Re: Newbie doubt about Supervised State
OK! Maybe the word newbie is too hard, and maybe I must not use those dangerous calls. I already found another solution...well, if fact the problem was the error code supplied did not explain the real error. The problem was I had a mistake constructing the label for the key, but the error code told me it was a permission error... Maybe they'd have to correct some things in ICSF (manual and program)... Thanks to all and excuse me if I was impertinent asking for those dangerous things!! Saludos! Best regards! Víctor de la Fuente Seivane Departamento de Sistemas Caixa Galicia -Mensaje original- De: Peter Pfaffner [mailto:[EMAIL PROTECTED] Enviado el: lunes, 25 de julio de 2005 0:20 Para: IBM-MAIN@BAMA.UA.EDU Asunto: Re: Newbie doubt about Supervised State Roland wrote: Same apply to Cobol but also require an assembler prog to issue the MODESET. We have one to create system name token. Hi Hacker ;-), don't try to teach newbies the wrong things !!! It's really dangerous what you are doing, especially if they (the newbies) don't know the things you know. No offense Peter -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Newbie doubt about Supervised State
Yes, it's a CICS program. The function offers another possibility: System Key 0-7. But no idea on how to do it... The exact explanation for the error is: | 814 (2068) | You supplied a key identifier or token to the key | | | generate, key import, multiple secure key import, key | | | export, or key record write callable service. This key | | | identifier holds an importer or exporter key, and the | | | NOCV bit is on in the token. Only programs running in | | | supervisor state or in a system key (key 0-7) may | | | provide a key identifier with this bit set on. Your | | | program was not running in supervisor state or a system | | | key. | | | | | | User action: Either use a different key identifier, or | | | else run in supervisor state or a system key. | Saludos! Best regards! Víctor de la Fuente Seivane Departamento de Sistemas Caixa Galicia -Mensaje original- De: R.S. [mailto:[EMAIL PROTECTED] Enviado el: viernes, 22 de julio de 2005 12:46 Para: IBM-MAIN@BAMA.UA.EDU Asunto: Re: Newbie doubt about Supervised State De La Fuente Seivane, Victor wrote: Hello all! As I write in the subject, I'm just a newbie. I'm sure what I'm going to ask is obvious, but here I go... I have a PL/I program trying to work with ICSF, and using one of the functions (I don't remember which one) and I reached Return Code 8; Reason Code 2068. It means I must execute the program in supervisor state or key 0. What can I do to execute my program in Supervisor state? As others said, you shouldn't execute your program in supervisor state, absolutely. You should change the program or environment to get rid of the requirement. I vaguely remember such problem with CICS programs, it the program written for CICS ? -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Newbie doubt about Supervised State
Hello all! As I write in the subject, I'm just a newbie. I'm sure what I'm going to ask is obvious, but here I go... I have a PL/I program trying to work with ICSF, and using one of the functions (I don't remember which one) and I reached Return Code 8; Reason Code 2068. It means I must execute the program in supervisor state or key 0. What can I do to execute my program in Supervisor state? Thanks all! Best regards! Víctor de la Fuente Seivane -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Help needed with ICSF
Finally the problem is solved!
There was two errors:
1.- The fields for key lengths, when keys are labels, must be set to 64,
instead of the label length.
2.- The enciphered key I was trying to decipher was not ciphered in
PCKS-1.2.
The question now is...why are the messages/return codes so general? I think
my two errors are quite different, but the message is the same for each
one...(I solved problem 1 some days ago but the error message did not
change!)
Thanks to all!
Saludos!
Best regards!
Víctor de la Fuente Seivane
Departamento de Sistemas
Caixa Galicia
-Mensaje original-
De: De La Fuente Seivane, Victor
Enviado el: martes, 19 de julio de 2005 9:36
Para: IBM-MAIN@BAMA.UA.EDU
Asunto: Re: Help needed with ICSF
I forgot to say I'm using CCF. Is there any problem here?
Best regards!
Víctor de la Fuente Seivane
-Mensaje original-
De: Paul Hanrahan [mailto:[EMAIL PROTECTED]
Enviado el: lunes, 18 de julio de 2005 13:58
Para: IBM-MAIN@BAMA.UA.EDU
Asunto: Re: Help needed with ICSF
You may have posted this already. Sorry if I missed it. Don't know if I'll
be of help but I'll look it over.
Paul Hanrahan
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of De La Fuente Seivane, Victor
Sent: Monday, July 18, 2005 7:54 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Help needed with ICSF
Sorry! I thought I already put it on Friday...
The code (only the part where I use ICSF) is:
ENCIPHEREDKEY=SUBSTR(COMAREA,17,LENTRADA-16);
ENCIPHEREDKEYLENGTH=LENTRADA-16;
[EMAIL PROTECTED]('D',ENCIPHEREDKEY,ENCIPHEREDKEYLENGTH,
NENCIPHEREDKEY,NENCIPHEREDKEYLENGTH);
NENCIPHEREDKEYLENGTH = RES;
PRIVKEYID='XXX.XXX..XXX.';
PRIVKEYIDLENGTH=29;
RULARRC=3;
CALL CSNBKTB(CRYRETC,CRYRESC,CERO,'',KEYTOKEN,'EXPORTER',
RULARRC,'INTERNALNOCV-KEKKEYLN16 ','',0,0,
'','','',0,'','');
RULARRC=1;
KEYTOKENLENGTH=64;
CALL CSNDSYI(CRYRETC,CRYRESC,CERO,'',RULARRC,'PKCS-1.2',
NENCIPHEREDKEYLENGTH,NENCIPHEREDKEY,PRIVKEYIDLENGTH,
PRIVKEYID,KEYTOKENLENGTH,KEYTOKEN);
And the variables are:
DCL ENCIPHEREDKEY CHAR(256) INIT('');
DCL ENCIPHEREDKEYLENGTH BIN FIXED(31) INIT(0);
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Help needed with ICSF
I forgot to say I'm using CCF. Is there any problem here?
Best regards!
Víctor de la Fuente Seivane
-Mensaje original-
De: Paul Hanrahan [mailto:[EMAIL PROTECTED]
Enviado el: lunes, 18 de julio de 2005 13:58
Para: IBM-MAIN@BAMA.UA.EDU
Asunto: Re: Help needed with ICSF
You may have posted this already. Sorry if I missed it. Don't know if I'll
be of help but I'll look it over.
Paul Hanrahan
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of De La Fuente Seivane, Victor
Sent: Monday, July 18, 2005 7:54 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Help needed with ICSF
Sorry! I thought I already put it on Friday...
The code (only the part where I use ICSF) is:
ENCIPHEREDKEY=SUBSTR(COMAREA,17,LENTRADA-16);
ENCIPHEREDKEYLENGTH=LENTRADA-16;
[EMAIL PROTECTED]('D',ENCIPHEREDKEY,ENCIPHEREDKEYLENGTH,
NENCIPHEREDKEY,NENCIPHEREDKEYLENGTH);
NENCIPHEREDKEYLENGTH = RES;
PRIVKEYID='XXX.XXX..XXX.';
PRIVKEYIDLENGTH=29;
RULARRC=3;
CALL CSNBKTB(CRYRETC,CRYRESC,CERO,'',KEYTOKEN,'EXPORTER',
RULARRC,'INTERNALNOCV-KEKKEYLN16 ','',0,0,
'','','',0,'','');
RULARRC=1;
KEYTOKENLENGTH=64;
CALL CSNDSYI(CRYRETC,CRYRESC,CERO,'',RULARRC,'PKCS-1.2',
NENCIPHEREDKEYLENGTH,NENCIPHEREDKEY,PRIVKEYIDLENGTH,
PRIVKEYID,KEYTOKENLENGTH,KEYTOKEN);
And the variables are:
DCL ENCIPHEREDKEY CHAR(256) INIT('');
DCL ENCIPHEREDKEYLENGTH BIN FIXED(31) INIT(0);
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Help needed with ICSF
My problem with your possible solution is my box is Z/990... But thanks anyway. I'm still waiting for my guard angel to come to help!!! Saludos! Best regards! Víctor de la Fuente Seivane Departamento de Sistemas Caixa Galicia -Mensaje original- De: Hal Merritt [mailto:[EMAIL PROTECTED] Enviado el: miércoles, 13 de julio de 2005 21:59 Para: IBM-MAIN@BAMA.UA.EDU Asunto: Re: Help needed with ICSF There are some hardware patches for the z/890 box that may apply. Not clear about details, but something to do with an unexpected return code when a field is padded with blanks. HTH and good luck. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of De La Fuente Seivane, Victor Sent: Tuesday, July 12, 2005 6:54 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Help needed with ICSF Hi all! I'm hard fighting with ICSF. I'm writing a program where I try to use CSNDSYI function, but I always get RTC=8 and RSC=11000. It means that there is a length parameter wrong. I couldn't find it; I can't imagine which of the three length parameters could be wrong. I tried to find more information, with no success. Could anyone show me the correct way? Just some hints on which could be the mistake! Thank you very much! Best regards! Víctor de la Fuente Seivane -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Help needed with ICSF
Sorry! I thought I already put it on Friday...
The code (only the part where I use ICSF) is:
ENCIPHEREDKEY=SUBSTR(COMAREA,17,LENTRADA-16);
ENCIPHEREDKEYLENGTH=LENTRADA-16;
[EMAIL PROTECTED]('D',ENCIPHEREDKEY,ENCIPHEREDKEYLENGTH,
NENCIPHEREDKEY,NENCIPHEREDKEYLENGTH);
NENCIPHEREDKEYLENGTH = RES;
PRIVKEYID='XXX.XXX..XXX.';
PRIVKEYIDLENGTH=29;
RULARRC=3;
CALL CSNBKTB(CRYRETC,CRYRESC,CERO,'',KEYTOKEN,'EXPORTER',
RULARRC,'INTERNALNOCV-KEKKEYLN16 ','',0,0,
'','','',0,'','');
RULARRC=1;
KEYTOKENLENGTH=64;
CALL CSNDSYI(CRYRETC,CRYRESC,CERO,'',RULARRC,'PKCS-1.2',
NENCIPHEREDKEYLENGTH,NENCIPHEREDKEY,PRIVKEYIDLENGTH,
PRIVKEYID,KEYTOKENLENGTH,KEYTOKEN);
And the variables are:
DCL ENCIPHEREDKEY CHAR(256) INIT('');
DCL ENCIPHEREDKEYLENGTH BIN FIXED(31) INIT(0);
DCL NENCIPHEREDKEY CHAR(256) INIT('');
DCL NENCIPHEREDKEYLENGTH BIN FIXED(31) INIT(256);
DCL PRIVKEYID CHAR(64) INIT('');
DCL PRIVKEYIDLENGTH BIN FIXED(31) INIT(0);
DCL KEYTOKEN CHAR(64) INIT('');
DCL KEYTOKENLENGTH BIN FIXED(63) INIT(0);
The function is declared:
DCL CSNBKTB ENTRY EXTERNAL OPTIONS( ASM, INTER );
DCL CSNDSYI ENTRY EXTERNAL OPTIONS( ASM, INTER );
None of the variables are used before used as I showed before.
The [EMAIL PROTECTED] function translates text from BA64.
Please someone find my horrible bug!
Thank all you very much!
Best regards!
Víctor de la Fuente Seivane
-Mensaje original-
De: Paul Hanrahan [mailto:[EMAIL PROTECTED]
Enviado el: lunes, 18 de julio de 2005 13:41
Para: IBM-MAIN@BAMA.UA.EDU
Asunto: Re: Help needed with ICSF
Can you provide a code snippet where you set up the lengths.- Paul Hanrahan
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of De La Fuente Seivane, Victor
Sent: Monday, July 18, 2005 7:01 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Help needed with ICSF
My problem with your possible solution is my box is Z/990...
But thanks anyway. I'm still waiting for my guard angel to come to help!!!
Saludos!
Best regards!
Víctor de la Fuente Seivane
Departamento de Sistemas
Caixa Galicia
-Mensaje original-
De: Hal Merritt [mailto:[EMAIL PROTECTED]
Enviado el: miércoles, 13 de julio de 2005 21:59
Para: IBM-MAIN@BAMA.UA.EDU
Asunto: Re: Help needed with ICSF
There are some hardware patches for the z/890 box that may apply. Not clear
about details, but something to do with an unexpected return code when a
field is padded with blanks.
HTH and good luck.
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of De La Fuente Seivane, Victor
Sent: Tuesday, July 12, 2005 6:54 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Help needed with ICSF
Hi all!
I'm hard fighting with ICSF. I'm writing a program where I try to use
CSNDSYI function, but I always get RTC=8 and RSC=11000. It means that there
is a length parameter wrong. I couldn't find it; I can't imagine which of
the three length parameters could be wrong.
I tried to find more information, with no success. Could anyone show me the
correct way? Just some hints on which could be the mistake!
Thank you very much!
Best regards!
Víctor de la Fuente Seivane
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
Help needed with ICSF
Hi all! I'm hard fighting with ICSF. I'm writing a program where I try to use CSNDSYI function, but I always get RTC=8 and RSC=11000. It means that there is a length parameter wrong. I couldn't find it; I can't imagine which of the three length parameters could be wrong. I tried to find more information, with no success. Could anyone show me the correct way? Just some hints on which could be the mistake! Thank you very much! Best regards! Víctor de la Fuente Seivane -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
