Re: APF question
On Thu our mate Dave wrote: > I guess you need to ask CA the why and wherefore and safeguards. We > use Endevor, but I'm not aware of seeing the source for any modules. I > know that Endevor does some manner of ID switching to allow programmers > to use Endevor to do changes while not allowing them direct access to > the repository datasets. And later ... > I guess I must apologize, it never occurred to me that there this > was an add-on from some other ISV for Endevor. I wouldn't be rushing to let them off the hook too lightly fella. A while back a customer of mine had a CA body on-site to expedite an Endevor upgrade. A request filtered up to me to have an (authorized) exit activated as part of the install. That got my interest. A RACF exit no less - might have even been RCX01. Short answer, two letters, starts with N ... Shane ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
> -Original Message- > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On > Behalf Of Phil Sidler > Sent: Thursday, April 23, 2009 9:51 PM > To: IBM-MAIN@bama.ua.edu > Subject: Re: APF question > > On Thu, 23 Apr 2009 16:59:39 -0700, Gibney, Dave wrote > > > I guess you need to ask CA the why and wherefore and safeguards. We > >use Endevor, but I'm not aware of seeing the source for any modules. I > > Oh, don't point to CA. This isn't actually part of Endevor. > googled & found: http://www.nexio.com/products/edvtools/summary > I guess I must apologize, it never occurred to me that there this was an add-on from some other ISV for Endevor. I'll pay more attention :) Now, it sounds like ISV software that needs "some" improvement in the integrity area :( > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
On Thu, 23 Apr 2009 16:59:39 -0700, Gibney, Dave wrote > I guess you need to ask CA the why and wherefore and safeguards. We >use Endevor, but I'm not aware of seeing the source for any modules. I Oh, don't point to CA. This isn't actually part of Endevor. googled & found: http://www.nexio.com/products/edvtools/summary -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
I guess you need to ask CA the why and wherefore and safeguards. We use Endevor, but I'm not aware of seeing the source for any modules. I know that Endevor does some manner of ID switching to allow programmers to use Endevor to do changes while not allowing them direct access to the repository datasets. Dave Gibney Information Technology Services Washington State University > -Original Message- > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On > Behalf Of Phil Sidler > Sent: Thursday, April 23, 2009 4:50 PM > To: IBM-MAIN@bama.ua.edu > Subject: Re: APF question > > On Thu, 23 Apr 2009 13:22:31 -0400, Stocker, Herman > wrote: > > >It is an Endevor utility that prevents everyone from selecting their > own > >options. This keeps the control under the Endevor Admins. And out of > the > >applications programmer/consultant. > > Yes, unfortunately there is nothing I can see to prevent the program > from > being used outside of Endevor. Besides which it shouldn't be up to the > Endevor admins to decide which programs should run APF authorized. > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
On Thu, 23 Apr 2009 13:22:31 -0400, Stocker, Herman wrote: >It is an Endevor utility that prevents everyone from selecting their own >options. This keeps the control under the Endevor Admins. And out of the >applications programmer/consultant. Yes, unfortunately there is nothing I can see to prevent the program from being used outside of Endevor. Besides which it shouldn't be up to the Endevor admins to decide which programs should run APF authorized. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
Rick Fochtman wrote: I would have a VERY SERIOUS PROBLEM (Capitalized, quotated, underlined, in italics, in the middle of a blank page!) with installing a program of that nature. If your consultant requires the use of an authorized program, other than what the system provides, he/she needs to justify it, explain it and allow you to examine the source code so you can be sure he's telling you God's honest truth. Otherwise, he might very well compromise your system's integrity, corporate records, overall security, etc. Some time back I was systems manager of a service bureau; one client insisted that we install a special SVC. The explanation was that it was needed to calculate accumulated CPU time (this was prior to TIMEUSED). There was no source code, but I looked at a dump, and all it did was to test R0 and R1, then return control to the caller in key 0. I wrote a little SVC that returned CPU time in R0 to satisfy their stated need, and as far as I can tell, they never used it. Gerhard Postpischil Bradford, VT -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
Hi Phil, It is an Endevor utility that prevents everyone from selecting their own options. This keeps the control under the Endevor Admins. And out of the applications programmer/consultant. If you feel that this is too greater risk for the benefit gained then ask them to put in a check for the production ID, or authid for execution. Regards, Herman Stocker -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Phil Sidler Sent: Thursday, April 23, 2009 12:44 PM To: IBM-MAIN@bama.ua.edu Subject: APF question Anyone running a program called EDVPARM? A consultant is trying to convince us to install this program to an authorized library with AC(1). Looking at the source concerns me. It appears that you can pass it a program name and parameter list and the program will ATTACHX it. This seems like a big hole to me. What if you pass it IRXJCL for example? Or? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - -- The sender believes that this E-mail and any attachments were free of any virus, worm, Trojan horse, and/or malicious code when sent. This message and its attachments could have been infected during transmission. By reading the message and opening any attachments, the recipient accepts full responsibility for taking protective and remedial action about viruses and other defects. The sender's employer is not liable for any loss or damage arising in any way from this message or its attachments. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
