Access to IBM link

2014-03-05 Thread mf db
Hello,

I am having challenge to grant access to IBM link application for my
colleague.(As I am the primary service Administrator).

Could someone walk through me the process of granting the access to IBM
link to any registered IBM ID.


Peter

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Access to IBM link

2014-03-05 Thread Roger Lowe
Peter,
 I assume you are referring to IBM Service Request (SR) ..

1. Once you are logged into SR, on the left hand side, you should see a menu 
item called 'Manage Support Registrations' - select sub option  
'User Administration'.
2. You should then see 'User Adminisistration' with a number of tabs labelled 
'Update','Add','Copy','Auto Approval','New Requests'
3. In your case, you should select the 'Add' tab

The rest should be self explanatory .

Hope this helps.

Roger

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


ISPF Storage Protection

2014-03-05 Thread dpewen
Hello,

I started this thread and I appreciate all the input I received from this list.
I have solved the problem by adding code to my user svc that is part of the 
product.
I added two functions to the svc: 
1. to turn on the APF-auth bit in the job step TCB
2. to turn off the APF-auth bit in the job step TCB

This allows me to issue the MODESET svc successfully.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Rob Scott
Do NOT do this !

This is a serious system integrity exposure. 

Rob Scott
Lead Developer
Rocket Software
77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA
Tel: +1.781.684.2305
Email: rsc...@rs.com
Web: www.rocketsoftware.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of dpewen
Sent: 05 March 2014 15:10
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: ISPF Storage Protection

Hello,

I started this thread and I appreciate all the input I received from this list.
I have solved the problem by adding code to my user svc that is part of the 
product.
I added two functions to the svc:
1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth 
bit in the job step TCB

This allows me to issue the MODESET svc successfully.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Binyamin Dissen
On Wed, 5 Mar 2014 07:10:11 -0800 dpewen dpe...@bellsouth.net wrote:

:Hello,
:
:I started this thread and I appreciate all the input I received from this 
list.
:I have solved the problem by adding code to my user svc that is part of the 
product.
:I added two functions to the svc: 
:1. to turn on the APF-auth bit in the job step TCB
:2. to turn off the APF-auth bit in the job step TCB

:This allows me to issue the MODESET svc successfully.

Why on earth would you want to break system security?

Encapsulate the function! The function is not to modeset, but to do something
that requires authorization. 

--
Binyamin Dissen bdis...@dissensoftware.com
http://www.dissensoftware.com

Director, Dissen Software, Bar  Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread John McKown
If this is part of a vendor product, and we were looking at said product,
and I learned that it did this, I would _strongly_ recommend against
acquiring the product. Having this around is like having small bottles of
fulminate of mercury scattered around in the kids' play room. It is most
likely going to explode and do a lot of damage.


On Wed, Mar 5, 2014 at 9:12 AM, Rob Scott rsc...@rocketsoftware.com wrote:

 Do NOT do this !

 This is a serious system integrity exposure.

 Rob Scott
 Lead Developer
 Rocket Software
 77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA
 Tel: +1.781.684.2305
 Email: rsc...@rs.com
 Web: www.rocketsoftware.com


 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of dpewen
 Sent: 05 March 2014 15:10
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: ISPF Storage Protection

 Hello,

 I started this thread and I appreciate all the input I received from this
 list.
 I have solved the problem by adding code to my user svc that is part of
 the product.
 I added two functions to the svc:
 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the
 APF-auth bit in the job step TCB

 This allows me to issue the MODESET svc successfully.


 --
 For IBM-MAIN subscribe / signoff / archive access instructions, send email
 to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




-- 
Wasn't there something about a PASCAL programmer knowing the value of
everything and the Wirth of nothing?

Maranatha! 
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Rob Scott
Please use google and search the IBM-Main archives for JSCBAUTH for *many* 
discussions about why you should not be flipping it on and off.

Apart from the fact that it is difficult to secure any facility that elevates 
the authority of the caller, there is also the multi-tasking aspect to consider.

The JSCBAUTH flip technique is analogous to something like the following :

Someone is in the habit of leaving a unloaded gun on a table in a house with 
kids running around. 
No-one gets hurt as there is no ammunition in the house, so the kids happily 
pick up and play with the gun and put it back.
Someone decides that they want to use the gun for hunting, so they load up a 
bullet and prepare to leave the house but get distracted by a phone call. 
They put the gun back on the table while they take the call and tell themselves 
to remember to unload it.
Meanwhile some kid who has knocked back a fair amount of sugar, runs into the 
room, grabs the gun and starts play-shooting.
   

Rob Scott
Lead Developer
Rocket Software
77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA
Tel: +1.781.684.2305
Email: rsc...@rs.com
Web: www.rocketsoftware.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of dpewen
Sent: 05 March 2014 15:10
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: ISPF Storage Protection

Hello,

I started this thread and I appreciate all the input I received from this list.
I have solved the problem by adding code to my user svc that is part of the 
product.
I added two functions to the svc:
1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth 
bit in the job step TCB

This allows me to issue the MODESET svc successfully.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Ed Jaffe

On 3/5/2014 7:10 AM, dpewen wrote:

Hello,

I started this thread and I appreciate all the input I received from this list.
I have solved the problem by adding code to my user svc that is part of the 
product.
I added two functions to the svc:
1. to turn on the APF-auth bit in the job step TCB
2. to turn off the APF-auth bit in the job step TCB


Turning on JSCBAUTH makes _every TCB in the job step_ authorized! This 
is an exposure!


There should be another way to achieve what you want. But, at the very 
least you must understand that any time you're going to modify a job 
step or address space-level setting, especially one that confers 
additional privileges to otherwise non-privileged TCBs, you MUST ensure 
that all such TCBs are marked non-dispatchable for the duration of the 
enhanced setting. This is what TSO/E does during execution of a program 
on the Authorized Leg of the TMP.


