date:20120329

In
,
on 03/29/2012
   at 04:01 PM, John Gilmore  said:

>Moreover, SVC-based schemes to this end are at best obsolescent;
>PC-based ones will be the villains of the future.

Future? Do you mean that no authors of current PC routines were
negligent?
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

In
,
on 03/29/2012
   at 09:57 PM, jan de decker  said:

>There are zillions of ways to hack a zOS system.

Perhaps, but the ones that you describe are due to insider negligence,
not to flaws in z/OS itself.

>I think we will all agree that the cornerstone of zOS security is
>the status of the PSW key and supervisor state bits.

No, the cornerstone is resource control, and the PSW fileds are just a
small piece of that.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: z/OS ftp and Unicode

In <0437689456600514.wa.paulgboulderaim@bama.ua.edu>, on
03/29/2012
   at 02:55 PM, Paul Gilmartin  said:

>and it was further abridged when you quoted it. 

I quoted it from your message, not from a web site. I don't see where
I deleted any relevant text.

>The larger sequence

Larger? It's shorter thabn the sequence I quoted from, e.g., it
doesn't have the "125 Sending data set SPPG.TEST.TESTPRT(TESTPRT)
FIXrecfm 80".

>The message is incorrect and misleading.

What message is incorrect? Certainly not "504 Multi-byte encoding not
supported for RECFM=FB".

>For that matter, until it was named in the "get" the FTP server 
>couldn't know the RECFM of the data set.

The above message appeared *after* the get. Were you referring to
that, or to "557 Data contains codepoints that cannot be translated",
which did not appear in your "larger" sequence?
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: catalogued datasets in tapes and expiration dates

2012-03-29 Thread Russell Witt

Uriel,

If you have a tape with multiple datasets; and some datasets are "keep until
un-cataloged" and some dataset have simple retention (10 days, 30 days, 180
days, 5 years) with CA-1 the tape will be kept until all files that are
"keep until un-cataloged" have been un-cataloged and after that the tape
will continue to be kept until the simple-retention for EVERY file on the
tape has been reached.

There is one big caveat however, and that is if the EXPDT field for the
volume record itself is manually changed. If you manually change the EXPDT
for file-1 on the tape to today; that tape volume will be expired and it
will be scratched when TMSCLEAN run tonight. So, a manual update will
override the basic processing of CA-1 retention policies.

If you have any follow-up questions, please feel free to contact CA-1 L1
support. They would be happy to answer any of your retention questions.

Russell Witt
L2 Support Manager

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf
Of Uriel Carrasquilla
Sent: Thursday, March 29, 2012 8:51 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: catalogued datasets in tapes and expiration dates

Let's say I have a tape with multiple datasets inside.
Some datasets may be catalogued, some may not.
I can understand the once not catalogued when they expire they no longer
hold the tape from going to the scratch pool.
But what about those cases when the catalogued datasets hit their expiration
date? what happens?
am I also correct in assuming that the entire tape with all the stacked
datasets is being held until the last dataset in it expires? 
Please share your thoughts.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Printing limits and userids

2012-03-29 Thread Mark Douglas (CITEC)

1. Also Vps exit13 should support selective requeueing based on 'Word 3 (+12) 
Address of Dataset Attributes (VPSSDSAT)'.
2. You could always define separate queues for batch and user output pointing 
to the same destination. Then each queue can have tailored REQ* parms.
3. If you are patient, you can ask LRS to add this functionality to a future 
Vps release. They have been receptive to coding exit logic into simple 
parameters with the dataset add Exit 14 precedent. In fact LRS has been my most 
approachable vendor to date.

Cheers,
MARK DOUGLAS 
Senior IT Support Consultant
Mainframe
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Hansen, Dave L - Eagan, MN
Sent: Friday, 30 March 2012 7:29 AM
To: IBM-MAIN@bama.ua.edu
Subject: Printing limits and userids

Group,

  We have a lot of large reports in our MVS spool.  Any suggestions on limiting 
users from printing large reports by their userids, or a way to differentiate 
between valid print processing and potentially erroneous print processing by 
report name with JES2?  A 50,000 page report may be valid if coming from a 
production job but may well be in error if generated by a user/programmer.  
Somehow there would need to be a reference to valid users (userids), valid 
production jobs, valid printers, and number of pages.  The pages may not be 
correct because the APF information has not been converted.

  I contacted the RACF group and it appears there is no option to limit 
printing by userid.

  I contacted our print software vendor (VPS).  I have two choices:
 - Dynamically change the print page limit by printer.  Not userid specific 
and you can print in "sections" which will still get your print printed and not 
exceed the limit of printable pages.
 - Use Exit 22 where we can trap the userid and requeue the large report 
output if it meets specifications.  Then an appropriate operator command will 
need to be issued to JES to make SYSOUT available for printing again.  Sounds 
like big overhead.  

  So, any job can send output to the MVS spool.  Maybe I could dedicate a class 
or job form for the large reports, but I don't know the best way to do this in 
JES2.  From what I've seen you can just change the JES2 resources. and away 
goes the user/programmer's large report to the wrong printer.
   

   Many thanks in advance,  Dave  


Dave Hansen 
Eagan Software Systems Branch 
651-406-1208 
dave.l.han...@usps.gov 

 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


* Disclaimer *

The contents of this electronic message and any attachments are intended only 
for the addressee and may contain privileged or confidential information. They 
may only be used for the purposes for which they were supplied. If you are not 
the addressee, you are notified that any transmission, distribution, 
downloading, printing or photocopying of the contents of this message or 
attachments is strictly prohibited. The privilege of confidentiality attached 
to this message and attachments is not waived, lost or destroyed by reason of 
mistaken delivery to you. If you receive this message in error please notify 
the sender by return e-mail or telephone.

Please note: the Department of Public Works carries out automatic software 
scanning, filtering and blocking of E-mails and attachments (including emails 
of a personal nature) for detection of viruses, malicious code, SPAM, 
executable programs or content it deems unacceptable. All reasonable 
precautions will be taken to respect the privacy of individuals in accordance 
with the Information Privacy Act 2009 (Qld). Personal information will only be 
used for official purposes, e.g. monitoring Departmental Personnel's compliance 
with Departmental Policies. Personal information will not be divulged or 
disclosed to others, unless authorised or required by Departmental Policy 
and/or law.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: MERGE question: Does SEQNUM restart for each SORTINxx?

2012-03-29 Thread Frank Yaeger

Peter,

As a postscript to my earlier note, I can explain why you are not getting
the sequence numbers the way you expected.  DFSORT does NOT
restart the SEQNUM at 1 for each SORTINxx.  However, ...

INREC is processed before MERGE.

For a MERGE, DFSORT first reads one record from each SORTINxx file.

DFSORT reads SORTIN01 record 1 and INREC sets it's SEQNUM to 1.
DFSORT reads SORTIN02 record 1 and INREC sets it's SEQNUM  to 2.
DFSORT reads SORTIN03 record 1 and INREC sets it's SEQNUM to 3.
DFSORT reads SORTIN04 record 1 and INREC sets it's SEQNUM  to 4.
So your DUMMY trailer record (SORTIN04 record 1) gets 4 as it's SEQNUM.
If you want the DUMMY trailer record to get the last SEQNUM, you would
have to use OUTREC, which which is processed after MERGE to set the
SEQNUM, rather than INREC which is processed before MERGE.

Frank Yaeger - DFSORT Development Team (IBM) - yae...@us.ibm.com
Specialties: JOINKEYS, FINDREP, WHEN=GROUP, ICETOOL, Symbols, Migration

 => DFSORT/MVS is on the Web at http://www.ibm.com/storage/dfsort

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: rexx cpu intensive

2012-03-29 Thread Cris Hernandez #9

One more thing about keeping the rexx efficient.  

I like to write structured code so that no code is executed unnecessarily, plus 
it's easier to update.  


I didn't run a test check the difference between compiled & interpreted rexx, 
but here's the cpu usage results from one of my (uncompiled) execs.  The cpu 
usage doesn't seem excessive to me.  

input = 43mb blob of server data (streaming)  

output = 7000 records, lrecl=300


run in batch, elapsed run time under 3 minutes:
CPU usage is    137.75 (seconds
. hundreths/seconds) 

system messages:  
STEP/STEP010 /START 2012088.0535 
STEP/STEP010 /STOP  2012088.0538
CPU 2MIN
21.08SEC SRB    0MIN 00.02SEC VIRT   320K SYS   428K
EXT    2388K SYS11612K 

Par for the course as far as I know.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Cataloged dataset

2012-03-29 Thread retired mainframer

Would a DELETE NOSCR followed by a DEFINE NVSAM do what you want?

But the real question is how did a catalog entry for the volume in question
get created n the first place?  Did a segment of the data set exist on the
volume at one time and then get deleted without the catalog being updated
(initialize the volume or delete with volser specified)?  If so, is the
dataset usable with a chunk of it missing?

Does it make a difference if XX is the first, last, or one of the middle
volumes?

:>: -Original Message-
:>: From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
:>: Behalf Of Mark Steely
:>: Sent: Thursday, March 29, 2012 2:05 PM
:>: To: IBM-MAIN@bama.ua.edu
:>: Subject: Cataloged dataset
:>:
:>: I have a PS dataset that is cataloged to 22 volumes. When I do an ISMF
:>: list on the dataset I get the message dataset not found on volume
:>: XX .  Is there a way to remove the volume from the catalog entry?
:>: We are z/OS v1r11 - this dataset is not SMS managed.
:>:

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: MERGE question: Does SEQNUM restart for each SORTINxx?

2012-03-29 Thread Frank Yaeger

Peter Farley at IBM Mainframe Discussion List  wrote
on 03/29/2012 02:28:49 PM:

>...
>As can be seen, the trailer count is not correct.
>It should be 009.
>...

I'm confused.  Since you have 10 data records (1,2,3,4,5,5,6,7,8.9),
wouldn't you want the count to be 10, not 9?

Assuming you do, this would be a simpler DFSORT solution:

//S1 EXEC PGM=SORT
//SYSOUT DD SYSOUT=*
//SORTIN01 DD DSN=...  input file 1 (VB)
//SORTIN02 DD DSN=...  input file 2 (VB)
//SORTIN03 DD DSN=...  input file 3 (VB)
//SORTOUT DD DSN=...  output file (VB)
//SYSIN DD *
   OPTION VLSCMP,VLSHRT
   OMIT COND=(((5,3,CH,EQ,C'000'),AND, OMIT(HEADER RECORD AND
 (34,5,CH,NE,C'FILE1')),OR,NOT FILE1) OR
 (5,3,CH,EQ,C'999'))  TRAILER RECORD)
   MERGE FIELDS=(5,3,CH,A),EQUALS
   OUTFIL REMOVECC,
 TRAILER1=(C'999FILE TLR CNT=',
   COUNT-1=(TO=ZD,LENGTH=11),
   C',DATE=00')
/*

For your input example (SORTIN01-03), SORTOUT would have:

000FILE HDR DATE=032912,FILE=FILE1.NAME
001DATA REC 001
002DATA REC 002
003DATA REC 003
004DATA REC 004
005DATA REC 005
005DATA REC 005 SECOND TIME
006DATA REC 006
007DATA REC 007
008DATA REC 008
009DATA REC 009
999FILE TLR CNT=010,DATE=00

If that's not what you want for output, then please explain the
"rules" for getting from input to output more clearly.

Frank Yaeger - DFSORT Development Team (IBM) - yae...@us.ibm.com
Specialties: JOINKEYS, FINDREP, WHEN=GROUP, ICETOOL, Symbols, Migration

 => DFSORT/MVS is on the Web at http://www.ibm.com/storage/dfsort

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Cataloged dataset

2012-03-29 Thread Linda

If you query the volume, what is on the tape?  Is it possible that the tape set 
went to scratch and wasn't properly rescued from scratch?  

Linda

Sent from my iPhone

On Mar 29, 2012, at 2:04 PM, Mark Steely  wrote:

> I have a PS dataset that is cataloged to 22 volumes. When I do an ISMF list 
> on the dataset I get the message dataset not found on volume XX .  Is 
> there a way to remove the volume from the catalog entry?  We are z/OS v1r11 - 
> this dataset is not SMS managed.
> 
> Thanks
> 
> 
> 
> 
> 
> *** CONFIDENTIALITY NOTICE ***
> This e-mail message and all attachments transmitted with it may
> contain legally privileged and confidential information intended
> solely for the use of the addressee. If the reader of this message
> is not the intended recipient, you are hereby notified that any
> reading, dissemination, distribution, copying, or other use of this
> message or its attachments is strictly prohibited. If you have
> received this message in error, please notify the sender
> immediately and delete this message from your system. Thank you.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Cataloged dataset

2012-03-29 Thread Rob Schramm

Mark,

I may be misunderstanding the question.  But if a data set currently
spans 22 volumes, and one part of it on volume 19 is missing... the
data set is somewhat corrupted at best.

Rob Schramm
Senior Systems Consultant
Imperium Group




On Thu, Mar 29, 2012 at 5:04 PM, Mark Steely  wrote:
> I have a PS dataset that is cataloged to 22 volumes. When I do an ISMF list 
> on the dataset I get the message dataset not found on volume XX .  Is 
> there a way to remove the volume from the catalog entry?  We are z/OS v1r11 - 
> this dataset is not SMS managed.
>
> Thanks
>
>
>
>
>
> *** CONFIDENTIALITY NOTICE ***
> This e-mail message and all attachments transmitted with it may
> contain legally privileged and confidential information intended
> solely for the use of the addressee. If the reader of this message
> is not the intended recipient, you are hereby notified that any
> reading, dissemination, distribution, copying, or other use of this
> message or its attachments is strictly prohibited. If you have
> received this message in error, please notify the sender
> immediately and delete this message from your system. Thank you.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Trying to capture JES2 Job Log

2012-03-29 Thread Jonathan Goossen

Alan,
Check with your EOS administrators. When we use to have reports sent to 
EOS, I needed to have them setup something to allow me to see the reports. 
We also coded a report ID in the JCL DD statement. I no longer have an EOS 
to look at, so I'm not able to tell you more.

Thank you and have a Terrific day!

Jonathan Goossen, DTM
ACT Mainframe Storage Group
Personal: 651-361-4541
Department Support Line: 651-361-
For help with communication and leadership skills checkout Woodwinds 
Toastmasters

IBM Mainframe Discussion List  wrote on 03/29/2012 
04:02:13 PM:

> From: "Schwartz, Alan" 
> To: IBM-MAIN@bama.ua.edu
> Date: 03/29/2012 04:05 PM
> Subject: Re: Trying to capture JES2 Job Log
> Sent by: IBM Mainframe Discussion List 
> 
> I've been away for a while but ready to revisit this at it's a real
> irritant.  It shouldn't be this difficult.
> 
> I checked a task I can cycle as needed.  When I view the stc via SDSF
> all portions (except internal text) show msgclass of 7 which is what is
> desired.
> 
> NP   DDNAME   StepName ProcStep DSID OwnerC Dest
> Rec-Cnt
>  JESJCLIN  1 *BYPASS* 7
> 2
>  JESMSGLG JES2 2 *BYPASS* 7
> 2
>  JESJCL   JES2 3 *BYPASS* 7
> 34
>  JESYSMSG JES2 4 *BYPASS* 7
> 2
>  $INTTEXT JES2 5 *BYPASS* A
> 9
> 
> But when I stop the task and the output goes to EOS I just get JESJCL
> and JESSYSMSG.   I still think it might be an EOS issue.  Vendor can't
> help
> 
> Alan Schwartz
> ITO Global Service Operations and Engineering
> 1500 Towerview Rd.
> Eagan, MN 55121-1346
> 
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
> Behalf Of Lizette Koehler
> Sent: Thursday, March 15, 2012 2:38 PM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Trying to capture JES2 Job Log
> 
> > 
> > I'm attempting to save started task output in our output management
> database.  We
> > use EOS.  I changed the JOBCLASS(STC) MSGCLASS to the class EOS uses 
> > and I
> get
> > the JESJCL  and
> > 
> > JESYSMSG files and that's all.  Any clues what else I might need to 
> > alter
> to capture the
> > JESMSGLG file?
> > 
> > 
> > 
> 
> You need to have your MSGCLASS and SYSOUT Class go to the same place.
> Are they both coded the same? 
> 
> 
> I typically see the following
> 
> JESMSGLG JES2  This is the JOBLOG
> JESJCL  JES2  This the JCL with substitutions
> JESYSMSG JES2  This is each step statistics (datasets, ucb,
> etc...)
> 
> If you set MSGCLASS=X, all three should go to output class X unless you
> have exits.  Or do you have a JOBCARD added to your STC that uses a
> different MSGCLASS?  Is the STC being started with a MSGCLASS other than
> what you
> want?  You can issue   S STCNAME,MSGCLASS=Y
> 
> 
> Lizette
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


This e-mail message and all attachments transmitted with it may
contain legally privileged and/or confidential information intended
solely for the use of the addressee(s). If the reader of this
message is not the intended recipient, you are hereby notified that
any reading, dissemination, distribution, copying, forwarding or
other use of this message or its attachments is strictly
prohibited. If you have received this message in error, please
notify the sender immediately and delete this message and all
copies and backups thereof. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

2012-03-29 Thread Barry Merrill

One of your postings reminded me of Pat Artis' statement:

The difference between a Feature and a Benefit:
A Feature is when your wife/girlfriend has large breasts.
A Benefit is when she lets you touch them.

Barry

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Printing limits and userids

2012-03-29 Thread Hansen, Dave L - Eagan, MN

Group,

  We have a lot of large reports in our MVS spool.  Any suggestions on limiting 
users from printing large reports by their userids, or a way to differentiate 
between valid print processing and potentially erroneous print processing by 
report name with JES2?  A 50,000 page report may be valid if coming from a 
production job but may well be in error if generated by a user/programmer.  
Somehow there would need to be a reference to valid users (userids), valid 
production jobs, valid printers, and number of pages.  The pages may not be 
correct because the APF information has not been converted.

  I contacted the RACF group and it appears there is no option to limit 
printing by userid.

  I contacted our print software vendor (VPS).  I have two choices:
 - Dynamically change the print page limit by printer.  Not userid specific 
and you can print in "sections" which will still get your print printed and not 
exceed the limit of printable pages.
 - Use Exit 22 where we can trap the userid and requeue the large report 
output if it meets specifications.  Then an appropriate operator command will 
need to be issued to JES to make SYSOUT available for printing again.  Sounds 
like big overhead.  

  So, any job can send output to the MVS spool.  Maybe I could dedicate a class 
or job form for the large reports, but I don't know the best way to do this in 
JES2.  From what I've seen you can just change the JES2 resources. and away 
goes the user/programmer's large report to the wrong printer.
   

   Many thanks in advance,  Dave  


Dave Hansen 
Eagan Software Systems Branch 
651-406-1208 
dave.l.han...@usps.gov 

 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

MERGE question: Does SEQNUM restart for each SORTINxx?

2012-03-29 Thread Farley, Peter x23353

I am trying to use the SEQNUM trick that Frank Yaeger taught us a while ago on 
this list to put the record count into a trailer record, but this time in a 
MERGE operation rather than in a SORT operation.  It appears that SEQNUM may be 
restarting at 1 for each SORTINxx input file, but I can find no documentation 
to confirm or deny this.  Or I may have a misunderstanding of the flow of a 
MERGE operation.  I'd appreciate any help you can give to cure my mistakes.

The business case to be solved is this:  I have multiple VB input files (all 
created in the same ascending order by the same key, with duplicates) to be 
merged into one file, but all input files each have their own separate header 
and trailer records.  The final output file must have exactly one header and 
one trailer, and the one trailer must have a count of all the data records (not 
counting the single header or trailer records).  I supply one file with a 
single unique-key record that is a "DUMMY" trailer record to be used to create 
the one output trailer record.

I developed a simple test scenario to show the problem.  In the test scnario 
the merge key is the first three bytes of each record.  Key value 000 is a 
header record and key value 999 is a trailer record.  The merged output file 
(RECFM=VB,LRECL=84) comes out looking like this:

000FILE HDR DATE=032912,FILE=FILE1.NAME
001DATA REC 001
002DATA REC 002
003DATA REC 003
004DATA REC 004
005DATA REC 005
005DATA REC 005 SECOND TIME
006DATA REC 006
007DATA REC 007
008DATA REC 008
009DATA REC 009
999FILE TLR CNT=001,DATE=00

As can be seen, the trailer count is not correct.  It should be 009.

Here is the MERGE control card input I used:

 OMIT COND=(((5,3,CH,EQ,C'000'),AND, OMIT(HEADER RECORD AND
 (34,5,CH,NE,C'FILE1')),OR,NOT FILE1) OR   
 (5,3,CH,EQ,C'999'))  TRAILER RECORD)  
* ADD SEQNUM BETWEEN RDW AND DATA. 
  INREC IFTHEN=(WHEN=INIT,BUILD=(1,4,5:SEQNUM,11,ZD,16:5)),
* USE SEQNUM-2 TO PUT COUNT OF DATA RECORDS INTO 
* DUMMY TRAILER RECORD (IDENTIFIED BY X'FAFAFA').  
IFTHEN=(WHEN=(16,3,CH,EQ,X'FAFAFA'),   
OVERLAY=(32:4,11,ZD,SUB,+2,M11,LENGTH=11)) 
 MERGE  FIELDS=(016,03,CH,A),  
EQUALS,FILES=4   SORTIN01 TO 04
 OUTREC IFTHEN=(WHEN=(016,03,CH,EQ,C'000'),   HEADER RECORD
BUILD=(1,4,5:16)), 
IFTHEN=(WHEN=(16,3,CH,EQ,X'FAFAFA'),  TRAILER RECORD   
BUILD=(1,4,5:C'999',8:19)),
IFTHEN=(WHEN=NONE,   ALL OTHER RECORDS 
BUILD=(1,4,5:16))  

Here are the four input files, all RECFM=VB,LRECL=84, with their data contents:

File #1:

000FILE HDR DATE=032912,FILE=FILE1.NAME
001DATA REC 001
005DATA REC 005
007DATA REC 007
999FILE TLR CNT=003,DATE=032912

File #2:

000FILE HDR DATE=032912,FILE=FILE2.NAME
002DATA REC 002
004DATA REC 004
006DATA REC 006
008DATA REC 008
999FILE TLR CNT=004,DATE=032912

File #3:

000FILE HDR DATE=032912,FILE=FILE3.NAME
003DATA REC 003
005DATA REC 005 SECOND TIME
009DATA REC 009
999FILE TLR CNT=003,DATE=032912

File #4: (DUMMY trailer record to be inserted into merged output)

³³³FILE TLR CNT=000,DATE=00

Note that the first 3 bytes of the only record in file #4 are X'FAFAFA' so that 
this record has a higher key value than any other record.

Any assistance you can provide would be much appreciated.

Peter


This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: LE enclave calls another LE enclave

2012-03-29 Thread Steve Comstock


On 3/29/2012 3:11 PM, Bernd Oppolzer wrote:

Ok, thank you, you gave me something to think about.
Maybe I should try to call the mains in a different way.
Now my co-worker is off for holidays for three weeks,
I will try to run some tests myself. I'll keep you informed.

The mains are in fact compiled with RENT and DLL options and linked as DLLs;
that is kind of site standard, regardless of program type (sub or main).

But indeed, the opsys calls the mains using ATTACH or LINK, AFAIK,
and maybe I should try to do the same. CEEFETCH is not needed,
because the mains are started at CEESTART and the LE initialization
for the second enclave is performed, anyway.


I've lost the earlier posts in this thread, and I don't
have time now to go back through the archives. But if
you have Assembler using ATTACH or LINK of DLL's, if
the Assembler code is LE-compliant (I think you said it
was), you can invoke DLLs from your Assembler program
using dllload, dllqueryfn, dllqueryvar, or use the
LE service CEEPCALL.

Not sure if exploring these would help, but thought
I'd throw them out there in case you weren't aware
of them.




Kind regards

Bernd



Am 29.03.2012 16:45, schrieb Shmuel Metz (Seymour J.):

In<201203281648.40289.bernd.oppol...@t-online.de>, on 03/28/2012
at 04:48 PM, Bernd Oppolzer said:


The Mains (and the PL/1 sub program test objects) are - or can be -
DLLs, compiled with the RENT compile option, so they have to be
called using CEEFETCH, because the proper WSA initialization etc
has to be done.

Are you sure that using CEEFETCH for MAIN, or putting a MAIN in a DLL,
are supported?


because the proper WSA initialization etc has to be done.

Isn't that what MAIN is for?



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN




--

Kind regards,

-Steve Comstock
The Trainer's Friend, Inc.

303-355-2752
http://www.trainersfriend.com

* To get a good Return on your Investment, first make an investment!
  + Training your people is an excellent investment

* Try our tool for calculating your Return On Investment
for training dollars at
  http://www.trainersfriend.com/ROI/roi.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Trying to capture JES2 Job Log

Hi Alan, 



Try adding a sysprint dd statement.  I did that to a few STC here.  Worked. 

  
HTH, 



Linda 

- Original Message -


From: "Alan Schwartz"  
To: IBM-MAIN@bama.ua.edu 
Sent: Thursday, March 29, 2012 2:02:13 PM 
Subject: Re: Trying to capture JES2 Job Log 

I've been away for a while but ready to revisit this at it's a real 
irritant.  It shouldn't be this difficult. 

I checked a task I can cycle as needed.  When I view the stc via SDSF 
all portions (except internal text) show msgclass of 7 which is what is 
desired. 

NP   DDNAME   StepName ProcStep DSID Owner    C Dest 
Rec-Cnt 
     JESJCLIN                      1 *BYPASS* 7 
2 
     JESMSGLG JES2                 2 *BYPASS* 7 
2 
     JESJCL   JES2                 3 *BYPASS* 7 
34 
     JESYSMSG JES2                 4 *BYPASS* 7 
2 
     $INTTEXT JES2                 5 *BYPASS* A 
9 

But when I stop the task and the output goes to EOS I just get JESJCL 
and JESSYSMSG.   I still think it might be an EOS issue.  Vendor can't 
help 

Alan Schwartz 
ITO Global Service Operations and Engineering 
1500 Towerview Rd. 
Eagan, MN 55121-1346 


-Original Message- 
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On 
Behalf Of Lizette Koehler 
Sent: Thursday, March 15, 2012 2:38 PM 
To: IBM-MAIN@bama.ua.edu 
Subject: Re: Trying to capture JES2 Job Log 

> 
> I'm attempting to save started task output in our output management 
database.  We 
> use EOS.  I changed the JOBCLASS(STC) MSGCLASS to the class EOS uses 
> and I 
get 
> the JESJCL  and 
> 
> JESYSMSG files and that's all.  Any clues what else I might need to 
> alter 
to capture the 
> JESMSGLG file? 
> 
> 
> 

You need to have your MSGCLASS and SYSOUT Class go to the same place. 
Are they both coded the same? 


I typically see the following 

JESMSGLG JES2          This is the JOBLOG 
JESJCL      JES2          This the JCL with substitutions 
JESYSMSG JES2          This is each step statistics (datasets, ucb, 
etc...) 

If you set MSGCLASS=X, all three should go to output class X unless you 
have exits.  Or do you have a JOBCARD added to your STC that uses a 
different MSGCLASS?  Is the STC being started with a MSGCLASS other than 
what you 
want?  You can issue   S STCNAME,MSGCLASS=Y 


Lizette 

-- 
For IBM-MAIN subscribe / signoff / archive access instructions, send 
email to lists...@bama.ua.edu with the message: INFO IBM-MAIN 

-- 
For IBM-MAIN subscribe / signoff / archive access instructions, 
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: LE enclave calls another LE enclave

2012-03-29 Thread Bernd Oppolzer


Ok, thank you, you gave me something to think about.
Maybe I should try to call the mains in a different way.
Now my co-worker is off for holidays for three weeks,
I will try to run some tests myself. I'll keep you informed.

The mains are in fact compiled with RENT and DLL options and linked as 
DLLs;

that is kind of site standard, regardless of program type (sub or main).

But indeed, the opsys calls the mains using ATTACH or LINK, AFAIK,
and maybe I should try to do the same. CEEFETCH is not needed,
because the mains are started at CEESTART and the LE initialization
for the second enclave is performed, anyway.

Kind regards

Bernd



Am 29.03.2012 16:45, schrieb Shmuel Metz (Seymour J.):

In<201203281648.40289.bernd.oppol...@t-online.de>, on 03/28/2012
at 04:48 PM, Bernd Oppolzer  said:


The Mains (and the PL/1 sub program test objects) are - or can be -
DLLs, compiled with the RENT compile option, so they have to be
called using CEEFETCH, because the proper WSA initialization etc
has to be done.

Are you sure that using CEEFETCH for MAIN, or putting a MAIN in a DLL,
are supported?


because the proper WSA initialization etc has to be done.

Isn't that what MAIN is for?



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Tapeless solution (IBM or Sun) Enterprise class

Hi Tommy, 



For #2- 

A very large potion of our tapes are kept for 30 days or less.  So, for 
cutover, the BusTech joined the same SMS pool and esoteric pool as the ATL/VTS 
it was replacing and the ATL/VTS was quiesced.  All new allocations went to the 
BusTech.  After a few weeks most of the migration took care of itself. 



HTH 

Linda 

- Original Message -


From: "Tommy Tsui"  
To: IBM-MAIN@bama.ua.edu 
Sent: Wednesday, March 28, 2012 4:58:59 AM 
Subject: Re: Tapeless solution (IBM or Sun) Enterprise class 

What I concerns are: 
1. Tape still have life time, if 1TB tape damage then we need more time to 
re-built or re-create it, except you implement dual copy or PPRC VTS and it 
cost you more. 
2. Tape migration is my concern, I think disk to disk migration is more 
faster solution. I can't find any migration approach for B20 to TS7740 or 
TS7740 to another new model, except using COPYCAT or TAPECOPY utility, read 
all  tapes to cache and copy back to other tape subsystem 
3. IBM Tape drives cannot read each other, TS1120, TS1130, TS1140...If a 
new model comes and we need to preform another migrationcopy again and 
again from tape to another tape system because of new drives.TRUE 

-- 
For IBM-MAIN subscribe / signoff / archive access instructions, 
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Cataloged dataset

2012-03-29 Thread Mark Steely

I have a PS dataset that is cataloged to 22 volumes. When I do an ISMF list on 
the dataset I get the message dataset not found on volume XX .  Is there a 
way to remove the volume from the catalog entry?  We are z/OS v1r11 - this 
dataset is not SMS managed.

Thanks





*** CONFIDENTIALITY NOTICE ***
This e-mail message and all attachments transmitted with it may
contain legally privileged and confidential information intended
solely for the use of the addressee. If the reader of this message
is not the intended recipient, you are hereby notified that any
reading, dissemination, distribution, copying, or other use of this
message or its attachments is strictly prohibited. If you have
received this message in error, please notify the sender
immediately and delete this message from your system. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Trying to capture JES2 Job Log

2012-03-29 Thread Schwartz, Alan

I've been away for a while but ready to revisit this at it's a real
irritant.  It shouldn't be this difficult.

I checked a task I can cycle as needed.  When I view the stc via SDSF
all portions (except internal text) show msgclass of 7 which is what is
desired.

NP   DDNAME   StepName ProcStep DSID OwnerC Dest
Rec-Cnt
 JESJCLIN  1 *BYPASS* 7
2
 JESMSGLG JES2 2 *BYPASS* 7
2
 JESJCL   JES2 3 *BYPASS* 7
34
 JESYSMSG JES2 4 *BYPASS* 7
2
 $INTTEXT JES2 5 *BYPASS* A
9

But when I stop the task and the output goes to EOS I just get JESJCL
and JESSYSMSG.   I still think it might be an EOS issue.  Vendor can't
help

Alan Schwartz
ITO Global Service Operations and Engineering
1500 Towerview Rd.
Eagan, MN 55121-1346


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
Behalf Of Lizette Koehler
Sent: Thursday, March 15, 2012 2:38 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Trying to capture JES2 Job Log

> 
> I'm attempting to save started task output in our output management
database.  We
> use EOS.  I changed the JOBCLASS(STC) MSGCLASS to the class EOS uses 
> and I
get
> the JESJCL  and
> 
> JESYSMSG files and that's all.  Any clues what else I might need to 
> alter
to capture the
> JESMSGLG file?
> 
> 
> 

You need to have your MSGCLASS and SYSOUT Class go to the same place.
Are they both coded the same? 


I typically see the following

JESMSGLG JES2  This is the JOBLOG
JESJCL  JES2  This the JCL with substitutions
JESYSMSG JES2  This is each step statistics (datasets, ucb,
etc...)

If you set MSGCLASS=X, all three should go to output class X unless you
have exits.  Or do you have a JOBCARD added to your STC that uses a
different MSGCLASS?  Is the STC being started with a MSGCLASS other than
what you
want?  You can issue   S STCNAME,MSGCLASS=Y


Lizette

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Detect SVC to Place Caller in Key 0

2012-03-29 Thread John Gilmore

It is certainly possible to detect some naif SVC-based schemes that
return control to their invoker in key 0; it is not possible to do
so in general; and it would not be enough to do only that.

Moreover, SVC-based schemes to this end are at best obsolescent;
PC-based ones will be the villains of the future.

Shane has warned me that by mentioning this I am encouraging auditors to
erect barriers to the virtuous use of PC-based schemes too, and he is
of course quite right.

I am nevertheless reminded the USAF DEWLine Project, circa 1952-1992,
which did perhaps come to provide adequate protection against
over-the-pole incursions of the USSR's atomic-bomb carrying Badger
bombers, but only well after those bombers had been retired from
service.

John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Tapeless solution (IBM or Sun) Enterprise class

We have a BusTech MDL.  The doc also refers to it as MAS.  It has performed 
very well for us.  We pur chased before EMC did, and ours is backed by NetApp 
disk on a storage rack that is shared with a distributed system.  



The following link is to a pretty good article - 



http://www.computerworld.com/s/article/9195959/EMC_buys_mainframe_virtual_tape_library_vendor_Bus_Tech
 

  
Linda 


- Original Message -


From: "Mark Zelden"  
To: IBM-MAIN@bama.ua.edu 
Sent: Wednesday, March 28, 2012 10:43:01 AM 
Subject: Re: Tapeless solution (IBM or Sun) Enterprise class 

On Wed, 28 Mar 2012 10:15:26 -0500, Darth Keller  
wrote: 

>>>Have you considered EMC DLm or Bus-tech MDL (EMC owns Bus-tech now). 
>I have not worked with MDL (which I think is more of a "small shop" 
>solution), 
>but I have with DLm.    I've also worked with VSM, but it was always 
>>>backed by physical tape.   BTW, the vendor is Oracle now, not Sun. 
> 
> 
>So my understanding is the MDL was the HDS version of the DLM - the 
>Bustech appliance ahead of HDS storage.  We have an HDS MDL which uses an 
>AMS2500 for back-end storage.  It's also my understanding that the MDL is 
>no longer available as such.  HDS now sells the Falconstor's VTL instead. 
> 
>I would consider the DLM & the MDL to be roughly equivalent.  We are very 
>happy with the performance of the MDL. 
>dd keller 
> 

Thanks for that clarification.  I really don't know the history behind the 
Bus-tech and I think I used "MDL" when I shouldn't have to refer to 
it pre- HDS (or is that not even correct).   Was the original just 
called "MAS" (Mainframe Appliance for Storage). 


Mark 
-- 
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS       
mailto:m...@mzelden.com                                         
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/ 

-- 
For IBM-MAIN subscribe / signoff / archive access instructions, 
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: catalogued datasets in tapes and expiration dates

CA1 options are in PPOPTION(TMOOPT00) 
You can have CA1, for example, delay the actual scratch of an uncatalogued 
volume.  There are many other changes you can make there, including whether you 
use immediate scratch or require the TMSCLEAN to run. 



HTH, 



Linda 


- Original Message -


From: "Uriel Carrasquilla"  
To: IBM-MAIN@bama.ua.edu 
Sent: Thursday, March 29, 2012 8:33:56 AM 
Subject: Re: catalogued datasets in tapes and expiration dates 

OK, I found out that we run the clean and scratch right after mid-night. 
Thank you. 
I also found out how to use the EXPDT by using YYY/J-DAY. 
Thank you all for your response. 

 
From: IBM Mainframe Discussion List [IBM-MAIN@bama.ua.edu] on behalf of McKown, 
John [john.mck...@healthmarkets.com] 
Sent: Thursday, March 29, 2012 11:25 AM 
To: IBM-MAIN@bama.ua.edu 
Subject: Re: catalogued datasets in tapes and expiration dates 

The status does not change until you run a CA-1 maintenance job. It is not 
"real time". 

-- 
John McKown 
Systems Engineer IV 
IT 

Administrative Services Group 

HealthMarkets(r) 

9151 Boulevard 26 * N. Richland Hills * TX 76010 
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com 

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM 

> -Original Message- 
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Uriel Carrasquilla 
> Sent: Thursday, March 29, 2012 10:10 AM 
> To: IBM-MAIN@bama.ua.edu 
> Subject: Re: catalogued datasets in tapes and expiration dates 
> 
> Forgot to mention, yes, I am using CA-1. 
> I ran a GENER to copy to output file on our VTL (UNIT=V3590) 
> with a LABEL=EXPDT=99000 with a DISP to CATLG if successful. 
> It ran OK and put the dataset (no stacking) into VOL=SER=682436. 
> Then, via ISPF TMS, I checked the volume and it shows the 
> expiration date with the CATALOG description. 
> Then, I went to ISPF 3.2 and uncatalogued the dataset. 
> TMS still has the same information with the expiration date 
> set to CATALOG. 
> I was expecting to see "SCRATCH" instead. 
> is this normal? 
>  
> From: IBM Mainframe Discussion List [IBM-MAIN@bama.ua.edu] on 
> behalf of Jonathan Goossen [jonathan.goos...@assurant.com] 
> Sent: Thursday, March 29, 2012 10:23 AM 
> To: IBM-MAIN@bama.ua.edu 
> Subject: Re: catalogued datasets in tapes and expiration dates 
> 
> The answer likely varies by the TMS in use. 
> 
> CA-1 will keep the tape until every dataset on it is expired. 
> This can be 
> confusing as the volume record is also the first file on the 
> tape. CA-1 
> will adjust its expiration to be equal the highest on the tape. If you 
> manually expire the first file (volume record) then the 
> entire tape will 
> scratch regardless of the expiration of the rest of the 
> files. That is one 
> reason that I am very carful about changing the expiration of volume 
> records. 
> 
> In CA-1 there is an expiration called CATALOG. It will expire the file 
> when it is no longer cataloged. If a cataloged tape file has a Julian 
> expiration, then uncataloging the  file will not affect 
> expiration. But 
> scratching the tape will uncatalog the file. 
> 
> Thank you and have a Terrific day! 
> 
> Jonathan Goossen, DTM 
> ACT Mainframe Storage Group 
> Personal: 651-361-4541 
> Department Support Line: 651-361- 
> For help with communication and leadership skills checkout Woodwinds 
> Toastmasters 
> 
> IBM Mainframe Discussion List  wrote on 
> 03/29/2012 
> 08:51:19 AM: 
> 
> > From: Uriel Carrasquilla  
> > To: IBM-MAIN@bama.ua.edu 
> > Date: 03/29/2012 08:52 AM 
> > Subject: Re: catalogued datasets in tapes and expiration dates 
> > Sent by: IBM Mainframe Discussion List  
> > 
> > Let's say I have a tape with multiple datasets inside. 
> > Some datasets may be catalogued, some may not. 
> > I can understand the once not catalogued when they expire they no 
> > longer hold the tape from going to the scratch pool. 
> > But what about those cases when the catalogued datasets hit their 
> > expiration date? what happens? 
> > am I also correct in assuming that the entire tape with all the 
> > stacked datasets is being held until the last dataset in it expires? 
> > Please share your thoughts. 
> > 
> > 
> -- 
> > For IBM-MAIN subscribe / signoff / archive access instructions, 
> > send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN 
>

Re: Relocating files in custompac - Z1.13

2012-03-29 Thread John Eells


Dazzo, Matt wrote:

I am working in the modify system layout panels. I have a 3390-9 being used for 
the dlib libraries and need to relocate some files to a second volume because 
the mod-9 is full. According to the good old book you have to go to the SUMMARY 
Of Logical Volumes, select the LV and then you can change the PVOL, the problem 
is it changes every (411 of them) dsn's in the LV. I have NOT found a way to 
change only specific dsn's. Please tell me there is a simple solution that I 
missed.




I wish I'd been able to get rid of "logical volumes" but I couldn't 
quite get there at the time.  My Tip Of The Day: Avoid anything to do 
with Logical Volumes.


There are two much friendlier functions in the CustomPac Dialog panels 
in Modify System Layout you can use to move things around:


 - The Recommended System Layout function will distribute data sets 
over the necessary number of volumes automatically, leaving some free 
space to allow for future PTF installation.  (You can add both more data 
set and more volume free space as well if you wish.)  I just did this 
for an old z/OS-only order using 3390-9s and it took less than 5 seconds.


 - The View and Change option lets you display data set lists and use 
the Change command to drive a mass change any alterable data set 
attribute, including volume, space, name, etc.  When you put in the 
Change (CH) command you get a data set list, from which you can choose 
to exlude the things you don't want to change.  For this purpose, it 
might be simpler to exclude the ones you DO want to change and then 
rename the PVOLs later in the Physical Volume Summary.  This seems 
backwards but if you are only moving a few out of hundreds it's a lot 
faster.


Don't forget that you can go through the other panels to save the 
configuration at any time (which lets you model after it later, 
effectively saving your place) and then play with things.  If you don't 
like how they turn out, start over from your saved configuration.


HTH...

--
John Eells (ServerPac design alumnus)
z/OS Technical Marketing
IBM Poughkeepsie
ee...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Detect SVC to Place Caller in Key 0

2012-03-29 Thread Sam Siegel

LOL

On Thu, Mar 29, 2012 at 12:38 PM, Binyamin Dissen <
bdis...@dissensoftware.com> wrote:

> On Thu, 29 Mar 2012 15:21:41 GMT MD Johnson  wrote:
>
> :>Does anyone know what I could look for to detect when an SVC contains
> code to place the caller into and authorized state (key 0).
>
> Hook the SVC FLIH (had to say it).
>
> --
> Binyamin Dissen 
> http://www.dissensoftware.com
>
> Director, Dissen Software, Bar & Grill - Israel
>
>
> Should you use the mailblocks package and expect a response from me,
> you should preauthorize the dissensoftware.com domain.
>
> I very rarely bother responding to challenge/response systems,
> especially those from irresponsible companies.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

2012-03-29 Thread jan de decker

a bHi list,

There are zillions of ways to hack a zOS system. I do agree that when
everything is secured, it is not possible by the very nature of zOS, On the
other hand, during my 25+ years as a free lance MVS systems programmer I
never worked on a mainframe site I could not hack easily, starting with a
vanilla userid.

I think we will all agree that the cornerstone of zOS security is the
status of the PSW key and supervisor state bits. We can change these
through for example SVC's, PC', what most auditors like because it is
somewhere on their list, just like the everlasting question about I/O
appendages, etc. Their question about the PPT also annoys me the most. A
program only has the attributes assigned to it from the PPT if it comes
from an APF library. If it is APF, you do not need the PPT. A simple logic
apparently impossible to explain to $millions a day auditors.

Let us focus on APF. Just some minor remarks0 if you can have it:

You can give yourself RACF SPECIAL without RACF knowing it by changing a
bit in the ACEE, same goes for OPERATIONS.
You can give yourself access to anything that is RACF protected by pointing
the RACF exits to your own coding, making an exception for your user id.
You can switch off RACF & SMF logging.
You can hide some SVC prefixing code in a SMP/E usermodification so that it
will be replicated to the next release by a systems programmer who has not
examined the assembler coding.

So, how to get there with a vanilla userid?

You loose APF it when your address space becomes dirty. This is annoying.
Lots of sides have home written authorisation SVC's hanging around.
Everybody can examine the SVC table, eliminate the genuine IBM ones, and
disassemble the others. My experience hit rate 40%.
Systems programmers have UPDATE access to APF libraries.
Execution of group logon Rexx or CLIST (SYSTEM) followed by (VANILLA) is
not exceptional. Change to a copy of your module to an APF one. My
experience hit rate 25%.

Ask a systems programmer to debug a Rexx. Ask for his wisdom. Go to his
desk and let him examine a Rexx exec with an error which he clearly
recognizes as a typical idiot symptom. He will demonstrate you that it
works now, thanks to his superior brain. Hide a copy of one of assembler
modules to an APF library somewhere in an unreadable interpret instruction
at the end.

I could go on.

Other classic: are all STC's PROTECTED? If not, you can try DOS by logon
with the STC userid.

2011 Id did a real system integrity audit and found 19176 security holes of
the nature mentioned above without looking very deeply. This was a small
mainframe.

I once started a book about this but stopped because I could not find a
publisher interested in zOS. Perhaps I will take it up again. I concluded
the draft with (joke) a beastly number of questions, 666.

Good night from Brussels (at the time of posting).

j@n

On Thu, Mar 29, 2012 at 4:54 PM, Shmuel Metz (Seymour J.) <
shmuel+ibm-m...@patriot.net> wrote:

> In <2417378497678577.wa.woodagozemail.com...@bama.ua.edu>, on
> 03/28/2012
>at 02:37 PM, Andy Wood  said:
>
> >The problems were usually coding errors of the nature of the R13 STM
> >as described by Ray, however there were even deliberate "backdoors".
>
> Those are defects[1] in the product, not in z/OS. As Walt and others
> have repeatedly written, your security is only as good as what you
> allow in your authorized libraries.
>
> >Such backdoors may have  included some sort of checking to try to
> >prevent misuse,
>
> They almost invariably do, and almost invariably the checking is
> inadequate :-(
>
> [1] Yes, defects, not features.
>
> --
> Shmuel (Seymour J.) Metz, SysProg and JOAT
> ISO position; see 
> We don't care. We don't have to care, we're Congress.
> (S877: The Shut up and Eat Your spam act of 2003)
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: z/OS ftp and Unicode

2012-03-29 Thread Paul Gilmartin

On Thu, 29 Mar 2012 13:38:33 -0400, Shmuel Metz (Seymour J.) wrote:

>In <0342014919725794.wa.paulgboulderaim@bama.ua.edu>, on
>03/28/2012
>   at 09:10 AM, Paul Gilmartin  said:
>
>>Quite so.  Which is the reason I think FTP is in error for claiming
>>the data contain an invalid code point.
>
>Did FTP make such a claim, opr did you misunderstand the error
>messages? From Message-ID:
><1000645908993586.wa.paulgboulderaim@bama.ua.edu>:
>
>>ftp> quote site sbdataconn=(IBM-424,UTF-8)
>>200-Some characters cannot be translated between UTF-8 and IBM-424
>
>At this point FTP doesn't know whether you will be doing a get or a
>put. The message is correct, although possibly misleading.
>
Gadi excerpted the transcript in:

http://bama.ua.edu/cgi-bin/wa?A2=ind1203&L=ibm-main&P=770470

and it was further abridged when you quoted it.  The larger sequence,
from my own attempt, I posted in:

http://bama.ua.edu/cgi-bin/wa?A2=ind1203&L=ibm-main&P=893422

is:

Remote system type is MVS.
ftp> quote site encoding=mbcs
200 SITE command was accepted
ftp> quote site mbdataconn=(IBM-424,UTF-8)
200 SITE command was accepted
ftp> get TEST.TESTPRT(TESTPRT)
200 Port request OK.
504 Multi-byte encoding not supported for RECFM=FB
ftp>
ftp> quit

... after the "get".  The message is incorrect and misleading.  For
that matter, until it was named in the "get" the FTP server couldn't
know the RECFM of the data set.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Detect SVC to Place Caller in Key 0

2012-03-29 Thread Binyamin Dissen

On Thu, 29 Mar 2012 15:21:41 GMT MD Johnson  wrote:

:>Does anyone know what I could look for to detect when an SVC contains code to 
place the caller into and authorized state (key 0).

Hook the SVC FLIH (had to say it).

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Relocating files in custompac - Z1.13

2012-03-29 Thread Gibney, Dave

For DLIBs, I change them all to SMS and let them land where they may in the 
pool.

Dave Gibney
Information Technology Services
Washington State University


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
> Behalf Of Kathleen Mclaughlin
> Sent: Thursday, March 29, 2012 10:11 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Relocating files in custompac - Z1.13
> 
> Hello Matt,
> 
> To move specific datasets to different PVOLs, my suggestion is to change
> them by their high level qualifier (HLQ).  From the Modify System Layout
> Panel:
>   select option "C" - View and change datasets by selected attributes
>   select "HLQ"
>   select the HLQ you want to work with
>   issue the "CH PVOL DLIB newvol" command
>   exclude all the datasets you do not want to move to the new volume
>   pf3 out of the global change panel
> 
> Good Luck
> 
> Kathleen McLaughlin
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On
> Behalf Of Dazzo, Matt
> Sent: Thursday, March 29, 2012 8:34 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Relocating files in custompac - Z1.13
> 
> I am working in the modify system layout panels. I have a 3390-9 being used
> for the dlib libraries and need to relocate some files to a second volume
> because the mod-9 is full. According to the good old book you have to go to
> the SUMMARY Of Logical Volumes, select the LV and then you can change
> the PVOL, the problem is it changes every (411 of them) dsn's in the LV. I
> have NOT found a way to change only specific dsn's. Please tell me there is a
> simple solution that I missed.
> 
> Thanks Matt
> 
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Computerworld on LTFS

In <3767971015393300.wa.paulgboulderaim@bama.ua.edu>, on
03/29/2012
   at 11:35 AM, Paul Gilmartin  said:

>http://www.computerworld.com/s/article/9225514/As_60th_anniversary_nears_tape_reinvents_itself?source=CTWNLE_nlt_dailyam_2012-03-29

DECtape?

>Hmmm.  What OS is conspicuosly unmentioned? 

FreeDOS. NetBSD. OS/2.

They did say desktop, so that rules out, e.g., EXEC 8, MCP, z/OS,
z/TPF, z/VM, z/VSE.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Seven-Digit JES2 Job Number

In <2029911841513422.wa.markmzelden@bama.ua.edu>, on 03/29/2012
   at 11:45 AM, Mark Zelden  said:

>Content-Type: text/plain; charset="ISO-8859-1"

It looks like your table has characters that are not in ISO 8859-1. 

>┌

Looks like Unicode encoded as HTML character attributes.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

In
<77142d37c0c3c34da0d7b1da7d7ca3485...@nwt-s-mbx1.rocketsoftware.com>,
on 03/29/2012
   at 04:16 PM, Bill Fairchild  said:

>I believe Shmuel meant   05F0   instead of  07F0.

Yes. Also, I didn't mention that the 05F0 is not necessary if the
0A90C is at the entry point.

>These two will result in a system wait state ABEND on any OS/360
>variant (PCP, MFT, MVT) after all SQA is gobbled up and then the
>infinite loop wants some more.

Also SVS. Fixed in OS/VS1 and in MVS.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

In <4f748727.1020...@bremultibank.com.pl>, on 03/29/2012
   at 06:00 PM, "R.S."  said:

>BTW: all the stories like "I could tell you if I could, but I
>couldn't"  sounds like urban legends. I'm sorry, but in such case 
>I prefer knowledge over belief.

I reported one of those, but it's been closed[1] for a long time, so
they'd no longer have to shoot me.

[1] If the sysadmin is doing his job.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

In <4f736006.7070...@ix.netcom.com>, on 03/28/2012
   at 03:01 PM, Bob Rutledge  said:

>BCR  15,0? 

Typo. That should have been

BALR  R15,0
SVC   12

They say that the mind is the second thing to go.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Detect SVC to Place Caller in Key 0

In <20120329.102141.543...@webmail09.vgs.untd.com>, on 03/29/2012
   at 03:21 PM, MD Johnson  said:

>Does anyone know what I could look for to detect when an SVC 
>contains code to place the caller into and authorized state (key 0).

IEBIBALL.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Detect SVC to Place Caller in Key 0

2012-03-29 Thread Tom Marchant

On Thu, 29 Mar 2012 11:51:07 -0500, Paul Gilmartin wrote:

>On Thu, 29 Mar 2012 11:00:15 -0500, Tom Marchant wrote:
>
>>On Thu, 29 Mar 2012 15:21:41 GMT, MD Johnson wrote:
>>
>>>Does anyone know what I could look for to detect when
>>>an SVC contains code to place the caller into and
>>>authorized state (key 0).
>>
>>If the SVC (or PC) passes control to an address supplied
>>by the caller, allowing the caller's code to run as part of
>>the SVC, you might be out of luck.
>>
>If the SVC (or PC) passes control with escalated privilege to
>an address supplied by the caller, isn't it ipso facto unsafe?

Yes.  Is it significantly different from returning control with 
escalated privileges?

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IEFUSI Question - OMVS Related

2012-03-29 Thread Patrick Loftus

Do a "D OMVS,L" command, and check your SHRLIBRGNSIZE high water mark.  You may 
be able to decrease the SHRLIBRGNSIZE, to free up storage for your WASoem 
server.

Regards

Patrick Loftus
Systems Programming Team Leader
Central Systems

TNT sure we can

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: z/OS ftp and Unicode

In <0342014919725794.wa.paulgboulderaim@bama.ua.edu>, on
03/28/2012
   at 09:10 AM, Paul Gilmartin  said:

>Quite so.  Which is the reason I think FTP is in error for claiming
>the data contain an invalid code point.

Did FTP make such a claim, opr did you misunderstand the error
messages? From Message-ID: 
<1000645908993586.wa.paulgboulderaim@bama.ua.edu>:

>ftp> quote site sbdataconn=(IBM-424,UTF-8)
>200-Some characters cannot be translated between UTF-8 and IBM-424

At this point FTP doesn't know whether you will be doing a get or a
put. The message is correct, although possibly misleading.

>125 Sending data set SPPG.TEST.TESTPRT(TESTPRT) FIXrecfm 80

You can't use a MBCS for test2 if it's RECFM=FB.

>557 Data contains codepoints that cannot be translated

Because the translation is longer than one octet. I don't know whether
explicitly specifying DCB attributes, especially RECfm-VB, on the SITE
will cause FTP to correctly generate RDW's.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

In <2417378497678577.wa.woodagozemail.com...@bama.ua.edu>, on
03/28/2012
   at 02:37 PM, Andy Wood  said:

>The problems were usually coding errors of the nature of the R13 STM
>as described by Ray, however there were even deliberate "backdoors".

Those are defects[1] in the product, not in z/OS. As Walt and others
have repeatedly written, your security is only as good as what you
allow in your authorized libraries.

>Such backdoors may have  included some sort of checking to try to
>prevent misuse,

They almost invariably do, and almost invariably the checking is
inadequate :-(

[1] Yes, defects, not features.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

In <6703125624441206.wa.paulgboulderaim@bama.ua.edu>, on
03/28/2012
   at 04:39 PM, Paul Gilmartin  said:

>It's easy.  Bribe the sysadmin.  (FSVO "access".)

After I tell my security officer[1] and he sets up the sting with the
authorities, do I get to get the bribe? If not, do I at least get a
photo of the offendor's face when they catch him?

[1] Or follow whatever alternate procedure was prescribed during
my security briefing.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: LE enclave calls another LE enclave

In <201203281648.40289.bernd.oppol...@t-online.de>, on 03/28/2012
   at 04:48 PM, Bernd Oppolzer  said:

>The Mains (and the PL/1 sub program test objects) are - or can be - 
>DLLs, compiled with the RENT compile option, so they have to be
>called using CEEFETCH, because the proper WSA initialization etc 
>has to be done. 

Are you sure that using CEEFETCH for MAIN, or putting a MAIN in a DLL,
are supported?

>because the proper WSA initialization etc has to be done.

Isn't that what MAIN is for?
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

File Update

2012-03-29 Thread Ron Thomas

Hello.

I have a issue here in one of the projects we are handling, the issues is there 
are number of files that need to be modfied a new value. In some files the 
field will be at the starting position "1" and in some cases it will be at say 
postion "30" and it can come in any postion. The files record length can also 
vary. IS it possible to a generic solution for this ? Please do share thougts 
and how this can be resolved?

The PIC caluse of the field value is s9(09) comp and this field  is tax-id-num

Regards
Ron

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Relocating files in custompac - Z1.13

2012-03-29 Thread Kathleen Mclaughlin

Hello Matt,

To move specific datasets to different PVOLs, my suggestion is to change them 
by their high level qualifier (HLQ).  From the Modify System Layout Panel:
select option "C" - View and change datasets by selected attributes
select "HLQ"
select the HLQ you want to work with
issue the "CH PVOL DLIB newvol" command
exclude all the datasets you do not want to move to the new volume
pf3 out of the global change panel

Good Luck

Kathleen McLaughlin 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Dazzo, Matt
Sent: Thursday, March 29, 2012 8:34 AM
To: IBM-MAIN@bama.ua.edu
Subject: Relocating files in custompac - Z1.13

I am working in the modify system layout panels. I have a 3390-9 being used for 
the dlib libraries and need to relocate some files to a second volume because 
the mod-9 is full. According to the good old book you have to go to the SUMMARY 
Of Logical Volumes, select the LV and then you can change the PVOL, the problem 
is it changes every (411 of them) dsn's in the LV. I have NOT found a way to 
change only specific dsn's. Please tell me there is a simple solution that I 
missed.

Thanks Matt



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Detect SVC to Place Caller in Key 0

2012-03-29 Thread Paul Gilmartin

On Thu, 29 Mar 2012 11:00:15 -0500, Tom Marchant wrote:

>On Thu, 29 Mar 2012 15:21:41 GMT, MD Johnson wrote:
>
>>Does anyone know what I could look for to detect when
>>an SVC contains code to place the caller into and
>>authorized state (key 0).
>
>You could run a GTF trace and examine all SVC calls and
>returns.  Key 0 is not an adequate test, though.  You'd
>have to test for supervisor state or any system key.
>Even that is not sufficient, because you can't tell from
>that whether they turned on JSCBAUTH.  And then
>there are PC routines
>
>If the SVC (or PC) passes control to an address supplied
>by the caller, allowing the caller's code to run as part of
>the SVC, you might be out of luck.
> 
If the SVC (or PC) passes control with escalated privilege to
an address supplied by the caller, isn't it ipso facto unsafe?

But overall this sounds related to attempts to prove
program correctness mathematically; a theoretical
impossibility outside finite-state systems, and impractical
for many systems with a large finite number of states.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Seven-Digit JES2 Job Number

On Thu, 29 Mar 2012 11:45:24 -0500, Mark Zelden  wrote:

>On Thu, 29 Mar 2012 11:36:46 -0500, Doug Henry  wrote:
>
>>They were wrong. The change was
>>" In z2 Mode, JES2 allows you to define up to 999,999 job numbers (expanding 
>>the limit from 65534)."
>>
>>Doug
>>
>
>That's what I thought to begin with.  But with Kees reply along with 3 
>different
>off-list replies to me, I thought I couldn't see the forest through the trees.
>Or maybe we were talking about 2 different things.   I knew about the increase
>to 6 digits at the z2 level.
>
>I was also waiting for Kees or the OP to come back with a $DJOBDEF display
>that showed the 7 digits before I became impatient and tried changing it
>on my sandbox LPAR.
>
>BTW, the exits manual also documents this clearly:
>

 (Wow, that cut/past didn't come out well, did it.   Let's try that again with
plain ascii text:)

Allowing JES2 to use up to 999,999 job numbers requires that you "ACTIVATE" 
it to z2 Mode. Unless this activation is performed, JES2 operates in R4 Mode
with the job number limitations as follows: 

Note:  R4 Mode EQUATE names are in parentheses above.   

After you have performed an ACTIVATE to z2 Mode, the new limits become those
listed in Table 21. 

++  
¦ Table 21. z2- and R4 mode comparisons - Field and control block¦  
¦   maximum limits   ¦  
+¦  
¦ Initialization¦   R4 Mode  ¦  z2 Mode  ¦  
¦   Statement/  ++---¦  
¦   Parameter   ¦  Maximum ¦  Equate ¦ Maximum ¦  Equate ¦  
+---+--+-+-+-¦  
¦ JOBDEF¦ 65,534   ¦ $MAXJQE_R4  ¦ 200,000 ¦ $MAXNJQE¦  
¦ JOBNUM=   ¦  ¦ ¦ ¦ ¦  
+---+--+-+-+-¦  
¦ JOBDEF RANGE= ¦ 65,534   ¦ $MAXJNM_R4  ¦ 999,999 ¦ $MAXJNUM¦  
+---+--+-+-+-¦  
¦ OUTDEF¦ 161,314  ¦ $MAXJOE_R4  ¦ 500,000 ¦ JOTMXJOE¦  
¦ JOENUM=   ¦  ¦ ¦ ¦ ¦  
+---+--+-+-+-¦  
¦ CKPTSPACE ¦ 262,136  ¦ 4 * $MAXJQE_R4  ¦ 500,000 ¦ 2.5 * $MAXNJQE  ¦  
¦ BERTNUM = ¦  ¦ ¦ ¦ ¦  
+---+--+-+-+-¦  
¦ SPOOLDEF  ¦ 9,935,680¦ ¦ 16,581,1¦4$MAXTGS ¦  
¦ TGSPACE=MAX   ¦  ¦ ¦ ¦ ¦  
++


--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Seven-Digit JES2 Job Number

On Thu, 29 Mar 2012 11:36:46 -0500, Doug Henry  wrote:

>They were wrong. The change was
>" In z2 Mode, JES2 allows you to define up to 999,999 job numbers (expanding 
>the limit from 65534)."
>
>Doug
>

That's what I thought to begin with.  But with Kees reply along with 3 
different 
off-list replies to me, I thought I couldn't see the forest through the trees. 
Or maybe we were talking about 2 different things.   I knew about the increase
to 6 digits at the z2 level.

I was also waiting for Kees or the OP to come back with a $DJOBDEF display
that showed the 7 digits before I became impatient and tried changing it
on my sandbox LPAR. 

BTW, the exits manual also documents this clearly:

Allowing JES2 to use up to 999,999 job numbers requires that you "ACTIVATE" it 
to z2 Mode. Unless this activation is performed, JES2 operates 
in R4 Mode with the job number limitations as follows:

Note:  R4 Mode EQUATE names are in parentheses above.

After you have performed an ACTIVATE to z2 Mode, the new limits become those 
listed in Table 21.

┌┐
│ Table 21. z2- and R4 mode comparisons - Field and control block
│
│   maximum limits   
│
├───┬┬───┤
│ Initialization│   R4 Mode  │  z2 
Mode  │
│   Statement/  
├──┬─┼─┬─┤
│   Parameter   │  Maximum │  Equate │ Maximum 
│  Equate │
├───┼──┼─┼─┼─┤
│ JOBDEF│ 65,534   │ $MAXJQE_R4  │ 200,000 
│ $MAXNJQE│
│ JOBNUM=   │  │ │ 
│ │
├───┼──┼─┼─┼─┤
│ JOBDEF RANGE= │ 65,534   │ $MAXJNM_R4  │ 999,999 
│ $MAXJNUM│
├───┼──┼─┼─┼─┤
│ OUTDEF│ 161,314  │ $MAXJOE_R4  │ 500,000 
│ JOTMXJOE│
│ JOENUM=   │  │ │ 
│ │
├───┼──┼─┼─┼─┤
│ CKPTSPACE │ 262,136  │ 4 * $MAXJQE_R4  │ 500,000 
│ 2.5 * $MAXNJQE  │
│ BERTNUM = │  │ │ 
│ │
├───┼──┼─┼─┼─┤
│ SPOOLDEF  │ 9,935,680│ │ 
16,581,1│4$MAXTGS │
│ TGSPACE=MAX   │  │ │ 
│ │
└───┴──┴─┴─┴─┘

Regards,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Seven-Digit JES2 Job Number

2012-03-29 Thread Doug Henry

They were wrong. The change was
" In z2 Mode, JES2 allows you to define up to 999,999 job numbers (expanding 
the limit from 65534)."

Doug

On Thu, 29 Mar 2012 11:12:40 -0500, Mark Zelden  wrote:

>To add:  Someone (whom I highly respect) contacted me off-list and said this
>came in with z2 mode (z/OS 1.2).What am I missing??
>
>>
>
>On Thu, 29 Mar 2012 10:31:32 -0500, Mark Zelden  wrote:
>
>>Okay, I guess I'm being dense today and without looking thought that this
>>was a change to z/OS 1.13 that I missed.   But even looking at a z/OS 1.13
>>manual the JOBDEF range states 1-99.I looked at the summary
>>of changes for 1.13 and didn't see it mentioned and I also looked at
>>the 1.12 changes (which I missed working with so far) and don't
>>see it there either.
>>
>>So when did a 7 digit range come in and how many years have you
>>been running with it?
>>
>>Regards,
>>
>>Mark
>>On Thu, 29 Mar 2012 16:41:48 +0200, Vernooij, CP - SPLXM 
>> wrote:
>>
>>>We implemented this years ago, and so did many others, so I would be
>>>surprised if an issue like this will pop up only now.
>>>
>>>Kees.
>>>
>>>
>>>"Mark Zelden"  wrote in message
>>>news:<1805395092283981.wa.markmzelden@bama.ua.edu>...
 On Wed, 28 Mar 2012 17:28:10 -0500, Dave Barry  wrote:

 >We recently changed JES2 on a development z/OS LPAR to use
>>>seven-digit instead of five-digit job numbers.  A coworker pointed out
>>>to me what appeared to be an increase in initiator input queue time on
>>>the LPAR after the change.  My suspicion is that the increase was
>>>coincidental, but I have no way of conducting a true benchmark.
 >
 >Has anybody on the list noticed such an effect after converting to
>>>seven-digit job numbers?
 >
 >Thanks in advance for your comments.
 >

 Nope, but it wouldn't shock me if it was related.  You are treading
>>>new territory
 here and new function like this may work in the lab but issues like
>>>this can crop
 up in the real world.

 I would open a PMR with IBM JES2 support and see what advise they have
 for you.

 Regards,

 Mark

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Computerworld on LTFS

2012-03-29 Thread Paul Gilmartin

http://www.computerworld.com/s/article/9225514/As_60th_anniversary_nears_tape_reinvents_itself?source=CTWNLE_nlt_dailyam_2012-03-29
...
Lemmons can write a video file to a tape; the tape then shows up
on any desktop, such as a Mac, Windows or Linux machine, and it
presents itself just as if it were a hard drive volume.

Hmmm.  What OS is conspicuosly unmentioned?  (But it's just a
"such as".)

...
Additional software is also required to ensure that any given
customer's data is securely isolated from every other user on
a given disk or array.

In LTO tape environments, however, each tape cartridge is
a separate object. 

This somewhat contradicts the earlier passage that LTFS makes
a tape a general-purpose (presumably sharable) filesystem.

Disclaimer:  I'm employed by a company mentioned among the
"major tape vendors" in the article.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

I'm fairly sure that z/OS keeps the TCBs in LSQA. So the address space will 
likely abend, but not the system.

John McKown 

Systems Engineer IV

IT

 

Administrative Services Group

 

HealthMarkets(r)

 

9151 Boulevard 26 * N. Richland Hills * TX 76010

(817) 255-3225 phone * 

john.mck...@healthmarkets.com * www.HealthMarkets.com

 

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 

> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Bill Fairchild
> Sent: Thursday, March 29, 2012 11:16 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Malicious Software Protection
> 
> I believe Shmuel meant   05F0   instead of  07F0.
> Disassembled, it would read
>  BALR  R15,0
>  SVC   12  [also known as the SYNCH macro]
> 
> These two will result in a system wait state ABEND on any 
> OS/360 variant (PCP, MFT, MVT) after all SQA is gobbled up 
> and then the infinite loop wants some more.  I haven't tried 
> it yet on my z/OS system.  Don't have time.
> 
> Bill
> 
> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Bob Rutledge
> Sent: Wednesday, March 28, 2012 2:01 PM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: Malicious Software Protection
> 
> Shmuel Metz (Seymour J.) wrote:
> > 
> > Nonsense. OS/360 was a swiss cheese.
> > 
> >  07F0
> >  0A0C
> 
> BCR  15,0?  Was serialization required?
> 
> Bob
> 
> --
> For IBM-MAIN subscribe / signoff / archive access 
> instructions, send email to lists...@bama.ua.edu with the 
> message: INFO IBM-MAIN
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

2012-03-29 Thread Bill Fairchild

I believe Shmuel meant   05F0   instead of  07F0.
Disassembled, it would read
 BALR  R15,0
 SVC   12  [also known as the SYNCH macro]

These two will result in a system wait state ABEND on any OS/360 variant (PCP, 
MFT, MVT) after all SQA is gobbled up and then the infinite loop wants some 
more.  I haven't tried it yet on my z/OS system.  Don't have time.

Bill

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Bob Rutledge
Sent: Wednesday, March 28, 2012 2:01 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Malicious Software Protection

Shmuel Metz (Seymour J.) wrote:
> 
> Nonsense. OS/360 was a swiss cheese.
> 
>  07F0
>  0A0C

BCR  15,0?  Was serialization required?

Bob

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: ICSF - will "deactivate"op Lpar 'A' affect other lpars? and does it remain "deactivated"across IPLs?

2012-03-29 Thread R.S.

W dniu 2012-03-29 10:03, Francis van Zutphen pisze:

Hello fellow ICSF/crypto supporters,

We currently define our co-processor cards(CEX3) to all our 10 lpars.
We are now in the process of outsourcing 2 lpars ( I will call these lpar "A" and
"B").

We do not have Masterkeys defined in the CKDS for Lpar "A" and lpar "B".
We are also certain that although the co-processors are available (ONLINE
status), they are not used.
We want to make sure that they are not used by doing a "deactivate" via the TSO "ICSF Coprocessor
Management panel" on "A" and "B"

Question: 1. Will the "deactivate" operation on lpar "A"and lpar "B" affect
the other lpars?
Question: 2. Will the "deactivate" status remain across IPLs?

At a later stage we will use the support element to remove domain definitions for
"A"and B"

CEX3 cards have domains - comparable to logical partitions. You should
assign unique domain to each active LPAR. Domains are independent, so
LPAR A ICSF has no influence on LPAR B, LPAR C, etc. Every LPAR use his
own domain.
You can also decide not to assign any domain at all to given LPAR. In
such case LPAR without domain cannot use CEX3 at all.

Everything is managed on HMC, "Customization Reset Profiles", last tab
called Crypto or so. It's NOT tab "Security".
You decide what crypto engines should be online to the LPAR and which
domain should be used.

Side remarks:
- each configuration have a least 2 crypto engines (redundant)
- there are 16 domains (32 for CEX3?), LESS than possible maximum for
LPARs.

- domains cannot be shared between concurrently active LPARs.
- you cannot assign domain 1 on crypto 1, domain 8 on crypto 2, etc. You
can assign one domain # on each crypto engine configured online.
- it is wrong to say "master key in CKDS". Master key is kept in the
crypto card, CKDS is initialized using this key (some operational keys
are encrypted using the master key).

--
Radoslaw Skorupka
Lodz, Poland

--
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive.

BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax
+48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88.
Wedug stanu na dzie 01.01.2012 r. kapita zakadowy BRE Banku SA (w caoci wpacony) wynosi 168.410.984 zotych.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Seven-Digit JES2 Job Number

To add:  Someone (whom I highly respect) contacted me off-list and said this
came in with z2 mode (z/OS 1.2).What am I missing??

I did this on a sandbox z/OS 1.13 LPAR, which of course has to be
z11 mode.

$TJOBDEF,RANGE=(1,999)
$HASP003 RC=(08),T 749
$HASP003 RC=(08),T JOBDEF RANGE (HIGH)  - VALUE IS OUTSIDE
$HASP003   NUMERICAL RANGE, RANGE IS (11-99)  

$DACTIVATE
$HASP895 $DACTIVATE 751   
$HASP895 JES2 CHECKPOINT MODE IS CURRENTLY Z11 


I also checked the z/OS 1.13 commands manual:

RANGE=(nn,mm)
The range of job numbers (1-99) that JES2 uses to assign JOBIDs to jobs 
originating on the local node.
 
nnThe lowest number (1-89) that is assigned as a JES2 job 
identifier for jobs originating at the local node.
 
mmThe highest number ((+10)-99) that is assigned as a JES2 
job identifier for jobs originating at the local node. The value 
  specified for the highest number (mm) must be equal to the 
lowest number (nn) or at least 10 greater than the value used for 
  the lowest number (nn).
   



Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/


On Thu, 29 Mar 2012 10:31:32 -0500, Mark Zelden  wrote:

>Okay, I guess I'm being dense today and without looking thought that this
>was a change to z/OS 1.13 that I missed.   But even looking at a z/OS 1.13
>manual the JOBDEF range states 1-99.I looked at the summary
>of changes for 1.13 and didn't see it mentioned and I also looked at
>the 1.12 changes (which I missed working with so far) and don't
>see it there either.
>
>So when did a 7 digit range come in and how many years have you
>been running with it?
>
>Regards,
>
>Mark
>--
>Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS
>mailto:m...@mzelden.com
>Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html
>Systems Programming expert at http://expertanswercenter.techtarget.com/
>
>
>
>
>On Thu, 29 Mar 2012 16:41:48 +0200, Vernooij, CP - SPLXM 
> wrote:
>
>>We implemented this years ago, and so did many others, so I would be
>>surprised if an issue like this will pop up only now.
>>
>>Kees.
>>
>>
>>"Mark Zelden"  wrote in message
>>news:<1805395092283981.wa.markmzelden@bama.ua.edu>...
>>> On Wed, 28 Mar 2012 17:28:10 -0500, Dave Barry  wrote:
>>>
>>> >We recently changed JES2 on a development z/OS LPAR to use
>>seven-digit instead of five-digit job numbers.  A coworker pointed out
>>to me what appeared to be an increase in initiator input queue time on
>>the LPAR after the change.  My suspicion is that the increase was
>>coincidental, but I have no way of conducting a true benchmark.
>>> >
>>> >Has anybody on the list noticed such an effect after converting to
>>seven-digit job numbers?
>>> >
>>> >Thanks in advance for your comments.
>>> >
>>>
>>> Nope, but it wouldn't shock me if it was related.  You are treading
>>new territory
>>> here and new function like this may work in the lab but issues like
>>this can crop
>>> up in the real world.
>>>
>>> I would open a PMR with IBM JES2 support and see what advise they have
>>> for you.
>>>
>>> Regards,
>>>
>>> Mark
>>> --
>>> Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS
>>> mailto:m...@mzelden.com
>>> Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html
>>> Systems Programming expert at
>>http://expertanswercenter.techtarget.com/
>>>
>
>--
>For IBM-MAIN subscribe / signoff / archive access instructions,
>send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Relocating files in custompac - Z1.13

2012-03-29 Thread Staller, Allan

Go to the dataset summary and reassign the LVOL of the dataset. Move
that LVOL to the 2nd PVOL

HTH,


I am working in the modify system layout panels. I have a 3390-9 being
used for the dlib libraries and need to relocate some files to a second
volume because the mod-9 is full. According to the good old book you
have to go to the SUMMARY Of Logical Volumes, select the LV and then you
can change the PVOL, the problem is it changes every (411 of them) dsn's
in the LV. I have NOT found a way to change only specific dsn's. Please
tell me there is a simple solution that I missed.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

2012-03-29 Thread Bob Rutledge


Shmuel Metz (Seymour J.) wrote:


Nonsense. OS/360 was a swiss cheese.

 07F0
 0A0C 


BCR  15,0?  Was serialization required?

Bob

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Detect SVC to Place Caller in Key 0

2012-03-29 Thread Tom Marchant

On Thu, 29 Mar 2012 15:21:41 GMT, MD Johnson wrote:

>Does anyone know what I could look for to detect when 
>an SVC contains code to place the caller into and 
>authorized state (key 0).

You could run a GTF trace and examine all SVC calls and 
returns.  Key 0 is not an adequate test, though.  You'd 
have to test for supervisor state or any system key.  
Even that is not sufficient, because you can't tell from 
that whether they turned on JSCBAUTH.  And then 
there are PC routines

If the SVC (or PC) passes control to an address supplied 
by the caller, allowing the caller's code to run as part of 
the SVC, you might be out of luck.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

2012-03-29 Thread R.S.

W dniu 2012-03-29 14:19, Chris Craddock pisze:

On Mar 28, 2012, at 4:13 PM, "R.S." wrote:

The problem is we don't believe. :-)

W dniu 2012-03-28 22:45, Ray Overby pisze:

Yes, I believe I have a way to attack a mainframe system where I don't
have access.

Then would you believe me?

No.
I would believe when I see the proof. *Documented case*.
I don't claim z/OS is bulletproof, I say there is no *known* method to
hack it. I don't preclude the holes, I also know indirect proofs the
holes do happen: "integrity" APARs. Oh, I preclude all the cases where
the hole exist because system administrator did not do his job.

BTW: all the stories like "I could tell you if I could, but I couldn't"
sounds like urban legends. I'm sorry, but in such case I prefer
knowledge over belief.

Regards
--
Radoslaw Skorupka
Lodz, Poland

P.S. Disclaimer: no offence intended, nothing personal.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Relocating files in custompac - Z1.13

2012-03-29 Thread Dazzo, Matt

I am working in the modify system layout panels. I have a 3390-9 being used for 
the dlib libraries and need to relocate some files to a second volume because 
the mod-9 is full. According to the good old book you have to go to the SUMMARY 
Of Logical Volumes, select the LV and then you can change the PVOL, the problem 
is it changes every (411 of them) dsn's in the LV. I have NOT found a way to 
change only specific dsn's. Please tell me there is a simple solution that I 
missed.

Thanks Matt



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: catalogued datasets in tapes and expiration dates

2012-03-29 Thread Uriel Carrasquilla

OK, I found out that we run the clean and scratch right after mid-night.
Thank you.
I also found out how to use the EXPDT by using YYY/J-DAY.
Thank you all for your response.


From: IBM Mainframe Discussion List [IBM-MAIN@bama.ua.edu] on behalf of McKown, 
John [john.mck...@healthmarkets.com]
Sent: Thursday, March 29, 2012 11:25 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: catalogued datasets in tapes and expiration dates

The status does not change until you run a CA-1 maintenance job. It is not 
"real time".

--
John McKown
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone *
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

> -Original Message-
> From: IBM Mainframe Discussion List
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Uriel Carrasquilla
> Sent: Thursday, March 29, 2012 10:10 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: catalogued datasets in tapes and expiration dates
>
> Forgot to mention, yes, I am using CA-1.
> I ran a GENER to copy to output file on our VTL (UNIT=V3590)
> with a LABEL=EXPDT=99000 with a DISP to CATLG if successful.
> It ran OK and put the dataset (no stacking) into VOL=SER=682436.
> Then, via ISPF TMS, I checked the volume and it shows the
> expiration date with the CATALOG description.
> Then, I went to ISPF 3.2 and uncatalogued the dataset.
> TMS still has the same information with the expiration date
> set to CATALOG.
> I was expecting to see "SCRATCH" instead.
> is this normal?
> 
> From: IBM Mainframe Discussion List [IBM-MAIN@bama.ua.edu] on
> behalf of Jonathan Goossen [jonathan.goos...@assurant.com]
> Sent: Thursday, March 29, 2012 10:23 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: catalogued datasets in tapes and expiration dates
>
> The answer likely varies by the TMS in use.
>
> CA-1 will keep the tape until every dataset on it is expired.
> This can be
> confusing as the volume record is also the first file on the
> tape. CA-1
> will adjust its expiration to be equal the highest on the tape. If you
> manually expire the first file (volume record) then the
> entire tape will
> scratch regardless of the expiration of the rest of the
> files. That is one
> reason that I am very carful about changing the expiration of volume
> records.
>
> In CA-1 there is an expiration called CATALOG. It will expire the file
> when it is no longer cataloged. If a cataloged tape file has a Julian
> expiration, then uncataloging the  file will not affect
> expiration. But
> scratching the tape will uncatalog the file.
>
> Thank you and have a Terrific day!
>
> Jonathan Goossen, DTM
> ACT Mainframe Storage Group
> Personal: 651-361-4541
> Department Support Line: 651-361-
> For help with communication and leadership skills checkout Woodwinds
> Toastmasters
>
> IBM Mainframe Discussion List  wrote on
> 03/29/2012
> 08:51:19 AM:
>
> > From: Uriel Carrasquilla 
> > To: IBM-MAIN@bama.ua.edu
> > Date: 03/29/2012 08:52 AM
> > Subject: Re: catalogued datasets in tapes and expiration dates
> > Sent by: IBM Mainframe Discussion List 
> >
> > Let's say I have a tape with multiple datasets inside.
> > Some datasets may be catalogued, some may not.
> > I can understand the once not catalogued when they expire they no
> > longer hold the tape from going to the scratch pool.
> > But what about those cases when the catalogued datasets hit their
> > expiration date? what happens?
> > am I also correct in assuming that the entire tape with all the
> > stacked datasets is being held until the last dataset in it expires?
> > Please share your thoughts.
> >
> >
> --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
>
>
> This e-mail message and all attachments transmitted with it may
> contain legally privileged and/or confidential information intended
> solely for the use of the addressee(s). If the reader of this
> message is not the intended recipient, you are hereby notified that
> any reading, dissemination, distribution, copying, forwarding or
> other use of this message or its attachments is strictly
> prohibited. If you have received this message in error, please
> notify the sender immediately and delete this message and all
> copies and backups thereof. Thank yo

Detect SVC to Place Caller in Key 0

2012-03-29 Thread MD Johnson

Does anyone know what I could look for to detect when an SVC contains code to 
place the caller into and authorized state (key 0).
Thanks,
M. D. Johnson



Get Free Email with Video Mail & Video Chat!
http://www.juno.com/freeemail?refcd=JUTAGOUT1FREM0210

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Seven-Digit JES2 Job Number

Okay, I guess I'm being dense today and without looking thought that this
was a change to z/OS 1.13 that I missed.   But even looking at a z/OS 1.13
manual the JOBDEF range states 1-99.I looked at the summary
of changes for 1.13 and didn't see it mentioned and I also looked at
the 1.12 changes (which I missed working with so far) and don't
see it there either.

So when did a 7 digit range come in and how many years have you
been running with it?

Regards,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/




On Thu, 29 Mar 2012 16:41:48 +0200, Vernooij, CP - SPLXM 
 wrote:

>We implemented this years ago, and so did many others, so I would be
>surprised if an issue like this will pop up only now.
>
>Kees.
>
>
>"Mark Zelden"  wrote in message
>news:<1805395092283981.wa.markmzelden@bama.ua.edu>...
>> On Wed, 28 Mar 2012 17:28:10 -0500, Dave Barry  wrote:
>>
>> >We recently changed JES2 on a development z/OS LPAR to use
>seven-digit instead of five-digit job numbers.  A coworker pointed out
>to me what appeared to be an increase in initiator input queue time on
>the LPAR after the change.  My suspicion is that the increase was
>coincidental, but I have no way of conducting a true benchmark.
>> >
>> >Has anybody on the list noticed such an effect after converting to
>seven-digit job numbers?
>> >
>> >Thanks in advance for your comments.
>> >
>>
>> Nope, but it wouldn't shock me if it was related.  You are treading
>new territory
>> here and new function like this may work in the lab but issues like
>this can crop
>> up in the real world.
>>
>> I would open a PMR with IBM JES2 support and see what advise they have
>> for you.
>>
>> Regards,
>>
>> Mark
>> --
>> Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS
>> mailto:m...@mzelden.com
>> Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html
>> Systems Programming expert at
>http://expertanswercenter.techtarget.com/
>>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: catalogued datasets in tapes and expiration dates

The status does not change until you run a CA-1 maintenance job. It is not 
"real time".

--
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Uriel Carrasquilla
> Sent: Thursday, March 29, 2012 10:10 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: catalogued datasets in tapes and expiration dates
> 
> Forgot to mention, yes, I am using CA-1.
> I ran a GENER to copy to output file on our VTL (UNIT=V3590) 
> with a LABEL=EXPDT=99000 with a DISP to CATLG if successful.
> It ran OK and put the dataset (no stacking) into VOL=SER=682436.
> Then, via ISPF TMS, I checked the volume and it shows the 
> expiration date with the CATALOG description.
> Then, I went to ISPF 3.2 and uncatalogued the dataset.
> TMS still has the same information with the expiration date 
> set to CATALOG.
> I was expecting to see "SCRATCH" instead.
> is this normal?
> 
> From: IBM Mainframe Discussion List [IBM-MAIN@bama.ua.edu] on 
> behalf of Jonathan Goossen [jonathan.goos...@assurant.com]
> Sent: Thursday, March 29, 2012 10:23 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: catalogued datasets in tapes and expiration dates
> 
> The answer likely varies by the TMS in use.
> 
> CA-1 will keep the tape until every dataset on it is expired. 
> This can be
> confusing as the volume record is also the first file on the 
> tape. CA-1
> will adjust its expiration to be equal the highest on the tape. If you
> manually expire the first file (volume record) then the 
> entire tape will
> scratch regardless of the expiration of the rest of the 
> files. That is one
> reason that I am very carful about changing the expiration of volume
> records.
> 
> In CA-1 there is an expiration called CATALOG. It will expire the file
> when it is no longer cataloged. If a cataloged tape file has a Julian
> expiration, then uncataloging the  file will not affect 
> expiration. But
> scratching the tape will uncatalog the file.
> 
> Thank you and have a Terrific day!
> 
> Jonathan Goossen, DTM
> ACT Mainframe Storage Group
> Personal: 651-361-4541
> Department Support Line: 651-361-
> For help with communication and leadership skills checkout Woodwinds
> Toastmasters
> 
> IBM Mainframe Discussion List  wrote on 
> 03/29/2012
> 08:51:19 AM:
> 
> > From: Uriel Carrasquilla 
> > To: IBM-MAIN@bama.ua.edu
> > Date: 03/29/2012 08:52 AM
> > Subject: Re: catalogued datasets in tapes and expiration dates
> > Sent by: IBM Mainframe Discussion List 
> >
> > Let's say I have a tape with multiple datasets inside.
> > Some datasets may be catalogued, some may not.
> > I can understand the once not catalogued when they expire they no
> > longer hold the tape from going to the scratch pool.
> > But what about those cases when the catalogued datasets hit their
> > expiration date? what happens?
> > am I also correct in assuming that the entire tape with all the
> > stacked datasets is being held until the last dataset in it expires?
> > Please share your thoughts.
> >
> > 
> --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> 
> This e-mail message and all attachments transmitted with it may
> contain legally privileged and/or confidential information intended
> solely for the use of the addressee(s). If the reader of this
> message is not the intended recipient, you are hereby notified that
> any reading, dissemination, distribution, copying, forwarding or
> other use of this message or its attachments is strictly
> prohibited. If you have received this message in error, please
> notify the sender immediately and delete this message and all
> copies and backups thereof. Thank you.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
>

Re: catalogued datasets in tapes and expiration dates

2012-03-29 Thread O'Brien, David W. (NIH/CIT) [C]

I would expect TMS to show 'scratch' status for that tape after running 
PGM=TMSCLEAN,PARM=(SCRATCHLIST).

-Original Message-
From: Uriel Carrasquilla [mailto:uriel.carrasqui...@mail.mcgill.ca] 
Sent: Thursday, March 29, 2012 11:10 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: catalogued datasets in tapes and expiration dates

Forgot to mention, yes, I am using CA-1.
I ran a GENER to copy to output file on our VTL (UNIT=V3590) with a 
LABEL=EXPDT=99000 with a DISP to CATLG if successful.
It ran OK and put the dataset (no stacking) into VOL=SER=682436.
Then, via ISPF TMS, I checked the volume and it shows the expiration date with 
the CATALOG description.
Then, I went to ISPF 3.2 and uncatalogued the dataset.
TMS still has the same information with the expiration date set to CATALOG.
I was expecting to see "SCRATCH" instead.
is this normal?

From: IBM Mainframe Discussion List [IBM-MAIN@bama.ua.edu] on behalf of 
Jonathan Goossen [jonathan.goos...@assurant.com]
Sent: Thursday, March 29, 2012 10:23 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: catalogued datasets in tapes and expiration dates

The answer likely varies by the TMS in use.

CA-1 will keep the tape until every dataset on it is expired. This can be 
confusing as the volume record is also the first file on the tape. CA-1 will 
adjust its expiration to be equal the highest on the tape. If you manually 
expire the first file (volume record) then the entire tape will scratch 
regardless of the expiration of the rest of the files. That is one reason that 
I am very carful about changing the expiration of volume records.

In CA-1 there is an expiration called CATALOG. It will expire the file when it 
is no longer cataloged. If a cataloged tape file has a Julian expiration, then 
uncataloging the  file will not affect expiration. But scratching the tape will 
uncatalog the file.

Thank you and have a Terrific day!

Jonathan Goossen, DTM
ACT Mainframe Storage Group
Personal: 651-361-4541
Department Support Line: 651-361-
For help with communication and leadership skills checkout Woodwinds 
Toastmasters

IBM Mainframe Discussion List  wrote on 03/29/2012
08:51:19 AM:

> From: Uriel Carrasquilla 
> To: IBM-MAIN@bama.ua.edu
> Date: 03/29/2012 08:52 AM
> Subject: Re: catalogued datasets in tapes and expiration dates Sent 
> by: IBM Mainframe Discussion List 
>
> Let's say I have a tape with multiple datasets inside.
> Some datasets may be catalogued, some may not.
> I can understand the once not catalogued when they expire they no 
> longer hold the tape from going to the scratch pool.
> But what about those cases when the catalogued datasets hit their 
> expiration date? what happens?
> am I also correct in assuming that the entire tape with all the 
> stacked datasets is being held until the last dataset in it expires?
> Please share your thoughts.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

This e-mail message and all attachments transmitted with it may contain legally 
privileged and/or confidential information intended solely for the use of the 
addressee(s). If the reader of this message is not the intended recipient, you 
are hereby notified that any reading, dissemination, distribution, copying, 
forwarding or other use of this message or its attachments is strictly 
prohibited. If you have received this message in error, please notify the 
sender immediately and delete this message and all copies and backups thereof. 
Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: catalogued datasets in tapes and expiration dates

2012-03-29 Thread Jonathan Goossen

Unless you are running with the real time scratch option. It won't expire 
until TMSCATALOG is run and won't go scratch until TMSCLEAN is run.

Thank you and have a Terrific day!

Jonathan Goossen, DTM
ACT Mainframe Storage Group
Personal: 651-361-4541
Department Support Line: 651-361-
For help with communication and leadership skills checkout Woodwinds 
Toastmasters

IBM Mainframe Discussion List  wrote on 03/29/2012 
10:09:44 AM:

> From: Uriel Carrasquilla 
> To: IBM-MAIN@bama.ua.edu
> Date: 03/29/2012 10:10 AM
> Subject: Re: catalogued datasets in tapes and expiration dates
> Sent by: IBM Mainframe Discussion List 
> 
> Forgot to mention, yes, I am using CA-1.
> I ran a GENER to copy to output file on our VTL (UNIT=V3590) with a 
> LABEL=EXPDT=99000 with a DISP to CATLG if successful.
> It ran OK and put the dataset (no stacking) into VOL=SER=682436.
> Then, via ISPF TMS, I checked the volume and it shows the expiration
> date with the CATALOG description.
> Then, I went to ISPF 3.2 and uncatalogued the dataset.
> TMS still has the same information with the expiration date set to 
CATALOG.
> I was expecting to see "SCRATCH" instead.
> is this normal?
> 
> From: IBM Mainframe Discussion List [IBM-MAIN@bama.ua.edu] on behalf
> of Jonathan Goossen [jonathan.goos...@assurant.com]
> Sent: Thursday, March 29, 2012 10:23 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: catalogued datasets in tapes and expiration dates
> 
> The answer likely varies by the TMS in use.
> 
> CA-1 will keep the tape until every dataset on it is expired. This can 
be
> confusing as the volume record is also the first file on the tape. CA-1
> will adjust its expiration to be equal the highest on the tape. If you
> manually expire the first file (volume record) then the entire tape will
> scratch regardless of the expiration of the rest of the files. That is 
one
> reason that I am very carful about changing the expiration of volume
> records.
> 
> In CA-1 there is an expiration called CATALOG. It will expire the file
> when it is no longer cataloged. If a cataloged tape file has a Julian
> expiration, then uncataloging the  file will not affect expiration. But
> scratching the tape will uncatalog the file.
> 
> Thank you and have a Terrific day!
> 
> Jonathan Goossen, DTM
> ACT Mainframe Storage Group
> Personal: 651-361-4541
> Department Support Line: 651-361-
> For help with communication and leadership skills checkout Woodwinds
> Toastmasters
> 
> IBM Mainframe Discussion List  wrote on 03/29/2012
> 08:51:19 AM:
> 
> > From: Uriel Carrasquilla 
> > To: IBM-MAIN@bama.ua.edu
> > Date: 03/29/2012 08:52 AM
> > Subject: Re: catalogued datasets in tapes and expiration dates
> > Sent by: IBM Mainframe Discussion List 
> >
> > Let's say I have a tape with multiple datasets inside.
> > Some datasets may be catalogued, some may not.
> > I can understand the once not catalogued when they expire they no
> > longer hold the tape from going to the scratch pool.
> > But what about those cases when the catalogued datasets hit their
> > expiration date? what happens?
> > am I also correct in assuming that the entire tape with all the
> > stacked datasets is being held until the last dataset in it expires?
> > Please share your thoughts.
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> 
> This e-mail message and all attachments transmitted with it may
> contain legally privileged and/or confidential information intended
> solely for the use of the addressee(s). If the reader of this
> message is not the intended recipient, you are hereby notified that
> any reading, dissemination, distribution, copying, forwarding or
> other use of this message or its attachments is strictly
> prohibited. If you have received this message in error, please
> notify the sender immediately and delete this message and all
> copies and backups thereof. Thank you.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


This e-mail message and all attachments transmitted with it may
contain legally privileged and/or confidential information intended
solely for the use of the addressee(s). If the reader of this
message is not the intended recipient, you are hereby notified that
any reading, dissemination, distribution, copying, forwarding or
other use of this message or its attachments is strictly
prohibited. If you have received this message in error, please
notify the sender immediately and dele

Re: catalogued datasets in tapes and expiration dates

2012-03-29 Thread Uriel Carrasquilla

Forgot to mention, yes, I am using CA-1.
I ran a GENER to copy to output file on our VTL (UNIT=V3590) with a 
LABEL=EXPDT=99000 with a DISP to CATLG if successful.
It ran OK and put the dataset (no stacking) into VOL=SER=682436.
Then, via ISPF TMS, I checked the volume and it shows the expiration date with 
the CATALOG description.
Then, I went to ISPF 3.2 and uncatalogued the dataset.
TMS still has the same information with the expiration date set to CATALOG.
I was expecting to see "SCRATCH" instead.
is this normal?

From: IBM Mainframe Discussion List [IBM-MAIN@bama.ua.edu] on behalf of 
Jonathan Goossen [jonathan.goos...@assurant.com]
Sent: Thursday, March 29, 2012 10:23 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: catalogued datasets in tapes and expiration dates

The answer likely varies by the TMS in use.

CA-1 will keep the tape until every dataset on it is expired. This can be
confusing as the volume record is also the first file on the tape. CA-1
will adjust its expiration to be equal the highest on the tape. If you
manually expire the first file (volume record) then the entire tape will
scratch regardless of the expiration of the rest of the files. That is one
reason that I am very carful about changing the expiration of volume
records.

In CA-1 there is an expiration called CATALOG. It will expire the file
when it is no longer cataloged. If a cataloged tape file has a Julian
expiration, then uncataloging the  file will not affect expiration. But
scratching the tape will uncatalog the file.

Thank you and have a Terrific day!

Jonathan Goossen, DTM
ACT Mainframe Storage Group
Personal: 651-361-4541
Department Support Line: 651-361-
For help with communication and leadership skills checkout Woodwinds
Toastmasters

IBM Mainframe Discussion List  wrote on 03/29/2012
08:51:19 AM:

> From: Uriel Carrasquilla 
> To: IBM-MAIN@bama.ua.edu
> Date: 03/29/2012 08:52 AM
> Subject: Re: catalogued datasets in tapes and expiration dates
> Sent by: IBM Mainframe Discussion List 
>
> Let's say I have a tape with multiple datasets inside.
> Some datasets may be catalogued, some may not.
> I can understand the once not catalogued when they expire they no
> longer hold the tape from going to the scratch pool.
> But what about those cases when the catalogued datasets hit their
> expiration date? what happens?
> am I also correct in assuming that the entire tape with all the
> stacked datasets is being held until the last dataset in it expires?
> Please share your thoughts.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


This e-mail message and all attachments transmitted with it may
contain legally privileged and/or confidential information intended
solely for the use of the addressee(s). If the reader of this
message is not the intended recipient, you are hereby notified that
any reading, dissemination, distribution, copying, forwarding or
other use of this message or its attachments is strictly
prohibited. If you have received this message in error, please
notify the sender immediately and delete this message and all
copies and backups thereof. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Seven-Digit JES2 Job Number

2012-03-29 Thread Vernooij, CP - SPLXM

We implemented this years ago, and so did many others, so I would be
surprised if an issue like this will pop up only now.

Kees.

"Mark Zelden"  wrote in message
news:<1805395092283981.wa.markmzelden@bama.ua.edu>...
> On Wed, 28 Mar 2012 17:28:10 -0500, Dave Barry  wrote:
> 
> >We recently changed JES2 on a development z/OS LPAR to use
seven-digit instead of five-digit job numbers.  A coworker pointed out
to me what appeared to be an increase in initiator input queue time on
the LPAR after the change.  My suspicion is that the increase was
coincidental, but I have no way of conducting a true benchmark.
> >
> >Has anybody on the list noticed such an effect after converting to
seven-digit job numbers?
> >
> >Thanks in advance for your comments.
> >
> 
> Nope, but it wouldn't shock me if it was related.  You are treading
new territory
> here and new function like this may work in the lab but issues like
this can crop
> up in the real world. 
> 
> I would open a PMR with IBM JES2 support and see what advise they have
> for you.  
> 
> Regards,
> 
> Mark
> --
> Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
> mailto:m...@mzelden.com
> Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
> Systems Programming expert at
http://expertanswercenter.techtarget.com/
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message. 

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt. 
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IEFUSI Question - OMVS Related

On Thu, 29 Mar 2012 08:54:51 -0500, Mark Zelden  wrote:

>On Thu, 29 Mar 2012 08:42:33 -0500, Mark Zelden  wrote:
>
>>On Thu, 29 Mar 2012 09:13:33 -0400, Mark Jacobs  
>>wrote:
>>
>>>We're receiving java out of memory errors during the build of a WASoem
>>>server which I believe is related to our virtual storage settings for
>>>the environment. I'm executing the script on the OMVS shell from an ssh
>>>session, not the TSO OMVS shell.
>>>
>>>We're not calling our IEFUSI exit for the OMVS subsystem (SMFPRMxx).
>>>
>>>What are other people doing for their OMVS virtual storage settings?
>>>
>>
>>1)  Don't restrict via IEFUSI (which you are not doing)
>>
>>2) Set MAXASSIZE and MAXCORESIZE to 2147483647
>>
>
>I forgot #3:Use my REXXSTOR exec (available on my web site and
>CBT file 434) and run it in a z/OS unix shell (TSO OMVS or otherwise) to
>verify you are getting the entire private area above the 16M line.
>
>For example, here is what the REXXSTOR output looks like from
>one of the systems I am on:
>
>
>   V I R T U A LS T O R A G EU S A G E
>   ---
>
>
> Region requested: 55296K
>
> Max Priv Region Region Region   LSQA Region
> Reg Size  Limit   Size In-Use In-Use  Avail
>                
>Below 16M: 10216K  9728K  9728K 4K   280K  9724K
>Above 16M:   1686528K262144K262144K   700K 10776K261444K
>
>Above 2G :10G (64-bit MEMLIMIT)
>MEMLIMIT Source:  SMF
>
>
>Before someone asks about  the region requested size of 55296K (54M), this
>explains it:
>
>http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/BPXZB2A1/20.8
>
>or
>
>http://tinyurl.com/3hel6vh
>
>"When the IEFUSI exit receives control, one of the parameters that is passed 
>is the region size that was requested for the JOB or EXEC test JCL statement. 
>For a forked address space, this is displayed as 54M. This value comes from 
>the default SWA blocks that are defined in module BPXPRBS. This is the default 
>JCL that is used when creating forked address spaces. "
>

Scratch "use TSO OMVS" from my last post.   The above display was a poor 
example of 
proving what region a unix program would get because I used TSO OMVS and that
does invoke IEFUSI.

Here is an example from a shell where I used telnet to access z/OS unix.  

   V I R T U A LS T O R A G EU S A G E   
   ---   
 
 
 Region requested: 55296K
 
 Max Priv Region Region Region   LSQA Region 
 Reg Size  Limit   Size In-Use In-Use  Avail 
                 
Below 16M: 10216K 10216K 10216K 4K   276K  9936K 
Above 16M:   1686528K   2086936K   2086936K   700K 10700K   1675128K 
 
Above 2G :10G (64-bit MEMLIMIT)  
MEMLIMIT Source:  SMF



--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: catalogued datasets in tapes and expiration dates

2012-03-29 Thread Jonathan Goossen

The answer likely varies by the TMS in use.

CA-1 will keep the tape until every dataset on it is expired. This can be 
confusing as the volume record is also the first file on the tape. CA-1 
will adjust its expiration to be equal the highest on the tape. If you 
manually expire the first file (volume record) then the entire tape will 
scratch regardless of the expiration of the rest of the files. That is one 
reason that I am very carful about changing the expiration of volume 
records.

In CA-1 there is an expiration called CATALOG. It will expire the file 
when it is no longer cataloged. If a cataloged tape file has a Julian 
expiration, then uncataloging the  file will not affect expiration. But 
scratching the tape will uncatalog the file.

Thank you and have a Terrific day!

Jonathan Goossen, DTM
ACT Mainframe Storage Group
Personal: 651-361-4541
Department Support Line: 651-361-
For help with communication and leadership skills checkout Woodwinds 
Toastmasters

IBM Mainframe Discussion List  wrote on 03/29/2012 
08:51:19 AM:

> From: Uriel Carrasquilla 
> To: IBM-MAIN@bama.ua.edu
> Date: 03/29/2012 08:52 AM
> Subject: Re: catalogued datasets in tapes and expiration dates
> Sent by: IBM Mainframe Discussion List 
> 
> Let's say I have a tape with multiple datasets inside.
> Some datasets may be catalogued, some may not.
> I can understand the once not catalogued when they expire they no 
> longer hold the tape from going to the scratch pool.
> But what about those cases when the catalogued datasets hit their 
> expiration date? what happens?
> am I also correct in assuming that the entire tape with all the 
> stacked datasets is being held until the last dataset in it expires? 
> Please share your thoughts.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN


This e-mail message and all attachments transmitted with it may
contain legally privileged and/or confidential information intended
solely for the use of the addressee(s). If the reader of this
message is not the intended recipient, you are hereby notified that
any reading, dissemination, distribution, copying, forwarding or
other use of this message or its attachments is strictly
prohibited. If you have received this message in error, please
notify the sender immediately and delete this message and all
copies and backups thereof. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: catalogued datasets in tapes and expiration dates

Which tape management system? With CA-1, a tape is returned to the scratch pool 
when every dataset on the tape expires. If the tape is SMS managed, then the 
CA-1 system communicates to OAM to expire the tape to SMS. OAM then 
communicates to our VTS/ATL to set that volume to SCRATCH status in the tape 
library.

When CA-1 expires a dataset on a tape, part of the process, at least as we have 
it set up, is to uncatalog the dataset name - assuming the dataset is 
catalogued on the given tape volume. I don't know how DFSMSrmm does its 
expiration processing.

--
John McKown 
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * 
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

 

> -Original Message-
> From: IBM Mainframe Discussion List 
> [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Uriel Carrasquilla
> Sent: Thursday, March 29, 2012 8:51 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: catalogued datasets in tapes and expiration dates
> 
> Let's say I have a tape with multiple datasets inside.
> Some datasets may be catalogued, some may not.
> I can understand the once not catalogued when they expire 
> they no longer hold the tape from going to the scratch pool.
> But what about those cases when the catalogued datasets hit 
> their expiration date? what happens?
> am I also correct in assuming that the entire tape with all 
> the stacked datasets is being held until the last dataset in 
> it expires? 
> Please share your thoughts.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Tapeless solution (IBM or Sun) Enterprise class

2012-03-29 Thread Vernooij, CP - SPLXM

The TS7720 also has throttling mechanismes.

Kees.

"Tommy Tsui"  wrote in message
news:...
> For B20 if cache full, we will encounter  a throttling write/read, is
it
> still happen in 7720 model, or have enhancement on throttling
read/write ?
> 
> 
> 
> 
> 2012/3/29 Vernooij, CP - SPLXM 
> 
> > "Scott Chapman"  wrote in message
> > news:<4525551506292614.wa.sachapmanaep@bama.ua.edu>...
> > > We're just finishing up migration from a B20 Peer to Peer solution
to
> > a 7720-7720-7740 three-way grid solution.  Performance has been much
> > better, no surprise there.  I'd say we've been pretty happy, but
we're
> > currently tracking down a cache management issue that cropped up
with
> > one of the 7720s when we lost the data links between the sites.  It
may
> > be working correctly, we just don't understand it yet.
> > >
> >
> > I don't know what your cache 'issue' was, but I think this is
> > explainable, the logical volumes that must be replicated to other
> > clusters, are kept in cache. Depending on the size of your cache and
the
> > rate you generate tape data, this can fill cache to a certain
threshold.
> > You can check this in the GUI, in the "Pending Updates" view. When
we
> > bought the 7720, we could only get it with maximum cache (6 TB), but
> > later smaller caches became available, which will fill up faster of
> > course.
> >
> > > I'm not doing the migration work myself, so I can't really comment
in
> > detail, but my understanding is that Tivoli Tape Optimizer was
> > problematic until we found the right combination of settings to get
it
> > to work smoothly.  Actually, I think there was a bug that IBM
provided a
> > work-around or fix for.  Just be sure to leave yourself adequate
time to
> > do the migration, it might take longer than you expect: the heavy
read
> > workload we're pushing through the B20 is causing our (8 year old)
B20
> > to drop a drive or two a day.  The CE has been able to fix most of
them,
> > but that takes time and we didn't really think about having to
regularly
> > run with less than the full complement of drives when planning out
the
> > migration.
> > >
> >
> > We used CA's Copycat, which did the job very well.
> >
> > >
> > > And don't trust a vendor's "average" compression ratio--go measure
it
> > out of your existing VTS for peak write times (it's in the SMF 94s
for
> > the VTCs).  If you're (for example) backing up lots of DB2 data
that's
> > already compressed, that data is not going to compress well in the
VTS.
> > Assuming too high of a compression ratio and hence buying too little
> > capacity could become a significant issue if you're in a disk-only
> > solution.
> > >
> > >
--
> > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> > 
> > For information, services and offers, please visit our web site:
> > http://www.klm.com. This e-mail and any attachment may contain
> > confidential and privileged material intended for the addressee
only. If
> > you are not the addressee, you are notified that no part of the
e-mail or
> > any attachment may be disclosed, copied or distributed, and that any
other
> > action related to this e-mail or attachment is strictly prohibited,
and may
> > be unlawful. If you have received this e-mail by error, please
notify the
> > sender immediately by return e-mail, and delete this message.
> >
> > Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries
and/or its
> > employees shall not be liable for the incorrect or incomplete
transmission
> > of this e-mail or any attachments, nor responsible for any delay in
receipt.
> > Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal
Dutch
> > Airlines) is registered in Amstelveen, The Netherlands, with
registered
> > number 33014286
> > 
> >
> >
> >
--
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> >
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error

Re: Seven-Digit JES2 Job Number

On Wed, 28 Mar 2012 17:28:10 -0500, Dave Barry  wrote:

>We recently changed JES2 on a development z/OS LPAR to use seven-digit instead 
>of five-digit job numbers.  A coworker pointed out to me what appeared to be 
>an increase in initiator input queue time on the LPAR after the change.  My 
>suspicion is that the increase was coincidental, but I have no way of 
>conducting a true benchmark.
>
>Has anybody on the list noticed such an effect after converting to seven-digit 
>job numbers?
>
>Thanks in advance for your comments.
>

Nope, but it wouldn't shock me if it was related.  You are treading new 
territory
here and new function like this may work in the lab but issues like this can 
crop
up in the real world. 

I would open a PMR with IBM JES2 support and see what advise they have
for you.  

Regards,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IEFUSI Question - OMVS Related

On Thu, 29 Mar 2012 08:42:33 -0500, Mark Zelden  wrote:

>On Thu, 29 Mar 2012 09:13:33 -0400, Mark Jacobs  
>wrote:
>
>>We're receiving java out of memory errors during the build of a WASoem
>>server which I believe is related to our virtual storage settings for
>>the environment. I'm executing the script on the OMVS shell from an ssh
>>session, not the TSO OMVS shell.
>>
>>We're not calling our IEFUSI exit for the OMVS subsystem (SMFPRMxx).
>>
>>What are other people doing for their OMVS virtual storage settings?
>>
>
>1)  Don't restrict via IEFUSI (which you are not doing)
>
>2) Set MAXASSIZE and MAXCORESIZE to 2147483647
>

I forgot #3:Use my REXXSTOR exec (available on my web site and 
CBT file 434) and run it in a z/OS unix shell (TSO OMVS or otherwise) to 
verify you are getting the entire private area above the 16M line.   

For example, here is what the REXXSTOR output looks like from
one of the systems I am on:

   V I R T U A LS T O R A G EU S A G E   
   ---   

 Region requested: 55296K

 Max Priv Region Region Region   LSQA Region 
 Reg Size  Limit   Size In-Use In-Use  Avail 

Below 16M: 10216K  9728K  9728K 4K   280K  9724K 
Above 16M:   1686528K262144K262144K   700K 10776K261444K 

Above 2G :10G (64-bit MEMLIMIT)  
MEMLIMIT Source:  SMF  

Before someone asks about  the region requested size of 55296K (54M), this 
explains it:

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/BPXZB2A1/20.8

or

http://tinyurl.com/3hel6vh

"When the IEFUSI exit receives control, one of the parameters that is passed is 
the region size that was requested for the JOB or EXEC test JCL statement. For 
a forked address space, this is displayed as 54M. This value comes from the 
default SWA blocks that are defined in module BPXPRBS. This is the default JCL 
that is used when creating forked address spaces. " 

Regards,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: catalogued datasets in tapes and expiration dates

2012-03-29 Thread Uriel Carrasquilla

Let's say I have a tape with multiple datasets inside.
Some datasets may be catalogued, some may not.
I can understand the once not catalogued when they expire they no longer hold 
the tape from going to the scratch pool.
But what about those cases when the catalogued datasets hit their expiration 
date? what happens?
am I also correct in assuming that the entire tape with all the stacked 
datasets is being held until the last dataset in it expires? 
Please share your thoughts.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Tapeless solution (IBM or Sun) Enterprise class

2012-03-29 Thread Darth Keller

>>Darth,
You said " HDS now sells the Falconstor's VTL instead."

To be pedantic, that's not entirely true. We have a lot of successful
Falconstore implementations on the dark side of the computer room, but for
mainframe you need something that virtualizes mainframe tape drives like
Luminex or Secure Agent, and hands off the data to Falconstore. We can use
VSP, AMS, or virtualized ACME brand disk as the back store with this
solution.
>>Ron

I haven't researched it myself -  I'm just repeating what an HDS rep told 
me when I asked him about updates to the MDL.


This e-mail message and all attachments transmitted with it may
contain legally privileged and/or confidential information intended
solely for the use of the addressee(s). If the reader of this
message is not the intended recipient, you are hereby notified that
any reading, dissemination, distribution, copying, forwarding or
other use of this message or its attachments is strictly
prohibited. If you have received this message in error, please
notify the sender immediately and delete this message and all
copies and backups thereof. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IEFUSI Question - OMVS Related

On Thu, 29 Mar 2012 09:13:33 -0400, Mark Jacobs  
wrote:

>We're receiving java out of memory errors during the build of a WASoem
>server which I believe is related to our virtual storage settings for
>the environment. I'm executing the script on the OMVS shell from an ssh
>session, not the TSO OMVS shell.
>
>We're not calling our IEFUSI exit for the OMVS subsystem (SMFPRMxx).
>
>What are other people doing for their OMVS virtual storage settings?
>

1)  Don't restrict via IEFUSI (which you are not doing)

2) Set MAXASSIZE and MAXCORESIZE to 2147483647

--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Tapeless solution (IBM or Sun) Enterprise class

2012-03-29 Thread Tommy Tsui

For B20 if cache full, we will encounter  a throttling write/read, is it
still happen in 7720 model, or have enhancement on throttling read/write ?




2012/3/29 Vernooij, CP - SPLXM 

> "Scott Chapman"  wrote in message
> news:<4525551506292614.wa.sachapmanaep@bama.ua.edu>...
> > We're just finishing up migration from a B20 Peer to Peer solution to
> a 7720-7720-7740 three-way grid solution.  Performance has been much
> better, no surprise there.  I'd say we've been pretty happy, but we're
> currently tracking down a cache management issue that cropped up with
> one of the 7720s when we lost the data links between the sites.  It may
> be working correctly, we just don't understand it yet.
> >
>
> I don't know what your cache 'issue' was, but I think this is
> explainable, the logical volumes that must be replicated to other
> clusters, are kept in cache. Depending on the size of your cache and the
> rate you generate tape data, this can fill cache to a certain threshold.
> You can check this in the GUI, in the "Pending Updates" view. When we
> bought the 7720, we could only get it with maximum cache (6 TB), but
> later smaller caches became available, which will fill up faster of
> course.
>
> > I'm not doing the migration work myself, so I can't really comment in
> detail, but my understanding is that Tivoli Tape Optimizer was
> problematic until we found the right combination of settings to get it
> to work smoothly.  Actually, I think there was a bug that IBM provided a
> work-around or fix for.  Just be sure to leave yourself adequate time to
> do the migration, it might take longer than you expect: the heavy read
> workload we're pushing through the B20 is causing our (8 year old) B20
> to drop a drive or two a day.  The CE has been able to fix most of them,
> but that takes time and we didn't really think about having to regularly
> run with less than the full complement of drives when planning out the
> migration.
> >
>
> We used CA's Copycat, which did the job very well.
>
> >
> > And don't trust a vendor's "average" compression ratio--go measure it
> out of your existing VTS for peak write times (it's in the SMF 94s for
> the VTCs).  If you're (for example) backing up lots of DB2 data that's
> already compressed, that data is not going to compress well in the VTS.
> Assuming too high of a compression ratio and hence buying too little
> capacity could become a significant issue if you're in a disk-only
> solution.
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
> 
> For information, services and offers, please visit our web site:
> http://www.klm.com. This e-mail and any attachment may contain
> confidential and privileged material intended for the addressee only. If
> you are not the addressee, you are notified that no part of the e-mail or
> any attachment may be disclosed, copied or distributed, and that any other
> action related to this e-mail or attachment is strictly prohibited, and may
> be unlawful. If you have received this e-mail by error, please notify the
> sender immediately by return e-mail, and delete this message.
>
> Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its
> employees shall not be liable for the incorrect or incomplete transmission
> of this e-mail or any attachments, nor responsible for any delay in receipt.
> Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch
> Airlines) is registered in Amstelveen, The Netherlands, with registered
> number 33014286
> 
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IEFUSI Question - OMVS Related

2012-03-29 Thread Jousma, David

Have you taken a look at your BPXPRMxx settings?   Look at those that start 
with MAX*

_
Dave Jousma
Assistant Vice President, Mainframe Services
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Mark Jacobs
Sent: Thursday, March 29, 2012 9:14 AM
To: IBM-MAIN@bama.ua.edu
Subject: IEFUSI Question - OMVS Related

We're receiving java out of memory errors during the build of a WASoem server 
which I believe is related to our virtual storage settings for the environment. 
I'm executing the script on the OMVS shell from an ssh session, not the TSO 
OMVS shell.

We're not calling our IEFUSI exit for the OMVS subsystem (SMFPRMxx).

What are other people doing for their OMVS virtual storage settings?

--
Mark Jacobs
Time Customer Service
Tampa, FL


Learn from yesterday, live for today, hope for tomorrow.
The important thing is to not stop questioning.

- Albert Einstein

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@bama.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: IEFUSI Question - OMVS Related

2012-03-29 Thread Veilleux, Jon L

We ran into this also. What is your MAXASSIZE setting? This controls the region 
for your ssh session. If you have TOP SECRET you can override the systems 
setting for each user. I don't know about RACF.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of 
Mark Jacobs
Sent: Thursday, March 29, 2012 9:14 AM
To: IBM-MAIN@bama.ua.edu
Subject: IEFUSI Question - OMVS Related

We're receiving java out of memory errors during the build of a WASoem server 
which I believe is related to our virtual storage settings for the environment. 
I'm executing the script on the OMVS shell from an ssh session, not the TSO 
OMVS shell.

We're not calling our IEFUSI exit for the OMVS subsystem (SMFPRMxx).

What are other people doing for their OMVS virtual storage settings?

--
Mark Jacobs
Time Customer Service
Tampa, FL

Learn from yesterday, live for today, hope for tomorrow.
The important thing is to not stop questioning.

- Albert Einstein

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@bama.ua.edu with the message: INFO IBM-MAIN
This e-mail may contain confidential or privileged information. If
you think you have received this e-mail in error, please advise the
sender by reply e-mail and then delete this e-mail immediately.
Thank you. Aetna   

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

IEFUSI Question - OMVS Related

2012-03-29 Thread Mark Jacobs

We're receiving java out of memory errors during the build of a WASoem 
server which I believe is related to our virtual storage settings for 
the environment. I'm executing the script on the OMVS shell from an ssh 
session, not the TSO OMVS shell.


We're not calling our IEFUSI exit for the OMVS subsystem (SMFPRMxx).

What are other people doing for their OMVS virtual storage settings?

--
Mark Jacobs
Time Customer Service
Tampa, FL


Learn from yesterday, live for today, hope for tomorrow.
The important thing is to not stop questioning.

- Albert Einstein

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

2012-03-29 Thread Tom Marchant

On Thu, 29 Mar 2012 07:41:20 -0500, Steve Dover wrote:

>I wish listservers had a "like" button similar to Facebook 
>and such.  I would "like" this comment.

I don't.  And I wouldn't.  Every time you visit a page with 
a Facebook "like", your movements are tracked.  For more 
information about this, see 
http://papers.ssrn.com/sol3/papers.cfm?abstract_id=1717563 

It is apt that this comment would be made in a thread about 
malicious software.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: ICSF - will "deactivate"op Lpar 'A' affect other lpars? and does it remain "deactivated"across IPLs?

2012-03-29 Thread Rob Schramm

I am with Mark on this one.  If you want to restrict access, then
remove the co-processors from the activation profile on the HMC.  Make
them offline and not eligible to be brought online.

Rob Schramm
Senior Systems Consultant
Imperium Group




On Thu, Mar 29, 2012 at 6:55 AM, Mark Jacobs  wrote:
> I believe the answer to your questions are;
>
> 1) No. By deactivating the co-processors on one lpar doesn't affect the
> other lpars.
> 2) Never tried it but my best guess is no.
>
> The only way to fully and permanently take these crypto co-processors off
> line is through the support element on the HMC.
>
> Mark Jacobs
>
>
> On 03/29/12 04:03, Francis van Zutphen wrote:
>>
>> Hello fellow ICSF/crypto supporters,
>>
>> We currently define our co-processor cards(CEX3) to  all our 10 lpars.
>> We are now in the process of outsourcing 2 lpars ( I will call these lpar
>> "A" and "B").
>>
>> We do not have Masterkeys defined in the CKDS for Lpar "A" and lpar "B".
>> We are also certain that although the co-processors are available (ONLINE
>> status), they are not used.
>> We want to make sure that they are not used  by doing a "deactivate" via
>> the TSO "ICSF Coprocessor Management panel"  on "A" and "B"
>>
>> Question:  1.  Will the "deactivate" operation on lpar "A"and lpar "B"
>>  affect the other lpars?
>> Question:  2.  Will the "deactivate" status remain across IPLs?
>>
>> At a later stage we will use the support element to remove domain
>> definitions for "A"and B"
>>
>> regards
>>
>> Francis van Zutphen
>>
>>
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
>>
>>
>
>
>
> --
> Mark Jacobs
> Time Customer Service
> Tampa, FL
> 
>
> Learn from yesterday, live for today, hope for tomorrow.
> The important thing is to not stop questioning.
>
> - Albert Einstein
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

2012-03-29 Thread Steve Dover

I wish listservers had a "like" button similar to Facebook and such.  I would 
"like" this comment.
Steve

On Wed, 28 Mar 2012 07:33:44 -0500, McKown, John 
 wrote:

>Of course not! Most auditors that I've had the misfortune to interact with 
>directly are like politicians. They have the "bright ideas" based on 
>"fundamental truths". But if they don't work, it's because the people who 
>implemented them (us) are idiots and incompetents.
>
>--
>John McKown
>Systems Engineer IV
>IT
>
>Administrative Services Group
>
>HealthMarkets(r)
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection

2012-03-29 Thread Chris Craddock

On Mar 28, 2012, at 4:13 PM, "R.S."  wrote:

> The problem is we don't believe. :-)
> 
> W dniu 2012-03-28 22:45, Ray Overby pisze:
>> Yes, I believe I have a way to attack a mainframe system where I don't
>> have access.

Then would you believe me?

In the days before ubiquitous networking you would have been safe not do 
believe. Today I think you would be foolish not to believe. The proof is a 
thought experiment that I could walk you through, but I won't because I don't 
think it is wise to shout out the location of my neighbor's front door keys, 
even if he is foolish enough to leave them under the mat. It is the reason why 
I keep harping on about integrity violations.

Suffice to say that more sophisticated malware attacks in the real world like 
Stuxnet have proven conclusively that patience and a broad based approach can 
pay dividends even  in some of the most supposedly secure sites in the world. 
And if through that slow patient attack, you manage to get some code running on 
a z/OS system, THEN... even if that code is utterly non-privileged, it is quite 
easy to find and exploit integrity violations locally. And the world is your 
oyster. 

So it really isn't like on TV where the brainiac agents are always cracking 
firewall encryption in five minutes. But with the right kind of approach, they 
don't need to. And if they can do some human insider trading, then it is even 
easier. 

Bottom line: if you think your systems are really secure, you're probably nuts. 
Far more likely it's just that nobody has (yet) paid attention. Sorry. 

CC

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: Malicious Software Protection