--- Anyone running a program called EDVPARM? A consultant is trying to convince us to install this program to an authorized library with AC(1). Looking at the source concerns me. It appears that you can pass it a program name and parameter list and the program will ATTACHX it. This seems like a big hole to me. What if you pass it IRXJCL for example? Or? I would have a VERY SERIOUS PROBLEM (Capitalized, quotated, underlined, in italics, in the middle of a blank page!) with installing a program of that nature. If your consultant requires the use of an authorized program, other than what the system provides, he/she needs to justify it, explain it and allow you to examine the source code so you can be sure he's telling you God's honest truth. Otherwise, he might very well compromise your system's integrity, corporate records, overall security, etc. At this point, I'd be thinking really hard about whether his services are necessary and/or appropriate. He may be completely honest, but with a program like this floating around, I'd be really concerned. This consultant needs to prove to me that his motives are completely harmless AND that he's not going to share this program with those who might misuse it. Can we say "HUMUNGOUSLY BIG RED FLAG" ??? -- Rick -- Remember that if you’re not the lead dog, the view never changes. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
I used this in another shop in a similar situation. The "software product", brought in by the applications group, was not fully developed but needed to be authorized. Our Management denied it. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Phil Sidler Sent: Thursday, April 23, 2009 11:44 AM To: IBM-MAIN@bama.ua.edu Subject: APF question Anyone running a program called EDVPARM? A consultant is trying to convince us to install this program to an authorized library with AC(1). Looking at the source concerns me. It appears that you can pass it a program name and parameter list and the program will ATTACHX it. This seems like a big hole to me. What if you pass it IRXJCL for example? Or? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF question
is he from nexio company ?? see it is a extention to some ca endevor stuff... and purpose ?? -- Email Disclaimer This E-mail contains confidential information belonging to the sender, which may be legally privileged information. This information is intended only for the use of the individual or entity addressed above. If you are not the intended recipient, or an employee or agent responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of the E-mail or attached files is strictly prohibited. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
APF question
Anyone running a program called EDVPARM? A consultant is trying to convince us to install this program to an authorized library with AC(1). Looking at the source concerns me. It appears that you can pass it a program name and parameter list and the program will ATTACHX it. This seems like a big hole to me. What if you pass it IRXJCL for example? Or? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question
Something like F LLA,UPDATE=DSN=some.data.set.name would be very useful and could help eliminate manual effort of creating a PARMLIB member and the attendant clutter of members in PARMLIB. Don Imbriale On Thu, 17 Aug 2006 04:33:07 -0700, Edward Jaffe <[EMAIL PROTECTED]> wrote: >Peter Relson wrote: >>> Would F LLA, REFRESH (link list refresh)... >>> >> >> Be aware that a full LLA refresh is overkill. >> F LLA,UPDATE=nn where CSVLLAxx contains a suitable update statement for the >> specific data set requires far less processing and does what you want. >> > >It uses fewer computer resources for sure. But, it requires additional >human resources to prepare the CSVLLAxx member. A full LLA refresh takes >a *lot* less total clock time than does manually editing a CSVLLAxx >member and issuing F LLA,UPDATE=xx. > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question
And, unless I am mistaken, REFRESH invalidates the entire VLF cache and you will be running without VLF's performance enhancements for all LLA/VLF managed libraries until LLA decides to start staging to VLF again. I remember from the past this fully killed system performance for about 10 minutes. Todays figures will be better, but you can still be hit by an unneeded performance dip. Kees. "Veilleux, Jon L" <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED] com>... > It also won't accidentally pick up changes that someone else might have > pre-staged in a LINKLIST dataset. Keep it simple (and safe). > > > Jon L. Veilleux > [EMAIL PROTECTED] > (860) 636-2683 > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] > Behalf Of Peter Relson > Sent: Thursday, August 17, 2006 7:25 AM > To: IBM-MAIN@BAMA.UA.EDU > Subject: Re: APF Question > > >Would F LLA, REFRESH (link list refresh)... > > Be aware that a full LLA refresh is overkill. > F LLA,UPDATE=nn where CSVLLAxx contains a suitable update statement for > the specific data set requires far less processing and does what you > want. > > > Peter Relson > z/OS Core Technology Design > ** For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286 ** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question
Human resources well spent, I might add. In a large shop there may be more than one person updating the LINKLIST. By issuing 'F LLA,REFRESH' you may cause new code to be picked up before it should be (ie. may require updates to LPA to be concurrent). Always take the least invasive option. It is worth the extra effort. Jon L. Veilleux [EMAIL PROTECTED] (860) 636-2683 -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Edward Jaffe Sent: Thursday, August 17, 2006 7:33 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: APF Question Peter Relson wrote: >> Would F LLA, REFRESH (link list refresh)... >> > > Be aware that a full LLA refresh is overkill. > F LLA,UPDATE=nn where CSVLLAxx contains a suitable update statement > for the specific data set requires far less processing and does what you want. > It uses fewer computer resources for sure. But, it requires additional human resources to prepare the CSVLLAxx member. A full LLA refresh takes a *lot* less total clock time than does manually editing a CSVLLAxx member and issuing F LLA,UPDATE=xx. -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - This e-mail may contain confidential or privileged information. If you think you have received this e-mail in error, please advise the sender by reply e-mail and then delete this e-mail immediately. Thank you. Aetna -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question
It also won't accidentally pick up changes that someone else might have pre-staged in a LINKLIST dataset. Keep it simple (and safe). Jon L. Veilleux [EMAIL PROTECTED] (860) 636-2683 -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Peter Relson Sent: Thursday, August 17, 2006 7:25 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: APF Question >Would F LLA, REFRESH (link list refresh)... Be aware that a full LLA refresh is overkill. F LLA,UPDATE=nn where CSVLLAxx contains a suitable update statement for the specific data set requires far less processing and does what you want. Peter Relson z/OS Core Technology Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - This e-mail may contain confidential or privileged information. If you think you have received this e-mail in error, please advise the sender by reply e-mail and then delete this e-mail immediately. Thank you. Aetna -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question
Peter Relson wrote: Would F LLA, REFRESH (link list refresh)... Be aware that a full LLA refresh is overkill. F LLA,UPDATE=nn where CSVLLAxx contains a suitable update statement for the specific data set requires far less processing and does what you want. It uses fewer computer resources for sure. But, it requires additional human resources to prepare the CSVLLAxx member. A full LLA refresh takes a *lot* less total clock time than does manually editing a CSVLLAxx member and issuing F LLA,UPDATE=xx. -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question
>Would F LLA, REFRESH (link list refresh)... Be aware that a full LLA refresh is overkill. F LLA,UPDATE=nn where CSVLLAxx contains a suitable update statement for the specific data set requires far less processing and does what you want. Peter Relson z/OS Core Technology Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question.
Thanks Steve, Yes, the programs were linkedited AC(1). "Thompson, Steve (SCI TW)" <[EMAIL PROTECTED]> wrote: It depends. If the APF libraries are in the LLA, then yes, the refresh is needed. If the APF libraries are NOT in LLA, or otherwise handled by the system (VLF), and you do not have a third party product (e.g. CA's PMO), then you should be done. Oh, one more thing. You need to LNKEDT with AC(1) IF the programs will be the target of PGM=xx . If they are just called, then no. Regards, Steve Thompson -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Howard Rifkind Sent: Wednesday, August 16, 2006 4:16 PM To: IBM-MAIN@BAMA.UA.EDU Subject: APF Question. Hello, I just link edited two members into an APF authorized library. Do I have to do anything further to make sure that the new members are used. Do some sort of refresh or somthing like that. Would F LLA, REFRESH (link list refresh)... Thanks. - Do you Yahoo!? Get on board. You're invited to try the new Yahoo! Mail Beta. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - Get your email and more, right on the new Yahoo.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question.
> -Original Message- > From: IBM Mainframe Discussion List On Behalf Of Howard Rifkind > > Hello, > > I just link edited two members into an APF authorized library. > > Do I have to do anything further to make sure that the new > members are used. > > Do some sort of refresh or somthing like that. > > Would F LLA, REFRESH (link list refresh)... Wouldn't hurt -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: APF Question.
It depends. If the APF libraries are in the LLA, then yes, the refresh is needed. If the APF libraries are NOT in LLA, or otherwise handled by the system (VLF), and you do not have a third party product (e.g. CA's PMO), then you should be done. Oh, one more thing. You need to LNKEDT with AC(1) IF the programs will be the target of PGM=xx . If they are just called, then no. Regards, Steve Thompson -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Howard Rifkind Sent: Wednesday, August 16, 2006 4:16 PM To: IBM-MAIN@BAMA.UA.EDU Subject: APF Question. Hello, I just link edited two members into an APF authorized library. Do I have to do anything further to make sure that the new members are used. Do some sort of refresh or somthing like that. Would F LLA, REFRESH (link list refresh)... Thanks. - Do you Yahoo!? Get on board. You're invited to try the new Yahoo! Mail Beta. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
APF Question.
Hello, I just link edited two members into an APF authorized library. Do I have to do anything further to make sure that the new members are used. Do some sort of refresh or somthing like that. Would F LLA, REFRESH (link list refresh)... Thanks. - Do you Yahoo!? Get on board. You're invited to try the new Yahoo! Mail Beta. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