--
Edward E Jaffe
Phoenix Software International, Inc
831 Parkview Drive North
El Segundo, CA 90245
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Wayne Driscoll
Instead of adding function codes to the SVC to allow setting and resetting
of the JSCBAUTH bit, add function codes to the SVC to perform the code that
requires authorization.  As others have mentioned, this type
of magic SVC destroys any concept of system integrity.
==
Wayne Driscoll
OMEGAMON DB2 L3 Support/Development
wdrisco(at)us(dot)ibm(dot)com
All opinions are mine, and do not represent
IBM Corporation.
==

IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu wrote on
03/05/2014 09:10:11 AM:

 From: dpewen dpe...@bellsouth.net
 To: IBM-MAIN@listserv.ua.edu,
 Date: 03/05/2014 09:10 AM
 Subject: [IBM-MAIN] ISPF Storage Protection
 Sent by: IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu

 Hello,

 I started this thread and I appreciate all the input I received fromthis
list.
 I have solved the problem by adding code to my user svc that is part
 of the product.
 I added two functions to the svc:
 1. to turn on the APF-auth bit in the job step TCB
 2. to turn off the APF-auth bit in the job step TCB

 This allows me to issue the MODESET svc successfully.


 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Problem Using XMITIP

2014-03-05 Thread George Rodriguez
This is going to sound like a very strange question, but all of a sudden
the SENDER card that generated by XMITIP is coming back as:

Sender:   GRODRIG@PAL6.DOMAIN

and the DOMAIN should be PALMBEACH.K12.FL.US http://palmbeach.k12.fl.us/.

I would appreciate any help!

 *George Rodriguez*
*Specialist II - IT Solutions*
*IT Enterprise Applications*
*PX - 47652*
*(561) 357-7652 (office)*
*(561) 707-3496 (mobile)*
*School District of Palm Beach County*
*3348 Forest Hill Blvd.*
*Room B-251*
*West Palm Beach, FL. 33406-5869*
*Florida's Only A-Rated Urban District For Eight Consecutive Years*

-- 


*The District is participating in* *Take your Daughters and Sons To Work 
Day 
http://news.palmbeach.k12.fl.us/pao/2014/02/20/school-district-take-our-daughters-and-sons-to-work-day-thursday-march-6-2014/
 on*
 *Thursday, March 6, 2014.*
 
*Disclaimer: *Under Florida law, e-mail addresses are public records. If 
you do not want your e-mail address released in response to a public 
records request, do not send electronic mail to this entity. Instead, 
contact this office by phone or in writing.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread John Gilmore
Needing better illumination at his workstation, he built a device for
turning on all of the lights in his offfice building.

Apart from the security exposure, this use of the JSCBAUTH bit  is
ugly and inelegant, akin to setting a two-penny nail with a pile
driver that you happen to have at hand.

John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Paul Gilmartin
On Wed, 5 Mar 2014 15:32:03 +, Rob Scott wrote:

Please use google and search the IBM-Main archives for JSCBAUTH for *many* 
discussions about why you should not be flipping it on and off.

Apart from the fact that it is difficult to secure any facility that elevates 
the authority of the caller, there is also the multi-tasking aspect to 
consider.
 
In my view, simply, no facility should *ever* elevate the authority of its 
caller.

Discussions such as this reinforce my belief in the utter folly of allowing
privileged and unprivileged code to operate in the same address space.
It's complex; Byzantine, and disproportionately difficult to secure.

I think z/OS UNIX got it right.  (AFAIK.)

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Shmuel Metz (Seymour J.)
In 1394032211.10894.yahoomail...@web181501.mail.ne1.yahoo.com, on
03/05/2014
   at 07:10 AM, dpewen dpe...@bellsouth.net said:

I started this thread and I appreciate all the input I received from
this list. I have solved the problem by adding code to my user svc
that is part of the product. I added two functions to the svc: 
1. to turn on the APF-auth bit in the job step TCB
2. to turn off the APF-auth bit in the job step TCB

This allows me to issue the MODESET svc successfully.

It also opens a gaping security breach. I recommend a safer approach.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread John Gilmore
The problem is not, or not only, that of elevating the authority of a 'caller'.

It is frequently necessary to depress authority, and it is therefore
necessary to elevate it too in order to restore the status quo ante.
Worse, it is possible to do things with SRBs that cross address-space
boundaries; and this facility too is necessary.

Paul's proposed solution, admirably motivated, is akin to capital
punishment for locksmiths in a jurisdiction where locks are
ubiquitous.

John Gilmore, Ashland, MA 01721 - USA

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Problem Using XMITIP

2014-03-05 Thread Greg Shirey
There are several variables in XMITIP that can influence the value for SENDER.  
Have you checked how your XMITIPCU member assigns the following:
append_domain
from_center
from_default
fromreq
restrict_domain


HTH,
Greg Shirey
Ben E. Keith Company

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of George Rodriguez
Sent: Wednesday, March 05, 2014 9:50 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Problem Using XMITIP

This is going to sound like a very strange question, but all of a sudden the 
SENDER card that generated by XMITIP is coming back as:

Sender:   GRODRIG@PAL6.DOMAIN

and the DOMAIN should be PALMBEACH.K12.FL.US http://palmbeach.k12.fl.us/.

I would appreciate any help!

 *George Rodriguez*
*Specialist II - IT Solutions*
*IT Enterprise Applications*
*PX - 47652*
*(561) 357-7652 (office)*
*(561) 707-3496 (mobile)*
*School District of Palm Beach County*
*3348 Forest Hill Blvd.*
*Room B-251*
*West Palm Beach, FL. 33406-5869*
*Florida's Only A-Rated Urban District For Eight Consecutive Years*

-- 


*The District is participating in* *Take your Daughters and Sons To Work Day 
http://news.palmbeach.k12.fl.us/pao/2014/02/20/school-district-take-our-daughters-and-sons-to-work-day-thursday-march-6-2014/
 on*  *Thursday, March 6, 2014.*
 
*Disclaimer: *Under Florida law, e-mail addresses are public records. If you do 
not want your e-mail address released in response to a public records request, 
do not send electronic mail to this entity. Instead, contact this office by 
phone or in writing.



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Rob Scott
 In my view, simply, no facility should *ever* elevate the authority of its 
 caller.

An admirable desire, however as pointed out earlier, there are circumstances 
where even standard IBM software has had to go down this route - eg TSO and 
AUTHTSF/PGM/CMD.

Rob Scott
Lead Developer
Rocket Software
77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA
Tel: +1.781.684.2305
Email: rsc...@rs.com
Web: www.rocketsoftware.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Paul Gilmartin
Sent: 05 March 2014 16:10
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: ISPF Storage Protection

On Wed, 5 Mar 2014 15:32:03 +, Rob Scott wrote:

Please use google and search the IBM-Main archives for JSCBAUTH for *many* 
discussions about why you should not be flipping it on and off.

Apart from the fact that it is difficult to secure any facility that elevates 
the authority of the caller, there is also the multi-tasking aspect to 
consider.
 
In my view, simply, no facility should *ever* elevate the authority of its 
caller.

Discussions such as this reinforce my belief in the utter folly of allowing 
privileged and unprivileged code to operate in the same address space.
It's complex; Byzantine, and disproportionately difficult to secure.

I think z/OS UNIX got it right.  (AFAIK.)

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Problem Using XMITIP

2014-03-05 Thread George Rodriguez
Greg,

Here's what I have fro those values:

/* - *
 * append_domain *
 *  if not null then used to append to e-mail addresses  *
 *  that are specified without a domain. *
 *  Note: do NOT code the @ symbol - it will be added*
 *by default.*
 * - */
 append_domain = null
/* -- *
 * Define the Center, or NJE Node, where the SMTP *
 * Server is running. *
 **
 * If the SMTP Server is running in the active Node then  *
 * no change is required as it is dynamically determined. *
 * -- */
 Center  = sysvar('sysnode')
 From_Center = center
/* - *
 * Setup the From Default*
 * This section should be customized for each shop   *
 * or at least reviewed.  Interlink users must customize *
 *   *
 * Note: if fromreq is enabled (non-zero) then   *
 *   from_default can be * and will cause the*
 *   user specified from to be used for the sender   *
 * - */
   msgid = sysvar(sysicmd):
   if length(msgid) = 1 then
  msgid = sysvar(syspcmd):
   uid = sysvar('sysuid')
   atsignc = left(atsign,1)
   if from_center = center then
  from_default = uid||AtSignC||center.domain
   else
  from_default = uid%from_center||AtSignC|| ,
  center.smtp_domain
/* --- *
 * FromReq used to require a FROM e-mail address in the XMITIP *
 * command.*
 * *
 * Values:   0 - not required  *
 *   1 - required  *
 *   a...@host.com- code in quotes to avoid  *
 *translation to upper case*
 * *
 * If an address then an e-mail is sent to that address for*
 * logging purposes.   *
 * --- *
 FromReq = 0
 /* FromReq = n...@host.com */
/* --- *
 * Restrict_Domain *
 *If null then no action.  *
 *If set then all e-mails sent must end with   *
 *   the specified domain. *
 * --- */
 restrict_domain = null
 /* restrict_domain = host.com  */

It doesn't explain why the DOMAIN name is not changing...


 *George Rodriguez*
*Specialist II - IT Solutions*
*IT Enterprise Applications*
*PX - 47652*
*(561) 357-7652 (office)*
*(561) 707-3496 (mobile)*
*School District of Palm Beach County*
*3348 Forest Hill Blvd.*
*Room B-251*
*West Palm Beach, FL. 33406-5869*
*Florida's Only A-Rated Urban District For Eight Consecutive Years*


On Wed, Mar 5, 2014 at 12:19 PM, Greg Shirey wgshi...@benekeith.com wrote:

 There are several variables in XMITIP that can influence the value for
 SENDER.  Have you checked how your XMITIPCU member assigns the following:
 append_domain
 from_center
 from_default
 fromreq
 restrict_domain


 HTH,
 Greg Shirey
 Ben E. Keith Company

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of George Rodriguez
 Sent: Wednesday, March 05, 2014 9:50 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Problem Using XMITIP

 This is going to sound like a very strange question, but all of a sudden
 the SENDER card that generated by XMITIP is coming back as:

 Sender:   GRODRIG@PAL6.DOMAIN

 and the DOMAIN should be PALMBEACH.K12.FL.US http://palmbeach.k12.fl.us/
 .

 I would appreciate any help!

  *George Rodriguez*
 *Specialist II - IT Solutions*
 *IT Enterprise Applications*
 *PX - 47652*
 *(561) 357-7652 (office)*
 *(561) 707-3496 (mobile)*
 *School District of Palm Beach County*
 *3348 Forest Hill Blvd.*
 *Room B-251*
 *West Palm Beach, FL. 33406-5869*
 *Florida's Only A-Rated Urban District For Eight Consecutive Years*

 --


 *The District is participating in* *Take your Daughters and Sons To Work
 Day 
 http://news.palmbeach.k12.fl.us/pao/2014/02/20/school-district-take-our-daughters-and-sons-to-work-day-thursday-march-6-2014/
 on*  *Thursday, March 6, 2014.*

 *Disclaimer: *Under Florida law, e-mail addresses are public records. If
 you do not want your e-mail address released in response to a public
 records request, do not send electronic 

Thanks and an invitation

2014-03-05 Thread Charles Mills
Thanks everyone for all of your help over the years. This has really been an
invaluable resource.

If anyone is curious what all of my questions were about, and you're going
to be at SHARE, fall by booth 216 (CorreLog) and we can talk bits and bytes.
Or if by any chance the auditors or your CISO are saying something about
integrating z/OS events with the enterprise security operations center
fall by and I can show you a zero-maintenance, small-footprint,
quick-to-install solution.

I know these offers are pretty common -- this is not the offer of a lifetime
-- but if you work in the LA area and would like to attend the SHARE Expo,
write me off-line for a free Expo pass. No salesman will call.

