Re: Propably I'm crazy not the IEBGENER

[Miklos Szigetvari]

Hi

OA39769 and UA65724 PTF fixed the problem .
In this exceptional case ,the IEBGENER was  crazy.

On 23.10.2012 21:42, Jim Mulder wrote:

We got the SYSMDUMPs from customers often via SPOOL, so we had a job

to

cut out the first character.
The job has worked for several year, now I got a dataset full with

x'00'

//STEP1EXEC PGM=IEBGENER
//SYSPRINT DD SYSOUT=A
//SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
//SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
//SYSINDD *
  GENERATE MAXFLDS=1
  RECORD FIELD=(4160,2,,1)

The input has LRECL=4161 output 4160,

OA38949 IEBGENER ADDS LINE OF NULLS IN OUTPUT DATASET

OA39769 AFTER APPLYING PTF FOR APAR OA37216 IEBGENER
 INSERTING NULL LINEWHEN USING VBS dataset

Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OPENLDAP replacing mainframe security?

[John McKown]

Sounds like upper IT management at my shop. I can do *anything* so long as
it doesn't cost hard dollars. And we are minimizing software & hardware
costs, even if it causes problems later. Education is not the answer. I
will avoid specifying what they really need.
On Oct 23, 2012 8:45 PM, "Rob Schramm"  wrote:

> Then give CA the boot and get RACF.  There are people that can help you
> convert.  IBM will be more than happy to add it.
>
> If you want to do the conversion yourself, there is a Redbook.
>
> If CA won't work on the contract $$$, then show them the door.  CA is
> either a strategic partner.. or not.  I wouldn't put up with it.  Of course
> if this is just the fact that the software isn't free... Educate the
> manager.
>
> Rob Schramm
> On Oct 23, 2012 8:10 PM, "Dave McHenry"  wrote:
>
> > The "problem" being "solved" is twofold
> > 1. Cost of CA TSS
> > 2. Desire to eliminate CA.
> >
> > On Tue, Oct 23, 2012 at 4:52 PM, Tony Harminc  wrote:
> >
> > > On 23 October 2012 07:39, Dave McHenry  wrote:
> > > > A manager of ours read a link that claims OPENLDAP could be used to
> > > replace
> > > > our current mainframe security. Everyone I've asked about this laughs
> > and
> > > > says impossible. Is it impossible?
> > >
> > > I'm assuming you mean running OpenLDAP on some other platform, rather
> > > than on z/OS. If you mean running it on z/OS, what's the point -
> > > saving the cost of RACF? Regardless, many of my points below apply to
> > > this case too.
> > >
> > > It's not impossible, but it's not ready for prime time for several
> > reasons.
> > >
> > > First, there is no off the shelf implementation. You'd need something
> > > at the SAF level that would capture all SAF requests, translate them
> > > into appropriate LDAP requests, direct them to the LDAP server,
> > > retrieve the answers, translate them into the expected SAF results,
> > > and return them to the SAF caller. Maybe some ISV has already done
> > > this, and who knows - maybe IBM will announce it one day. I'm not
> > > aware that either has happened. So probably you are on your own here.
> > >
> > > Second, there are SAF calls that have no LDAP equivalent, or map only
> > > in an ugly fashion into LDAP concepts. These may be in use by IBM
> > > code, by your own applications, or by ISV code. And there are RACF
> > > interfaces that are not SAF.
> > >
> > > Third, there is the performance and concurrency issue. Are you willing
> > > to have your production logons and auth checks subject to network
> > > delays, server failures, and so on? Well, sure, you can beef up the
> > > LDAP server infrastructure, add transparent failover and such, isolate
> > > the network so it's fast, etc. etc. But will it reliably support the
> > > hundreds or thousands of SAF calls per second that are common in a big
> > > production environment?
> > >
> > > Fourth, there is a chicken and egg issue: RACF (or whichever of its
> > > two competitors you use) generally starts before TCP/IP, and TCP/IP
> > > configuration depends to some degree on the result of SAF calls. Well,
> > > the world is full of bootstrapping problems that get solved one way or
> > > another, but it does have to be solved.
> > >
> > > It sounds as though your manager thinks there is an off the shelf,
> > > drop-in solution (what was the problem being solved, btw?), and I
> > > think there's virtually no chance of that.
> > >
> > > Tony H.
> > >
> > > --
> > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> > >
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OPENLDAP replacing mainframe security?

[Rob Schramm]

Then give CA the boot and get RACF.  There are people that can help you
convert.  IBM will be more than happy to add it.

If you want to do the conversion yourself, there is a Redbook.

If CA won't work on the contract $$$, then show them the door.  CA is
either a strategic partner.. or not.  I wouldn't put up with it.  Of course
if this is just the fact that the software isn't free... Educate the
manager.

Rob Schramm
On Oct 23, 2012 8:10 PM, "Dave McHenry"  wrote:

> The "problem" being "solved" is twofold
> 1. Cost of CA TSS
> 2. Desire to eliminate CA.
>
> On Tue, Oct 23, 2012 at 4:52 PM, Tony Harminc  wrote:
>
> > On 23 October 2012 07:39, Dave McHenry  wrote:
> > > A manager of ours read a link that claims OPENLDAP could be used to
> > replace
> > > our current mainframe security. Everyone I've asked about this laughs
> and
> > > says impossible. Is it impossible?
> >
> > I'm assuming you mean running OpenLDAP on some other platform, rather
> > than on z/OS. If you mean running it on z/OS, what's the point -
> > saving the cost of RACF? Regardless, many of my points below apply to
> > this case too.
> >
> > It's not impossible, but it's not ready for prime time for several
> reasons.
> >
> > First, there is no off the shelf implementation. You'd need something
> > at the SAF level that would capture all SAF requests, translate them
> > into appropriate LDAP requests, direct them to the LDAP server,
> > retrieve the answers, translate them into the expected SAF results,
> > and return them to the SAF caller. Maybe some ISV has already done
> > this, and who knows - maybe IBM will announce it one day. I'm not
> > aware that either has happened. So probably you are on your own here.
> >
> > Second, there are SAF calls that have no LDAP equivalent, or map only
> > in an ugly fashion into LDAP concepts. These may be in use by IBM
> > code, by your own applications, or by ISV code. And there are RACF
> > interfaces that are not SAF.
> >
> > Third, there is the performance and concurrency issue. Are you willing
> > to have your production logons and auth checks subject to network
> > delays, server failures, and so on? Well, sure, you can beef up the
> > LDAP server infrastructure, add transparent failover and such, isolate
> > the network so it's fast, etc. etc. But will it reliably support the
> > hundreds or thousands of SAF calls per second that are common in a big
> > production environment?
> >
> > Fourth, there is a chicken and egg issue: RACF (or whichever of its
> > two competitors you use) generally starts before TCP/IP, and TCP/IP
> > configuration depends to some degree on the result of SAF calls. Well,
> > the world is full of bootstrapping problems that get solved one way or
> > another, but it does have to be solved.
> >
> > It sounds as though your manager thinks there is an off the shelf,
> > drop-in solution (what was the problem being solved, btw?), and I
> > think there's virtually no chance of that.
> >
> > Tony H.
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OPENLDAP replacing mainframe security?

[Dave McHenry]

The "problem" being "solved" is twofold
1. Cost of CA TSS
2. Desire to eliminate CA.

On Tue, Oct 23, 2012 at 4:52 PM, Tony Harminc  wrote:

> On 23 October 2012 07:39, Dave McHenry  wrote:
> > A manager of ours read a link that claims OPENLDAP could be used to
> replace
> > our current mainframe security. Everyone I've asked about this laughs and
> > says impossible. Is it impossible?
>
> I'm assuming you mean running OpenLDAP on some other platform, rather
> than on z/OS. If you mean running it on z/OS, what's the point -
> saving the cost of RACF? Regardless, many of my points below apply to
> this case too.
>
> It's not impossible, but it's not ready for prime time for several reasons.
>
> First, there is no off the shelf implementation. You'd need something
> at the SAF level that would capture all SAF requests, translate them
> into appropriate LDAP requests, direct them to the LDAP server,
> retrieve the answers, translate them into the expected SAF results,
> and return them to the SAF caller. Maybe some ISV has already done
> this, and who knows - maybe IBM will announce it one day. I'm not
> aware that either has happened. So probably you are on your own here.
>
> Second, there are SAF calls that have no LDAP equivalent, or map only
> in an ugly fashion into LDAP concepts. These may be in use by IBM
> code, by your own applications, or by ISV code. And there are RACF
> interfaces that are not SAF.
>
> Third, there is the performance and concurrency issue. Are you willing
> to have your production logons and auth checks subject to network
> delays, server failures, and so on? Well, sure, you can beef up the
> LDAP server infrastructure, add transparent failover and such, isolate
> the network so it's fast, etc. etc. But will it reliably support the
> hundreds or thousands of SAF calls per second that are common in a big
> production environment?
>
> Fourth, there is a chicken and egg issue: RACF (or whichever of its
> two competitors you use) generally starts before TCP/IP, and TCP/IP
> configuration depends to some degree on the result of SAF calls. Well,
> the world is full of bootstrapping problems that get solved one way or
> another, but it does have to be solved.
>
> It sounds as though your manager thinks there is an off the shelf,
> drop-in solution (what was the problem being solved, btw?), and I
> think there's virtually no chance of that.
>
> Tony H.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Book Enquiry

[Shmuel Metz (Seymour J.)]

In <0461273688451840.wa.m42tomibmmainyahoo@listserv.ua.edu>, on
10/23/2012
   at 07:56 AM, Tom Marchant  said:

>Hmmm   If so, I don't see the errors.  Perhaps it has been
>corrected.  This is the -6 edition of the book, published in August,
>1970.  I do see  where it has, "The Pack instruction does not check
>zones, except in  the rightmost byte..."  It doesn't check the
>rightmost zone, but it does  move it.  Is that what you mean?

It may not be the student text I'm thinking of, although the date is
in the right era. The one that I'm thinking of was around for several
years and "simplified" the explanation in PoOps by claiming that the
instructions only operated on decimal data. That made it hard for them
to understand the code for translating between binary and hex.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OT: interesting/neat text formatting processor

[Paul Gilmartin]

On Tue, 23 Oct 2012 10:49:31 -0500, McKown, John wrote:

>It's called "Markdown". It is interesting/neat because it uses "plain text" 
>formatting, such as we often use in email as its source and can reformat that 
>into HTML or XHTML.
>
>http://daringfireball.net/projects/markdown/
>
>I think it is interesting because I like the idea of using text which is 
>readable "as is", such as in ISPF edit or browse, and being able to use that 
>to create HTML for web pages. I got a pointer to it from "github", which is 
>something else that I'm looking at the possibility of using for something. But 
>I'm unsure of this other use, so I'm still mulling it over in my mind.
> 
You do very much of this and you wind up with an abomination like
"text/plain;format=flowed".  I don't want processors that format
my UNIX paths in italics because they see solidi; that see LRECL=6000
and assume it's a Q-P character entity; etc.  The assumption that some
unlikely character sequence is intended as markup, not literal, is too
often wrong.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SARBCH - PRINT all SEQ's of a GEN= for jobs

[George, William@FTB]

Yes, it does just toss it out as an error and keeps going. And I've
considered this and I may have to resort to it.  It is just that the
SYSIN for my process already is darned huge and this would enlarge it
tenfold if I did up to 10 SEQ for each... but... I may just have to.
Thanks, good suggestion. 


-Original Message-
From: Robert A. Rosenberg [mailto:hal9...@panix.com] 
Sent: Tuesday, October 23, 2012 2:34 PM
To: IBM Mainframe Discussion List
Cc: George, William@FTB
Subject: Re: SARBCH - PRINT all SEQ's of a GEN= for jobs

At 13:01 -0700 on 10/23/2012, George, William@FTB wrote about SARBCH
- PRINT all SEQ's of a GEN= for jobs:

>I do know a LIST on the job with GEN=1000 and no SEQ will list each 
>time it ran within a GEN with their sequence numbers. With this info I 
>could construct another SARBCH job with 3 individual PRINT commands, 
>one for each SEQ number. However,  due to how the process is setup, is 
>all done in REXX, it would add a tremendous amount of overhead to LIST 
>each job first, read in the results, then construct another SARBCH from

>the LIST results.  There are about 70 jobs I have to extract SAR 
>reports from and doing a single PRINT (or LOAD) would be FAR more
efficient.
>
>
>
>Any insights?

What happens if you ask for seq=4 when there are only 3 versions? If it
just tosses an error message and goes to the next commend, why not just
submit 100 commands asking for seq=1 to seq=100. Once it has processed
all the existent sequences, it will just ignore the requests for the
non-existent ones.

__
CONFIDENTIALITY NOTICE: This email from the State of California is for the sole 
use of the intended recipient and may contain confidential and privileged 
information. Any unauthorized review or use, including disclosure or 
distribution, is prohibited. If you are not the intended recipient, please 
contact the sender and destroy all copies of this email.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SARBCH - PRINT all SEQ's of a GEN= for jobs

[Robert A. Rosenberg]

At 13:01 -0700 on 10/23/2012, George, William@FTB wrote about SARBCH 
- PRINT all SEQ's of a GEN= for jobs:



I do know a LIST on the job with GEN=1000 and no SEQ will list each time
it ran within a GEN with their sequence numbers. With this info I could
construct another SARBCH job with 3 individual PRINT commands, one for
each SEQ number. However,  due to how the process is setup, is all done
in REXX, it would add a tremendous amount of overhead to LIST each job
first, read in the results, then construct another SARBCH from the LIST
results.  There are about 70 jobs I have to extract SAR reports from and
doing a single PRINT (or LOAD) would be FAR more efficient.



Any insights?


What happens if you ask for seq=4 when there are only 3 versions? If 
it just tosses an error message and goes to the next commend, why not 
just submit 100 commands asking for seq=1 to seq=100. Once it has 
processed all the existent sequences, it will just ignore the 
requests for the non-existent ones.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OPENLDAP replacing mainframe security?

[Tony Harminc]

On 23 October 2012 07:39, Dave McHenry  wrote:
> A manager of ours read a link that claims OPENLDAP could be used to replace
> our current mainframe security. Everyone I've asked about this laughs and
> says impossible. Is it impossible?

I'm assuming you mean running OpenLDAP on some other platform, rather
than on z/OS. If you mean running it on z/OS, what's the point -
saving the cost of RACF? Regardless, many of my points below apply to
this case too.

It's not impossible, but it's not ready for prime time for several reasons.

First, there is no off the shelf implementation. You'd need something
at the SAF level that would capture all SAF requests, translate them
into appropriate LDAP requests, direct them to the LDAP server,
retrieve the answers, translate them into the expected SAF results,
and return them to the SAF caller. Maybe some ISV has already done
this, and who knows - maybe IBM will announce it one day. I'm not
aware that either has happened. So probably you are on your own here.

Second, there are SAF calls that have no LDAP equivalent, or map only
in an ugly fashion into LDAP concepts. These may be in use by IBM
code, by your own applications, or by ISV code. And there are RACF
interfaces that are not SAF.

Third, there is the performance and concurrency issue. Are you willing
to have your production logons and auth checks subject to network
delays, server failures, and so on? Well, sure, you can beef up the
LDAP server infrastructure, add transparent failover and such, isolate
the network so it's fast, etc. etc. But will it reliably support the
hundreds or thousands of SAF calls per second that are common in a big
production environment?

Fourth, there is a chicken and egg issue: RACF (or whichever of its
two competitors you use) generally starts before TCP/IP, and TCP/IP
configuration depends to some degree on the result of SAF calls. Well,
the world is full of bootstrapping problems that get solved one way or
another, but it does have to be solved.

It sounds as though your manager thinks there is an off the shelf,
drop-in solution (what was the problem being solved, btw?), and I
think there's virtually no chance of that.

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[retired mainframer]

Since your output dataset is marked share, did anyone else have it open
during execution?

:>: -Original Message-
:>: From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
:>: Behalf Of Miklos Szigetvari
:>: Sent: Tuesday, October 23, 2012 10:27 AM
:>: To: IBM-MAIN@LISTSERV.UA.EDU
:>: Subject: Propably I'm crazy not the IEBGENER
:>:
:>: Hi
:>:
:>: We got the SYSMDUMPs from customers often via SPOOL, so we had a job to
:>: cut out the first character.
:>: The job has worked for several year, now I got a dataset full with x'00'
:>:
:>: //STEP1EXEC PGM=IEBGENER
:>: //SYSPRINT DD SYSOUT=A
:>: //SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
:>: //SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
:>: //SYSINDD *
:>:  GENERATE MAXFLDS=1
:>:  RECORD FIELD=(4160,2,,1)
:>:
:>: The input has LRECL=4161 output 4160,

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OT: interesting/neat text formatting processor

[Rob Schramm]

Perhaps, but wiki's and various wiki markdowns go back a few more years...
into the late 90's.

I am a bit surprised that the author didn't base his work on one of the
various wiki markups.  Creole was/is an attempt to standardize the wiki
markup... thus making it easier to transfer pages / content to other wikis.

Rob Schramm
Senior Systems Consultant
Imperium Group



On Tue, Oct 23, 2012 at 1:08 PM, Bill Godfrey  wrote:

> It looks like Markdown predates wikicreole. The files in the zip archive
> for Markdown are dated 2004. Wikicreole seems to be from 2007.
>
> On Tue, 23 Oct 2012 12:46:48 -0400, Rob Schramm wrote:
>
> >The creator might have taken a look at wikicreole before creating
> something
> >new.  They have already been thru the struggle to create a simple way to
> >text markup a doc for conversion by the wiki.
> >
> >http://www.wikicreole.org/wiki/Creole1.0
> >
> >But it is the same concept that a lot of wiki's use.
> >
> >On Tue, Oct 23, 2012 at 11:49 AM, John McKown wrote:
> >
> >> It's called "Markdown". It is interesting/neat because it uses "plain
> >> text" formatting, such as we often use in email as its source and can
> >> reformat that into HTML or XHTML.
> >>
> >> http://daringfireball.net/projects/markdown/
> >>
> >> I think it is interesting because I like the idea of using text which is
> >> readable "as is", such as in ISPF edit or browse, and being able to use
> >> that to create HTML for web pages. I got a pointer to it from "github",
> >> which is something else that I'm looking at the possibility of using for
> >> something. But I'm unsure of this other use, so I'm still mulling it
> over
> >> in my mind.
> >>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SARBCH - PRINT all SEQ's of a GEN= for jobs

[George, William@FTB]

Is there a means via a single SARBCH command to print all SEQs of a GEN=
for a job.  (that was hard to put words to make sense ;-)  )

That is, if a job executed multiple times during a batch cycle and each
time it was archived to SAR it received the same GEN= number each would
receive a sequential sequence number. 

JOBNAME  GEN=1000 SEQ=1 

JOBNAME  GEN=1000 SEQ=2

JOBNAME  GEN=1000 SEQ=3

 

I would like to be able to PRINT (LOAD actually) these to a dataset via
a single SARBCH command.

e.g.   LOAD ID=JOBNAME GEN=100 SEQ=??? DDNAME=

 

I've tried  SEQ=*,   SEQ=1:3,  no SEQ=...

The first two receiving an "Invalid Sequence parameter" error and the
last retrieving the most current (SEQ=3)

 

I do know a LIST on the job with GEN=1000 and no SEQ will list each time
it ran within a GEN with their sequence numbers. With this info I could
construct another SARBCH job with 3 individual PRINT commands, one for
each SEQ number. However,  due to how the process is setup, is all done
in REXX, it would add a tremendous amount of overhead to LIST each job
first, read in the results, then construct another SARBCH from the LIST
results.  There are about 70 jobs I have to extract SAR reports from and
doing a single PRINT (or LOAD) would be FAR more efficient.

 

Any insights?

 

Bill George  
Senior Programmer Analyst (Specialist)

FTB | Tax Systems and Applications Bureau | BETS Interface Team
Office: 916.845.6459 | ms: L-210 | location: LA2B-B-5-02 
email: william.geo...@ftb.ca.gov  

 

__
CONFIDENTIALITY NOTICE: This email from the State of California is for the sole 
use of the intended recipient and may contain confidential and privileged 
information. Any unauthorized review or use, including disclosure or 
distribution, is prohibited. If you are not the intended recipient, please 
contact the sender and destroy all copies of this email.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[Miklos Szigetvari]

Hi

Thank you Jim huh ,
It is FB , and the complete output dataset contains x'00'

On 23.10.2012 21:42, Jim Mulder wrote:

We got the SYSMDUMPs from customers often via SPOOL, so we had a job

to

cut out the first character.
The job has worked for several year, now I got a dataset full with

x'00'

//STEP1EXEC PGM=IEBGENER
//SYSPRINT DD SYSOUT=A
//SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
//SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
//SYSINDD *
  GENERATE MAXFLDS=1
  RECORD FIELD=(4160,2,,1)

The input has LRECL=4161 output 4160,

OA38949 IEBGENER ADDS LINE OF NULLS IN OUTPUT DATASET

OA39769 AFTER APPLYING PTF FOR APAR OA37216 IEBGENER
 INSERTING NULL LINEWHEN USING VBS dataset

Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[Jim Mulder]

> >> We got the SYSMDUMPs from customers often via SPOOL, so we had a job 
to
> >> cut out the first character.
> >> The job has worked for several year, now I got a dataset full with 
x'00'
> >>
> >> //STEP1EXEC PGM=IEBGENER
> >> //SYSPRINT DD SYSOUT=A
> >> //SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
> >> //SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
> >> //SYSINDD *
> >>  GENERATE MAXFLDS=1
> >>  RECORD FIELD=(4160,2,,1)
> >>
> >> The input has LRECL=4161 output 4160,

OA38949 IEBGENER ADDS LINE OF NULLS IN OUTPUT DATASET 

OA39769 AFTER APPLYING PTF FOR APAR OA37216 IEBGENER 
INSERTING NULL LINEWHEN USING VBS dataset 

Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[Miklos Szigetvari]

On 23.10.2012 20:33, Binyamin Dissen wrote:

What are the messages from IEBGENER (SYSPRINT)?

Normal IEBGENER:PROCESSING ENDED AT EOD
RC:0

Record count also the same(31967, if it is a magic number)

Are the record counts the same?

On Tue, 23 Oct 2012 20:09:51 +0200 Miklos Szigetvari
 wrote:

:> Hi
:>
:>z/OS 1.13, the input file is o.k (got  over FTP), the first charcater is
:>a JES (ASA)  control character
:>Seems to me , it is repeatable.
:>Befor the IEBGENER the input file something like this:
:>1DR2 H
:>...B¹¦SYSMDUMP­ïe©Ø$À...×fJOBNAME
:>
:>  DR2
:>CV...B¹¦..Ø÷.ÙêØ".0.".0.
:>  DR2 CV...{
:>..B¹¦..Ø.
:>after full of x'00'
:>
:>Thank you
:>
:>On 23.10.2012 19:32, Lizette Koehler wrote:
:>> What version of z/OS and how is the SYSMDUMP getting to you?  FTP, BIN, 
etc??
:>>
:>> Is this the only occurrance or is it repeatable?  Was there a tranmission 
issue?
:>>
:>> What does it look like before the IEBGENER?
:>>
:>>
:>> Lizette
:>>
:>> -Original Message-
:>>> From: Miklos Szigetvari 
:>>> Sent: Oct 23, 2012 10:26 AM
:>>> To: IBM-MAIN@LISTSERV.UA.EDU
:>>> Subject: Propably I'm crazy not the IEBGENER
:>>>
:>>> Hi
:>>>
:>>> We got the SYSMDUMPs from customers often via SPOOL, so we had a job to
:>>> cut out the first character.
:>>> The job has worked for several year, now I got a dataset full with x'00'
:>>>
:>>> //STEP1EXEC PGM=IEBGENER
:>>> //SYSPRINT DD SYSOUT=A
:>>> //SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
:>>> //SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
:>>> //SYSINDD *
:>>>  GENERATE MAXFLDS=1
:>>>  RECORD FIELD=(4160,2,,1)
:>>>
:>>> The input has LRECL=4161 output 4160,
:>>>
:>> --
:>> For IBM-MAIN subscribe / signoff / archive access instructions,
:>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
:>>
:>>
:>
:>--
:>For IBM-MAIN subscribe / signoff / archive access instructions,
:>send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Book Enquiry

[Angela DeBoo]

Try
www.bookfinder.com 

Angela DeBoo
RadioShack IT
817 415-0460
mailto:angela.de...@radioshack.com

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lindy Mayfield
Sent: Tuesday, October 23, 2012 2:09 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Book Enquiry

The prices vary from 50€ to 300€ depending.  If you really  need it, shop 
around a bit, just like any antique book you may look for.  

Granted, it would be wonderful if he kept it up to date, like when he talked 
about PC routines.  The thing that I liked best is how it presented the 
material.  I actually enjoy reading his book.  Really.

For example, I couldn't sell mine because I fell asleep reading it and spilled 
red wine all over one of the pages.  Also, I only spent about 50€ on it from a 
used book site.

Lindy

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Raj Singh
Sent: Monday, October 22, 2012 6:03 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Book Enquiry

Hi Listers,

Been a while that I am looking for 2nd edition-"Advanced assembler programming 
and MVS interfaces" by Carmine Cannatello.I have checked on Barnes and Noble 
and Amazon,was wondering if the used one's are worth a buy.Any other 
suggestions(like ebook etc)/references are much appreciated.

TIA

Raj

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Book Enquiry

[Lindy Mayfield]

The prices vary from 50€ to 300€ depending.  If you really  need it, shop 
around a bit, just like any antique book you may look for.  

Granted, it would be wonderful if he kept it up to date, like when he talked 
about PC routines.  The thing that I liked best is how it presented the 
material.  I actually enjoy reading his book.  Really.

For example, I couldn't sell mine because I fell asleep reading it and spilled 
red wine all over one of the pages.  Also, I only spent about 50€ on it from a 
used book site.

Lindy

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Raj Singh
Sent: Monday, October 22, 2012 6:03 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Book Enquiry

Hi Listers,

Been a while that I am looking for 2nd edition-"Advanced assembler programming 
and MVS interfaces" by Carmine Cannatello.I have checked on Barnes and Noble 
and Amazon,was wondering if the used one's are worth a buy.Any other 
suggestions(like ebook etc)/references are much appreciated.

TIA

Raj

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[Binyamin Dissen]

What are the messages from IEBGENER (SYSPRINT)?

Are the record counts the same?

On Tue, 23 Oct 2012 20:09:51 +0200 Miklos Szigetvari
 wrote:

:> Hi
:>
:>z/OS 1.13, the input file is o.k (got  over FTP), the first charcater is 
:>a JES (ASA)  control character
:>Seems to me , it is repeatable.
:>Befor the IEBGENER the input file something like this:
:>1DR2 H 
:>...B¹¦SYSMDUMP­ïe©Ø$À...×fJOBNAME
 
:>
:>  DR2 
:>CV...B¹¦..Ø÷.ÙêØ".0.".0.
:>  DR2 CV...{ 
:>..B¹¦..Ø.
:>after full of x'00'
:>
:>Thank you
:>
:>On 23.10.2012 19:32, Lizette Koehler wrote:
:>> What version of z/OS and how is the SYSMDUMP getting to you?  FTP, BIN, 
etc??
:>>
:>> Is this the only occurrance or is it repeatable?  Was there a tranmission 
issue?
:>>
:>> What does it look like before the IEBGENER?
:>>
:>>
:>> Lizette
:>>
:>> -Original Message-
:>>> From: Miklos Szigetvari 
:>>> Sent: Oct 23, 2012 10:26 AM
:>>> To: IBM-MAIN@LISTSERV.UA.EDU
:>>> Subject: Propably I'm crazy not the IEBGENER
:>>>
:>>> Hi
:>>>
:>>> We got the SYSMDUMPs from customers often via SPOOL, so we had a job to
:>>> cut out the first character.
:>>> The job has worked for several year, now I got a dataset full with x'00'
:>>>
:>>> //STEP1EXEC PGM=IEBGENER
:>>> //SYSPRINT DD SYSOUT=A
:>>> //SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
:>>> //SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
:>>> //SYSINDD *
:>>>  GENERATE MAXFLDS=1
:>>>  RECORD FIELD=(4160,2,,1)
:>>>
:>>> The input has LRECL=4161 output 4160,
:>>>
:>> --
:>> For IBM-MAIN subscribe / signoff / archive access instructions,
:>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
:>>
:>>
:>
:>--
:>For IBM-MAIN subscribe / signoff / archive access instructions,
:>send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[Miklos Szigetvari]

On 23.10.2012 20:08, McKown, John wrote:

I'm confused (like *that's* something new). SYSMDUMPs are binary files which 
are usually processed in IPCS or maybe AbendAid (I use AbendAid to import the 
SYSMDUMP, then process it sometimes). My chance did you mean SYSUDUMP? That is 
usually what is put out to SPOOL with leading carriage controls. Stripping 
those out would make sense to me.


No SYSMDUMP, some customers are using just  //SYSMDUMP DD SYSOUT=*
It is not the first customer, but the data is SYSMDUMP.
But till now this has worked with IEBGENER, we cut off the first 
character and IPCS was happy


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[Miklos Szigetvari]

Hi

z/OS 1.13, the input file is o.k (got  over FTP), the first charcater is 
a JES (ASA)  control character

Seems to me , it is repeatable.
Befor the IEBGENER the input file something like this:
1DR2 H 
...B¹¦SYSMDUMP­ïe©Ø$À...×fJOBNAME 

 DR2 
CV...B¹¦..Ø÷.ÙêØ".0.".0.
 DR2 CV...{ 
..B¹¦..Ø.

after full of x'00'

Thank you

On 23.10.2012 19:32, Lizette Koehler wrote:

What version of z/OS and how is the SYSMDUMP getting to you?  FTP, BIN, etc??

Is this the only occurrance or is it repeatable?  Was there a tranmission issue?

What does it look like before the IEBGENER?


Lizette

-Original Message-

From: Miklos Szigetvari 
Sent: Oct 23, 2012 10:26 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Propably I'm crazy not the IEBGENER

Hi

We got the SYSMDUMPs from customers often via SPOOL, so we had a job to
cut out the first character.
The job has worked for several year, now I got a dataset full with x'00'

//STEP1EXEC PGM=IEBGENER
//SYSPRINT DD SYSOUT=A
//SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
//SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
//SYSINDD *
 GENERATE MAXFLDS=1
 RECORD FIELD=(4160,2,,1)

The input has LRECL=4161 output 4160,


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[McKown, John]

I'm confused (like *that's* something new). SYSMDUMPs are binary files which 
are usually processed in IPCS or maybe AbendAid (I use AbendAid to import the 
SYSMDUMP, then process it sometimes). My chance did you mean SYSUDUMP? That is 
usually what is put out to SPOOL with leading carriage controls. Stripping 
those out would make sense to me.

-- 
John McKown
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone *
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On Behalf Of Miklos Szigetvari
> Sent: Tuesday, October 23, 2012 12:27 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Propably I'm crazy not the IEBGENER
> 
> Hi
> 
> We got the SYSMDUMPs from customers often via SPOOL, so we had a job to
> cut out the first character.
> The job has worked for several year, now I got a dataset full with
> x'00'
> 
> //STEP1EXEC PGM=IEBGENER
> //SYSPRINT DD SYSOUT=A
> //SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
> //SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
> //SYSINDD *
>  GENERATE MAXFLDS=1
>  RECORD FIELD=(4160,2,,1)
> 
> The input has LRECL=4161 output 4160,
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Propably I'm crazy not the IEBGENER

[Lizette Koehler]

What version of z/OS and how is the SYSMDUMP getting to you?  FTP, BIN, etc??

Is this the only occurrance or is it repeatable?  Was there a tranmission issue?

What does it look like before the IEBGENER?


Lizette

-Original Message-
>From: Miklos Szigetvari 
>Sent: Oct 23, 2012 10:26 AM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: Propably I'm crazy not the IEBGENER
>
>Hi
>
>We got the SYSMDUMPs from customers often via SPOOL, so we had a job to 
>cut out the first character.
>The job has worked for several year, now I got a dataset full with x'00'
>
>//STEP1EXEC PGM=IEBGENER
>//SYSPRINT DD SYSOUT=A
>//SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
>//SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
>//SYSINDD *
> GENERATE MAXFLDS=1
> RECORD FIELD=(4160,2,,1)
>
>The input has LRECL=4161 output 4160,
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Propably I'm crazy not the IEBGENER

[Miklos Szigetvari]

Hi

We got the SYSMDUMPs from customers often via SPOOL, so we had a job to 
cut out the first character.

The job has worked for several year, now I got a dataset full with x'00'

//STEP1EXEC PGM=IEBGENER
//SYSPRINT DD SYSOUT=A
//SYSUT1   DD DISP=SHR,DSN=ESA.HP.SYSMDUMP
//SYSUT2   DD DSNAME=ESA.QFSS.SYSMDUMP,DISP=SHR
//SYSINDD *
GENERATE MAXFLDS=1
RECORD FIELD=(4160,2,,1)

The input has LRECL=4161 output 4160,

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OT: interesting/neat text formatting processor

[Bill Godfrey]

It looks like Markdown predates wikicreole. The files in the zip archive for 
Markdown are dated 2004. Wikicreole seems to be from 2007.

On Tue, 23 Oct 2012 12:46:48 -0400, Rob Schramm wrote:

>The creator might have taken a look at wikicreole before creating something
>new.  They have already been thru the struggle to create a simple way to
>text markup a doc for conversion by the wiki.
>
>http://www.wikicreole.org/wiki/Creole1.0
>
>But it is the same concept that a lot of wiki's use.
>
>On Tue, Oct 23, 2012 at 11:49 AM, John McKown wrote:
>
>> It's called "Markdown". It is interesting/neat because it uses "plain
>> text" formatting, such as we often use in email as its source and can
>> reformat that into HTML or XHTML.
>>
>> http://daringfireball.net/projects/markdown/
>>
>> I think it is interesting because I like the idea of using text which is
>> readable "as is", such as in ISPF edit or browse, and being able to use
>> that to create HTML for web pages. I got a pointer to it from "github",
>> which is something else that I'm looking at the possibility of using for
>> something. But I'm unsure of this other use, so I'm still mulling it over
>> in my mind.
>>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OT: interesting/neat text formatting processor

[Rob Schramm]

The creator might have taken a look at wikicreole before creating something
new.  They have already been thru the struggle to create a simple way to
text markup a doc for conversion by the wiki.

http://www.wikicreole.org/wiki/Creole1.0

But it is the same concept that a lot of wiki's use.

Rob Schramm
Senior Systems Consultant
Imperium Group



On Tue, Oct 23, 2012 at 11:49 AM, McKown, John <
john.mck...@healthmarkets.com> wrote:

> It's called "Markdown". It is interesting/neat because it uses "plain
> text" formatting, such as we often use in email as its source and can
> reformat that into HTML or XHTML.
>
> http://daringfireball.net/projects/markdown/
>
> I think it is interesting because I like the idea of using text which is
> readable "as is", such as in ISPF edit or browse, and being able to use
> that to create HTML for web pages. I got a pointer to it from "github",
> which is something else that I'm looking at the possibility of using for
> something. But I'm unsure of this other use, so I'm still mulling it over
> in my mind.
>
> --
> John McKown
> Systems Engineer IV
> IT
>
> Administrative Services Group
>
> HealthMarkets(r)
>
> 9151 Boulevard 26 * N. Richland Hills * TX 76010
> (817) 255-3225 phone *
> john.mck...@healthmarkets.com * www.HealthMarkets.com
>
> Confidentiality Notice: This e-mail message may contain confidential or
> proprietary information. If you are not the intended recipient, please
> contact the sender by reply e-mail and destroy all copies of the original
> message. HealthMarkets(r) is the brand name for products underwritten and
> issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake
> Life Insurance Company(r), Mid-West National Life Insurance Company of
> TennesseeSM and The MEGA Life and Health Insurance Company.SM
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

OT: interesting/neat text formatting processor

[McKown, John]

It's called "Markdown". It is interesting/neat because it uses "plain text" 
formatting, such as we often use in email as its source and can reformat that 
into HTML or XHTML.

http://daringfireball.net/projects/markdown/

I think it is interesting because I like the idea of using text which is 
readable "as is", such as in ISPF edit or browse, and being able to use that to 
create HTML for web pages. I got a pointer to it from "github", which is 
something else that I'm looking at the possibility of using for something. But 
I'm unsure of this other use, so I'm still mulling it over in my mind.

-- 
John McKown
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone *
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OPENLDAP replacing mainframe security?

[Paul Gilmartin]

On Tue, 23 Oct 2012 07:39:27 -0400, Dave McHenry wrote:

>A manager of ours read a link that claims OPENLDAP could be used to replace
>our current mainframe security. Everyone I've asked about this laughs and
>says impossible. Is it impossible?
> 
Like 8-character user IDs and NTP, it may become a requirement.
The Microsofties have a weapon: "We can't consider adding z/OS
to our shop; it doesn't conform to corporate IT standards:  all our
user IDs are 8 characters; all our clocks are synched to our central
timeserver (right or wrong), and all our entitlements are administered
via LDAP."  Three strikes for the airline magazines.

See devolution of recent "Book Enquiry" thread.

 A few years ago, someone mentioned an ISV product ...

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OPENLDAP replacing mainframe security?

[Rob Schramm]

Yes... well pretty much impossible.

Would it be possible to fix up how z/OS security calls worked to always use
OpenLDAP... probably... but it would be slow and cost a  to
do.

But only for classic z/OS security.  LDAP could be used for WebSphere on
z/OS and it is possible to use LDAP to provide some security if you code
for it in CICS, JAVA apps and others that code to interrogate directory
services.

But any of the SAF or R_* that are provided by the security products RACF,
Top Secret & ACF2 cannot be replaced by OpenLDAP.

Unless OpenLDAP provides a security router for z/OS and all of the R_
services for zUnix... which I can find no reference to on the OpenLDAP site.

It appears that the folks at RocketSoftware based their LDAP connector on
OpenLDAP.

Rob Schramm
Senior Systems Consultant
Imperium Group



On Tue, Oct 23, 2012 at 7:39 AM, Dave McHenry  wrote:

> A manager of ours read a link that claims OPENLDAP could be used to replace
> our current mainframe security. Everyone I've asked about this laughs and
> says impossible. Is it impossible?
>
> Dave McHenry
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN Digest - 21 Oct 2012 to 22 Oct 2012 (#2012-297)

[Paul Gilmartin]

On Tue, 23 Oct 2012 07:13:31 -0400, Jim Holloway wrote:
>
>...  A dataset alias lives in the same catalog as the dataset it is related 
>to. ...
> 
Which severely limits the usefulness of data set aliases.  I know,
from unpleasant experience.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Book Enquiry

[Paul Gilmartin]

On Tue, 23 Oct 2012 03:47:51 -0500, Shane Ginnane wrote:
>
>...
>The O/S continues being developed, as does the hardware, ...
> 
And the hardware far outpaces the OS.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: New DFSMSrmm retention method

[Pommier, Rex R.]

Thanks, Mike.  Rereading the background posts helped me see my mix-up.  What I 
had missed earlier was the fact that EXPDT is just JCL independent of RMM (I 
didn't know if there was a VRS rule with the same name as the JCL parameter...) 
and WHILECATALOG was the only VRS rule in place.  So the WHILECATALOG would 
hold the tape forever, never getting to the EXPDT processing.

Rex

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mike Wood
Sent: Monday, October 22, 2012 5:42 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: New DFSMSrmm retention method

Rex, The only way to link a VRS to the volume EXPDT is to use the UNTILEXPIRED 
retention type in the VRS. So, unless, UNTILEXPIRED is used, the WHILECATALOG 
VRS retains the data set until it is uncataloged, and only then, when the data 
set is dropped from VRS retention is the volume EXPDT considered.

From R13, with EXPDT retention method you can ensure that only the volume EXPDT 
is considered.

Mike Wood

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information contained in this e-mail may contain confidential and/or 
privileged information and is intended for the sole use of the intended 
recipient. If you are not the intended recipient, you are hereby notified that 
any unauthorized use, disclosure, distribution or copying of this communication 
is strictly prohibited and that you will be held responsible for any such 
unauthorized activity, including liability for any resulting damages. As 
appropriate, such incident(s) may also be reported to law enforcement. If you 
received this e-mail in error, please reply to sender and destroy or delete the 
message and any attachments. Thank you.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: New DFSMSrmm retention method

[Walter Marguccio]

> From: Mike Wood 
> To: IBM-MAIN@LISTSERV.UA.EDU 


> I am sceptical about using RETPD(93000) as a default retention for all new 
> tape data sets. 

> But, if that works for you . . . . .


Well, we have been keeping cataloged datasets on DASD forever (NOLIMIT in MC).

Therefore, I'd use the same principle for cataloged datasets on tape.
Whether that is questionable, I agree. 


> I hope that helps you, 


it does, thanks a bunch!

Walter Marguccio
z/OS Systems Programmer
BELENUS LOB Informatic GmbH
Munich - Germany

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Book Enquiry

[Tom Marchant]

On Mon, 22 Oct 2012 22:59:27 -0500, Shmuel Metz (Seymour J.) In <6921522608355946.wa.m42tomibmmainyahoo@listserv.ua.edu>, on
>10/22/2012
>   at 11:50 AM, Tom Marchant  said:
>
>>"A Programmer's
>>Introduction to IBM System/360 Assembler Language - Student Text".
>
>The one with the incorrect explanation of PACK and UNPK?

Hmmm   If so, I don't see the errors.  Perhaps it has been corrected. 
This is the -6 edition of the book, published in August, 1970.  I do see 
where it has, "The Pack instruction does not check zones, except in 
the rightmost byte..."  It doesn't check the rightmost zone, but it does 
move it.  Is that what you mean?

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Nested enclaves and POSIX(ON)

[Shmuel Metz (Seymour J.)]

In
,
on 10/21/2012
   at 04:21 PM, John Gilmore  said:

>bad manners

PKB.

-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 Atid/2
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: New DFSMSrmm retention method

[Mike Wood]

On Tuesday, 23 October 2012 08:17:09 UTC+1, Walter Marguccio  wrote:
> Mike,
> I understand that, for cataloged datasets, the WHILECATALOG keyword, 
> specified 
> in a single VRS or in a VRS chain, always wins. Am I correct ? 

Correct. while a data set is cataloged and matching to the example VRS it will 
be VRS retained.

> Ever since we migrated to rmm, we have:  
> a) RETPD(5) in EDGPRMxx and  
> b) one VRS defined as: dsname('**') WHILECATALOG LOCATION(HOME) 
> with this setup, a cataloged dataset with a given RETPD/EXPDT will never be 
> deleted.
>
> If I want RETPD/EXPDT to be honored for a dataset, and want to stick to VRSEL 
> retention method, I suppose I need to change: 
> a) RETPD in EDGPRMxx from 5 to 93000 (keep the data almost forever) 
> b) update my only VRS as: dsname('**') UNTILEXPIRED LOCATION(HOME) 

Making the above change will ensure that VRS retention is assured until the 
EXPDT is reached

> Or, I change the global retention method from VRSEL to EXPDT, and still need 
> to change 
> a) RETPD in EDGPRMxx from 5 to 93000  
> Are my assumptions correct ?

Looks like it. Once the parmlib OPTION RETENTIONMETHOD(RETPD) is in use, any 
volumes that use this retention method will not be considered by VRSEL 
processing and only the volume EXPDT used to determine when EXPROC will expire 
the volume.
I am sceptical about using RETPD(93000) as a default retention for all new tape 
data sets. But, if that works for you . . . . .

I hope that helps you, 

Mike Wood

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

OPENLDAP replacing mainframe security?

[Dave McHenry]

A manager of ours read a link that claims OPENLDAP could be used to replace
our current mainframe security. Everyone I've asked about this laughs and
says impossible. Is it impossible?

Dave McHenry

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: API to format LOGREC records?

[Elardus Engelbrecht]

Miklos Szigetvari wrote:

>I'm searching for a program interface to format LOGREC records, as EREP or 
>IPCS can

I have no API or samples, but look at these macros:

SYMRBLD -- Building a symptom record  
SYMREC -- Process a symptom record

in book 

MVS Programming: Assembler Services
Reference, Volume 2 (IAR-XCT)
Document Number SA22-7607-16 

HTH!

Groete / Greeting
Elardus Engelbrecht

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN Digest - 21 Oct 2012 to 22 Oct 2012 (#2012-297)

[Jim Holloway]

On 10/22/2012 11:53 AM, Mil Hashoul wrote:

>I am using the IGGCSI00, the catalog search interface, the dataset name 
is
>an alias which is resolve to dataset name with symbolicrelate how could I
>ask catalog to resolve the dataset name and find the dataset.
>right now if I use the dataset with the symbolicrelate variable, the
>IGGCSI00 R15=4 and as IBM documentation the Return area has the value:
>FS1E7A, FS is the module name , and 1E is the return code and 7A is the
>reason code, but these reurn codes does not xist under the IDC30009I
>message as IBM explain.
>any one has a clue?

The answer is that in the case of a dataset alias, the related object is 
the dataset being
aliased.  In the same way that a traditional alias, which lives in the 
master catalog and 
relates to a user catalog.  A dataset alias lives in the same catalog as 
the dataset it is related to. 
So you would use the CSI to search a catalog for alias type entries.  Any 
alias found would either have
a user catalog related object or a dataset related object when searching 
the master catalog.  When searching
a user catalog any alias entries would be dataset alias's and the related 
object returned by the CSI would be the
dataset you're looking for.

HTH,

Jim Holloway

The information contained in this message may be CONFIDENTIAL and is for the 
intended addressee only.  Any unauthorized use, dissemination of the 
information, or copying of this message is prohibited.  If you are not the 
intended addressee, please notify the sender immediately and delete this 
message.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ADR405E - ERROR CODE 0214.

[willie bunter]

Lizette,
 
Thanks for your help.




From: Lizette Koehler 
To: IBM-MAIN@LISTSERV.UA.EDU 
Sent: Monday, October 22, 2012 1:51:20 PM
Subject: Re: ADR405E - ERROR CODE 0214.

This is a dynamic allocation error code that you can find in ISPF

0214  A DIRECT ACCESS DEVICE IS NOT AVAILABLE.  


What was wrong - Unknown since DFDSS does not tell you if it was enqueued or 
offline or what.  I have rarely been able to capture the reason behind a DAIR 
error of 214 with DFDSS.

Lizette



-Original Message-
>From: willie bunter 
>Sent: Oct 22, 2012 10:47 AM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: ADR405E - ERROR CODE 0214.
>
>Good Day To All Members,
> 
>I am trying to find the explanation to the error message ADR405E (001)-DYNA 
>(03), DYNAMIC ALLOCATION OF VOLUME SNAP78 FAILED. ERROR CODE 0214
> 
>However the doc doesn't give me the explanation for code 0214.  I "GOOGLED" it 
>but nothing came up for this particular code.  
> 
>ADR101I (R/I)-RI01 (01), TASKID 001 HAS BEEN ASSIGNED TO COMMAND 'COPY '   
>ADR109I (R/I)-RI01 (01), 2012.295 04:08:14 INITIAL SCAN OF USER CONTROL 
>STATEMENTS COMPLETED
>ADR405E (001)-DYNA (03), DYNAMIC ALLOCATION OF VOLUME SNAP78 FAILED. ERROR 
>CODE 0214. INFORMATION CODE 
>ADR017E (001)-CLTSK(01), 2012.295 04:08:14 TASK NOT SCHEDULED DUE TO ERROR. 
>TASK RETURN CODE 0008
>ADR012I (SCH)-DSSU (01), 2012.295 04:08:14 DFSMSDSS PROCESSING COMPLETE. 
>HIGHEST RETURN CODE IS 0008 FROM:
> TASK    001   
> 
>Could someone tell me what would cause this problem - ADR405E (001)-DYNA (03), 
>DYNAMIC ALLOCATION OF VOLUME SNAP78 FAILED. ERROR CODE 0214
> 
>I verifed the volumes and they are all ONLINE.  I reran the job  5 minutes 
>later and it worked.  
> 
>Here is my JCL :
> 
> COPY FULL IDY(PROD78,3390) ODY(SNAP78,3390) DUMPCOND FCNC- 
> ALLDATA(*) ALLEXCP CANCELERROR PURGE FCTOPPRCPRIMARY - 
> FCSETGTOK(FAILRELATION)  
> 
>Thanks in advance. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Book Enquiry

[Paul Gillis]

> Indeed.
> And given the dearth of opportunities I see advertised and sites disappearing,
> hard to argue.
> The O/S continues being developed, as does the hardware, but the puddle we
> all play in continues to evaporate.
> 
> Shane ...

Retirement is just around the corner, as that puddle shrinks. Anyone younger 
than 50 ready to take over for the next few years?

Paul

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SV: Nested enclaves and POSIX(ON)

[Thomas Berg]

I do not understand the reason or motivation for this post.  Seriously. 



Regards,
Thomas Berg
___
Thomas Berg   Specialist   AM/SM&S   SWEDBANK AB (publ)


> -Ursprungligt meddelande-
> Från: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> För John Gilmore
> Skickat: den 21 oktober 2012 22:22
> Till: IBM-MAIN@LISTSERV.UA.EDU
> Ämne: Re: Nested enclaves and POSIX(ON)
> 
> I see Shmuel's posts only when they are part of a thread I have posted
> to, but even that is now too much.  I don't mind ad hominem criticisms
> of me, even when they take the puerile forms his take; but the
> technical content of his posts, once redemptive of his bad manners, has
> now deteriorated.  It is often exiguous or worse.
> 
> I no longer judge that there is any reason to read them, and I have
> taken local steps to avoid seeing them in any circumstances.
> 
> Since I shall not comment further on his posts, I wish to avoid any
> misunderstanding of this personal action.  Shmuel is and should be
> free to post here.   Freedom of speech must certainly include the
> freedom to express notions that seem to me to be devoid of merit.
> 
> John Gilmore, Ashland, MA 01721 - USA
> Avant d'imprimer cet e-mail, réfléchissons à l'impact sur
> l'environnement.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Book Enquiry

[Shane Ginnane]

On Mon, 22 Oct 2012 23:06:40 -0500, Shmuel wrote:

>   at 06:42 PM, shai hess  said:
>
>>Sorry if I hurt anybody feeling but if we inform about closing
>>sites why I can not post what I posted?
>
>You can; you have as much authority as ted does.

Indeed.
And given the dearth of opportunities I see advertised and sites disappearing, 
hard to argue.
The O/S continues being developed, as does the hardware, but the puddle we all 
play in continues to evaporate.

Shane ...

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: New DFSMSrmm retention method

[Walter Marguccio]

> From: Mike Wood 

> To: IBM-MAIN@LISTSERV.UA.EDU

> So, if still cataloged, and the VRS specifies WHILECATALOG, 
> a data set will be retained regardless of the EXPDT/RETPD.

Mike,

I understand that, for cataloged datasets, the WHILECATALOG keyword, specified
in a single VRS or in a VRS chain, always wins. Am I correct ?

Ever since we migrated to rmm, we have: 

a) RETPD(5) in EDGPRMxx and 
b) one VRS defined as: dsname('**') WHILECATALOG LOCATION(HOME)

with this setup, a cataloged dataset with a given RETPD/EXPDT will never be 
deleted.

If I want RETPD/EXPDT to be honored for a dataset, and want to stick to VRSEL 
retention method, I suppose I need to change:

a) RETPD in EDGPRMxx from 5 to 93000 (keep the data almost forever)
b) update my only VRS as: dsname('**') UNTILEXPIRED LOCATION(HOME)

Or, I change the global retention method from VRSEL to EXPDT, and still need to 
change

a) RETPD in EDGPRMxx from 5 to 93000 

Are my assumptions correct ?

Walter Marguccio
z/OS Systems Programmer
BELENUS LOB Informatic GmbH
Munich - Germany


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN