Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Meral Temel (Garanti Teknoloji)
You may check these docs from IBM resourcelink website... 
Using BCP/II API you can change weigths ,cap values enable disable softcap 
/hardcap etc and exchange data as well.
Also using SNMP  interfaces you can get high level of some kind of information 
not all but it is very easy to implement and usefull for getting alerts Try 
using SNMP if you want to only read but BCP/II will be better choose for your 
requests which includes both read and write in detail scope.

https://www-304.ibm.com/servers/resourcelink/lib03010.nsf/pagesByDocid/B09E422F170FFC9C85257075004BDE92?OpenDocument
https://www-304.ibm.com/servers/resourcelink/lib03010.nsf/pagesByDocid/12203E9295D4EF6E85257075004C9EC2?OpenDocument

Regards
Meral



-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Charles Mills
Sent: Wednesday, August 18, 2010 3:11 PM
To: IBM-MAIN@bama.ua.edu
Subject: [IBM-MAIN] API or visibility into PR/SM for Vendor-written programs?

I was asked this question by an associate who is extremely knowledgeable
relative to software virtualization but relatively unfamiliar with PR/SM
(and z/VM).

Is there an API or anything similar whereby a vendor-written program could
have visibility into a z box at the PR/SM level (other than CSRSI)? Could
"see" and potentially make configuration changes to "the whole box" as
opposed to a single LPAR? Can one write code that runs at the "box" level,
below the LPARs?

Charles Mills

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


This message and attachments are confidential and intended solely for the 
individual(s) stated in this message. If you received this message although you 
are not the addressee, you are responsible to keep the message confidential. 
The sender has no responsibility for the accuracy or correctness of the 
information in the message and its attachments. Our company shall have no 
liability for any changes or late receiving, loss of integrity and 
confidentiality, viruses and any damages caused in anyway to your computer 
system.  

Bu mesaj ve ekleri, mesajda gonderildigi belirtilen kisi/kisilere ozeldir ve 
gizlidir. Bu mesajin muhatabi olmamaniza ragmen tarafiniza ulasmis olmasi 
halinde mesaj iceriginin gizliligi ve bu gizlilik yukumlulugune uyulmasi 
zorunlulugu tarafiniz icin de soz konusudur. Mesaj ve eklerinde yer alan 
bilgilerin dogrulugu ve guncelligi konusunda gonderenin ya da sirketimizin 
herhangi bir sorumlulugu bulunmamaktadir. Sirketimiz mesajin ve bilgilerinin 
size degisiklige ugrayarak veya gec ulasmasindan, butunlugunun ve gizliliginin 
korunamamasindan, virus icermesinden ve bilgisayar sisteminize verebilecegi 
herhangi bir zarardan sorumlu tutulamaz.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Charles Mills
Thanks.

(Does anyone else find these IBM sign-on's to be inscrutable? When I go to
the links below it wants me to sign in. When I sign in it rejects my
credentials. When I click on "forgot my password" it says I am already
signed in.)

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Meral Temel (Garanti Teknoloji)
Sent: Wednesday, August 18, 2010 8:49 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: API or visibility into PR/SM for Vendor-written programs?

You may check these docs from IBM resourcelink website... 
Using BCP/II API you can change weigths ,cap values enable disable softcap
/hardcap etc and exchange data as well.
Also using SNMP  interfaces you can get high level of some kind of
information not all but it is very easy to implement and usefull for getting
alerts Try using SNMP if you want to only read but BCP/II will be better
choose for your requests which includes both read and write in detail scope.

https://www-304.ibm.com/servers/resourcelink/lib03010.nsf/pagesByDocid/B09E4
22F170FFC9C85257075004BDE92?OpenDocument
https://www-304.ibm.com/servers/resourcelink/lib03010.nsf/pagesByDocid/12203
E9295D4EF6E85257075004C9EC2?OpenDocument

Regards
Meral



-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Charles Mills
Sent: Wednesday, August 18, 2010 3:11 PM
To: IBM-MAIN@bama.ua.edu
Subject: [IBM-MAIN] API or visibility into PR/SM for Vendor-written
programs?