Charles 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Validation of a resource name

2014-03-05 Thread jan de decker
Hi list,

I am building a small web application that interfaces with RACF.

On the client side I only have the IBM default supplied classes.

I want validate as much as possible on the client before sending it to the
server.

For the moment I have the following checks:

- For all classes, never allowed is:

 triple '*'
 2 times '**'
  no dot before '**'
 '*' must be followed by a dot, an second '*' or must be the end of the
resource name

- For the DATASET class:

 A qualifier starts with a number
 A qualifier is longer than 8 characters
 A warning for a single level qualifier resource name

- For the other IBM default ones including DATASET:

 First, Other and Maxlnth are checked

Anybody any corrections or supplementary checks I could add?

Any reaction would be greatly appreciated.

j@n

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Validation of a resource name

2014-03-05 Thread Charles Mills
Uppercase IBM alphamerics only, right?

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of jan de decker
Sent: Wednesday, March 05, 2014 10:06 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Validation of a resource name

Hi list,

I am building a small web application that interfaces with RACF.

On the client side I only have the IBM default supplied classes.

I want validate as much as possible on the client before sending it to the
server.

For the moment I have the following checks:

- For all classes, never allowed is:

 triple '*'
 2 times '**'
  no dot before '**'
 '*' must be followed by a dot, an second '*' or must be the end of the
resource name

- For the DATASET class:

 A qualifier starts with a number
 A qualifier is longer than 8 characters
 A warning for a single level qualifier resource name

- For the other IBM default ones including DATASET:

 First, Other and Maxlnth are checked

Anybody any corrections or supplementary checks I could add?

Any reaction would be greatly appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Validation of a resource name

2014-03-05 Thread Walt Farrell
On Wed, 5 Mar 2014 19:05:52 +0100, jan de decker jan.je...@gmail.com wrote:

Hi list,

I am building a small web application that interfaces with RACF.

On the client side I only have the IBM default supplied classes.

I want validate as much as possible on the client before sending it to the
server.

For the moment I have the following checks:

- For all classes, never allowed is:

 triple '*'
 2 times '**'
  no dot before '**'
 '*' must be followed by a dot, an second '*' or must be the end of the
resource name

- For the DATASET class:

 A qualifier starts with a number
 A qualifier is longer than 8 characters
 A warning for a single level qualifier resource name

- For the other IBM default ones including DATASET:

 First, Other and Maxlnth are checked

Anybody any corrections or supplementary checks I could add?

Any reaction would be greatly appreciated.

Resources (the objects that users access, and applications protect) never have 
names that contain * (or % or ) in them, Jan.

RACF profile names may have those characters, but resources don't. So to really 
answer your question I would need to know for sure which you're talking about, 
and what you're doing with them.

-- 
Walt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OS WIKI access from a mianframe (TSO)

2014-03-05 Thread Miklos Szigetvari

Hi

Thank you for all the answers, I gave up this, but seems to 
simple to export/import
the WIKI text files to PC. I say simple as I got some viruses during 
the WIKI/Tomact download ..., and
I'm using the DATASET reference in the documentation so something 
instead of the DATASET reference , and the user can have

a document on his PC (not online , not actual ).


On 03.03.2014 13:30, Miklos Szigetvari wrote:

Hi

Is it possible to access the z/OS WIKI from a mainframe application ?
(In this case the user can access the mainframe only via TSO 
certificates)





--
Kind regards, / Mit freundlichen Grüßen
Miklos Szigetvari

Research  Development
ISIS Papyrus Europe AG
Alter Wienerweg 12, A-2344 Maria Enzersdorf, Austria
T: +43(2236) 27551 333, F: +43(2236)21081
E-mail: miklos.szigetv...@isis-papyrus.com
Info: i...@isis-papyrus.com Hotline: +43-2236-27551-111
Visit our brand new extended Website at www.isis-papyrus.com
---
This e-mail is only intended for the recipient and not legally
binding. Unauthorised use, publication, reproduction or
disclosure of the content of this e-mail is not permitted.
This email has been checked for known viruses, but ISIS Papyrus accepts
no responsibility for malicious or inappropriate content.
---

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Validation of a resource name

2014-03-05 Thread R.S.

Jan,

Your applications should use resource names, not profile names.
Resource is discrete by definition, example:
MVS.CANCEL.TSU.W* - a profile (with generic)
MVS.CANCEL.TSU.WILLSMIT - a resource.

Regarding your application: simply use alphanumerics as allowed characters.
Usually application (resource manager) has finite and hardcoded number 
of resource names to be used.
(Fine print): at least resource templates are hardcoded, with possible 
variable qualifiers which yield predictable resource names and makes 
name validation unreasonable.


--
Radoslaw Skorupka
Lodz, Poland






--
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl 
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. Wedug stanu na dzie 01.01.2014 r. kapita zakadowy mBanku S.A. (w caoci wpacony) wynosi 168.696.052 zote.



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Tom Marchant
On Wed, 5 Mar 2014 07:10:11 -0800, dpewen :

I added two functions to the svc:
1. to turn on the APF-auth bit in the job step TCB
2. to turn off the APF-auth bit in the job step TCB

This allows me to issue the MODESET svc successfully.

Congratulations! You have made it easy for any program to do anything on every 
system that has your product.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Problem Using XMITIP

2014-03-05 Thread Greg Shirey
George, 

Here's a guess - it looks to me like this section of code is being executed: 
if from_center = center then
  from_default = uid||AtSignC||center.domain

The variable domain has not been assigned a value, so the value is 'DOMAIN' 
and center has been assigned the value PAL6. 

It looks like center gets assigned in this section: 
/* -- *
 * Define the Center, or NJE Node, where the SMTP *
 * Server is running. *
 **
 * If the SMTP Server is running in the active Node then  *
 * no change is required as it is dynamically determined. *
 * -- */
 Center  = sysvar('sysnode')
 From_Center = center

The comment directly above it says that this code doesn't need to be modified 
if the SMTP server is running in the active Node.  

So, if these variables have values you are not expecting, it looks like it 
might have to do with the SMTP server.   Anything changed there recently? 

Greg 


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of George Rodriguez
Sent: Wednesday, March 05, 2014 11:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Problem Using XMITIP

Greg,

Here's what I have fro those values:

/* - *
 * append_domain *
 *  if not null then used to append to e-mail addresses  *
 *  that are specified without a domain. *
 *  Note: do NOT code the @ symbol - it will be added*
 *by default.*
 * - */  append_domain = 
null
/* -- *
 * Define the Center, or NJE Node, where the SMTP *
 * Server is running. *
 **
 * If the SMTP Server is running in the active Node then  *
 * no change is required as it is dynamically determined. *
 * -- */
 Center  = sysvar('sysnode')
 From_Center = center
/* - *
 * Setup the From Default*
 * This section should be customized for each shop   *
 * or at least reviewed.  Interlink users must customize *
 *   *
 * Note: if fromreq is enabled (non-zero) then   *
 *   from_default can be * and will cause the*
 *   user specified from to be used for the sender   *
 * - */
   msgid = sysvar(sysicmd):
   if length(msgid) = 1 then
  msgid = sysvar(syspcmd):
   uid = sysvar('sysuid')
   atsignc = left(atsign,1)
   if from_center = center then
  from_default = uid||AtSignC||center.domain
   else
  from_default = uid%from_center||AtSignC|| ,
  center.smtp_domain
/* --- *
 * FromReq used to require a FROM e-mail address in the XMITIP *
 * command.*
 * *
 * Values:   0 - not required  *
 *   1 - required  *
 *   a...@host.com- code in quotes to avoid  *
 *translation to upper case*
 * *
 * If an address then an e-mail is sent to that address for*
 * logging purposes.   *
 * --- *  FromReq = 0
 /* FromReq = n...@host.com */
/* --- *
 * Restrict_Domain *
 *If null then no action.  *
 *If set then all e-mails sent must end with   *
 *   the specified domain. *
 * --- */  restrict_domain = null
 /* restrict_domain = host.com  */

It doesn't explain why the DOMAIN name is not changing...


 *George Rodriguez*

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


SSD in DFSMS

2014-03-05 Thread R.S.

z/OS 1.13

AFAIK, IBM provides some interface that allow to choose SSD in DFSMS 
routines. Actually the only information I found is MSR parameter in 
Storage Class. I would like to read more about it, maybe some examples 
of implementations.


Where can I find more information about DFSMS and SSD ?

--
Radoslaw Skorupka
Lodz, Poland






---
Treść tej wiadomości może zawierać informacje prawnie chronione Banku 
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie 
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem 
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania 
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być 
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie 
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość 
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl 
Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2014 r. kapitał zakładowy mBanku S.A. (w całości wpłacony) wynosi 168.696.052 złote.



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: 0C4 from TSOEXEC IEBCOMPR

2014-03-05 Thread Jim Mulder
I am trying to compare two PDSEs.  I found Example 8: Compare Two
 PDSEs in the z/OS V1R12.0 DFSMSdfp Utilities (SC26-7414-07).  I am 
 trying to get IEBCOMPR to work from REXX like I got IEBCOPY to work.
 We are running z/OS V1R13.
 
 ALLOC FI(SYSUT1) DA('PMSBDH.VPS.LRS.AFP.V2R10.FDEFLIB') SHR
 ALLOC FI(SYSUT2) DA('VPS.LRS.VPS.V2R10.FDEFLIB') SHR
 ALLOC FI(SYSIN) UNIT(VIO) SPACE(15) BLKSIZE(80) LRECL(80) RECFM(F B)
 DSORG(PS) NEW DELETE REUSE
 NEWSTACK
 V1 =  COMPARE TYPORG=PO
 QUEUE V1
 EXECIO queued() DISKW SYSIN (FINIS
 DELSTACK
 TSOEXEC IEBCOMPR
 FREE FI(SYSUT1 SYSUT2 SYSIN)

  For one thing, you are invoking IEBCOMPR as a command processor,
and it may not be designed to deal with that interface.

  What happens if you do CALL *(IEBCOMPR) instead of
TSOEXEC IEBCOMPR  ?

Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


IDCAMS if-else

2014-03-05 Thread Micheal Butz
Hi,

I have 2 files and would lime to see 
If one or both or none exist

I am using IDCAMS if-else sequence
With a command of print for this

However I am always coming up with a cc of 0 in the jcl for this step 

E.G.
Let's say filea is empty so is fileb
  Print indataset(filea) count (1)
If lastcc ne 0 then do
Print indataset(fileb) count (1)
   If lastcc = 0 then set lastcc = 8
  Else
Set lastcc = 0
End
Else do
 Print indataset(fileb) count(1)
  If lastcc ne 0 then
   Set lastcc = 4
End

I always cone up with a 0 for the IDCAMS job step when it should be in the case 
of 2 empty file 8
Sent from my iPhone

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IDCAMS if-else

2014-03-05 Thread CM Poncelet

Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC.

Micheal Butz wrote:


Hi,

I have 2 files and would lime to see 
If one or both or none exist


I am using IDCAMS if-else sequence
With a command of print for this

However I am always coming up with a cc of 0 in the jcl for this step 


E.G.
Let's say filea is empty so is fileb
 Print indataset(filea) count (1)
If lastcc ne 0 then do
   Print indataset(fileb) count (1)
  If lastcc = 0 then set lastcc = 8
 Else
   Set lastcc = 0
End
Else do
Print indataset(fileb) count(1)
 If lastcc ne 0 then
  Set lastcc = 4
End

I always cone up with a 0 for the IDCAMS job step when it should be in the case 
of 2 empty file 8
Sent from my iPhone

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


 



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IDCAMS if-else

2014-03-05 Thread CM Poncelet
But LASTCC applies only to the instruction that is being checked. As 
soon as a new instruction is issued (or a higher level nested 
instruction completes), LASTCC becomes the CC of this instruction.


