Mainframe Output Writer
Hello, We are using TEXT2PDF as a mainframe Output Writer to send the mainframe Sysout to our MS inbox, but recently we have started experiencing the delay in Receiving the mail from TEXT2PDF. I can see the responsible nodes are up and Don't see it anything different. Has anyone experienced a similar Issue at your Shop ? Any suggestions or Ideas are highly appreciated. Jake -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: User Internal
Interal represts z/is components like sys asids jes etc בתאריך 12 בפבר 2013 11:44, מאת גדי בן אבי gad...@malam.com: Hi all, My boss asked me to produce a report of all RESET commands that changed the Service Class of a job. Since we write the SYSLOG to a file every Friday, I created a report of all of the RESET commands. Part of the SYSLOG is the user that issued the command. For some of the commands, the user is INTERNAL. We do not have a user of that name. The RESET commands can be issued: 1. From SDSF – by changing the Service Class field on the DA panel 2. From SYSVIEW 3. As a command from SDSF or SYSVIEW 4. As a command form the console. Does anyone know when the user INTERNAL would be displayed? I did a search on the SYSLOG and found that the user INTERNAL is used: 1. SEND commands that notify a user that a job ended. 2. IKJ144I that say that a send command was attempted to a nonexistent user (or maybe one without a tso segment) 3. When a command is issued from the console 4. When JES2 starts a FSS procedure 5. $HASP892 messages We are using z/OS 1.13, SDSF and CA-SYSVIEW 13.7. Thanks for any help. Gadi לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Defined capacity
I'm trying to understand how to set up Defined Capacity for an LPAR. Unfortunately HMC help is not helpful and software manuals do not provide details about the settings. My goal is to set up Defined Capacity for one LPAR. No groups. A record from Change LPAR Controls: LPAR: LP1 Active: Yes Def. Capacity: 45 -- it's MSU isn't it? WLM: (checkbox) -- what is it for??? Curr. Weight: 15 Initial Weight: 15 Min. Weight: (empty) -- a field appears only when WLM is checked Max. Weight: (empty) -- as above - only when WLM checkbox is checked Current Capping: No Initial Capping: (checkbox) unchecked Num. of dedicated processors: 0 Number of Not dedicated Proc.: 2 My questions: 1. Defined Capacity in the above record is expressed in MSU. T/F? 2. What is the purpose of WLM checkbox? 3. Initial capping must be unchecked to make softcapping effective. What about initial capping for zIIP or zAAP? I observed that capping of zIIP precludes WLM checkbox (greyed field) 4. Remarks, comments, hints? -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax +48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2013 r. kapitał zakładowy BRE Banku SA (w całości wpłacony) wynosi 168.555.904 złotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
On Feb 11, 2013, at 4:32 PM, Charles Mills charl...@mcn.org wrote: (More generically, if X is a load module, is it possible to set things up such that program Y can run X, but PGM=X will never work? How? I have thought about engineering a rename to a name that JCL will not accept (but LINK will) but I would just as soon not get that weird; rather do things in a more supported way.) If you can modify IEFUSI, you can code it to force a JCL error if PGM=X. -- Curtis Pew (c@its.utexas.edu) ITS Systems Core The University of Texas at Austin -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Defined capacity
You can check manuals: - z/OS V1R11.0 MVS Planning Workload Management z/OS V1R10.0-V1R11.0 ch: Workload Management and Workload License Charges - z/OS V1R11.0 Planning for Subcapacity Pricing z/OS V1R10.0-V1R11.0 ch: More about defined capacity (and surrounding chapters). Answers: 1. Yes. 2. To use together with IRD. 3. No idea. 4. I suppose you want to control the 4 hour running average of the LPAR, because that is what it does. Read the information about weights and how WLM imposes the 4HrRA to the LPAR, either with phantom load or with a (to be avoided) capping pattern. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Tuesday, February 12, 2013 13:26 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Defined capacity I'm trying to understand how to set up Defined Capacity for an LPAR. Unfortunately HMC help is not helpful and software manuals do not provide details about the settings. My goal is to set up Defined Capacity for one LPAR. No groups. A record from Change LPAR Controls: LPAR: LP1 Active: Yes Def. Capacity: 45 -- it's MSU isn't it? WLM: (checkbox) -- what is it for??? Curr. Weight: 15 Initial Weight: 15 Min. Weight: (empty) -- a field appears only when WLM is checked Max. Weight: (empty) -- as above - only when WLM checkbox is checked Current Capping: No Initial Capping: (checkbox) unchecked Num. of dedicated processors: 0 Number of Not dedicated Proc.: 2 My questions: 1. Defined Capacity in the above record is expressed in MSU. T/F? 2. What is the purpose of WLM checkbox? 3. Initial capping must be unchecked to make softcapping effective. What about initial capping for zIIP or zAAP? I observed that capping of zIIP precludes WLM checkbox (greyed field) 4. Remarks, comments, hints? -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax +48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2013 r. kapitał zakładowy BRE Banku SA (w całości wpłacony) wynosi 168.555.904 złotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286
Re: Defined capacity
Check this paper too: http://www.ibm.com/common/ssi/fcgi-bin/ssialias?infotype=SAsubtype=WHappname=STGE_ZS_ZS_USENhtmlfid=ZSW03077USENattachment=ZSW03077USEN.PDF kees. -Original Message- From: Vernooij, CP - SPLXM Sent: Tuesday, February 12, 2013 13:46 To: IBM Mainframe Discussion List Subject: RE: Defined capacity You can check manuals: - z/OS V1R11.0 MVS Planning Workload Management z/OS V1R10.0-V1R11.0 ch: Workload Management and Workload License Charges - z/OS V1R11.0 Planning for Subcapacity Pricing z/OS V1R10.0-V1R11.0 ch: More about defined capacity (and surrounding chapters). Answers: 1. Yes. 2. To use together with IRD. 3. No idea. 4. I suppose you want to control the 4 hour running average of the LPAR, because that is what it does. Read the information about weights and how WLM imposes the 4HrRA to the LPAR, either with phantom load or with a (to be avoided) capping pattern. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Tuesday, February 12, 2013 13:26 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Defined capacity I'm trying to understand how to set up Defined Capacity for an LPAR. Unfortunately HMC help is not helpful and software manuals do not provide details about the settings. My goal is to set up Defined Capacity for one LPAR. No groups. A record from Change LPAR Controls: LPAR: LP1 Active: Yes Def. Capacity: 45 -- it's MSU isn't it? WLM: (checkbox) -- what is it for??? Curr. Weight: 15 Initial Weight: 15 Min. Weight: (empty) -- a field appears only when WLM is checked Max. Weight: (empty) -- as above - only when WLM checkbox is checked Current Capping: No Initial Capping: (checkbox) unchecked Num. of dedicated processors: 0 Number of Not dedicated Proc.: 2 My questions: 1. Defined Capacity in the above record is expressed in MSU. T/F? 2. What is the purpose of WLM checkbox? 3. Initial capping must be unchecked to make softcapping effective. What about initial capping for zIIP or zAAP? I observed that capping of zIIP precludes WLM checkbox (greyed field) 4. Remarks, comments, hints? -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax +48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2013 r. kapitał zakładowy BRE Banku SA (w całości wpłacony) wynosi 168.555.904 złotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments,
Re: User Internal
SDSF/SYSVIEW vs CONSOLE/Operator commands. - Ted MacNEIL eamacn...@yahoo.ca Twitter: @TedMacNEIL -Original Message- From: גדי בן אבי gad...@malam.com Sender: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Date: Tue, 12 Feb 2013 12:00:25 To: IBM-MAIN@LISTSERV.UA.EDU Reply-To: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Subject: Re: User Internal So why do some RESET commands appear as user INERNAL, and others as the actual user who caused the command to be issued? Gadi -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Itschak Mugzach Sent: Tuesday, February 12, 2013 11:57 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: User Internal Interal represts z/is components like sys asids jes etc בתאריך 12 בפבר 2013 11:44, מאת גדי בן אבי gad...@malam.com: Hi all, My boss asked me to produce a report of all RESET commands that changed the Service Class of a job. Since we write the SYSLOG to a file every Friday, I created a report of all of the RESET commands. Part of the SYSLOG is the user that issued the command. For some of the commands, the user is INTERNAL. We do not have a user of that name. The RESET commands can be issued: 1. From SDSF – by changing the Service Class field on the DA panel 2. From SYSVIEW 3. As a command from SDSF or SYSVIEW 4. As a command form the console. Does anyone know when the user INTERNAL would be displayed? I did a search on the SYSLOG and found that the user INTERNAL is used: 1. SEND commands that notify a user that a job ended. 2. IKJ144I that say that a send command was attempted to a nonexistent user (or maybe one without a tso segment) 3. When a command is issued from the console 4. When JES2 starts a FSS procedure 5. $HASP892 messages We are using z/OS 1.13, SDSF and CA-SYSVIEW 13.7. Thanks for any help. Gadi לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: User Internal
After some more checking, I found that the RESET commands that had a INTERNAL user, were issued on another member of the sysplex, and ROUTED over o this system. Gadi -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Itschak Mugzach Sent: Tuesday, February 12, 2013 11:57 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: User Internal Interal represts z/is components like sys asids jes etc בתאריך 12 בפבר 2013 11:44, מאת גדי בן אבי gad...@malam.com: Hi all, My boss asked me to produce a report of all RESET commands that changed the Service Class of a job. Since we write the SYSLOG to a file every Friday, I created a report of all of the RESET commands. Part of the SYSLOG is the user that issued the command. For some of the commands, the user is INTERNAL. We do not have a user of that name. The RESET commands can be issued: 1. From SDSF – by changing the Service Class field on the DA panel 2. From SYSVIEW 3. As a command from SDSF or SYSVIEW 4. As a command form the console. Does anyone know when the user INTERNAL would be displayed? I did a search on the SYSLOG and found that the user INTERNAL is used: 1. SEND commands that notify a user that a job ended. 2. IKJ144I that say that a send command was attempted to a nonexistent user (or maybe one without a tso segment) 3. When a command is issued from the console 4. When JES2 starts a FSS procedure 5. $HASP892 messages We are using z/OS 1.13, SDSF and CA-SYSVIEW 13.7. Thanks for any help. Gadi לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: User Internal
RESETs can be logged in SMF7x records. I don't know in what detail, but you might want to check if the info you desire is there. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of ??? ?? ??? Sent: Tuesday, February 12, 2013 14:06 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: User Internal After some more checking, I found that the RESET commands that had a INTERNAL user, were issued on another member of the sysplex, and ROUTED over o this system. Gadi -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Itschak Mugzach Sent: Tuesday, February 12, 2013 11:57 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: User Internal Interal represts z/is components like sys asids jes etc בתאריך 12 בפבר 2013 11:44, מאת גדי בן אבי gad...@malam.com: Hi all, My boss asked me to produce a report of all RESET commands that changed the Service Class of a job. Since we write the SYSLOG to a file every Friday, I created a report of all of the RESET commands. Part of the SYSLOG is the user that issued the command. For some of the commands, the user is INTERNAL. We do not have a user of that name. The RESET commands can be issued: 1. From SDSF – by changing the Service Class field on the DA panel 2. From SYSVIEW 3. As a command from SDSF or SYSVIEW 4. As a command form the console. Does anyone know when the user INTERNAL would be displayed? I did a search on the SYSLOG and found that the user INTERNAL is used: 1. SEND commands that notify a user that a job ended. 2. IKJ144I that say that a send command was attempted to a nonexistent user (or maybe one without a tso segment) 3. When a command is issued from the console 4. When JES2 starts a FSS procedure 5. $HASP892 messages We are using z/OS 1.13, SDSF and CA-SYSVIEW 13.7. Thanks for any help. Gadi לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286
Re: UNABLE TO IMPORT - IGD17802I
Willie - I don't think it was a fluke that it worked. I think it worked as designed. I think that you need to look at the SMS constructs assigned to the catalog when it was being allocated without your OBJECT(VOLUMES statement as it appears to me the Guaranteed Space attribute was what was biting you. With what you were trying to accomplish, going to from non-SMS to SMS, OBJECTS(VOLUMES was required. This is a case, I think, where well placed WRITE statements in your SMS routines would help you understand what's going on. ddk From: willie bunter williebun...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 02/11/2013 03:47 PM Subject:Re: UNABLE TO IMPORT - IGD17802I Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Darth, I am not sure if you saw my earlier post. I think the problem is fixed. This is what I did. IMPORT IDS(SYS1.ZWA6PWG.BKUP) - ODS(CATALOG.DB2TESX) - OBJECTS(CATALOG.DB2TESX - VOLUMES(DB2AP1))) - IDC0233I TOO MANY RIGHT PARENTHESES FOUND. EXCESS IGNORED ALIAS - LOCK - INTOEMPTY IDC0604I DATA SET BEING IMPORTED WAS EXPORTED ON 02/11/13 AT 10:02:09 IDC01653I ALIASES FROM THE PORTABLE DATA SET WERE DEFINED COCO SOSO LOLO DODO ZOZO YOYO I still don't understand why the problem happened. Is it because moving a CATALOG from a non-SMS volume to a SMS volume isn't as straight forward as it may appear. Are the OBJECTS VOLUMES PARM needed when performing this? Perhaps it was a fluke it worked? From: Darth Keller darth.kel...@assurant.com To: IBM-MAIN@LISTSERV.UA.EDU Sent: Monday, February 11, 2013 1:11:49 PM Subject: Re: UNABLE TO IMPORT - IGD17802I From the manual:If you select OUTDATASET, the VSAM data set you identify is dynamically allocated. So I think you're getting interference from your SMS routines. You may want to specify the STORAGECLAS MGMTCLAS parameters on your IMPORT cmmd also. Do you have any IGD* messages beside what you've shown to indicate what SMS is doing? Do you have any WRITE statements in your routines? ddk From: willie bunter williebun...@yahoo.com To:IBM-MAIN@LISTSERV.UA.EDU Date: 02/11/2013 09:30 AM Subject:UNABLE TO IMPORT - IGD17802I Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Good Day To All Readers, I am having a problem trying to perform the IMPORT. Here is the error message : IMPORT IDS(SYS1.ZWA6PWG.BKUP) - ODS(CATALOG.DB2TESX) - ALIAS - LOCK - INTOEMPTY IDC0604I DATA SET BEING IMPORTED WAS EXPORTED ON 02/11/13 AT 10:02:09 IGD17802I VOLUMES SPECIFIED BY THE CALLER ARE NOT IN THE SAME STORAGE GROUP FOR A GUARANTEED SPACE REQUEST, DATA SET IS CATALOG.DB2TESX IGD17219I UNABLE TO CONTINUE DEFINE OF DATA SET CATALOG.DB2TESX IDC3003I FUNCTION TERMINATED. CONDITION CODE IS 12 I verified that the volumes in the SG are in the correct storage group. The error message indicates that it is not the case. Would the error be caused because the IMPORT dsn is on a non-SMS managed volume? I would greatly appreciate your advice. Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN This e-mail message and all attachments transmitted with it may contain legally privileged and/or confidential information intended solely for the use of the addressee(s). If the reader of this message is not the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, forwarding or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete this message and all copies and backups thereof. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email
Re: How do people lock down the compilers inside CA Endevor?
Very true. Thanks for pointing this problem out. Another possible solution, which I did with different IBM module, is to write a small HLASM program. This program would verify how it was called by looking at the RB chain, to be sure it was not the first RB on the TCB is what I'm thinking. Now, you statically link this routine into the compiler initial program object. But, at the same time, you do a Binder CHANGE command to change the CSECT name of the actual compiler to something unique. And you give the HLASM routine the standard CSECT name. The HLASM does a static CALL to the new name of the actual compiler module after doing its validation, passing the original parameters to the compiler. You also put in the proper SMP/E commands so that SMP/E knows about this USERMOD to the compiler. To do compiler maintenance would require backing out the USERMOD, applying the compiler maintenance, then reapply the USERMOD. -- This is a test of the Emergency Broadcast System. If this had been an actual emergency, do you really think we'd stick around to tell you? Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Defined capacity
Radoswaw, One to the manuals has a chapter IRD, I think you will find there that the WLM checkbox triggers IRDs weight management. From my experience: forget IRD on modern machines. CPU management is disabled by Hiperdispatch and weight management and softcapping do not cooperate. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Tuesday, February 12, 2013 14:30 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Defined capacity W dniu 2013-02-12 13:50, Vernooij, CP - SPLXM pisze: Check this paper too: http://www.ibm.com/common/ssi/fcgi-bin/ssialias?infotype=SAsubtype=WH appname=STGE_ZS_ZS_USENhtmlfid=ZSW03077USENattachment=ZSW03077USEN. PDF kees. Kees, Thank you for quick response. Actually I have 3 open documents on my PC, exactly the same which you mentioned ;-) I found and answer for Q1 (MSU as a unit), which I was 99% sure. Unfortunately I found no explanation about WLM checkbox. From your response I assume I should leave it unchecked, since I don't use IRD. Regarding Q3 - I found that Initial Capping on any processor-type tab gives the same result - it disables WLM checkbox. So I assume, I shouldn't use Initial Capping for any CP type, including zIIP. BTW: General observation. It is typical for IBM - Software manuals avoid describing any details about hardware panels, while H/W manuals do not describe the meaning of the fields and panels. -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax +48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2013 r. kapitał zakładowy BRE Banku SA (w całości wpłacony) wynosi 168.555.904 złotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: UNABLE TO IMPORT - IGD17802I
Garth, I modified the SC ACS routine so as to exclude the GUASPACE however I got the same result. What I think is if a CATALOG existed on a non-SMS volume and then placed on a SMS manged volume the OBJECT VOLUME parms is required. I ran another test. I allocated a CATALOG on a non-sms volume. Next I did the EXPORT to a SMS volume, I then allocated on a SMS volume (not guaranteed space ) and tried the IMPORT. The job failed with the same error code. I then added the OBJECT VOLUME parms and reran the step and it worked. This leads me to believe that when allocating a CATALOG on a SMS volume (which used to be on a non-SMS managed volume) the OBJECT VOLUME parms is required if performing an IMPORT. Perhaps somebody can correct me if I am wrong. From: Darth Keller darth.kel...@assurant.com To: IBM-MAIN@LISTSERV.UA.EDU Sent: Tuesday, February 12, 2013 8:30:44 AM Subject: Re: UNABLE TO IMPORT - IGD17802I Willie - I don't think it was a fluke that it worked. I think it worked as designed. I think that you need to look at the SMS constructs assigned to the catalog when it was being allocated without your OBJECT(VOLUMES statement as it appears to me the Guaranteed Space attribute was what was biting you. With what you were trying to accomplish, going to from non-SMS to SMS, OBJECTS(VOLUMES was required. This is a case, I think, where well placed WRITE statements in your SMS routines would help you understand what's going on. ddk From: willie bunter williebun...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 02/11/2013 03:47 PM Subject: Re: UNABLE TO IMPORT - IGD17802I Sent by: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Darth, I am not sure if you saw my earlier post. I think the problem is fixed. This is what I did. IMPORT IDS(SYS1.ZWA6PWG.BKUP) - ODS(CATALOG.DB2TESX) - OBJECTS(CATALOG.DB2TESX - VOLUMES(DB2AP1))) - IDC0233I TOO MANY RIGHT PARENTHESES FOUND. EXCESS IGNORED ALIAS - LOCK - INTOEMPTY IDC0604I DATA SET BEING IMPORTED WAS EXPORTED ON 02/11/13 AT 10:02:09 IDC01653I ALIASES FROM THE PORTABLE DATA SET WERE DEFINED COCO SOSO LOLO DODO ZOZO YOYO I still don't understand why the problem happened. Is it because moving a CATALOG from a non-SMS volume to a SMS volume isn't as straight forward as it may appear. Are the OBJECTS VOLUMES PARM needed when performing this? Perhaps it was a fluke it worked? From: Darth Keller darth.kel...@assurant.com To: IBM-MAIN@LISTSERV.UA.EDU Sent: Monday, February 11, 2013 1:11:49 PM Subject: Re: UNABLE TO IMPORT - IGD17802I From the manual: If you select OUTDATASET, the VSAM data set you identify is dynamically allocated. So I think you're getting interference from your SMS routines. You may want to specify the STORAGECLAS MGMTCLAS parameters on your IMPORT cmmd also. Do you have any IGD* messages beside what you've shown to indicate what SMS is doing? Do you have any WRITE statements in your routines? ddk From: willie bunter williebun...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 02/11/2013 09:30 AM Subject: UNABLE TO IMPORT - IGD17802I Sent by: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Good Day To All Readers, I am having a problem trying to perform the IMPORT. Here is the error message : IMPORT IDS(SYS1.ZWA6PWG.BKUP) - ODS(CATALOG.DB2TESX) - ALIAS - LOCK - INTOEMPTY IDC0604I DATA SET BEING IMPORTED WAS EXPORTED ON 02/11/13 AT 10:02:09 IGD17802I VOLUMES SPECIFIED BY THE CALLER ARE NOT IN THE SAME STORAGE GROUP FOR A GUARANTEED SPACE REQUEST, DATA SET IS CATALOG.DB2TESX IGD17219I UNABLE TO CONTINUE DEFINE OF DATA SET CATALOG.DB2TESX IDC3003I FUNCTION TERMINATED. CONDITION CODE IS 12 I verified that the volumes in the SG are in the correct storage group. The error message indicates that it is not the case. Would the error be caused because the IMPORT dsn is on a non-SMS managed volume? I would greatly appreciate your advice. Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN This e-mail message and all attachments transmitted with it may contain legally privileged and/or confidential information intended solely for the
Re: How do people lock down the compilers inside CA Endevor?
On 2/12/2013 8:49 AM, John McKown wrote: Another possible solution, which I did with different IBM module, is to write a small HLASM program. This program would verify how it was called by looking at the RB chain, to be sure it was not the first RB on the TCB is what I'm thinking. Now, you statically link this routine into the compiler initial program object. But, at the same time, you do a Binder CHANGE command to change the CSECT name of the actual compiler to something unique. And you give the HLASM routine the standard CSECT name. The HLASM does a static CALL to the new name of the actual compiler module after doing its validation, passing the original parameters to the compiler. The problem with this is that a capable programmer will LOAD the module, and can use BSAM or EXCP to explore the module structure, or search through storage, then enter the code at any offset desired. I prefer the earlier suggestion of controlling write access to critical data sets. SMF reports may be used to check access, at which point it becomes a management problem. Gerhard Postpischil Bradford, Vermont -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Defined capacity
To enable the WorkLoad Manager (WLM), select Enable workload manager. Selecting WLM from one processor details automatically selects WLM from the other processor details and conversely. Specify the minimum and maximum processing weights. Change LPAR management weights based on customer policies and current work loads. Indeed, to enable WLM I have to check Enable WLM. I wouldn't know that! Of course there is no explanation what does it mean enable WLM. WLM is enabled on every z/OS image and cannot be disabled. So, there must be some other explanation of the words above. IRD? No clue about IRD. However I found WLM checkbox in the chapter about IRD: For each logical partition that will participate in LPAR weight management, do the following: - Make sure that Initial Capping is turned off. WLM cannot manage the weight of a logical partition that is capped. - Enter the initial processing weight. This becomes the logical partition's weight when it is first IPLed. - Enter the minimum and maximum weights. These set the lower and upper limits for the weights that WLM will assign to the logical partition. - Check the WLM Managed box. This is the final step in activating LPAR weight management. --- THAT'S THE CHECKBOX! BTW: I never used IRD for simple reason: lack of sysplex. So, to my knowledge: WLM checkbox - used only for IRD, leave unchecked otherwise. Defined Capacity - simply put non-zero value, uncheck Initial Capping on CP, zIIP, zAAP. Thank you Kees! -- Radoslaw Skorupka Lodz, Poland P.S. I just found another helpful explanation: Image Pforile, Options tab: CP management cluster name The name specified for the CP management cluster. I suspect it's also IRD related stuff. W dniu 2013-02-12 14:58, Vernooij, CP - SPLXM pisze: Radoswaw, One to the manuals has a chapter IRD, I think you will find there that the WLM checkbox triggers IRDs weight management. From my experience: forget IRD on modern machines. CPU management is disabled by Hiperdispatch and weight management and softcapping do not cooperate. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Tuesday, February 12, 2013 14:30 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Defined capacity W dniu 2013-02-12 13:50, Vernooij, CP - SPLXM pisze: Check this paper too: http://www.ibm.com/common/ssi/fcgi-bin/ssialias?infotype=SAsubtype=WH appname=STGE_ZS_ZS_USENhtmlfid=ZSW03077USENattachment=ZSW03077USEN. PDF kees. Kees, Thank you for quick response. Actually I have 3 open documents on my PC, exactly the same which you mentioned ;-) I found and answer for Q1 (MSU as a unit), which I was 99% sure. Unfortunately I found no explanation about WLM checkbox. From your response I assume I should leave it unchecked, since I don't use IRD. Regarding Q3 - I found that Initial Capping on any processor-type tab gives the same result - it disables WLM checkbox. So I assume, I shouldn't use Initial Capping for any CP type, including zIIP. BTW: General observation. It is typical for IBM - Software manuals avoid describing any details about hardware panels, while H/W manuals do not describe the meaning of the fields and panels. -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax +48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88.
Re: Defined capacity
Yes, LPAR Clusters are IRD managed groups of LPARs. Don't forget to read about Weight in relation to 'phantom load' and 'capping pattern', to avoid erratic Lpar performance. I always like to have a monitor telling what is going on in the system, so I will not be surprised by angry telephone calls and have no clue where to start looking. I use Mainview, I don't know RMF, but it probably also displays the 4HrRA, the current LPAR utilization and the status of softcapping, so you know why the system is doing what it is doing. HTH, Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Tuesday, February 12, 2013 15:36 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Defined capacity To enable the WorkLoad Manager (WLM), select Enable workload manager. Selecting WLM from one processor details automatically selects WLM from the other processor details and conversely. Specify the minimum and maximum processing weights. Change LPAR management weights based on customer policies and current work loads. Indeed, to enable WLM I have to check Enable WLM. I wouldn't know that! Of course there is no explanation what does it mean enable WLM. WLM is enabled on every z/OS image and cannot be disabled. So, there must be some other explanation of the words above. IRD? No clue about IRD. However I found WLM checkbox in the chapter about IRD: For each logical partition that will participate in LPAR weight management, do the following: - Make sure that Initial Capping is turned off. WLM cannot manage the weight of a logical partition that is capped. - Enter the initial processing weight. This becomes the logical partition's weight when it is first IPLed. - Enter the minimum and maximum weights. These set the lower and upper limits for the weights that WLM will assign to the logical partition. - Check the WLM Managed box. This is the final step in activating LPAR weight management. --- THAT'S THE CHECKBOX! BTW: I never used IRD for simple reason: lack of sysplex. So, to my knowledge: WLM checkbox - used only for IRD, leave unchecked otherwise. Defined Capacity - simply put non-zero value, uncheck Initial Capping on CP, zIIP, zAAP. Thank you Kees! -- Radoslaw Skorupka Lodz, Poland P.S. I just found another helpful explanation: Image Pforile, Options tab: CP management cluster name The name specified for the CP management cluster. I suspect it's also IRD related stuff. W dniu 2013-02-12 14:58, Vernooij, CP - SPLXM pisze: Radoswaw, One to the manuals has a chapter IRD, I think you will find there that the WLM checkbox triggers IRDs weight management. From my experience: forget IRD on modern machines. CPU management is disabled by Hiperdispatch and weight management and softcapping do not cooperate. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Tuesday, February 12, 2013 14:30 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Defined capacity W dniu 2013-02-12 13:50, Vernooij, CP - SPLXM pisze: Check this paper too: http://www.ibm.com/common/ssi/fcgi-bin/ssialias?infotype=SAsubtype=WH appname=STGE_ZS_ZS_USENhtmlfid=ZSW03077USENattachment=ZSW03077USEN. PDF kees. Kees, Thank you for quick response. Actually I have 3 open documents on my PC, exactly the same which you mentioned ;-) I found and answer for Q1 (MSU as a unit), which I was 99% sure. Unfortunately I found no explanation about WLM checkbox. From your response I assume I should leave it unchecked, since I don't use IRD. Regarding Q3 - I found that Initial Capping on any processor-type tab gives the same result - it disables WLM checkbox. So I assume, I shouldn't use Initial Capping for any CP type, including zIIP. BTW: General observation. It is typical for IBM - Software manuals avoid describing any details about hardware panels, while H/W manuals do not describe the meaning of the fields and panels. -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be
Re: How do people lock down the compilers inside CA Endevor?
On Tue, 12 Feb 2013 07:49:27 -0600, John McKown wrote: Another possible solution, which I did with different IBM module, is to write a small HLASM program. This program would verify how it was called by looking at the RB chain, to be sure it was not the first RB on the TCB is what I'm thinking. ... I invoke a lot of programs with Rexx address LINKMVS. How does that affect the RB chain? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
On Tue, 12 Feb 2013 09:11:03 -0600, Paul Gilmartin paulgboul...@aim.com wrote: On Tue, 12 Feb 2013 07:49:27 -0600, John McKown wrote: Another possible solution, which I did with different IBM module, is to write a small HLASM program. This program would verify how it was called by looking at the RB chain, to be sure it was not the first RB on the TCB is what I'm thinking. ... I invoke a lot of programs with Rexx address LINKMVS. How does that affect the RB chain? Just as you might expect. The program will be a new RB under whatever RB was running your REXX program. It certainly won't be the same as EXEC PGM=(the program) and so this would be a trivial bypass to that proposed security mechanism. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
Good question. I don't know the TCB/RB structure that REXX uses. If I had time, I'd blow up some programs to be a dump. But I'm a bit busy right now. No, not with Angry Birds. With real work grin/ On Tue, Feb 12, 2013 at 9:11 AM, Paul Gilmartin paulgboul...@aim.comwrote: On Tue, 12 Feb 2013 07:49:27 -0600, John McKown wrote: Another possible solution, which I did with different IBM module, is to write a small HLASM program. This program would verify how it was called by looking at the RB chain, to be sure it was not the first RB on the TCB is what I'm thinking. ... I invoke a lot of programs with Rexx address LINKMVS. How does that affect the RB chain? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- This is a test of the Emergency Broadcast System. If this had been an actual emergency, do you really think we'd stick around to tell you? Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
I agree with Gerhard. Control of write-access to critical production libraries is reasonable and easily achieved using RACF or an equivalent. To go further is unwise for at least three reasons. First, different people pursue development in different ways; and to attempt to permit it to be done in only one, notionally canonical way is arrogant and, in my experienvce at least, almost always retrograde. It enshrines some manager's already obsolescent notions of how to do things 'properly'. Some of the strongest objections to mainframes that I hear from the young have to do not with mainframes themselves and not even with JCL. They have to do with the bureaucratic encrustations---Too many rules!--- that surround mainframe use. Second, as Gerhard has already pointed out, able people will defeat any control mechanisms you put in place; and they will make a game of doing so. Third, such schemes encourage user groups to keep what are really production systems under their own private control. In two very large American banks that I know of the daily B statement to the Federal Reserve is fired off by an assistant treasurer sitting at a TSO terminal, triggering substantial, crucial processing that the IT organization wots not of. In raising children it is useful to ask the question: Do I need to say no? before one says it reflexively; and the same principle is useful in IT management. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: blksize for ML2 migrated dataset via HSM
Per MVS/QuickRef 7.6
Syntax
BLKSIZE= {value}
{valueK}
{valueM}
{valueG}
Subparameter Definition
value
Specifies the maximum length, in bytes, of a block.
The number of bytes that you specify for BLKSIZE depends on the
device type and the record format for the data set. The maximum
is 32760 for DASD data sets and 2,147,483,648 for tape or DUMMY
data sets, except for data sets on magnetic tape with ISO/ANSI
version 3 labels, where the minimum value for BLKSIZE is 18 bytes
and the maximum is 2048 bytes. To allow a block size greater than
2048, use installation exit routine IFG0193G. Version 4 labels do
not have this restriction but is 2,760 for DASD, ISO/ANSI Version 4
tape labels, and other data sets.
Thank you and have a Terrific day!
Jonathan Goossen, DTM
ACT Mainframe Storage Group
Personal: 651-361-4541
Department Support Line: 651-361-
For help with communication and leadership skills checkout Woodwinds
Toastmasters.
IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU wrote on
02/12/2013 02:22:30 AM:
From: Mike Wood mww...@ntlworld.com
To: IBM-MAIN@LISTSERV.UA.EDU
Date: 02/12/2013 02:22 AM
Subject: Re: blksize for ML2 migrated dataset via HSM
Sent by: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU
I wonder where CA-1 picks up the extra data from.
Further to my earlier answer about the DCBE
It is possible that CA-1 picks the value up from the Tape Exits
Parameters, Main parameter list. The TEPM, mapped by IFGTEP, created
by O/C/EOV and passed to tape installation exits. If CA-1 does not
use the installation exits interface it will have to crawl through
the DCB to DCBE for cases where the LBI is used.
There is a technote on the CBTtape http://www.cbttape.org/features/
Technote-largeblk.htm
Mike Wood
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
This e-mail message and all attachments transmitted with it may
contain legally privileged and/or confidential information intended
solely for the use of the addressee(s). If the reader of this
message is not the intended recipient, you are hereby notified that
any reading, dissemination, distribution, copying, forwarding or
other use of this message or its attachments is strictly
prohibited. If you have received this message in error, please
notify the sender immediately and delete this message and all
copies and backups thereof. Thank you.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS v2.1 preview
Peter, Thanks for the info. If this not a replacement for SYSCONS, what is it intedned to be for? Will it be available to users that are accessing the HMC via web browser? Or will one have to point their emulator to a special port on the HMC like accessing an IBM i console via HMC remotely? thanks Dana On Mon, 11 Feb 2013 15:50:49 -0600, Peter Fatzinger f...@us.ibm.com wrote: Dana, These consoles aren't intended as a replacement for the SYSCONS so they will have their own designation, DEVNUM(HMCS). Peter Fatzinger z/OS Core Components Development and Service -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 2.1 UNIX Enhancements (was: SFTP vs. FTPS)
Tim, How is z/OSMF being enhanced to submit jobs to z/OS Unix??? (or what does the preview say that leads you to believe this? ) Kirk Wolf Dovetailed Technologies http://dovetail.com +1 636.300.0901 On Tue, Feb 12, 2013 at 4:57 AM, Timothy Sipples sipp...@sg.ibm.com wrote: I'm reliably informed there's more UNIX-related content planned for z/OS 2.1 than is listed in the preview announcement. The preview announcement is evidently what IBM feels comfortable describing at this stage, but I wouldn't be surprised if there's a bit more. (I'm speaking only for myself, as always.) Also, you have to read IBM announcement letters in their totality. z/OS UNIX substantially benefits from new features and improvements that are listed in other sections besides the section labeled UNIX. For example, are the ISPF-related improvements involving much more support for ASCII and Unicode highly relevant to UNIX? You bet, but they're listed in a different section as I recall. zFS, Unicode, and z/OS Management Facility (to pick three examples among several) all have tons of UNIX relevance -- even exclusive UNIX relevance -- but they're listed in other sections. For example, z/OSMF is being enhanced to make it much easier to submit jobs directly to z/OS UNIX. Is that a UNIX enhancement? Sure, I think so, and also because z/OSMF is something that lives in UNIX. (And in z/OS 2.1 it'll be much easier to install and get up and running because it'll be Liberty packaged. The WebSphere Liberty Profile is very convenient.) The stream I/O extensions are described pretty well in the preview announcement, I think. Even if they aren't, all should be clear by September. Timothy Sipples Consulting Enterprise IT Architect (Based in Singapore) E-Mail: sipp...@sg.ibm.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 2.1 UNIX Enhancements (was: SFTP vs. FTPS)
I couldn't even parse that. What does submit jobs to z/OS UNIX even mean? I guess, to me, the use of the word job indicates a batch job with JCL. Which has nothing to do with UNIX. Now, if they had said start a UNIX process to run a command or script, or sequence of them (like Co:Z Batch does), it would have been clear to me. But perhaps not to others. On Tue, Feb 12, 2013 at 10:34 AM, Kirk Wolf k...@dovetail.com wrote: Tim, How is z/OSMF being enhanced to submit jobs to z/OS Unix??? (or what does the preview say that leads you to believe this? ) Kirk Wolf Dovetailed Technologies http://dovetail.com +1 636.300.0901 -- This is a test of the Emergency Broadcast System. If this had been an actual emergency, do you really think we'd stick around to tell you? Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Need for two separate zOS1.13 MIGLIBs?
On 11 February 2013 21:16, Shmuel Metz (Seymour J.) shmuel+...@patriot.net wrote: In ndghh8da6en64rgvru2f0sk6gfa0qji...@4ax.com, on 02/11/2013 at 12:04 PM, Binyamin Dissen bdis...@dissensoftware.com said: Are there a separate Z/os 01.13.00-0 and 01.13.00-1 miglibs? The MIGLIB you use for IPCS should be identical to the one on the system taking the dump. Even a difference of a single PTF could conceivably cause problems. Will IPCS reliably report a mismatch down to that level of detail? In an environment where we get dumps from customers at a number of different system levels, it is obviously critical (and I think I use that word correctly) to ensure there is no mismatch. It is impractical, to say the least, to request an entire SMP/E LIST to go along with every dump. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
Gil would know the answer to the first half of this ... I'm not a UNIX expert. My sole claim to UNIX expertise is that I once *managed* a bunch of UNIX experts. I seem to recall that in UNIX you can do something like the following -- and I'm using the wrong terms, but hopefully you can get what I mean. Suppose you have an executable X. You can set its security such that only user FOO can run it. FOO is not a real person. Instead, you have a program Y that you set up such that it runs with the authority of FOO. So then a user can potentially run program Y which in turn runs program X, but that user cannot himself run X all by itself. Is my recollection correct? z/OS and RACF don't have an equivalent facility, do they? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Paul Gilmartin Sent: Tuesday, February 12, 2013 7:11 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: How do people lock down the compilers inside CA Endevor? On Tue, 12 Feb 2013 07:49:27 -0600, John McKown wrote: Another possible solution, which I did with different IBM module, is to write a small HLASM program. This program would verify how it was called by looking at the RB chain, to be sure it was not the first RB on the TCB is what I'm thinking. ... I invoke a lot of programs with Rexx address LINKMVS. How does that affect the RB chain? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
The problem with this is that a capable programmer will LOAD the module, and can use BSAM or EXCP to explore the module structure, or search through storage, then enter the code at any offset desired. Why would somebody go to all that trouble? If they have the time to do that, when are they doing the job they're hired for? I, as a rule, do my job and leave the complex work arounds alone. I think you're giving your programmers too much credit. - Ted MacNEIL eamacn...@yahoo.ca Twitter: @TedMacNEIL -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
On Tue, 12 Feb 2013 09:04:10 -0800, Charles Mills wrote: Gil would know the answer to the first half of this ... I'm not a UNIX expert. My sole claim to UNIX expertise is that I once *managed* a bunch of UNIX experts. I seem to recall that in UNIX you can do something like the following -- and I'm using the wrong terms, but hopefully you can get what I mean. Suppose you have an executable X. You can set its security such that only user FOO can run it. FOO is not a real person. Instead, you have a program Y that you set up such that it runs with the authority of FOO. So then a user can potentially run program Y which in turn runs program X, but that user cannot himself run X all by itself. Is my recollection correct? Yes. FOO must be defined as a user, but you needn't disclose its password. There are many undesirable consequences to running X with authority of FOO. File permissions for the first. z/OS and RACF don't have an equivalent facility, do they? since MVS _is_ UNIX, you can do the same with z/OS. Or, with RACF, limit access to the linklib containing FOO. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
Ah, you are thinking of one of two possibilities. One is to use sudo which first switches to a specified user (often root), then runs the given command arguments. Use of this is controlled via a file called /etc/sudoers. This is a rather generic thing. Another way to do it is to write a specific command, Y, which is marked setuid or setgid to change either the uid or gid or both to the program's uid/gid. That command can then execute the given command, X, via the system() call. z/OS does not have an equivalent facility for batch programs. z/OS UNIX, being a true, branded, UNIX system does have both of the above abilities. Not that it helps you. One thing that does occur to me is to use the PADS in RACF to only allow access to the compiler containing library from your driver program. I'm not too sure about this. Perhaps someone who uses PADS can say? It might will require your driver program, Y, residing in a the STEPLIB, with the PADS library (or libraries) being allocated to a different DD name which the driver program OPENs with a DCB, said DCB being passed to ATTACHX via the DCB= parameter in order to change the new TCB's default execution libraries to those on the special DD name. The driver might even have smarts to look at some PARM passed to it, validate it, and then use that program in the ATTACHX rather than hard code the invoked program. It would make it a bit more difficult to program. And don't ask me how well this will get along with CA-Endevor. Just a thought. This does put things back into RACF control of the compiler libraries. On Tue, Feb 12, 2013 at 11:04 AM, Charles Mills charl...@mcn.org wrote: Gil would know the answer to the first half of this ... I'm not a UNIX expert. My sole claim to UNIX expertise is that I once *managed* a bunch of UNIX experts. I seem to recall that in UNIX you can do something like the following -- and I'm using the wrong terms, but hopefully you can get what I mean. Suppose you have an executable X. You can set its security such that only user FOO can run it. FOO is not a real person. Instead, you have a program Y that you set up such that it runs with the authority of FOO. So then a user can potentially run program Y which in turn runs program X, but that user cannot himself run X all by itself. Is my recollection correct? z/OS and RACF don't have an equivalent facility, do they? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Paul Gilmartin Sent: Tuesday, February 12, 2013 7:11 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: How do people lock down the compilers inside CA Endevor? On Tue, 12 Feb 2013 07:49:27 -0600, John McKown wrote: Another possible solution, which I did with different IBM module, is to write a small HLASM program. This program would verify how it was called by looking at the RB chain, to be sure it was not the first RB on the TCB is what I'm thinking. ... I invoke a lot of programs with Rexx address LINKMVS. How does that affect the RB chain? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- This is a test of the Emergency Broadcast System. If this had been an actual emergency, do you really think we'd stick around to tell you? Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
How do I set European date format in Softcopy Reader?
Dear Listers, Having the habit of reading dates as dd/mm/, I would like to tell Softcopy Reader to show me the dates in that format. The users guide does not mention anything about this and Google comes up blank. Even a search in the archives of this estimable list does not bring up an answer. So, how do I set European date format in Softcopy Reader? Thanks and very best regards, Jantje. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
On 2/12/2013 12:22 PM, Ted MacNEIL wrote: Why would somebody go to all that trouble? If they have the time to do that, when are they doing the job they're hired for? Working as a consultant for a government agency, I had to modify my (batch) jobs calling for tapes to have local control cards listing all the tape serials the job would or might call for (and the system had IBM provided mods to allow up to 100 volumes per file). And the tapes changed during the week in response to production processing. The agency did provide a CP to get the serial list for a specific DSN. After a few weeks I got sick and tired of this, and wrote a REXX routine to remove old cards from the current edit file, do a lookup for each DSN, and build the correct cards after the job card. It wasn't part of the job I was hired for, but it easily saved an hour a day to be used for more productive work. It was adapted by my group, and eventually saw wider use. I, as a rule, do my job and leave the complex work arounds alone. I don't want to sound insulting, but there is an old saying that progress is made by the dissatisfied (and possibly mentally unstable g). Unless you are a blue collar worker, I suspect there is an implicit assumption that any ideas for improving work flow should be communicated to management. At the agency in question ENDEVOR was used for development, acceptance testing, and production. As a programmer I found this cumbersome. Frequently I would test a subroutine or code snippet using the plain old assembler, and only after working out the kinks integrated the code into the development environment. This was much faster than doing all my work in ENDEVOR. I think you're giving your programmers too much credit. Perhaps, but if they couldn't hack it, they needed training. Gerhard Postpischil Bradford, Vermont -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Use of PDSE font library datasets with IP Printway
Rick, I took one little test case I had and copied all the AFP resources, including fonts, into PDSE libraries and the afpxpdf transform seemed to have no problem with it. --Roger On Thu, Jan 31, 2013 at 6:47 AM, Rick Stetser rick.stet...@yahoo.comwrote: We're z/OS 1.11 using IP Printway (aka Infoprint). I'm considering changing one of the font library datasets used with Infoprint from a PDS to a PDSE. Does anyone know if this would cause a problem? Thanks for any responses. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
Thanks! Right, 'setuid' -- that's the UNIX buzzword my guys used g. I was not aware of PADS. Just found it in the RACF Sec Admin Guide. Looks similar in concept. Might do the job -- let me read through it. I like that it is supported and not security by obscurity. BTW, there is no CA Endevor in this picture -- I just thought that whatever Endevor administrators did might work for my customer. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Tuesday, February 12, 2013 9:40 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: How do people lock down the compilers inside CA Endevor? Ah, you are thinking of one of two possibilities. One is to use sudo which first switches to a specified user (often root), then runs the given command arguments. Use of this is controlled via a file called /etc/sudoers. This is a rather generic thing. Another way to do it is to write a specific command, Y, which is marked setuid or setgid to change either the uid or gid or both to the program's uid/gid. That command can then execute the given command, X, via the system() call. z/OS does not have an equivalent facility for batch programs. z/OS UNIX, being a true, branded, UNIX system does have both of the above abilities. Not that it helps you. One thing that does occur to me is to use the PADS in RACF to only allow access to the compiler containing library from your driver program. I'm not too sure about this. Perhaps someone who uses PADS can say? It might will require your driver program, Y, residing in a the STEPLIB, with the PADS library (or libraries) being allocated to a different DD name which the driver program OPENs with a DCB, said DCB being passed to ATTACHX via the DCB= parameter in order to change the new TCB's default execution libraries to those on the special DD name. The driver might even have smarts to look at some PARM passed to it, validate it, and then use that program in the ATTACHX rather than hard code the invoked program. It would make it a bit more difficult to program. And don't ask me how well this will get along with CA-Endevor. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
snip BTW, there is no CA Endevor in this picture -- I just thought that whatever Endevor administrators did might work for my customer. /snip FWIW, it has been my experience that most people do not perform their entire development cycle within Endevor. Most, however, insist that production migrations occur via Endevor. No other method allowed. This is normally accomplished by protecting the target libraries w/RACF/ACF2,... to prevent anyone other than Endevor from writing to the target libraries. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
We enforce Endevor by simply not letting the programmers update anything above TEST. Moves into MDOF or PROD must be done by an authorized Endevor administrator. Basically, this is our Production Control staff as a part of controlling production. On Tue, Feb 12, 2013 at 12:07 PM, Staller, Allan allan.stal...@kbmg.comwrote: snip BTW, there is no CA Endevor in this picture -- I just thought that whatever Endevor administrators did might work for my customer. /snip FWIW, it has been my experience that most people do not perform their entire development cycle within Endevor. Most, however, insist that production migrations occur via Endevor. No other method allowed. This is normally accomplished by protecting the target libraries w/RACF/ACF2,... to prevent anyone other than Endevor from writing to the target libraries. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- This is a test of the Emergency Broadcast System. If this had been an actual emergency, do you really think we'd stick around to tell you? Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
snip This is normally accomplished by protecting the target libraries w/RACF/ACF2,... to prevent anyone other than Endevor from writing to the target libraries. We enforce Endevor by simply not letting the programmers update anything above TEST. Moves into MDOF or PROD must be done by an authorized Endevor administrator. Basically, this is our Production Control staff as a part of controlling production. /snip No conflict detected. Target may be QC or Prod. Same result. No update to target. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
But it's on OCD control freak with MONEY! Which makes him/her simply a tad eccentric. grin/ On Tue, Feb 12, 2013 at 12:45 PM, Gibney, Dave gib...@wsu.edu wrote: I think the answer to the question How do sites restrict access to compliers Endevor or not, is that most don't. For you particular question, remove the complier load libraries from all systems except the one(s) where their use is intended. Restrict access to the systems with compilers, such that the only access is via the intended pathways to the compliers. That is, no direct TSO/ISPF, FTP, or whatever. I agree with the others, this sounds like the unsound desires of an OCD control freak. Dave Gibney Information Technology Services Washington State University -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Burroughs SPO - was RE: JES2 Hist from Jack Schudel(ret.)
We were having a ufiche party for the 360/50 and the lead systems guys got an 'emergency call' from a former student at one of the local mills. They had a 3500 and had run the payroll three times and different results every time. The ironworkers were milling around in the parking lot with evil intentions. Did we have a 'storage oscilloscope'? Well we rounded up a couple and headed for the mill. Long story short they had expanded, but had the new wing of 50 HP Bessemer converters on the same power feed as the computer room. Every time one of those big motors kicked in they would get about a 140 volt spike on the 3500 bus. The memory would actually change state. Isolation transformer fixed 'em right up. In a message dated 2/12/2013 5:13:43 A.M. Central Standard Time, rsandf...@healthplan.com writes: 1969-1973, we used the Burroughs B3500 and the SPO was indeed a teletype. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Use of PDSE font library datasets with IP Printway
Guess it's site dependent. Fontlib is last thing I'd even consider for AFP. With the uploading and font substitution in 'smart' printers probably won't buy you much. An interesting exercise would be to delete a member and replace it in a PDSE. Past versions of AFP would redrive with a BLDL to pickup the changes. Another way to test would be to use the USERLIB on an OUTPUT dd. In a message dated 2/12/2013 11:51:27 A.M. Central Standard Time, rogerbo...@gmail.com writes: including fonts, into PDSE libraries and the afpxpdf transform seemed to have no problem with it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
SV: How do people lock down the compilers inside CA Endevor?
You got a couple of answers from those with knowledge. As they were not quite positive I may chirp in with the suggestion of obfuscation. E g encrypt a part or the whole of program X and let program Y decrypt that at execution time. The decryption key and decryption routine may be arbitrarily obfuscated. (This of course assumes that program X can be changed in that way.) Regards Thomas Berg Thomas Berg Specialist z/OS/IT Delivery SWEDBANK AB (Publ) -Ursprungligt meddelande- Från: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] För Charles Mills Skickat: den 11 februari 2013 23:33 Till: IBM-MAIN@LISTSERV.UA.EDU Ämne: How do people lock down the compilers inside CA Endevor? This is a theoretical question. I am *not* an Endevor user. I am trying to solve a *similar* problem and this is the best way to explain it. Here's the question: at shops that use Endevor for all compiles, how do you lock down the compilers so that programmers can only run the compilers under Endevor, not with plain old JCL? What about programmers who might have private copies of the compiler load libraries? (More generically, if X is a load module, is it possible to set things up such that program Y can run X, but PGM=X will never work? How? I have thought about engineering a rename to a name that JCL will not accept (but LINK will) but I would just as soon not get that weird; rather do things in a more supported way.) Thanks, Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
Interesting idea. If encryption is overkill, then perhaps a simple checksum such as used by cksum. Very easy to do if the OP has a C compiler since there are so many examples on the Web. On Tue, Feb 12, 2013 at 1:40 PM, Thomas Berg thomas.b...@swedbank.sewrote: You got a couple of answers from those with knowledge. As they were not quite positive I may chirp in with the suggestion of obfuscation. E g encrypt a part or the whole of program X and let program Y decrypt that at execution time. The decryption key and decryption routine may be arbitrarily obfuscated. (This of course assumes that program X can be changed in that way.) Regards Thomas Berg Thomas Berg Specialist z/OS/IT Delivery SWEDBANK AB (Publ) -Ursprungligt meddelande- Från: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] För Charles Mills Skickat: den 11 februari 2013 23:33 Till: IBM-MAIN@LISTSERV.UA.EDU Ämne: How do people lock down the compilers inside CA Endevor? This is a theoretical question. I am *not* an Endevor user. I am trying to solve a *similar* problem and this is the best way to explain it. Here's the question: at shops that use Endevor for all compiles, how do you lock down the compilers so that programmers can only run the compilers under Endevor, not with plain old JCL? What about programmers who might have private copies of the compiler load libraries? (More generically, if X is a load module, is it possible to set things up such that program Y can run X, but PGM=X will never work? How? I have thought about engineering a rename to a name that JCL will not accept (but LINK will) but I would just as soon not get that weird; rather do things in a more supported way.) Thanks, Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- This is a test of the Emergency Broadcast System. If this had been an actual emergency, do you really think we'd stick around to tell you? Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IPSec filter rule definition for sysplex distributed dynamic VIPA
ROUTED or LOCAL? I *think* it may have to be ROUTED but I am not finding any information to conclusively prove that and before I test it out, I ask. The reason I ask is because I have reason to specify a traffic descriptor for a restricted set of ports and that would not be in compliance with RFC 4301. I understand that the distributing stack forwards the packets, but at the same time the VIPA is on the distributing stack... so is it local or is it routed? Thomas Ambros Operating Systems and Connectivity Engineering 518-436-6433 This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. This communication may contain nonpublic personal information about consumers subject to the restrictions of the Gramm-Leach-Bliley Act. You may not directly or indirectly reuse or redisclose such information for any purpose other than to provide the services for which you are receiving the information. 127 Public Square, Cleveland, OH 44114 If you prefer not to receive future e-mail offers for products or services from Key send an e-mail to mailto:dnereque...@key.com with 'No Promotional E-mails' in the SUBJECT line. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: User Internal
In c11ded818b17214792b97fba28712bed15f6d95...@jer-email1.jer.ad.malam.com, on 02/12/2013 at 11:44 AM, gad...@malam.com said: 3. When a command is issued from the console Was an operator logged on at the time? -- Shmuel (Seymour J.) Metz, SysProg and JOAT Atid/2http://patriot.net/~shmuel We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Need for two separate zOS1.13 MIGLIBs?
Are there a separate Z/os 01.13.00-0 and 01.13.00-1 miglibs? The MIGLIB you use for IPCS should be identical to the one on the system taking the dump. Even a difference of a single PTF could conceivably cause problems. Will IPCS reliably report a mismatch down to that level of detail? In an environment where we get dumps from customers at a number of different system levels, it is obviously critical (and I think I use that word correctly) to ensure there is no mismatch. It is impractical, to say the least, to request an entire SMP/E LIST to go along with every dump. While it is conceivable that a single PTF could cause problems, the organizations that it would cause the most problems for would be IBM level 2 support groups. So we are reasonably well motivated to try to avoid that situation where possible. Since we needed to add the -n detection to deal with the Web deliverable introducing significant changes in something that was not packaged as a new release or modification level, we at least now have a differentiator which can be changed at the discretion of the technical people, regardless of the packaging mechanism (which might be decided by non-technical people) for the code which requires the change. But since we technical people are inconvenienced much as anyone by non-release incompatible changes to SADMP and IPCS, we will continue to try to avoid such things when possible. And we will try to make it clear when such a thing does occur (for example, via a doc hold, although I don't know if that was thought of for the z/OS 1.13 Web deliverable). Jim Mulder z/OS System Test IBM Corp. Poughkeepsie, NY -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
I am fluent in C/C++ and have a fast checksum in my bag of tricks, FWIW. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Tuesday, February 12, 2013 11:49 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: How do people lock down the compilers inside CA Endevor? Interesting idea. If encryption is overkill, then perhaps a simple checksum such as used by cksum. Very easy to do if the OP has a C compiler since there are so many examples on the Web. On Tue, Feb 12, 2013 at 1:40 PM, Thomas Berg thomas.b...@swedbank.sewrote: You got a couple of answers from those with knowledge. As they were not quite positive I may chirp in with the suggestion of obfuscation. E g encrypt a part or the whole of program X and let program Y decrypt that at execution time. The decryption key and decryption routine may be arbitrarily obfuscated. (This of course assumes that program X can be changed in that way.) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: How do people lock down the compilers inside CA Endevor?
Ted: *NEVER* underestimate programmers. They can and do figure out ways around anything you try and put in place. I have seen programmer get themselves in supervisor state key 0 without access to an authorized library. They had a tricky bypass and it worked that is all i will say. When IBM closed the loophole they threatened to quit. They did have management over a barrel but at least management stood up to them. Ed On Feb 12, 2013, at 11:22 AM, Ted MacNEIL wrote: The problem with this is that a capable programmer will LOAD the module, and can use BSAM or EXCP to explore the module structure, or search through storage, then enter the code at any offset desired. Why would somebody go to all that trouble? If they have the time to do that, when are they doing the job they're hired for? I, as a rule, do my job and leave the complex work arounds alone. I think you're giving your programmers too much credit. - Ted MacNEIL eamacn...@yahoo.ca Twitter: @TedMacNEIL -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 2.1 UNIX Enhancements (was: SFTP vs. FTPS)
My shorthand is this long(er)hand in the announcement: In z/OS V2.1 with z/OSMF V2.1, the z/OS Jobs REST Interface is planned to be extended to add support for submitting jobs from data sets and z/OS UNIX files Timothy Sipples Consulting Enterprise IT Architect (Based in Singapore) E-Mail: sipp...@sg.ibm.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: User Internal
On 2/12/2013 1:44 AM, גדי בן אבי wrote: My boss asked me to produce a report of all RESET commands that changed the Service Class of a job. Commands only? What about issuers of the IWMRESET macro? -- Edward E Jaffe Phoenix Software International, Inc 831 Parkview Drive North El Segundo, CA 90245 http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IEFUSI and SYS.PROCLIB(INIT)
I think that the OP is possibly confusing INIT with what addressspace will eventually be started by that INIT. INITs don't start address spaces. -- Peter Hunkeler -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Deleting old HSM backups
David, Why not just delete the unnecessary datasets? The backups will follow. G, D, R Ron -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of David G. Schlecht Sent: Tuesday, February 05, 2013 2:25 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: [IBM-MAIN] Deleting old HSM backups We have been backing up millions of unnecessary datasets. I am changing HSM to not back them up but would like a reasonably easy way to delete the millions of backups that already exist. Is there anything short of generating millions of lines of JCL. Is there any way to get HSM to delete these backups? David G. Schlecht | Information Technology Professional State of Nevada | Department of Administration | Enterprise IT Services This communication, including any attachments, may contain confidential information and is intended only for the individual or entity to which it is addressed. Any review, dissemination or copying of this communication by anyone other than the intended recipient is strictly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and delete all copies of the original message. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