I was asked this question by an associate who is extremely knowledgeable
relative to software virtualization but relatively unfamiliar with PR/SM
(and z/VM).

Is there an API or anything similar whereby a vendor-written program could
have visibility into a z box at the PR/SM level (other than CSRSI)? Could
"see" and potentially make configuration changes to "the whole box" as
opposed to a single LPAR? Can one write code that runs at the "box" level,
below the LPARs?

Charles Mills

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


This message and attachments are confidential and intended solely for the
individual(s) stated in this message. If you received this message although
you are not the addressee, you are responsible to keep the message
confidential. The sender has no responsibility for the accuracy or
correctness of the information in the message and its attachments. Our
company shall have no liability for any changes or late receiving, loss of
integrity and confidentiality, viruses and any damages caused in anyway to
your computer system.  

Bu mesaj ve ekleri, mesajda gonderildigi belirtilen kisi/kisilere ozeldir ve
gizlidir. Bu mesajin muhatabi olmamaniza ragmen tarafiniza ulasmis olmasi
halinde mesaj iceriginin gizliligi ve bu gizlilik yukumlulugune uyulmasi
zorunlulugu tarafiniz icin de soz konusudur. Mesaj ve eklerinde yer alan
bilgilerin dogrulugu ve guncelligi konusunda gonderenin ya da sirketimizin
herhangi bir sorumlulugu bulunmamaktadir. Sirketimiz mesajin ve bilgilerinin
size degisiklige ugrayarak veya gec ulasmasindan, butunlugunun ve
gizliliginin korunamamasindan, virus icermesinden ve bilgisayar sisteminize
verebilecegi herhangi bir zarardan sorumlu tutulamaz.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Chase, John
> -Original Message-
> From: IBM Mainframe Discussion List On Behalf Of Charles Mills
> 
> Thanks.
> 
> (Does anyone else find these IBM sign-on's to be inscrutable? When I
go to
> the links below it wants me to sign in. When I sign in it rejects my
> credentials. When I click on "forgot my password" it says I am already
> signed in.)

"Left Hand, Left Hand, this is Right Hand; Come in, over...".

Doesn't make much sense to me, either.

-jc-

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Scott Rowe
It sounds to me like the ID you are using is not authorized for ResourceLink.

>>> Charles Mills  8/18/2010 8:54 AM >>>
Thanks.

(Does anyone else find these IBM sign-on's to be inscrutable? When I go to
the links below it wants me to sign in. When I sign in it rejects my
credentials. When I click on "forgot my password" it says I am already
signed in.)

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Meral Temel (Garanti Teknoloji)
Sent: Wednesday, August 18, 2010 8:49 AM
To: IBM-MAIN@bama.ua.edu 
Subject: Re: API or visibility into PR/SM for Vendor-written programs?

You may check these docs from IBM resourcelink website... 
Using BCP/II API you can change weigths ,cap values enable disable softcap
/hardcap etc and exchange data as well.
Also using SNMP  interfaces you can get high level of some kind of
information not all but it is very easy to implement and usefull for getting
alerts Try using SNMP if you want to only read but BCP/II will be better
choose for your requests which includes both read and write in detail scope.

https://www-304.ibm.com/servers/resourcelink/lib03010.nsf/pagesByDocid/B09E4 
22F170FFC9C85257075004BDE92?OpenDocument
https://www-304.ibm.com/servers/resourcelink/lib03010.nsf/pagesByDocid/12203 
E9295D4EF6E85257075004C9EC2?OpenDocument

Regards
Meral



-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Charles Mills
Sent: Wednesday, August 18, 2010 3:11 PM
To: IBM-MAIN@bama.ua.edu 
Subject: [IBM-MAIN] API or visibility into PR/SM for Vendor-written
programs?

I was asked this question by an associate who is extremely knowledgeable
relative to software virtualization but relatively unfamiliar with PR/SM
(and z/VM).

Is there an API or anything similar whereby a vendor-written program could
have visibility into a z box at the PR/SM level (other than CSRSI)? Could
"see" and potentially make configuration changes to "the whole box" as
opposed to a single LPAR? Can one write code that runs at the "box" level,
below the LPARs?

Charles Mills

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html 


This message and attachments are confidential and intended solely for the
individual(s) stated in this message. If you received this message although
you are not the addressee, you are responsible to keep the message
confidential. The sender has no responsibility for the accuracy or
correctness of the information in the message and its attachments. Our
company shall have no liability for any changes or late receiving, loss of
integrity and confidentiality, viruses and any damages caused in anyway to
your computer system.  

Bu mesaj ve ekleri, mesajda gonderildigi belirtilen kisi/kisilere ozeldir ve
gizlidir. Bu mesajin muhatabi olmamaniza ragmen tarafiniza ulasmis olmasi
halinde mesaj iceriginin gizliligi ve bu gizlilik yukumlulugune uyulmasi
zorunlulugu tarafiniz icin de soz konusudur. Mesaj ve eklerinde yer alan
bilgilerin dogrulugu ve guncelligi konusunda gonderenin ya da sirketimizin
herhangi bir sorumlulugu bulunmamaktadir. Sirketimiz mesajin ve bilgilerinin
size degisiklige ugrayarak veya gec ulasmasindan, butunlugunun ve
gizliliginin korunamamasindan, virus icermesinden ve bilgisayar sisteminize
verebilecegi herhangi bir zarardan sorumlu tutulamaz.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html 



CONFIDENTIALITY/EMAIL NOTICE: The material in this transmission contains 
confidential and privileged information intended only for the addressee.  If 
you are not the intended recipient, please be advised that you have received 
this material in error and that any forwarding, copying, printing, 
distribution, use or disclosure of the material is strictly prohibited.  If you 
have received this material in error, please (i) do not read it, (ii) reply to 
the sender that you received the message in error, and (iii) erase or destroy 
the material. Emails are not secure and can be intercepted, amended, lost or 
destroyed, or contain viruses. You are deemed to have accepted these risks if 
you communicate with us by email. Thank you.


--

Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Meral Temel (Garanti Teknoloji)
You may try from the starting point of link 
https://www-304.ibm.com/servers/resourcelink/svc03100.nsf?OpenDatabase

1- Sign in if you can  if not your IBM ID may not be authorized to use 
resourcelink .Check with your IBM support team
2- Choose library from menu options on the left hand side of web page.
3-Then choose z10 EC or whatever your CEC"s model is ...You should see all 
documents based on that model

The ones that I send as reading recommendation are the following books...I am 
not sure whether Java is available for older models.


Title Order number Download 

API for Java API-JAVA-08 API-JAVA-08.pdf (1.91MB)
Application Programming Interfaces SB10-7030-12 SB10-7030-12.pdf (1.1MB)

Hope it helps 
Regards
Meral

 
 



-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Charles Mills
Sent: Wednesday, August 18, 2010 3:55 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: [IBM-MAIN] API or visibility into PR/SM for Vendor-written 
programs?

Thanks.

(Does anyone else find these IBM sign-on's to be inscrutable? When I go to
the links below it wants me to sign in. When I sign in it rejects my
credentials. When I click on "forgot my password" it says I am already
signed in.)

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Meral Temel (Garanti Teknoloji)
Sent: Wednesday, August 18, 2010 8:49 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: API or visibility into PR/SM for Vendor-written programs?

You may check these docs from IBM resourcelink website... 
Using BCP/II API you can change weigths ,cap values enable disable softcap
/hardcap etc and exchange data as well.
Also using SNMP  interfaces you can get high level of some kind of
information not all but it is very easy to implement and usefull for getting
alerts Try using SNMP if you want to only read but BCP/II will be better
choose for your requests which includes both read and write in detail scope.

https://www-304.ibm.com/servers/resourcelink/lib03010.nsf/pagesByDocid/B09E4
22F170FFC9C85257075004BDE92?OpenDocument
https://www-304.ibm.com/servers/resourcelink/lib03010.nsf/pagesByDocid/12203
E9295D4EF6E85257075004C9EC2?OpenDocument

Regards
Meral



-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Charles Mills
Sent: Wednesday, August 18, 2010 3:11 PM
To: IBM-MAIN@bama.ua.edu
Subject: [IBM-MAIN] API or visibility into PR/SM for Vendor-written
programs?

I was asked this question by an associate who is extremely knowledgeable
relative to software virtualization but relatively unfamiliar with PR/SM
(and z/VM).

Is there an API or anything similar whereby a vendor-written program could
have visibility into a z box at the PR/SM level (other than CSRSI)? Could
"see" and potentially make configuration changes to "the whole box" as
opposed to a single LPAR? Can one write code that runs at the "box" level,
below the LPARs?

Charles Mills

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


This message and attachments are confidential and intended solely for the
individual(s) stated in this message. If you received this message although
you are not the addressee, you are responsible to keep the message
confidential. The sender has no responsibility for the accuracy or
correctness of the information in the message and its attachments. Our
company shall have no liability for any changes or late receiving, loss of
integrity and confidentiality, viruses and any damages caused in anyway to
your computer system.  

Bu mesaj ve ekleri, mesajda gonderildigi belirtilen kisi/kisilere ozeldir ve
gizlidir. Bu mesajin muhatabi olmamaniza ragmen tarafiniza ulasmis olmasi
halinde mesaj iceriginin gizliligi ve bu gizlilik yukumlulugune uyulmasi
zorunlulugu tarafiniz icin de soz konusudur. Mesaj ve eklerinde yer alan
bilgilerin dogrulugu ve guncelligi konusunda gonderenin ya da sirketimizin
herhangi bir sorumlulugu bulunmamaktadir. Sirketimiz mesajin ve bilgilerinin
size degisiklige ugrayarak veya gec ulasmasindan, butunlugunun ve
gizliliginin korunamamasindan, virus icermesinden ve bilgisayar sisteminize
verebilecegi herhangi bir zarardan sorumlu tutulamaz.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Sear

Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Thompson, Steve
-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Chase, John
Sent: Wednesday, August 18, 2010 8:12 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: API or visibility into PR/SM for Vendor-written programs?

> -Original Message-
> From: IBM Mainframe Discussion List On Behalf Of Charles Mills
> 
> Thanks.
> 
> (Does anyone else find these IBM sign-on's to be inscrutable? When I
go to
> the links below it wants me to sign in. When I sign in it rejects my
> credentials. When I click on "forgot my password" it says I am already
> signed in.)

"Left Hand, Left Hand, this is Right Hand; Come in, over...".

Doesn't make much sense to me, either.


I find this kind of thing happens when I am using FireFox and not
Internet Exploder.

Regards,
Steve Thompson

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Gibney, Dave
I had this awhile back. I needed to REMOVE ibm sites from my IE trusted
site list.

Dave Gibney
Information Technology Services
Washington State University


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf Of Chase, John
> Sent: Wednesday, August 18, 2010 6:12 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: API or visibility into PR/SM for Vendor-written programs?
> 
> > -Original Message-
> > From: IBM Mainframe Discussion List On Behalf Of Charles Mills
> >
> > Thanks.
> >
> > (Does anyone else find these IBM sign-on's to be inscrutable? When I
> go to
> > the links below it wants me to sign in. When I sign in it rejects my
> > credentials. When I click on "forgot my password" it says I am
> already
> > signed in.)
> 
> "Left Hand, Left Hand, this is Right Hand; Come in, over...".
> 
> Doesn't make much sense to me, either.
> 
> -jc-
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Rick Fochtman

---
Is there an API or anything similar whereby a vendor-written program 
could have visibility into a z box at the PR/SM level (other than 
CSRSI)? Could "see" and potentially make configuration changes to "the 
whole box" as opposed to a single LPAR? Can one write code that runs at 
the "box" level, below the LPARs?


I'm sure that it's possible, but the interfaces are quite likely to be 
proprietary and non-published.


Certainly not a good idea, since the whole shop could be very adversely 
affected in the event of a user specification or programming error.


That's one of those areas where you should "Look but never touch."

Rick

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Clark Morris
On 18 Aug 2010 14:22:00 -0700, in bit.listserv.ibm-main you wrote:

>---
>Is there an API or anything similar whereby a vendor-written program 
>could have visibility into a z box at the PR/SM level (other than 
>CSRSI)? Could "see" and potentially make configuration changes to "the 
>whole box" as opposed to a single LPAR? Can one write code that runs at 
>the "box" level, below the LPARs?
>
>I'm sure that it's possible, but the interfaces are quite likely to be 
>proprietary and non-published.

>From a security point of view I would hope that it would be impossible
for one LPAR to know about another LPAR except through the sysplex
mechanism and security package protected shared dasd.  I would be wary
of even read access.

Clark Morris


>
>Certainly not a good idea, since the whole shop could be very adversely 
>affected in the event of a user specification or programming error.
>
>That's one of those areas where you should "Look but never touch."
>
>Rick
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-18 Thread Meral Temel (Garanti Teknoloji)
For security ,you need to enable these functions.LPARs can read other LPARs 
configuration or do changes...It is needed for HD or to reset one LPAR from 
another LPARs SA code as an example

-Taken from pr/sm planning  guide...SB10-7153-00

Global performance data control authority 

This control limits the ability of a LP to view CP activity data for other LPs. 
LPs with control authority for global performance data can view CP utilization 
data and Input/Output Processor (IOP) busy data for all of the LPs in the 
configuration. Additionally, gathering of FICON channel measurements requires 
selection of this parameter. Note: Logical partitions that use HiperDispatch 
require global performance data authorization in order to properly utilize 
excess CPU resources in the configuration. With the exception of an LP that is 
a member of a WLM Cluster, an LP without control authority for the performance 
data can view only the CP utilization data for that LP. Use the 
Customize/Delete Activation Profiles task available from the CPC Operational 
Customization tasks list to open a reset or image profile to enable global 
performance data control for an LP. The Global performance data control 
selection is located on the Security page for the LP. Note: An LP running a 
leve!
 l of RMF that supports FICON requires control authority even if no FICON is 
installed. 

Cross-partition authority 
This control can limit the capability of the LP to issue certain control 
program instructions that affect other LPs. LPs with cross-partition authority 
can issue instructions to perform a system reset of another LP, deactivate any 
other LP, and provide support for the automatic reconfiguration facility.The 
automatic reconfiguration facility permits a backup LP to deactivate a primary 
LP if a problem is detected in the primary LP. The backup LP can then configure 
online, storage resources that become available when the primary LP is 
deactivated. See "CPCs with the Sysplex Failure Manager (SFM)" on page 3-20. 
Use the Customize/Delete Activation Profiles task available from the CPC 
Operational Customization tasks list to open a reset or image profile to enable 
cross-partition authority for an LP. The Cross partition authority selection is 
located on the Security page for the LP

Regards
Meral



-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Clark Morris
Sent: Thursday, August 19, 2010 1:54 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: [IBM-MAIN] API or visibility into PR/SM for Vendor-written 
programs?

On 18 Aug 2010 14:22:00 -0700, in bit.listserv.ibm-main you wrote:

>---
>Is there an API or anything similar whereby a vendor-written program 
>could have visibility into a z box at the PR/SM level (other than 
>CSRSI)? Could "see" and potentially make configuration changes to "the 
>whole box" as opposed to a single LPAR? Can one write code that runs at 
>the "box" level, below the LPARs?
>
>I'm sure that it's possible, but the interfaces are quite likely to be 
>proprietary and non-published.

>From a security point of view I would hope that it would be impossible
for one LPAR to know about another LPAR except through the sysplex
mechanism and security package protected shared dasd.  I would be wary
of even read access.

Clark Morris


>
>Certainly not a good idea, since the whole shop could be very adversely 
>affected in the event of a user specification or programming error.
>
>That's one of those areas where you should "Look but never touch."
>
>Rick
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


This message and attachments are confidential and intended solely for the 
individual(s) stated in this message. If you received this message although you 
are not the addressee, you are responsible to keep the message confidential. 
The sender has no responsibility for the accuracy or correctness of the 
information in the message and its attachments. Our company shall have no 
liability for any changes or late receiving, loss of integrity and 
confidentiality, viruses and any damages caused in anyway to your computer 
system.  

Bu mesaj ve ekleri, mesajda gonderildigi belirtilen kisi/kisilere ozeldir ve 
gizlidir. Bu mesajin muhatabi olmamaniza ragmen tarafiniza ulasmis olmasi 
halinde mesaj iceriginin gizliligi ve bu gizlilik yukumlulugune uyulmasi 
zorunlulugu tarafiniz icin de soz konusudur. Mesaj ve eklerinde yer alan 
bilgilerin dogrulugu ve guncelligi konusunda gonderenin ya da sirketimizin 
herhangi bir sorumlulugu bulunmamaktadir. Sirketimiz mesajin ve bilgilerinin 
size degisiklige ugrayarak veya ge

Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-19 Thread Charles Mills
> That's one of those areas where you should "Look but never touch."

FWIW, my associate who asked the question is a security expert with a vendor
of security management products for virtualized environments.

Thanks all.

Charles
-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Rick Fochtman
Sent: Wednesday, August 18, 2010 5:21 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: API or visibility into PR/SM for Vendor-written programs?

---
Is there an API or anything similar whereby a vendor-written program 
could have visibility into a z box at the PR/SM level (other than 
CSRSI)? Could "see" and potentially make configuration changes to "the 
whole box" as opposed to a single LPAR? Can one write code that runs at 
the "box" level, below the LPARs?

I'm sure that it's possible, but the interfaces are quite likely to be 
proprietary and non-published.

Certainly not a good idea, since the whole shop could be very adversely 
affected in the event of a user specification or programming error.

That's one of those areas where you should "Look but never touch."

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-19 Thread Staller, Allan

See "CPCs with the Sysplex Failure Manager (SFM)" on page 3-20. Use the
Customize/Delete Activation Profiles task available from the CPC
Operational Customization tasks list to open a reset or image profile to
enable cross-partition authority for an LP. The Cross partition
authority selection is located on the Security page for the LP



I know of no way LPAR1 can look observe or manipulate the contents of
LPAR2 via this, or any other interface. This allows reconfiguration of
the failing partition's resources, not observation or manipulation of
the data with that partition.

HTH,

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: API or visibility into PR/SM for Vendor-written programs?

2010-08-23 Thread Alan Altmark
On Wed, 18 Aug 2010 08:10:53 -0400, Charles Mills  wrote:

>Is there an API or anything similar whereby a vendor-written program could
>have visibility into a z box at the PR/SM level (other than CSRSI)? Could
>"see" and potentially make configuration changes to "the whole box" as
>opposed to a single LPAR? Can one write code that runs at the "box" level,
>below the LPARs?

The ISV interface to the machine is defined in System z: Application
Programming Intefaces, SB10-7030, available from ResourceLink.

Nothing runs at the box level or below the LPARs.  The interfaces you use
interact with the objects defined and managed by the Console application
within the HMC.

You cannot add to or delete from the architecture of the machine.

Alan Altmark
z/VM Development
IBM

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html