E.g. Consider the following:

IF 1 EQ 1 DO
 SET LASTCC EQ 8
 END

The LASTCC following the above would be 0, because the IF-END completed 
with CC = 0 (regardless of the SET LASTCC EQ 8 in-between).


So, change your LASTCC to MAXCC throughout - then check MAXCC instead of 
LASTCC.


Micheal Butz wrote:


I tried interrogating lastcc and setting
MAXCC still comes up with 0

Sent from my iPhone

 


On Mar 5, 2014, at 6:37 PM, CM Poncelet ponce...@bcs.org.uk wrote:

Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC.

Micheal Butz wrote:

   


Hi,

I have 2 files and would lime to see If one or both or none exist

I am using IDCAMS if-else sequence
With a command of print for this

However I am always coming up with a cc of 0 in the jcl for this step 
E.G.

Let's say filea is empty so is fileb
Print indataset(filea) count (1)
If lastcc ne 0 then do
 Print indataset(fileb) count (1)
If lastcc = 0 then set lastcc = 8
Else
 Set lastcc = 0
End
Else do
Print indataset(fileb) count(1)
If lastcc ne 0 then
Set lastcc = 4
End

I always cone up with a 0 for the IDCAMS job step when it should be in the case 
of 2 empty file 8
Sent from my iPhone

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
   



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


 



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IDCAMS if-else

2014-03-05 Thread Micheal Butz
I understand but take a look at this

  Print indataset( empty filea)  
 If lastcc ne 0
  Print indataset(emptyfb) 
If lastcc ne 0 then set maxcc = 8
 Else 
Set maxcc = 0

If both files are empty the condition code should be 8
But I always get 0 from the IDCAMS step



Sent from my iPhone

 On Mar 5, 2014, at 7:28 PM, CM Poncelet ponce...@bcs.org.uk wrote:
 
 But LASTCC applies only to the instruction that is being checked. As soon as 
 a new instruction is issued (or a higher level nested instruction completes), 
 LASTCC becomes the CC of this instruction.
 
 E.g. Consider the following:
 
 IF 1 EQ 1 DO
 SET LASTCC EQ 8
 END
 
 The LASTCC following the above would be 0, because the IF-END completed with 
 CC = 0 (regardless of the SET LASTCC EQ 8 in-between).
 
 So, change your LASTCC to MAXCC throughout - then check MAXCC instead of 
 LASTCC.
 
 Micheal Butz wrote:
 
 I tried interrogating lastcc and setting
 MAXCC still comes up with 0
 
 Sent from my iPhone
 
 
 On Mar 5, 2014, at 6:37 PM, CM Poncelet ponce...@bcs.org.uk wrote:
 
 Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC.
 
 Micheal Butz wrote:
 
   
 Hi,
 
 I have 2 files and would lime to see If one or both or none exist
 
 I am using IDCAMS if-else sequence
 With a command of print for this
 
 However I am always coming up with a cc of 0 in the jcl for this step E.G.
 Let's say filea is empty so is fileb
 Print indataset(filea) count (1)
 If lastcc ne 0 then do
 Print indataset(fileb) count (1)
 If lastcc = 0 then set lastcc = 8
 Else
 Set lastcc = 0
 End
 Else do
 Print indataset(fileb) count(1)
 If lastcc ne 0 then
 Set lastcc = 4
 End
 
 I always cone up with a 0 for the IDCAMS job step when it should be in the 
 case of 2 empty file 8
 Sent from my iPhone
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IDCAMS if-else

2014-03-05 Thread Paul Gilmartin
On Wed, 5 Mar 2014 18:21:34 -0500, Micheal Butz wrote:

I have 2 files and would li[k]e to see
If one or both or none exist

I am using IDCAMS ...
 
exist or are nonempty?

This is another thing it's ridiculously easy to do with z/OS UNIX:

File1=SYS1.MACLIB(SPLEVEL)
File2=SYS1.MACLIB(WAIT)

Counts=$( cp -B //'$File1' /dev/fd/1 | head -c1
   )$( cp -B //'$File2' /dev/fd/1 | head -c1 )

case $Counts in
) echo Both files are empty;;
 ?) echo One file is non-empty;;
??) echo Both files are non-empty;; esac

Why torture yourself?

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IDCAMS if-else

2014-03-05 Thread Micheal Butz
I do a print indataset for count(1) if the dataset is just catalogued I should 
get a non 0 return code

Can I use unix from a IDCAMS job ?

Sent from my iPhone

 On Mar 5, 2014, at 8:03 PM, Paul Gilmartin paulgboul...@aim.com wrote:
 
 On Wed, 5 Mar 2014 18:21:34 -0500, Micheal Butz wrote:
 
 I have 2 files and would li[k]e to see
 If one or both or none exist
 
 I am using IDCAMS ...
 exist or are nonempty?
 
 This is another thing it's ridiculously easy to do with z/OS UNIX:
 
 File1=SYS1.MACLIB(SPLEVEL)
 File2=SYS1.MACLIB(WAIT)
 
 Counts=$( cp -B //'$File1' /dev/fd/1 | head -c1
   )$( cp -B //'$File2' /dev/fd/1 | head -c1 )
 
 case $Counts in
) echo Both files are empty;;
 ?) echo One file is non-empty;;
??) echo Both files are non-empty;; esac
 
 Why torture yourself?
 
 -- gil
 
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IDCAMS if-else

2014-03-05 Thread CM Poncelet

Try this:

 Print indataset( empty filea)  
If MAXCC ne 0 THEN DO

 SET MAXCC EQ 0
 Print indataset(emptyfb) 
   If MAXCC ne 0 then set maxcc = 8
Else 
   Set maxcc = 0

   END /* IF */
ELSE SET MAXCC EQ 8

Not sure whether this is what you want to achieve, but it should return a CC=00 
if either 'filea' or 'fb' is printable - else it should return CC=08.



Micheal Butz wrote:


I understand but take a look at this

 Print indataset( empty filea)  
If lastcc ne 0
 Print indataset(emptyfb) 
   If lastcc ne 0 then set maxcc = 8
Else 
   Set maxcc = 0


If both files are empty the condition code should be 8
But I always get 0 from the IDCAMS step



Sent from my iPhone

 


On Mar 5, 2014, at 7:28 PM, CM Poncelet ponce...@bcs.org.uk wrote:

But LASTCC applies only to the instruction that is being checked. As soon as a 
new instruction is issued (or a higher level nested instruction completes), 
LASTCC becomes the CC of this instruction.

E.g. Consider the following:

IF 1 EQ 1 DO
SET LASTCC EQ 8
END

The LASTCC following the above would be 0, because the IF-END completed with CC 
= 0 (regardless of the SET LASTCC EQ 8 in-between).

So, change your LASTCC to MAXCC throughout - then check MAXCC instead of LASTCC.

Micheal Butz wrote:

   


I tried interrogating lastcc and setting
MAXCC still comes up with 0

Sent from my iPhone


 


On Mar 5, 2014, at 6:37 PM, CM Poncelet ponce...@bcs.org.uk wrote:

Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC.

Micheal Butz wrote:

 
   


Hi,

I have 2 files and would lime to see If one or both or none exist

I am using IDCAMS if-else sequence
With a command of print for this

However I am always coming up with a cc of 0 in the jcl for this step E.G.
Let's say filea is empty so is fileb
Print indataset(filea) count (1)
If lastcc ne 0 then do
Print indataset(fileb) count (1)
If lastcc = 0 then set lastcc = 8
Else
Set lastcc = 0
End
Else do
Print indataset(fileb) count(1)
If lastcc ne 0 then
Set lastcc = 4
End

I always cone up with a 0 for the IDCAMS job step when it should be in the case 
of 2 empty file 8
Sent from my iPhone

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
   


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
   



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


 



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IDCAMS if-else

2014-03-05 Thread Paul Gilmartin
On Wed, 5 Mar 2014 20:06:14 -0500, Micheal Butz wrote:

I do a print indataset for count(1) if the dataset is just catalogued I should 
get a non 0 return code

Can I use unix from a IDCAMS job ?
 
Probably not, unless IDCAMS has an escape-to-host-command facility.

Your use of IDCAMS job step (mis)led me to believe your use of IDCAMS was
solely to evaluate the emptiness of the data sets.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SSD in DFSMS

2014-03-05 Thread Lizette Koehler
Are you asking about solid state dasd or some other item?

Lizette


 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of R.S.
 Sent: Wednesday, March 05, 2014 12:24 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: SSD in DFSMS
 
 z/OS 1.13
 
 AFAIK, IBM provides some interface that allow to choose SSD in DFSMS
routines.
 Actually the only information I found is MSR parameter in Storage Class. I
would
 like to read more about it, maybe some examples of implementations.
 
 Where can I find more information about DFSMS and SSD ?
 
 --
 Radoslaw Skorupka
 Lodz, Poland
 
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: ISPF Storage Protection

2014-03-05 Thread Shmuel Metz (Seymour J.)
In
CAE1XxDHEY=r5tzjrpocmoggzsqtks7trlbs-tzqxf172znu...@mail.gmail.com,
on 03/05/2014
   at 11:41 AM, John Gilmore jwgli...@gmail.com said:

It is frequently necessary to depress authority, and it is therefore
necessary to elevate it too in order to restore the status quo ante.

Nonsense; there are mechanisms to temporarily reduce authority with
any tricks to reinstate the original authority. There is no excuse for
using mechanisms such as magic SVC's.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


zAware certificate need on RACF

2014-03-05 Thread Jake anderson
Hello,

Cross Posted on IBM MAIN and RACF-L

Are there anyone who has set AT-TLS for zAware on Z/OS. I have been
referring a RED book on enabling at-tls but I am not able to understand the
need of importing zAware certificates to RACF. If my Understanding is
correct zAware does not have any interaction with RACF DB. Since zAware
acts as an LPAR and gets the Z/OS image information via Logstream.

Could someone enlighten me the need of zAware certificate on RACF DB ? How
this is going to be useful for the zAware Users ?

z/OS : 2.1

Jake

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: IDCAMS if-else

2014-03-05 Thread CM Poncelet
... actually, drop the last line ELSE SET MAXCC EQ 8 otherwise it will 
return CC=08 if  Print indataset( empty filea) ends with CC=00 :-(


CM Poncelet wrote:


Try this:

 Print indataset( empty filea)  
If MAXCC ne 0 THEN DO

 SET MAXCC EQ 0
 Print indataset(emptyfb) 
   If MAXCC ne 0 then set maxcc = 8
Else 
   Set maxcc = 0

   END /* IF */
ELSE SET MAXCC EQ 8

Not sure whether this is what you want to achieve, but it should return a CC=00 
if either 'filea' or 'fb' is printable - else it should return CC=08.
 




Micheal Butz wrote:


I understand but take a look at this

 Print indataset( empty filea)  
If lastcc ne 0
 Print indataset(emptyfb) 
   If lastcc ne 0 then set maxcc = 8
Else 
   Set maxcc = 0


If both files are empty the condition code should be 8
But I always get 0 from the IDCAMS step



Sent from my iPhone

 


On Mar 5, 2014, at 7:28 PM, CM Poncelet ponce...@bcs.org.uk wrote:

But LASTCC applies only to the instruction that is being checked. As soon as a 
new instruction is issued (or a higher level nested instruction completes), 
LASTCC becomes the CC of this instruction.

E.g. Consider the following:

IF 1 EQ 1 DO
SET LASTCC EQ 8
END

The LASTCC following the above would be 0, because the IF-END completed with CC 
= 0 (regardless of the SET LASTCC EQ 8 in-between).

So, change your LASTCC to MAXCC throughout - then check MAXCC instead of LASTCC.

Micheal Butz wrote:

   


I tried interrogating lastcc and setting
MAXCC still comes up with 0

Sent from my iPhone


 


On Mar 5, 2014, at 6:37 PM, CM Poncelet ponce...@bcs.org.uk wrote:

Try setting MAXCC EQ whatever, e.g. 4 or 8 instead of LASTCC.

Micheal Butz wrote:

 
   


Hi,

I have 2 files and would lime to see If one or both or none exist

I am using IDCAMS if-else sequence
With a command of print for this

However I am always coming up with a cc of 0 in the jcl for this step E.G.
Let's say filea is empty so is fileb
Print indataset(filea) count (1)
If lastcc ne 0 then do
Print indataset(fileb) count (1)
If lastcc = 0 then set lastcc = 8
Else
Set lastcc = 0
End
Else do
Print indataset(fileb) count(1)
If lastcc ne 0 then
Set lastcc = 4
End

I always cone up with a 0 for the IDCAMS job step when it should be in the case 
of 2 empty file 8
Sent from my iPhone

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
   


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
   



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


 



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Validation of a resource name

2014-03-05 Thread Arthur T.
On 5 Mar 2014 10:05:58 -0800, in bit.listserv.ibm-main 
(Message-ID:CADEq6i9SMRxz4fz3XNNTq+0eMWxk0E=atqga1w-awhjcyjj...@mail.gmail.com) 
jan.je...@gmail.com (jan de decker) wrote:


I am building a small web application that interfaces with 
RACF.


On the client side I only have the IBM default supplied 
classes.


I want validate as much as possible on the client before 
sending it to the

server.


 Never do validation on the client side.  Someone 
might decide to write their own client, or something else 
silly, just to get by restrictions.  It's especially 
important not to trust client-side *security* validation.



--
I cannot receive mail at the address this was sent from.
To reply directly, send to ar23hur at pobox dot com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Validation of a resource name

2014-03-05 Thread David Crayford

On 6/03/2014 2:11 PM, Arthur T. wrote:
On 5 Mar 2014 10:05:58 -0800, in bit.listserv.ibm-main 
(Message-ID:CADEq6i9SMRxz4fz3XNNTq+0eMWxk0E=atqga1w-awhjcyjj...@mail.gmail.com) 
jan.je...@gmail.com (jan de decker) wrote:



I am building a small web application that interfaces with RACF.

On the client side I only have the IBM default supplied classes.

I want validate as much as possible on the client before sending it 
to the

server.


 Never do validation on the client side.  Someone might decide to 
write their own client, or something else silly, just to get by 
restrictions.  It's especially important not to trust client-side 
*security* validation.




That depends on what you're validating. If it's just syntax for a class 
name then validating on the client is surely better than pinging it off 
to a server.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SSD in DFSMS

2014-03-05 Thread R.S.

Yes, I mean Solid State Drive.



--
Radoslaw Skorupka
Lodz, Poland







W dniu 2014-03-06 02:35, Lizette Koehler pisze:

Are you asking about solid state dasd or some other item?

Lizette



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of R.S.
Sent: Wednesday, March 05, 2014 12:24 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: SSD in DFSMS

z/OS 1.13

AFAIK, IBM provides some interface that allow to choose SSD in DFSMS

routines.

Actually the only information I found is MSR parameter in Storage Class. I

would

like to read more about it, maybe some examples of implementations.

Where can I find more information about DFSMS and SSD ?

--
Radoslaw Skorupka
Lodz, Poland



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN





---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl 
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. Wedug stanu na dzie 01.01.2014 r. kapita zakadowy mBanku S.A. (w caoci wpacony) wynosi 168.696.052 zote.



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: SSD in DFSMS

2014-03-05 Thread Vernooij, CP (SPLXM) - KLM
I remembered having heard or read this and the first Google hit was:
http://pic.dhe.ibm.com/infocenter/zos/v1r12/index.jsp?topic=%2Fcom.ibm.zos.r12.idas200%2Fs2082.htm
Is this what you are looking for?

kees.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of R.S.
Sent: Thursday, March 06, 2014 08:36
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SSD in DFSMS

Yes, I mean Solid State Drive.



-- 
Radoslaw Skorupka
Lodz, Poland







W dniu 2014-03-06 02:35, Lizette Koehler pisze:
 Are you asking about solid state dasd or some other item?

 Lizette


 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of R.S.
 Sent: Wednesday, March 05, 2014 12:24 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: SSD in DFSMS

 z/OS 1.13

 AFAIK, IBM provides some interface that allow to choose SSD in DFSMS
 routines.
 Actually the only information I found is MSR parameter in Storage Class. I
 would
 like to read more about it, maybe some examples of implementations.

 Where can I find more information about DFSMS and SSD ?

 --
 Radoslaw Skorupka
 Lodz, Poland


 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl 
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru 
Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. 
Wedug stanu na dzie 01.01.2014 r. kapita zakadowy mBanku S.A. (w caoci 
wpacony) wynosi 168.696.052 zote.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message. 

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt. 
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Validation of a resource name,

2014-03-05 Thread jan de decker
Hi list,


Thanks to all who responded.

The purpose of the Javascript is to give as much feed-back to the user as
possible before sending it to zOS, who will repeat the validations and a
lot more for the dynamic CDT and ICHRRCDE user defined classes.

Uppercase ALPHANUM is not checked because RACF does not care on the server.

The title of my mail was badly chosen. I want to do resource as well as
profile checking.

E.g. The user can fill in

userd: jan
access: ALTER
class: dataset
resource: jan.x.*

or jan.x.rexx

The CGI program can handle both profile and resource and will return the
authorization and the why. E.g.

jan ALTER dataset jan.x.* PERMIT via group SYSTEM

if the authorization is not sufficient it will return the highest one. E.g.

jan CONTROL dataset jan.x.rexx via GLOBAL uid.**

If anybody could comment on this it would greatly appreciated.


Regards,


j@n

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN