I'll contact my former CE and investigate some of the other options. Thanks so much! From: Nancy R. Brizuela Sent: Wednesday, February 23, 2011 10:50 AM To: 'IBM-MAIN@BAMA.UA.EDU' Subject: Question about wiping a DS8100 Hi All, I am new to this list. I have a DS8100 that we are decommissioning and using as a trade-in. We need to make sure that all the data on this system is erased before we ship it off. Do any of you have any thoughts on how to accomplish this at little or no expense? Has anyone already dealt with this issue? Thanks! Nancy Brizuela Systems Programmer, Senior University of Wyoming IBM/Unix Systems Group -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: What is Toronto
Downsview is actually still open, sort of. It is being used by Canadair for final assembly of the Q-400 DASH. So while the 'base' is not open (well there are still military presence there) a runway still exists, and planes fly in and out regularly My original post, as a response, listed the commercial airports in the GTA.. Downsview is NOT commercial. And, it never was. - Ted MacNEIL eamacn...@yahoo.ca -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: What is Toronto
Hi, OK, *trying* to get this back on topic, which of the airports mentioned - if any - run IBM Mainfames? :-) BobL Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Ted MacNEIL Sent: Wednesday, February 23, 2011 4:26 PM To: IBM-MAIN@bama.ua.edu Subject: Re: What is Toronto Downsview is actually still open, sort of. It is being used by Canadair for final assembly of the Q-400 DASH. So while the 'base' is not open (well there are still military presence there) a runway still exists, and planes fly in and out regularly My original post, as a response, listed the commercial airports in the GTA.. Downsview is NOT commercial. And, it never was. - Ted MacNEIL eamacn...@yahoo.ca -- This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended exclusively for the person(s) to whom it is addressed. Any use, copying, retention or disclosure by any person other than the intended recipient or the intended recipient's designees is strictly prohibited. If you are not the intended recipient or their designee, please notify the sender immediately by return e-mail and delete all copies. OppenheimerFunds may, at its sole discretion, monitor, review, retain and/or disclose the content of all email communications. == -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
On Wed, 23 Feb 2011 08:00:50 -0800, Charles Mills charl...@mcn.org wrote: Yeah, the fact that you can't code SYSNAME in JCL seems pretty lame. Seems pretty lame, at least on the surface. Since JOB C/I and execution are not guaranteed to happen on the same system in a MAS, if the value for a given symbol is different on each, when do you want to resolve the symbol? Some will say at C/I, others will say at execution. Since the entire z/OS user community will not likely ever agree, IBM cannot unilaterally implement a resolution. Either way will cause a large share of customers significant grief. For STCs, C/I and execution happen on the same system (in JES2 at least), so you can safely use system symbols in STC JCL, as many of us do, extensively. Regards, Art Gutowski Ford Motor Company -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RACF Resource Classes
That is what I do not like about either JOBCLASS control or even ICHBLP within RACF. The choice is either USER-A has BLP and USER-B does not. But that is not limiting enough in my opinion. I want to allow a large group of users the ability to use BLP to map foreign tapes (tapes with volsers that are NOT defined to my Tape Management System), and I want a very small group of users to have the ability to use BLP to map in-house tapes (tapes with volsers that ARE defined to my Tape Management System). Granted, with BLP the volser specified in the JCL (and mount message) does not have to match the volser of the mounted tape. But, in order to request volume 123456 and get ABC123 mounted instead requires either physical access to operations or the ability to communicate with someone in operations that will mount a volume different than what is being requested. In the shops I was at, that was a small group of system-programmers. The group of people allowed to map foreign tapes was much larger and included application programmers and even data control people. That is why I wanted to make sure that ability to control BLP was not simply a YES/NO decision but also based on volsers. Or, it can also be based on UCB address's; so that only a few physical devices in a secure location can be used for BLP processing. Again, a YES/NO decision is not sufficient. The BLP SAF call should come from the Tape Management System and indicate if the volume is defined or not (foreign or in-house); what UCB device it is mounted on; and possibly even what volser is being called for. But, that is just my 2-cents worth. Russell Witt CA 1 L2 Support Manager Radoslaw said ICHBLP is RACF mechanism, with regular USER/GROUP access lists. In simple words JOHN has no right to BLP, while FRANK is allowed to use BLP. JES2 JOBCLASS BLP parameter is all or nothing. No authorized people. In case of BLP=YES everyone can use it (but other mechanisms like RACF still apply!). For BLP=NO every BLP request is chaged to NL. It can be veeery misleading - BTDT in approx 2002. ;-) RMM can further add its own BLP protection mechanism... BTW: IMHO it's good idea to define one JOBLCASS with BLP=YES and protect the jobclass in RACF using some exit, like IEFUJI. In such scenario BLP is protected (and available for authorized persons!) despite type of configuration of RMM (other TMS) and RACF TAPEVOL. My €0.02 -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: System symbols in dynamic allocation
Arthur Gutowski wrote: Yeah, the fact that you can't code SYSNAME in JCL seems pretty lame. Seems pretty lame, at least on the surface. Perhaps lame yes, but where do you want the symbols to be resolved? This (resolving symbolics on correct system) has been discussed many times here... Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Kill Thread!!! What is Toronto
Ok, it has been suggested a couple times to kill this thread and no one listened. So, I'm now going to say it, please kill this thread immediately or I'm going to start setting people to NOPOST status. Thank you. Darren -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: RACF Resource Classes
Russell, In general good point: it's good idea to control BLP by volser, to distinguish i.e. in-house and external tapes. Or even more categories. Or just by volser. Note, that (AFAIK) even for BLP processing RMM still checks the volser. Note2 - in ATL, VTL it's not so easy to fake the volser (but it's possible in some scenarios). However I have to disagree with one statement: BLP *should NOT* be the way for reading external tapes, just because they're external, not defined in TMS, etc. Assuming external tape is regular SL one, there is no reason to use BLP. No reason except (my opinion) poor environment configuration. Regards -- Radoslaw Skorupka Lodz, Poland Russell Witt pisze: That is what I do not like about either JOBCLASS control or even ICHBLP within RACF. The choice is either USER-A has BLP and USER-B does not. But that is not limiting enough in my opinion. I want to allow a large group of users the ability to use BLP to map foreign tapes (tapes with volsers that are NOT defined to my Tape Management System), and I want a very small group of users to have the ability to use BLP to map in-house tapes (tapes with volsers that ARE defined to my Tape Management System). Granted, with BLP the volser specified in the JCL (and mount message) does not have to match the volser of the mounted tape. But, in order to request volume 123456 and get ABC123 mounted instead requires either physical access to operations or the ability to communicate with someone in operations that will mount a volume different than what is being requested. In the shops I was at, that was a small group of system-programmers. The group of people allowed to map foreign tapes was much larger and included application programmers and even data control people. That is why I wanted to make sure that ability to control BLP was not simply a YES/NO decision but also based on volsers. Or, it can also be based on UCB address's; so that only a few physical devices in a secure location can be used for BLP processing. Again, a YES/NO decision is not sufficient. The BLP SAF call should come from the Tape Management System and indicate if the volume is defined or not (foreign or in-house); what UCB device it is mounted on; and possibly even what volser is being called for. But, that is just my 2-cents worth. Russell Witt CA 1 L2 Support Manager Radoslaw said ICHBLP is RACF mechanism, with regular USER/GROUP access lists. In simple words JOHN has no right to BLP, while FRANK is allowed to use BLP. JES2 JOBCLASS BLP parameter is all or nothing. No authorized people. In case of BLP=YES everyone can use it (but other mechanisms like RACF still apply!). For BLP=NO every BLP request is chaged to NL. It can be veeery misleading - BTDT in approx 2002. ;-) RMM can further add its own BLP protection mechanism... BTW: IMHO it's good idea to define one JOBLCASS with BLP=YES and protect the jobclass in RACF using some exit, like IEFUJI. In such scenario BLP is protected (and available for authorized persons!) despite type of configuration of RMM (other TMS) and RACF TAPEVOL. My €0.02 -- Radoslaw Skorupka Lodz, Poland -- BRE Bank SA ul. Senatorska 18 00-950 Warszawa www.brebank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237 NIP: 526-021-50-88 Według stanu na dzień 16.07.2010 r. kapitał zakładowy BRE Banku SA (w całości wpłacony) wynosi 168.248.328 złotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
