Missing RACF exit
* Cross posted to RACF-L * Hello I upgraded one of our systems from 1.7 to 1.9 at the weekend, and in so doing omitted one of the RACF exits, ICHRIX01. The manual confirms my suspicion that exits can only be added with an IPL, which isn't possible until the weekend. Does anyone have any code that can dynamically add an exit ? I spotted a program in an old Xephon mag called RACFXITS, does anyone have experience of using that? ( and can I download it instead of cutting/pasting of it ). Thanks in advance Paul Beesley ___ Atos Origin and Atos Consulting are trading names used by the Atos Origin group. The following trading entities are registered in England and Wales: Atos Origin IT Services UK Limited (registered number 01245534) and Atos Consulting Limited (registered number 04312380). The registered office for each is at 4 Triton Square, Regents Place, London, NW1 3HG.The VAT No. for each is: GB232327983 This e-mail and the documents attached are confidential and intended solely for the addressee, and may contain confidential or privileged information. If you receive this e-mail in error, you are not authorised to copy, disclose, use or retain it. Please notify the sender immediately and delete this email from your systems. As emails may be intercepted, amended or lost, they are not secure. Atos Origin therefore can accept no liability for any errors or their content. Although Atos Origin endeavours to maintain a virus-free network, we do not warrant that this transmission is virus-free and can accept no liability for any damages resulting from any virus transmitted. The risks are deemed to be accepted by everyone who communicates with Atos Origin by email. ___ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
AW: Missing RACF exit
Hi Paul I can remember (re)loading the exit and then zapping the RCVT with the new address using Omegamon or a similar tool. But I did it only in our test environment, so be VERY carefull. And the exit was already active, so I'm not sure, if this really works in your case. Regards, Walter -Ursprüngliche Nachricht- Von: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] Im Auftrag von Beesley, Paul Gesendet: Montag, 7. Dezember 2009 10:47 An: IBM-MAIN@bama.ua.edu Betreff: Missing RACF exit * Cross posted to RACF-L * Hello I upgraded one of our systems from 1.7 to 1.9 at the weekend, and in so doing omitted one of the RACF exits, ICHRIX01. The manual confirms my suspicion that exits can only be added with an IPL, which isn't possible until the weekend. Does anyone have any code that can dynamically add an exit ? I spotted a program in an old Xephon mag called RACFXITS, does anyone have experience of using that? ( and can I download it instead of cutting/pasting of it ). Thanks in advance Paul Beesley ___ Atos Origin and Atos Consulting are trading names used by the Atos Origin group. The following trading entities are registered in England and Wales: Atos Origin IT Services UK Limited (registered number 01245534) and Atos Consulting Limited (registered number 04312380). The registered office for each is at 4 Triton Square, Regents Place, London, NW1 3HG.The VAT No. for each is: GB232327983 This e-mail and the documents attached are confidential and intended solely for the addressee, and may contain confidential or privileged information. If you receive this e-mail in error, you are not authorised to copy, disclose, use or retain it. Please notify the sender immediately and delete this email from your systems. As emails may be intercepted, amended or lost, they are not secure. Atos Origin therefore can accept no liability for any errors or their content. Although Atos Origin endeavours to maintain a virus-free network, we do not warrant that this transmission is virus-free and can accept no liability for any damages resulting from any virus transmitted. The risks are deemed to be accepted by everyone who communicates with Atos Origin by email. ___ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Missing RACF exit
Paul, As far as I am aware, if the exit pointer in the RCVT is non-zero then RACF will invoke the exit. About 15 years ago I knocked up a quick+dirty program to dynamically add a RACF exit and it seemed to work OK. I have not seen RACFXITS - however the logic I used was something along the lines of : (o) Determine length of RACF exit (o) Grab that amount of E-CSA and assign ownership to the system (ie I want it to persist) (o) Directed load of the exit module into the E-CSA chunk (o) Store the E-CSA address into the RCVT (remembering to indicate AMODE in bit0) These days you have things like dynamic LPA - so you might be able to avoid most of the heavy lifting and just zap in the new exit address. Rob Scott Developer Rocket Software 275 Grove Street * Newton, MA 02466-2272 * USA Tel: +1.617.614.2305 Email: rsc...@rs.com Web: www.rocketsoftware.com -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Beesley, Paul Sent: 07 December 2009 09:47 To: IBM-MAIN@bama.ua.edu Subject: Missing RACF exit * Cross posted to RACF-L * Hello I upgraded one of our systems from 1.7 to 1.9 at the weekend, and in so doing omitted one of the RACF exits, ICHRIX01. The manual confirms my suspicion that exits can only be added with an IPL, which isn't possible until the weekend. Does anyone have any code that can dynamically add an exit ? I spotted a program in an old Xephon mag called RACFXITS, does anyone have experience of using that? ( and can I download it instead of cutting/pasting of it ). Thanks in advance Paul Beesley ___ Atos Origin and Atos Consulting are trading names used by the Atos Origin group. The following trading entities are registered in England and Wales: Atos Origin IT Services UK Limited (registered number 01245534) and Atos Consulting Limited (registered number 04312380). The registered office for each is at 4 Triton Square, Regents Place, London, NW1 3HG.The VAT No. for each is: GB232327983 This e-mail and the documents attached are confidential and intended solely for the addressee, and may contain confidential or privileged information. If you receive this e-mail in error, you are not authorised to copy, disclose, use or retain it. Please notify the sender immediately and delete this email from your systems. As emails may be intercepted, amended or lost, they are not secure. Atos Origin therefore can accept no liability for any errors or their content. Although Atos Origin endeavours to maintain a virus-free network, we do not warrant that this transmission is virus-free and can accept no liability for any damages resulting from any virus transmitted. The risks are deemed to be accepted by everyone who communicates with Atos Origin by email. ___ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Missing RACF exit
Thanks Rob. Turned out to be fairly easy. Dynamically loaded the module into MLPA, wrote a quick program to zap the address into the correct slot in the RCVT Thanks for your help Regards Paul -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Rob Scott Sent: 07 December 2009 10:12 To: IBM-MAIN@bama.ua.edu Subject: Re: Missing RACF exit Paul, As far as I am aware, if the exit pointer in the RCVT is non-zero then RACF will invoke the exit. About 15 years ago I knocked up a quick+dirty program to dynamically add a RACF exit and it seemed to work OK. I have not seen RACFXITS - however the logic I used was something along the lines of : (o) Determine length of RACF exit (o) Grab that amount of E-CSA and assign ownership to the system (ie I want it to persist) (o) Directed load of the exit module into the E-CSA chunk (o) Store the E-CSA address into the RCVT (remembering to indicate AMODE in bit0) These days you have things like dynamic LPA - so you might be able to avoid most of the heavy lifting and just zap in the new exit address. Rob Scott Developer Rocket Software 275 Grove Street * Newton, MA 02466-2272 * USA Tel: +1.617.614.2305 Email: rsc...@rs.com Web: www.rocketsoftware.com - ___ Atos Origin and Atos Consulting are trading names used by the Atos Origin group. The following trading entities are registered in England and Wales: Atos Origin IT Services UK Limited (registered number 01245534) and Atos Consulting Limited (registered number 04312380). The registered office for each is at 4 Triton Square, Regents Place, London, NW1 3HG.The VAT No. for each is: GB232327983 This e-mail and the documents attached are confidential and intended solely for the addressee, and may contain confidential or privileged information. If you receive this e-mail in error, you are not authorised to copy, disclose, use or retain it. Please notify the sender immediately and delete this email from your systems. As emails may be intercepted, amended or lost, they are not secure. Atos Origin therefore can accept no liability for any errors or their content. Although Atos Origin endeavours to maintain a virus-free network, we do not warrant that this transmission is virus-free and can accept no liability for any damages resulting from any virus transmitted. The risks are deemed to be accepted by everyone who communicates with Atos Origin by email. ___ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
RES: Missing RACF exit
You can try another approach by specifying CSVDYNEX interface to call a dynamic ICHRIX01 exit. Of course you will need an IPL, but after that the dynamic exit could be activated/deactivated/changed in flight. You have to create a static ICHRIX01 exit, loaded at IPL time, which can have a logic like this : Query DYN.ICHRIX01 IF NOT Defined OR Only Defined IMPLICIT Then DO Define DYN.ICHRIX01 END CALL DYN.ICHRIX01 IF Exit Module is ACTIVE Then DO EXIT MODULE executes and Returns END Additionally you have to define it in SYS1.PARMLIB : EXIT ADD EXITNAME(DYN.ICHRIX01) MODNAME(DYNRIX01) The DYNRIX01 will have the logic that normally would be coded in ICHRIX01, and can be located in linklist. Atenciosamente / Regards / Saludos Ituriel do Nascimento Neto Banco Bradesco S/A 4254 - DPCD Engenharia de Software Sistemas Operacionais Mainframes Tel: +55 11 4197-2021 R: 22021 Fax: +55 11 4197-2814 |-Mensagem original- |De: IBM Mainframe Discussion List |[mailto:ibm-m...@bama.ua.edu] Em nome de Beesley, Paul |Enviada em: segunda-feira, 7 de dezembro de 2009 11:06 |Para: IBM-MAIN@bama.ua.edu |Assunto: Re: Missing RACF exit | |Thanks Rob. |Turned out to be fairly easy. Dynamically loaded the module |into MLPA, wrote a quick program to zap the address into the |correct slot in the RCVT | |Thanks for your help | | |Regards |Paul | |-Original Message- |From: IBM Mainframe Discussion List |[mailto:ibm-m...@bama.ua.edu] On Behalf Of Rob Scott |Sent: 07 December 2009 10:12 |To: IBM-MAIN@bama.ua.edu |Subject: Re: Missing RACF exit | |Paul, | |As far as I am aware, if the exit pointer in the RCVT is |non-zero then RACF will invoke the exit. About 15 years ago I |knocked up a quick+dirty program to dynamically add a RACF |exit and it seemed to work OK. | |I have not seen RACFXITS - however the logic I used was |something along the lines of : | |(o) Determine length of RACF exit |(o) Grab that amount of E-CSA and assign ownership to the |system (ie I want it to persist) |(o) Directed load of the exit module into the E-CSA chunk |(o) Store the E-CSA address into the RCVT (remembering to |indicate AMODE |in bit0) | |These days you have things like dynamic LPA - so you might be |able to avoid most of the heavy lifting and just zap in the |new exit address. | |Rob Scott |Developer |Rocket Software |275 Grove Street * Newton, MA 02466-2272 * USA |Tel: +1.617.614.2305 |Email: rsc...@rs.com |Web: www.rocketsoftware.com | |- | |___ | |Atos Origin and Atos Consulting are trading names used by the |Atos Origin group. The following trading entities are |registered in England and Wales: Atos Origin IT Services UK |Limited (registered number 01245534) and Atos Consulting |Limited (registered number 04312380). The registered office |for each is at 4 Triton Square, Regents Place, London, NW1 |3HG.The VAT No. for each is: GB232327983 | |This e-mail and the documents attached are confidential and |intended solely for the addressee, and may contain |confidential or privileged information. If you receive this |e-mail in error, you are not authorised to copy, disclose, use |or retain it. Please notify the sender immediately and delete |this email from your systems. As emails may be intercepted, |amended or lost, they are not secure. Atos Origin therefore |can accept no liability for any errors or their content. |Although Atos Origin endeavours to maintain a virus-free |network, we do not warrant that this transmission is |virus-free and can accept no liability for any damages |resulting from any virus transmitted. The risks are deemed |to be accepted by everyone who communicates with Atos Origin by email. |___ | |-- |For IBM-MAIN subscribe / signoff / archive access |instructions, send email to lists...@bama.ua.edu with the |message: GET IBM-MAIN INFO Search the archives at |http://bama.ua.edu/archives/ibm-main.html | HTMLfont face=Tahoma size=1HRAVISO LEGAL brEsta mensagem é destinada exclusivamente para a(s) pessoa(s) a quem é dirigida, podendo conter informação confidencial e/ou legalmente privilegiada. Se você não for destinatário desta mensagem, desde já fica notificado de abster-se a divulgar, copiar, distribuir, examinar ou, de qualquer forma, utilizar a informação contida nesta mensagem, por ser ilegal. Caso você tenha recebido esta mensagem por engano, pedimos que nos retorne este E-Mail, promovendo, desde logo, a eliminação do seu conteúdo em sua base de dados, registros ou sistema de controle
Re: Missing RACF exit
On Mon, 7 Dec 2009 13:05:43 + Beesley, Paul paul.bees...@atosorigin.com wrote: :Thanks Rob. :Turned out to be fairly easy. Dynamically loaded the module into MLPA, :wrote a quick program to zap the address into the correct slot in the :RCVT I will bet that there will be folk who would put you down for being a cowboy, but this is a quite simple way of fixing the problem. -- Binyamin Dissen bdis...@dissensoftware.com http://www.dissensoftware.com Director, Dissen Software, Bar Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Missing RACF exit
2009/12/7 Beesley, Paul paul.bees...@atosorigin.com: Thanks Rob. Turned out to be fairly easy. Dynamically loaded the module into MLPA, wrote a quick program to zap the address into the correct slot in the RCVT. For a one-off [semi-]emergency situation, this should be fine. For anything longer term, two things to watch out for are: RACF's DSMON, and several third party tools will object when they find your dynamically banged-in address. If you have auditors who monitor this kind of thing, then you may have some 'splainin to do. For our products the doc explains this in what we hope is a transparent manor, and provides the information needed to be sure that a rogue exit has not been installed. If you have any other products that also dynamically add these static exits, you need to be sure they all play nicely. In particular, each needs to be able to add and remove itself in a safe way that does not depend on starting the products in a particular order.Compare and Swap is merely the beginning. In our travels we have only once encountered a truly difficult third (fourth?) party vendor, and in that case the customer did have to start and stop things in a fixed order. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
