Access to IBM link
Hello, I am having challenge to grant access to IBM link application for my colleague.(As I am the primary service Administrator). Could someone walk through me the process of granting the access to IBM link to any registered IBM ID. Peter -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Access to IBM link
Peter, I assume you are referring to IBM Service Request (SR) .. 1. Once you are logged into SR, on the left hand side, you should see a menu item called 'Manage Support Registrations' - select sub option 'User Administration'. 2. You should then see 'User Adminisistration' with a number of tabs labelled 'Update','Add','Copy','Auto Approval','New Requests' 3. In your case, you should select the 'Add' tab The rest should be self explanatory . Hope this helps. Roger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
ISPF Storage Protection
Hello, I started this thread and I appreciate all the input I received from this list. I have solved the problem by adding code to my user svc that is part of the product. I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB This allows me to issue the MODESET svc successfully. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
Do NOT do this ! This is a serious system integrity exposure. Rob Scott Lead Developer Rocket Software 77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA Tel: +1.781.684.2305 Email: rsc...@rs.com Web: www.rocketsoftware.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of dpewen Sent: 05 March 2014 15:10 To: IBM-MAIN@LISTSERV.UA.EDU Subject: ISPF Storage Protection Hello, I started this thread and I appreciate all the input I received from this list. I have solved the problem by adding code to my user svc that is part of the product. I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB This allows me to issue the MODESET svc successfully. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
On Wed, 5 Mar 2014 07:10:11 -0800 dpewen dpe...@bellsouth.net wrote: :Hello, : :I started this thread and I appreciate all the input I received from this list. :I have solved the problem by adding code to my user svc that is part of the product. :I added two functions to the svc: :1. to turn on the APF-auth bit in the job step TCB :2. to turn off the APF-auth bit in the job step TCB :This allows me to issue the MODESET svc successfully. Why on earth would you want to break system security? Encapsulate the function! The function is not to modeset, but to do something that requires authorization. -- Binyamin Dissen bdis...@dissensoftware.com http://www.dissensoftware.com Director, Dissen Software, Bar Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
If this is part of a vendor product, and we were looking at said product, and I learned that it did this, I would _strongly_ recommend against acquiring the product. Having this around is like having small bottles of fulminate of mercury scattered around in the kids' play room. It is most likely going to explode and do a lot of damage. On Wed, Mar 5, 2014 at 9:12 AM, Rob Scott rsc...@rocketsoftware.com wrote: Do NOT do this ! This is a serious system integrity exposure. Rob Scott Lead Developer Rocket Software 77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA Tel: +1.781.684.2305 Email: rsc...@rs.com Web: www.rocketsoftware.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of dpewen Sent: 05 March 2014 15:10 To: IBM-MAIN@LISTSERV.UA.EDU Subject: ISPF Storage Protection Hello, I started this thread and I appreciate all the input I received from this list. I have solved the problem by adding code to my user svc that is part of the product. I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB This allows me to issue the MODESET svc successfully. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Wasn't there something about a PASCAL programmer knowing the value of everything and the Wirth of nothing? Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
Please use google and search the IBM-Main archives for JSCBAUTH for *many* discussions about why you should not be flipping it on and off. Apart from the fact that it is difficult to secure any facility that elevates the authority of the caller, there is also the multi-tasking aspect to consider. The JSCBAUTH flip technique is analogous to something like the following : Someone is in the habit of leaving a unloaded gun on a table in a house with kids running around. No-one gets hurt as there is no ammunition in the house, so the kids happily pick up and play with the gun and put it back. Someone decides that they want to use the gun for hunting, so they load up a bullet and prepare to leave the house but get distracted by a phone call. They put the gun back on the table while they take the call and tell themselves to remember to unload it. Meanwhile some kid who has knocked back a fair amount of sugar, runs into the room, grabs the gun and starts play-shooting. Rob Scott Lead Developer Rocket Software 77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA Tel: +1.781.684.2305 Email: rsc...@rs.com Web: www.rocketsoftware.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of dpewen Sent: 05 March 2014 15:10 To: IBM-MAIN@LISTSERV.UA.EDU Subject: ISPF Storage Protection Hello, I started this thread and I appreciate all the input I received from this list. I have solved the problem by adding code to my user svc that is part of the product. I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB This allows me to issue the MODESET svc successfully. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
On 3/5/2014 7:10 AM, dpewen wrote: Hello, I started this thread and I appreciate all the input I received from this list. I have solved the problem by adding code to my user svc that is part of the product. I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB Turning on JSCBAUTH makes _every TCB in the job step_ authorized! This is an exposure! There should be another way to achieve what you want. But, at the very least you must understand that any time you're going to modify a job step or address space-level setting, especially one that confers additional privileges to otherwise non-privileged TCBs, you MUST ensure that all such TCBs are marked non-dispatchable for the duration of the enhanced setting. This is what TSO/E does during execution of a program on the Authorized Leg of the TMP. -- Edward E Jaffe Phoenix Software International, Inc 831 Parkview Drive North El Segundo, CA 90245 http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
Instead of adding function codes to the SVC to allow setting and resetting of the JSCBAUTH bit, add function codes to the SVC to perform the code that requires authorization. As others have mentioned, this type of magic SVC destroys any concept of system integrity. == Wayne Driscoll OMEGAMON DB2 L3 Support/Development wdrisco(at)us(dot)ibm(dot)com All opinions are mine, and do not represent IBM Corporation. == IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu wrote on 03/05/2014 09:10:11 AM: From: dpewen dpe...@bellsouth.net To: IBM-MAIN@listserv.ua.edu, Date: 03/05/2014 09:10 AM Subject: [IBM-MAIN] ISPF Storage Protection Sent by: IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu Hello, I started this thread and I appreciate all the input I received fromthis list. I have solved the problem by adding code to my user svc that is part of the product. I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB This allows me to issue the MODESET svc successfully. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Problem Using XMITIP
This is going to sound like a very strange question, but all of a sudden the SENDER card that generated by XMITIP is coming back as: Sender: GRODRIG@PAL6.DOMAIN and the DOMAIN should be PALMBEACH.K12.FL.US http://palmbeach.k12.fl.us/. I would appreciate any help! *George Rodriguez* *Specialist II - IT Solutions* *IT Enterprise Applications* *PX - 47652* *(561) 357-7652 (office)* *(561) 707-3496 (mobile)* *School District of Palm Beach County* *3348 Forest Hill Blvd.* *Room B-251* *West Palm Beach, FL. 33406-5869* *Florida's Only A-Rated Urban District For Eight Consecutive Years* -- *The District is participating in* *Take your Daughters and Sons To Work Day http://news.palmbeach.k12.fl.us/pao/2014/02/20/school-district-take-our-daughters-and-sons-to-work-day-thursday-march-6-2014/ on* *Thursday, March 6, 2014.* *Disclaimer: *Under Florida law, e-mail addresses are public records. If you do not want your e-mail address released in response to a public records request, do not send electronic mail to this entity. Instead, contact this office by phone or in writing. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
Needing better illumination at his workstation, he built a device for turning on all of the lights in his offfice building. Apart from the security exposure, this use of the JSCBAUTH bit is ugly and inelegant, akin to setting a two-penny nail with a pile driver that you happen to have at hand. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
On Wed, 5 Mar 2014 15:32:03 +, Rob Scott wrote: Please use google and search the IBM-Main archives for JSCBAUTH for *many* discussions about why you should not be flipping it on and off. Apart from the fact that it is difficult to secure any facility that elevates the authority of the caller, there is also the multi-tasking aspect to consider. In my view, simply, no facility should *ever* elevate the authority of its caller. Discussions such as this reinforce my belief in the utter folly of allowing privileged and unprivileged code to operate in the same address space. It's complex; Byzantine, and disproportionately difficult to secure. I think z/OS UNIX got it right. (AFAIK.) -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
In 1394032211.10894.yahoomail...@web181501.mail.ne1.yahoo.com, on 03/05/2014 at 07:10 AM, dpewen dpe...@bellsouth.net said: I started this thread and I appreciate all the input I received from this list. I have solved the problem by adding code to my user svc that is part of the product. I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB This allows me to issue the MODESET svc successfully. It also opens a gaping security breach. I recommend a safer approach. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
The problem is not, or not only, that of elevating the authority of a 'caller'. It is frequently necessary to depress authority, and it is therefore necessary to elevate it too in order to restore the status quo ante. Worse, it is possible to do things with SRBs that cross address-space boundaries; and this facility too is necessary. Paul's proposed solution, admirably motivated, is akin to capital punishment for locksmiths in a jurisdiction where locks are ubiquitous. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Problem Using XMITIP
There are several variables in XMITIP that can influence the value for SENDER. Have you checked how your XMITIPCU member assigns the following: append_domain from_center from_default fromreq restrict_domain HTH, Greg Shirey Ben E. Keith Company -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of George Rodriguez Sent: Wednesday, March 05, 2014 9:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Problem Using XMITIP This is going to sound like a very strange question, but all of a sudden the SENDER card that generated by XMITIP is coming back as: Sender: GRODRIG@PAL6.DOMAIN and the DOMAIN should be PALMBEACH.K12.FL.US http://palmbeach.k12.fl.us/. I would appreciate any help! *George Rodriguez* *Specialist II - IT Solutions* *IT Enterprise Applications* *PX - 47652* *(561) 357-7652 (office)* *(561) 707-3496 (mobile)* *School District of Palm Beach County* *3348 Forest Hill Blvd.* *Room B-251* *West Palm Beach, FL. 33406-5869* *Florida's Only A-Rated Urban District For Eight Consecutive Years* -- *The District is participating in* *Take your Daughters and Sons To Work Day http://news.palmbeach.k12.fl.us/pao/2014/02/20/school-district-take-our-daughters-and-sons-to-work-day-thursday-march-6-2014/ on* *Thursday, March 6, 2014.* *Disclaimer: *Under Florida law, e-mail addresses are public records. If you do not want your e-mail address released in response to a public records request, do not send electronic mail to this entity. Instead, contact this office by phone or in writing. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
In my view, simply, no facility should *ever* elevate the authority of its caller. An admirable desire, however as pointed out earlier, there are circumstances where even standard IBM software has had to go down this route - eg TSO and AUTHTSF/PGM/CMD. Rob Scott Lead Developer Rocket Software 77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA Tel: +1.781.684.2305 Email: rsc...@rs.com Web: www.rocketsoftware.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Paul Gilmartin Sent: 05 March 2014 16:10 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ISPF Storage Protection On Wed, 5 Mar 2014 15:32:03 +, Rob Scott wrote: Please use google and search the IBM-Main archives for JSCBAUTH for *many* discussions about why you should not be flipping it on and off. Apart from the fact that it is difficult to secure any facility that elevates the authority of the caller, there is also the multi-tasking aspect to consider. In my view, simply, no facility should *ever* elevate the authority of its caller. Discussions such as this reinforce my belief in the utter folly of allowing privileged and unprivileged code to operate in the same address space. It's complex; Byzantine, and disproportionately difficult to secure. I think z/OS UNIX got it right. (AFAIK.) -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Problem Using XMITIP
Greg, Here's what I have fro those values: /* - * * append_domain * * if not null then used to append to e-mail addresses * * that are specified without a domain. * * Note: do NOT code the @ symbol - it will be added* *by default.* * - */ append_domain = null /* -- * * Define the Center, or NJE Node, where the SMTP * * Server is running. * ** * If the SMTP Server is running in the active Node then * * no change is required as it is dynamically determined. * * -- */ Center = sysvar('sysnode') From_Center = center /* - * * Setup the From Default* * This section should be customized for each shop * * or at least reviewed. Interlink users must customize * * * * Note: if fromreq is enabled (non-zero) then * * from_default can be * and will cause the* * user specified from to be used for the sender * * - */ msgid = sysvar(sysicmd): if length(msgid) = 1 then msgid = sysvar(syspcmd): uid = sysvar('sysuid') atsignc = left(atsign,1) if from_center = center then from_default = uid||AtSignC||center.domain else from_default = uid%from_center||AtSignC|| , center.smtp_domain /* --- * * FromReq used to require a FROM e-mail address in the XMITIP * * command.* * * * Values: 0 - not required * * 1 - required * * a...@host.com- code in quotes to avoid * *translation to upper case* * * * If an address then an e-mail is sent to that address for* * logging purposes. * * --- * FromReq = 0 /* FromReq = n...@host.com */ /* --- * * Restrict_Domain * *If null then no action. * *If set then all e-mails sent must end with * * the specified domain. * * --- */ restrict_domain = null /* restrict_domain = host.com */ It doesn't explain why the DOMAIN name is not changing... *George Rodriguez* *Specialist II - IT Solutions* *IT Enterprise Applications* *PX - 47652* *(561) 357-7652 (office)* *(561) 707-3496 (mobile)* *School District of Palm Beach County* *3348 Forest Hill Blvd.* *Room B-251* *West Palm Beach, FL. 33406-5869* *Florida's Only A-Rated Urban District For Eight Consecutive Years* On Wed, Mar 5, 2014 at 12:19 PM, Greg Shirey wgshi...@benekeith.com wrote: There are several variables in XMITIP that can influence the value for SENDER. Have you checked how your XMITIPCU member assigns the following: append_domain from_center from_default fromreq restrict_domain HTH, Greg Shirey Ben E. Keith Company -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of George Rodriguez Sent: Wednesday, March 05, 2014 9:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Problem Using XMITIP This is going to sound like a very strange question, but all of a sudden the SENDER card that generated by XMITIP is coming back as: Sender: GRODRIG@PAL6.DOMAIN and the DOMAIN should be PALMBEACH.K12.FL.US http://palmbeach.k12.fl.us/ . I would appreciate any help! *George Rodriguez* *Specialist II - IT Solutions* *IT Enterprise Applications* *PX - 47652* *(561) 357-7652 (office)* *(561) 707-3496 (mobile)* *School District of Palm Beach County* *3348 Forest Hill Blvd.* *Room B-251* *West Palm Beach, FL. 33406-5869* *Florida's Only A-Rated Urban District For Eight Consecutive Years* -- *The District is participating in* *Take your Daughters and Sons To Work Day http://news.palmbeach.k12.fl.us/pao/2014/02/20/school-district-take-our-daughters-and-sons-to-work-day-thursday-march-6-2014/ on* *Thursday, March 6, 2014.* *Disclaimer: *Under Florida law, e-mail addresses are public records. If you do not want your e-mail address released in response to a public records request, do not send electronic
Thanks and an invitation
Thanks everyone for all of your help over the years. This has really been an invaluable resource. If anyone is curious what all of my questions were about, and you're going to be at SHARE, fall by booth 216 (CorreLog) and we can talk bits and bytes. Or if by any chance the auditors or your CISO are saying something about integrating z/OS events with the enterprise security operations center fall by and I can show you a zero-maintenance, small-footprint, quick-to-install solution. I know these offers are pretty common -- this is not the offer of a lifetime -- but if you work in the LA area and would like to attend the SHARE Expo, write me off-line for a free Expo pass. No salesman will call. Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Validation of a resource name
Hi list, I am building a small web application that interfaces with RACF. On the client side I only have the IBM default supplied classes. I want validate as much as possible on the client before sending it to the server. For the moment I have the following checks: - For all classes, never allowed is: triple '*' 2 times '**' no dot before '**' '*' must be followed by a dot, an second '*' or must be the end of the resource name - For the DATASET class: A qualifier starts with a number A qualifier is longer than 8 characters A warning for a single level qualifier resource name - For the other IBM default ones including DATASET: First, Other and Maxlnth are checked Anybody any corrections or supplementary checks I could add? Any reaction would be greatly appreciated. j@n -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Validation of a resource name
Uppercase IBM alphamerics only, right? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of jan de decker Sent: Wednesday, March 05, 2014 10:06 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Validation of a resource name Hi list, I am building a small web application that interfaces with RACF. On the client side I only have the IBM default supplied classes. I want validate as much as possible on the client before sending it to the server. For the moment I have the following checks: - For all classes, never allowed is: triple '*' 2 times '**' no dot before '**' '*' must be followed by a dot, an second '*' or must be the end of the resource name - For the DATASET class: A qualifier starts with a number A qualifier is longer than 8 characters A warning for a single level qualifier resource name - For the other IBM default ones including DATASET: First, Other and Maxlnth are checked Anybody any corrections or supplementary checks I could add? Any reaction would be greatly appreciated. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Validation of a resource name
On Wed, 5 Mar 2014 19:05:52 +0100, jan de decker jan.je...@gmail.com wrote: Hi list, I am building a small web application that interfaces with RACF. On the client side I only have the IBM default supplied classes. I want validate as much as possible on the client before sending it to the server. For the moment I have the following checks: - For all classes, never allowed is: triple '*' 2 times '**' no dot before '**' '*' must be followed by a dot, an second '*' or must be the end of the resource name - For the DATASET class: A qualifier starts with a number A qualifier is longer than 8 characters A warning for a single level qualifier resource name - For the other IBM default ones including DATASET: First, Other and Maxlnth are checked Anybody any corrections or supplementary checks I could add? Any reaction would be greatly appreciated. Resources (the objects that users access, and applications protect) never have names that contain * (or % or ) in them, Jan. RACF profile names may have those characters, but resources don't. So to really answer your question I would need to know for sure which you're talking about, and what you're doing with them. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS WIKI access from a mianframe (TSO)
Hi Thank you for all the answers, I gave up this, but seems to simple to export/import the WIKI text files to PC. I say simple as I got some viruses during the WIKI/Tomact download ..., and I'm using the DATASET reference in the documentation so something instead of the DATASET reference , and the user can have a document on his PC (not online , not actual ). On 03.03.2014 13:30, Miklos Szigetvari wrote: Hi Is it possible to access the z/OS WIKI from a mainframe application ? (In this case the user can access the mainframe only via TSO certificates) -- Kind regards, / Mit freundlichen Grüßen Miklos Szigetvari Research Development ISIS Papyrus Europe AG Alter Wienerweg 12, A-2344 Maria Enzersdorf, Austria T: +43(2236) 27551 333, F: +43(2236)21081 E-mail: miklos.szigetv...@isis-papyrus.com Info: i...@isis-papyrus.com Hotline: +43-2236-27551-111 Visit our brand new extended Website at www.isis-papyrus.com --- This e-mail is only intended for the recipient and not legally binding. Unauthorised use, publication, reproduction or disclosure of the content of this e-mail is not permitted. This email has been checked for known viruses, but ISIS Papyrus accepts no responsibility for malicious or inappropriate content. --- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Validation of a resource name
Jan, Your applications should use resource names, not profile names. Resource is discrete by definition, example: MVS.CANCEL.TSU.W* - a profile (with generic) MVS.CANCEL.TSU.WILLSMIT - a resource. Regarding your application: simply use alphanumerics as allowed characters. Usually application (resource manager) has finite and hardcoded number of resource names to be used. (Fine print): at least resource templates are hardcoded, with possible variable qualifiers which yield predictable resource names and makes name validation unreasonable. -- Radoslaw Skorupka Lodz, Poland -- Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorized to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. Wedug stanu na dzie 01.01.2014 r. kapita zakadowy mBanku S.A. (w caoci wpacony) wynosi 168.696.052 zote. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
On Wed, 5 Mar 2014 07:10:11 -0800, dpewen : I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB This allows me to issue the MODESET svc successfully. Congratulations! You have made it easy for any program to do anything on every system that has your product. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Problem Using XMITIP
George, Here's a guess - it looks to me like this section of code is being executed: if from_center = center then from_default = uid||AtSignC||center.domain The variable domain has not been assigned a value, so the value is 'DOMAIN' and center has been assigned the value PAL6. It looks like center gets assigned in this section: /* -- * * Define the Center, or NJE Node, where the SMTP * * Server is running. * ** * If the SMTP Server is running in the active Node then * * no change is required as it is dynamically determined. * * -- */ Center = sysvar('sysnode') From_Center = center The comment directly above it says that this code doesn't need to be modified if the SMTP server is running in the active Node. So, if these variables have values you are not expecting, it looks like it might have to do with the SMTP server. Anything changed there recently? Greg -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of George Rodriguez Sent: Wednesday, March 05, 2014 11:53 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Problem Using XMITIP Greg, Here's what I have fro those values: /* - * * append_domain * * if not null then used to append to e-mail addresses * * that are specified without a domain. * * Note: do NOT code the @ symbol - it will be added* *by default.* * - */ append_domain = null /* -- * * Define the Center, or NJE Node, where the SMTP * * Server is running. * ** * If the SMTP Server is running in the active Node then * * no change is required as it is dynamically determined. * * -- */ Center = sysvar('sysnode') From_Center = center /* - * * Setup the From Default* * This section should be customized for each shop * * or at least reviewed. Interlink users must customize * * * * Note: if fromreq is enabled (non-zero) then * * from_default can be * and will cause the* * user specified from to be used for the sender * * - */ msgid = sysvar(sysicmd): if length(msgid) = 1 then msgid = sysvar(syspcmd): uid = sysvar('sysuid') atsignc = left(atsign,1) if from_center = center then from_default = uid||AtSignC||center.domain else from_default = uid%from_center||AtSignC|| , center.smtp_domain /* --- * * FromReq used to require a FROM e-mail address in the XMITIP * * command.* * * * Values: 0 - not required * * 1 - required * * a...@host.com- code in quotes to avoid * *translation to upper case* * * * If an address then an e-mail is sent to that address for* * logging purposes. * * --- * FromReq = 0 /* FromReq = n...@host.com */ /* --- * * Restrict_Domain * *If null then no action. * *If set then all e-mails sent must end with * * the specified domain. * * --- */ restrict_domain = null /* restrict_domain = host.com */ It doesn't explain why the DOMAIN name is not changing... *George Rodriguez* -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
SSD in DFSMS
z/OS 1.13 AFAIK, IBM provides some interface that allow to choose SSD in DFSMS routines. Actually the only information I found is MSR parameter in Storage Class. I would like to read more about it, maybe some examples of implementations. Where can I find more information about DFSMS and SSD ? -- Radoslaw Skorupka Lodz, Poland --- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorized to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2014 r. kapitał zakładowy mBanku S.A. (w całości wpłacony) wynosi 168.696.052 złote. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 0C4 from TSOEXEC IEBCOMPR
I am trying to compare two PDSEs. I found Example 8: Compare Two PDSEs in the z/OS V1R12.0 DFSMSdfp Utilities (SC26-7414-07). I am trying to get IEBCOMPR to work from REXX like I got IEBCOPY to work. We are running z/OS V1R13. ALLOC FI(SYSUT1) DA('PMSBDH.VPS.LRS.AFP.V2R10.FDEFLIB') SHR ALLOC FI(SYSUT2) DA('VPS.LRS.VPS.V2R10.FDEFLIB') SHR ALLOC FI(SYSIN) UNIT(VIO) SPACE(15) BLKSIZE(80) LRECL(80) RECFM(F B) DSORG(PS) NEW DELETE REUSE NEWSTACK V1 = COMPARE TYPORG=PO QUEUE V1 EXECIO queued() DISKW SYSIN (FINIS DELSTACK TSOEXEC IEBCOMPR FREE FI(SYSUT1 SYSUT2 SYSIN) For one thing, you are invoking IEBCOMPR as a command processor, and it may not be designed to deal with that interface. What happens if you do CALL *(IEBCOMPR) instead of TSOEXEC IEBCOMPR ? Jim Mulder z/OS System Test IBM Corp. Poughkeepsie, NY -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IDCAMS if-else
Hi, I have 2 files and would lime to see If one or both or none exist I am using IDCAMS if-else sequence With a command of print for this However I am always coming up with a cc of 0 in the jcl for this step E.G. Let's say filea is empty so is fileb Print indataset(filea) count (1) If lastcc ne 0 then do Print indataset(fileb) count (1) If lastcc = 0 then set lastcc = 8 Else Set lastcc = 0 End Else do Print indataset(fileb) count(1) If lastcc ne 0 then Set lastcc = 4 End I always cone up with a 0 for the IDCAMS job step when it should be in the case of 2 empty file 8 Sent from my iPhone -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IDCAMS if-else
Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC. Micheal Butz wrote: Hi, I have 2 files and would lime to see If one or both or none exist I am using IDCAMS if-else sequence With a command of print for this However I am always coming up with a cc of 0 in the jcl for this step E.G. Let's say filea is empty so is fileb Print indataset(filea) count (1) If lastcc ne 0 then do Print indataset(fileb) count (1) If lastcc = 0 then set lastcc = 8 Else Set lastcc = 0 End Else do Print indataset(fileb) count(1) If lastcc ne 0 then Set lastcc = 4 End I always cone up with a 0 for the IDCAMS job step when it should be in the case of 2 empty file 8 Sent from my iPhone -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IDCAMS if-else
But LASTCC applies only to the instruction that is being checked. As soon as a new instruction is issued (or a higher level nested instruction completes), LASTCC becomes the CC of this instruction. E.g. Consider the following: IF 1 EQ 1 DO SET LASTCC EQ 8 END The LASTCC following the above would be 0, because the IF-END completed with CC = 0 (regardless of the SET LASTCC EQ 8 in-between). So, change your LASTCC to MAXCC throughout - then check MAXCC instead of LASTCC. Micheal Butz wrote: I tried interrogating lastcc and setting MAXCC still comes up with 0 Sent from my iPhone On Mar 5, 2014, at 6:37 PM, CM Poncelet ponce...@bcs.org.uk wrote: Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC. Micheal Butz wrote: Hi, I have 2 files and would lime to see If one or both or none exist I am using IDCAMS if-else sequence With a command of print for this However I am always coming up with a cc of 0 in the jcl for this step E.G. Let's say filea is empty so is fileb Print indataset(filea) count (1) If lastcc ne 0 then do Print indataset(fileb) count (1) If lastcc = 0 then set lastcc = 8 Else Set lastcc = 0 End Else do Print indataset(fileb) count(1) If lastcc ne 0 then Set lastcc = 4 End I always cone up with a 0 for the IDCAMS job step when it should be in the case of 2 empty file 8 Sent from my iPhone -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IDCAMS if-else
I understand but take a look at this Print indataset( empty filea) If lastcc ne 0 Print indataset(emptyfb) If lastcc ne 0 then set maxcc = 8 Else Set maxcc = 0 If both files are empty the condition code should be 8 But I always get 0 from the IDCAMS step Sent from my iPhone On Mar 5, 2014, at 7:28 PM, CM Poncelet ponce...@bcs.org.uk wrote: But LASTCC applies only to the instruction that is being checked. As soon as a new instruction is issued (or a higher level nested instruction completes), LASTCC becomes the CC of this instruction. E.g. Consider the following: IF 1 EQ 1 DO SET LASTCC EQ 8 END The LASTCC following the above would be 0, because the IF-END completed with CC = 0 (regardless of the SET LASTCC EQ 8 in-between). So, change your LASTCC to MAXCC throughout - then check MAXCC instead of LASTCC. Micheal Butz wrote: I tried interrogating lastcc and setting MAXCC still comes up with 0 Sent from my iPhone On Mar 5, 2014, at 6:37 PM, CM Poncelet ponce...@bcs.org.uk wrote: Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC. Micheal Butz wrote: Hi, I have 2 files and would lime to see If one or both or none exist I am using IDCAMS if-else sequence With a command of print for this However I am always coming up with a cc of 0 in the jcl for this step E.G. Let's say filea is empty so is fileb Print indataset(filea) count (1) If lastcc ne 0 then do Print indataset(fileb) count (1) If lastcc = 0 then set lastcc = 8 Else Set lastcc = 0 End Else do Print indataset(fileb) count(1) If lastcc ne 0 then Set lastcc = 4 End I always cone up with a 0 for the IDCAMS job step when it should be in the case of 2 empty file 8 Sent from my iPhone -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IDCAMS if-else
On Wed, 5 Mar 2014 18:21:34 -0500, Micheal Butz wrote: I have 2 files and would li[k]e to see If one or both or none exist I am using IDCAMS ... exist or are nonempty? This is another thing it's ridiculously easy to do with z/OS UNIX: File1=SYS1.MACLIB(SPLEVEL) File2=SYS1.MACLIB(WAIT) Counts=$( cp -B //'$File1' /dev/fd/1 | head -c1 )$( cp -B //'$File2' /dev/fd/1 | head -c1 ) case $Counts in ) echo Both files are empty;; ?) echo One file is non-empty;; ??) echo Both files are non-empty;; esac Why torture yourself? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IDCAMS if-else
I do a print indataset for count(1) if the dataset is just catalogued I should get a non 0 return code Can I use unix from a IDCAMS job ? Sent from my iPhone On Mar 5, 2014, at 8:03 PM, Paul Gilmartin paulgboul...@aim.com wrote: On Wed, 5 Mar 2014 18:21:34 -0500, Micheal Butz wrote: I have 2 files and would li[k]e to see If one or both or none exist I am using IDCAMS ... exist or are nonempty? This is another thing it's ridiculously easy to do with z/OS UNIX: File1=SYS1.MACLIB(SPLEVEL) File2=SYS1.MACLIB(WAIT) Counts=$( cp -B //'$File1' /dev/fd/1 | head -c1 )$( cp -B //'$File2' /dev/fd/1 | head -c1 ) case $Counts in ) echo Both files are empty;; ?) echo One file is non-empty;; ??) echo Both files are non-empty;; esac Why torture yourself? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IDCAMS if-else
Try this: Print indataset( empty filea) If MAXCC ne 0 THEN DO SET MAXCC EQ 0 Print indataset(emptyfb) If MAXCC ne 0 then set maxcc = 8 Else Set maxcc = 0 END /* IF */ ELSE SET MAXCC EQ 8 Not sure whether this is what you want to achieve, but it should return a CC=00 if either 'filea' or 'fb' is printable - else it should return CC=08. Micheal Butz wrote: I understand but take a look at this Print indataset( empty filea) If lastcc ne 0 Print indataset(emptyfb) If lastcc ne 0 then set maxcc = 8 Else Set maxcc = 0 If both files are empty the condition code should be 8 But I always get 0 from the IDCAMS step Sent from my iPhone On Mar 5, 2014, at 7:28 PM, CM Poncelet ponce...@bcs.org.uk wrote: But LASTCC applies only to the instruction that is being checked. As soon as a new instruction is issued (or a higher level nested instruction completes), LASTCC becomes the CC of this instruction. E.g. Consider the following: IF 1 EQ 1 DO SET LASTCC EQ 8 END The LASTCC following the above would be 0, because the IF-END completed with CC = 0 (regardless of the SET LASTCC EQ 8 in-between). So, change your LASTCC to MAXCC throughout - then check MAXCC instead of LASTCC. Micheal Butz wrote: I tried interrogating lastcc and setting MAXCC still comes up with 0 Sent from my iPhone On Mar 5, 2014, at 6:37 PM, CM Poncelet ponce...@bcs.org.uk wrote: Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC. Micheal Butz wrote: Hi, I have 2 files and would lime to see If one or both or none exist I am using IDCAMS if-else sequence With a command of print for this However I am always coming up with a cc of 0 in the jcl for this step E.G. Let's say filea is empty so is fileb Print indataset(filea) count (1) If lastcc ne 0 then do Print indataset(fileb) count (1) If lastcc = 0 then set lastcc = 8 Else Set lastcc = 0 End Else do Print indataset(fileb) count(1) If lastcc ne 0 then Set lastcc = 4 End I always cone up with a 0 for the IDCAMS job step when it should be in the case of 2 empty file 8 Sent from my iPhone -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IDCAMS if-else
On Wed, 5 Mar 2014 20:06:14 -0500, Micheal Butz wrote: I do a print indataset for count(1) if the dataset is just catalogued I should get a non 0 return code Can I use unix from a IDCAMS job ? Probably not, unless IDCAMS has an escape-to-host-command facility. Your use of IDCAMS job step (mis)led me to believe your use of IDCAMS was solely to evaluate the emptiness of the data sets. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SSD in DFSMS
Are you asking about solid state dasd or some other item? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Wednesday, March 05, 2014 12:24 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SSD in DFSMS z/OS 1.13 AFAIK, IBM provides some interface that allow to choose SSD in DFSMS routines. Actually the only information I found is MSR parameter in Storage Class. I would like to read more about it, maybe some examples of implementations. Where can I find more information about DFSMS and SSD ? -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ISPF Storage Protection
In CAE1XxDHEY=r5tzjrpocmoggzsqtks7trlbs-tzqxf172znu...@mail.gmail.com, on 03/05/2014 at 11:41 AM, John Gilmore jwgli...@gmail.com said: It is frequently necessary to depress authority, and it is therefore necessary to elevate it too in order to restore the status quo ante. Nonsense; there are mechanisms to temporarily reduce authority with any tricks to reinstate the original authority. There is no excuse for using mechanisms such as magic SVC's. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
zAware certificate need on RACF
Hello, Cross Posted on IBM MAIN and RACF-L Are there anyone who has set AT-TLS for zAware on Z/OS. I have been referring a RED book on enabling at-tls but I am not able to understand the need of importing zAware certificates to RACF. If my Understanding is correct zAware does not have any interaction with RACF DB. Since zAware acts as an LPAR and gets the Z/OS image information via Logstream. Could someone enlighten me the need of zAware certificate on RACF DB ? How this is going to be useful for the zAware Users ? z/OS : 2.1 Jake -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IDCAMS if-else
... actually, drop the last line ELSE SET MAXCC EQ 8 otherwise it will return CC=08 if Print indataset( empty filea) ends with CC=00 :-( CM Poncelet wrote: Try this: Print indataset( empty filea) If MAXCC ne 0 THEN DO SET MAXCC EQ 0 Print indataset(emptyfb) If MAXCC ne 0 then set maxcc = 8 Else Set maxcc = 0 END /* IF */ ELSE SET MAXCC EQ 8 Not sure whether this is what you want to achieve, but it should return a CC=00 if either 'filea' or 'fb' is printable - else it should return CC=08. Micheal Butz wrote: I understand but take a look at this Print indataset( empty filea) If lastcc ne 0 Print indataset(emptyfb) If lastcc ne 0 then set maxcc = 8 Else Set maxcc = 0 If both files are empty the condition code should be 8 But I always get 0 from the IDCAMS step Sent from my iPhone On Mar 5, 2014, at 7:28 PM, CM Poncelet ponce...@bcs.org.uk wrote: But LASTCC applies only to the instruction that is being checked. As soon as a new instruction is issued (or a higher level nested instruction completes), LASTCC becomes the CC of this instruction. E.g. Consider the following: IF 1 EQ 1 DO SET LASTCC EQ 8 END The LASTCC following the above would be 0, because the IF-END completed with CC = 0 (regardless of the SET LASTCC EQ 8 in-between). So, change your LASTCC to MAXCC throughout - then check MAXCC instead of LASTCC. Micheal Butz wrote: I tried interrogating lastcc and setting MAXCC still comes up with 0 Sent from my iPhone On Mar 5, 2014, at 6:37 PM, CM Poncelet ponce...@bcs.org.uk wrote: Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC. Micheal Butz wrote: Hi, I have 2 files and would lime to see If one or both or none exist I am using IDCAMS if-else sequence With a command of print for this However I am always coming up with a cc of 0 in the jcl for this step E.G. Let's say filea is empty so is fileb Print indataset(filea) count (1) If lastcc ne 0 then do Print indataset(fileb) count (1) If lastcc = 0 then set lastcc = 8 Else Set lastcc = 0 End Else do Print indataset(fileb) count(1) If lastcc ne 0 then Set lastcc = 4 End I always cone up with a 0 for the IDCAMS job step when it should be in the case of 2 empty file 8 Sent from my iPhone -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Validation of a resource name
On 5 Mar 2014 10:05:58 -0800, in bit.listserv.ibm-main (Message-ID:CADEq6i9SMRxz4fz3XNNTq+0eMWxk0E=atqga1w-awhjcyjj...@mail.gmail.com) jan.je...@gmail.com (jan de decker) wrote: I am building a small web application that interfaces with RACF. On the client side I only have the IBM default supplied classes. I want validate as much as possible on the client before sending it to the server. Never do validation on the client side. Someone might decide to write their own client, or something else silly, just to get by restrictions. It's especially important not to trust client-side *security* validation. -- I cannot receive mail at the address this was sent from. To reply directly, send to ar23hur at pobox dot com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Validation of a resource name
On 6/03/2014 2:11 PM, Arthur T. wrote: On 5 Mar 2014 10:05:58 -0800, in bit.listserv.ibm-main (Message-ID:CADEq6i9SMRxz4fz3XNNTq+0eMWxk0E=atqga1w-awhjcyjj...@mail.gmail.com) jan.je...@gmail.com (jan de decker) wrote: I am building a small web application that interfaces with RACF. On the client side I only have the IBM default supplied classes. I want validate as much as possible on the client before sending it to the server. Never do validation on the client side. Someone might decide to write their own client, or something else silly, just to get by restrictions. It's especially important not to trust client-side *security* validation. That depends on what you're validating. If it's just syntax for a class name then validating on the client is surely better than pinging it off to a server. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SSD in DFSMS
Yes, I mean Solid State Drive. -- Radoslaw Skorupka Lodz, Poland W dniu 2014-03-06 02:35, Lizette Koehler pisze: Are you asking about solid state dasd or some other item? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Wednesday, March 05, 2014 12:24 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SSD in DFSMS z/OS 1.13 AFAIK, IBM provides some interface that allow to choose SSD in DFSMS routines. Actually the only information I found is MSR parameter in Storage Class. I would like to read more about it, maybe some examples of implementations. Where can I find more information about DFSMS and SSD ? -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN --- Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorized to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. Wedug stanu na dzie 01.01.2014 r. kapita zakadowy mBanku S.A. (w caoci wpacony) wynosi 168.696.052 zote. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SSD in DFSMS
I remembered having heard or read this and the first Google hit was: http://pic.dhe.ibm.com/infocenter/zos/v1r12/index.jsp?topic=%2Fcom.ibm.zos.r12.idas200%2Fs2082.htm Is this what you are looking for? kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Thursday, March 06, 2014 08:36 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SSD in DFSMS Yes, I mean Solid State Drive. -- Radoslaw Skorupka Lodz, Poland W dniu 2014-03-06 02:35, Lizette Koehler pisze: Are you asking about solid state dasd or some other item? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Wednesday, March 05, 2014 12:24 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SSD in DFSMS z/OS 1.13 AFAIK, IBM provides some interface that allow to choose SSD in DFSMS routines. Actually the only information I found is MSR parameter in Storage Class. I would like to read more about it, maybe some examples of implementations. Where can I find more information about DFSMS and SSD ? -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN --- Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorized to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. Wedug stanu na dzie 01.01.2014 r. kapita zakadowy mBanku S.A. (w caoci wpacony) wynosi 168.696.052 zote. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Validation of a resource name,
Hi list, Thanks to all who responded. The purpose of the Javascript is to give as much feed-back to the user as possible before sending it to zOS, who will repeat the validations and a lot more for the dynamic CDT and ICHRRCDE user defined classes. Uppercase ALPHANUM is not checked because RACF does not care on the server. The title of my mail was badly chosen. I want to do resource as well as profile checking. E.g. The user can fill in userd: jan access: ALTER class: dataset resource: jan.x.* or jan.x.rexx The CGI program can handle both profile and resource and will return the authorization and the why. E.g. jan ALTER dataset jan.x.* PERMIT via group SYSTEM if the authorization is not sufficient it will return the highest one. E.g. jan CONTROL dataset jan.x.rexx via GLOBAL uid.** If anybody could comment on this it would greatly appreciated. Regards, j@n -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN