POODLE Vulnerability - TLS fallback to SSL
Cross-posted on RACF-L and IBM-MAIN: To all who are working with SSL, TLS, hosting websites, etc. https://www.suse.com/communities/conversations/understanding-poodle/ Basically, during handshake communication, the fallback to SSL v3 from TLS 1.0 may be mis-used. Problem is protocol vulnerability, not code vulnerability. BTW: SSL v3 is old, very old. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: GLOBALFOUNDRIES to Acquire IBM's Semiconductor Technology Business
I guess when you sell a line of business that's losing money, you end up selling for a negative price. Presumably they didn't just shutter it because they want continued access to the production line output without having to go compete with other manufacturers for foundry capacity. Scott -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Verify APF libraries
Consider the case of placing a load library of mostly installation-written COBOL batch programs into the LNKLST to avoid having to code perhaps thousands of //STEPLIB or //JOBLIB statements in the nightly batch run. Would you really want those programs to be APF-authorized? Of course not, but making a data set APF-authorized is not sufficient to bestow APF-authorization upon a program that is the target of EXEC PGM=. That requires AC=1. And that could be checked before adding such a data set to the LNKLST. That is a reason why, naturally, it is very important not to have modules mismarked as AC=1. Putting such a data set into the LNKLST with LNKAUTH=LNKLST does, however, mean that if an authorized program asks to fetch such a module (perhaps to LINK to it), that fetch will be granted. That is a danger of marking any data set as APF-authorized that should not be. FWIW, if you just want to see if your APF list completely has all of the LNKLST libraries, you could capture the output of DISPLAY PROG,LNKLST and DISPLAY PROG,APF then sort and compare. That will at least give you an idea (although the APF entries may show volume, and the LNKLST entries could have a data set alias whereas the APF entry is supposed to be the real data set name). Peter Relson z/OS Core Technology Design -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Verify APF libraries
Barry Merrill wrote: -A flag in RACF Unload file (RAC900: USS RACF BASIC RECORD) APF CHAR 4 APF BIT ON? Sorry, I don't find it in my RACF books. Not in SMF unload or RACF unload chapters either. Where is that documented? Just curious if you don't mind, please. Two fields in SMF 92 subtype 15 (TY9215: OMVS EXTENDED SECURITY CHANGES) SMF92ANA CHAR 1 $HEX2.0 NEW*APF*AUTH*WAS*ON SMF92AOA CHAR 1 $HEX2.0 OLD*APF*AUTH*WAS*ON Are you refering to SMF92AOLDGENVALSECBYTE and SMF92AOLDAPFAUTHC and / or SMF92ANEWGENVALSECBYTE and SMF92ANEWAPFAUTHC ? These above names are coming from SMF book. Many thanks. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
On Fri, 17 Oct 2014 16:36:38 -0400, Don Poitras wrote: I guess it depends what you mean by I would like to use 64bit storage for some functions from Cobol. If the Cobol part is never going to directly use the memory, then there's no problem in a called program in another language using above the bar storage. Just remember to SAM 31 before you return to Cobol (unless you use one of the calls that automatically returns you in the correct amode.) If you have an assembler called program, you don't need to issue SAM31 before returning as long as you were called with one of BASSM, BASR or BALR. In all of these cases the return register (R14) contains sufficient information so that BSM will return correctly. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Tom Marchant On Fri, 17 Oct 2014 16:36:38 -0400, Don Poitras wrote: I guess it depends what you mean by I would like to use 64bit storage for some functions from Cobol. If the Cobol part is never going to directly use the memory, then there's no problem in a called program in another language using above the bar storage. Just remember to SAM 31 before you return to Cobol (unless you use one of the calls that automatically returns you in the correct amode.) If you have an assembler called program, you don't need to issue SAM31 before returning as long as you were called with one of BASSM, BASR or BALR. In all of these cases the return register (R14) contains sufficient information so that BSM will return correctly. But see APAR PI17184 for an instance when BSM did not return correctly. -jc- ** Information contained in this e-mail message and in any attachments thereto is confidential. If you are not the intended recipient, please destroy this message, delete any copies held on your systems, notify the sender immediately, and refrain from using or disclosing all or any part of its content to any other person. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Verify APF libraries
On Tue, 21 Oct 2014 07:13:50 -0500, Elardus Engelbrecht elardus.engelbre...@sita.co.za wrote: Barry Merrill wrote: -A flag in RACF Unload file (RAC900: USS RACF BASIC RECORD) APF CHAR 4 APF BIT ON? Sorry, I don't find it in my RACF books. Not in SMF unload or RACF unload chapters either. Where is that documented? Just curious if you don't mind, please. He's referring to the type 0900 database unload record created by the IRRHFSU utility from the RACF Downloads page at http://www-03.ibm.com/systems/z/os/zos/features/racf/downloads/irrhfsu.html -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Verify APF libraries
Walt Farrell wrote: He's referring to the type 0900 database unload record created by the IRRHFSU utility from the RACF Downloads page at http://www-03.ibm.com/systems/z/os/zos/features/racf/downloads/irrhfsu.html Yes! That is that! Many thanks for kindly helping out. I totally forgot about that little goodie. Many thanks again. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
On Tue, 21 Oct 2014 07:30:32 -0500, Tom Marchant wrote: If you have an assembler called program, you don't need to issue SAM31 before returning as long as you were called with one of BASSM, BASR or BALR. In all of these cases the return register (R14) contains sufficient information so that BSM will return correctly. How does the content of R14 distinguish between the cases: o Caller in AMODE 24 o Caller in AMODE 64; Return Address 16MiB? And, even, between: o Caller in AMODE 31 o Caller in AMODE 64; 6GiB = Return Address 8GiB? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
Chase, John wrote: But see APAR PI17184 for an instance when BSM did not return correctly. Curious PER, hmmm. Is that only for COBOL 5.1 programs running under CICS? With what LE version is that APAR? Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IBM Library Server
Anyone got a url for the above which contains the bookshelves for stuff like CICS and IMS as well as z/OS. I had one but can't remember what it was. Jim McAlpine -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM Library Server
Jim McAlpine wrote: Anyone got a url for the above which contains the bookshelves for stuff like CICS and IMS as well as z/OS. I had one but can't remember what it was. For z/OS try this: http://www-03.ibm.com/systems/z/os/zos/library/bkserv/index.html Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM Library Server
Thanks. Jim Mc On Tue, Oct 21, 2014 at 3:00 PM, Elardus Engelbrecht elardus.engelbre...@sita.co.za wrote: Jim McAlpine wrote: Anyone got a url for the above which contains the bookshelves for stuff like CICS and IMS as well as z/OS. I had one but can't remember what it was. For z/OS try this: http://www-03.ibm.com/systems/z/os/zos/library/bkserv/index.html Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
On Tue, 21 Oct 2014 13:31:44 +, Chase, John wrote: From: IBM Mainframe Discussion List On Behalf Of Tom Marchant If you have an assembler called program, you don't need to issue SAM31 before returning as long as you were called with one of BASSM, BASR or BALR. In all of these cases the return register (R14) contains sufficient information so that BSM will return correctly. But see APAR PI17184 for an instance when BSM did not return correctly. That's why I hedged my post the way I did. It is not at all clear to me that LE always used BASSM, BALR or BASR to call. The APAR information is confusing, at least to me. quote Normally this is not an issue with GOBACK, since BALR is used to return to the caller. However, when LE stack frame exit is introduced to the stack chain, the CEEHSFXA routine will get control and BSM is used to return to the caller instead. /quote I've never seen a case where BALR is used to return to the caller. I think I may have seen where BSM is used by the caller to pass control to the called program. In particular, where there is an interface routine (glue code) between the calling application and the called program. So, yes, if your program changes the AMODE after receiving control, you should change it back to what it was. And not just blindly set it to AMODE 31. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
On Tue, 21 Oct 2014 08:49:26 -0500, Paul Gilmartin wrote: On Tue, 21 Oct 2014 07:30:32 -0500, Tom Marchant wrote: If you have an assembler called program, you don't need to issue SAM31 before returning as long as you were called with one of BASSM, BASR or BALR. In all of these cases the return register (R14) contains sufficient information so that BSM will return correctly. How does the content of R14 distinguish between the cases: o Caller in AMODE 24 o Caller in AMODE 64; Return Address 16MiB? And, even, between: o Caller in AMODE 31 o Caller in AMODE 64; 6GiB = Return Address 8GiB? I stand corrected. BALR and BASR do not set bit 63 of the return register if in AMODE 64, so what I wrote earlier applies only to AMODE 24 or 31 callers using those instructions. BASSM always provides the correct information for BSM to correctly return to the calling program. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Elardus Engelbrecht Chase, John wrote: But see APAR PI17184 for an instance when BSM did not return correctly. Curious PER, hmmm. Is that only for COBOL 5.1 programs running under CICS? That was the situation when I opened the PMR for which the APAR was opened. Presumably it could have occurred in a batch program as well. With what LE version is that APAR? z/OS 1.13 (HLE7780) -jc- ** Information contained in this e-mail message and in any attachments thereto is confidential. If you are not the intended recipient, please destroy this message, delete any copies held on your systems, notify the sender immediately, and refrain from using or disclosing all or any part of its content to any other person. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
On Tue, 21 Oct 2014 09:18:52 -0500, Tom Marchant wrote: I stand corrected. BALR and BASR do not set bit 63 of the return register if in AMODE 64, so what I wrote earlier applies only to AMODE 24 or 31 callers using those instructions. BASSM always provides the correct information for BSM to correctly return to the calling program. Thanks. I'm not up to date on my P[ro]Op reading, and was ignorant of the bit 63 behavior. FWIW, I see in SYS1.MACLIB(RETURN): OI15(13),X'01' SET RETURN INDICATION 0160 BASSM has some minor conflict with this convention. I doubt that it matters. Does anyone inspect this indication in dumps? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Question on WRITE statements in ACS and Automation
Hi Lizette, Just cleaning up some mails, and I came across this. There is a message revision table in Netview that could be used. I have used it in a temporary way when I issue a command from system automation that only generates ouput in a joblog - in my case the revision table is: UPON ( JOBNAME = 'DFSKERN' ) REVISE(Y AUTOMATE) Then I activate a message table that triggers an exec to write each message it sees from the jobname to a global variable stem (incrementing an index), and asynchronously pick up the output later. Of course in your case, the message table processing could be much simpler, and permanent (I only do the set-up to retrieve the data I have triggered, and undo it afterwards). Best regards, David Tidy IS Technical Management/SAP-Mf Dow Benelux B.V. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: 9 July 2013 15:00 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Question on WRITE statements in ACS and Automation I have a friend who is at z/OS V1.13 He asked me an interesting question that I am thinking of opening a Share requirement on. Let me know what you think When you create ACS code you can put WRITE statements into the process for clarification. Is it possible to capture those WRITEs in an automation product, OPS/MVS, AFOPER, Tivoli, and action the message? If a user is creating a dataset and using an invalid DSN, I could put a write statement in the code that says WRITE MYACS001I Invalid DSN for the storage group requested. Then if it went to SYSLOG I could capture it and send an email to the storage team for review. Or if my user was requesting way to much space for a specify storage pool, I could do something similar. So, it would be nice, in my opinion, to be able to create an event notification that an automation tool could capture and then perform some action (i.e. email the storage team) I understand that I can redirect to a different pool and provide other actions within ACS code. But since a lot of logging goes directly to the DFHSM logs or SYSOUT DDs, I have to have someone manually review to identify what is going on. Another example, there is an ARC0019I message that indicates the CELLS are too small for DFHSM. It is only in the SYSOUT DDs. I will be opening a SHARE requirement to be able to redirect these types of messages to SYSLOG so that an automation tool can send a notification to the storage team. The only way I see of doing it is to filter the output of the task to find the ACS code WRITE statements or filter the DFHSM SYSOUT DDs. Any thoughts are welcome. And if you have any other messages or functions in DFHSM that might need redirection, let me know. Thanks Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Question on WRITE statements in ACS and Automation
David, I think the problem with the ACS WRITE statements is, that the output does not travel the route that can be intercepted by your solution. It goes directly to the JES2 Message file of the job. I have been looking too for a way to collect these message and have them emailed to me, but AFAIK, it is not possible. Any change in this would be welcome. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tidy, David (D) Sent: 21 October, 2014 16:32 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Question on WRITE statements in ACS and Automation Hi Lizette, Just cleaning up some mails, and I came across this. There is a message revision table in Netview that could be used. I have used it in a temporary way when I issue a command from system automation that only generates ouput in a joblog - in my case the revision table is: UPON ( JOBNAME = 'DFSKERN' ) REVISE(Y AUTOMATE) Then I activate a message table that triggers an exec to write each message it sees from the jobname to a global variable stem (incrementing an index), and asynchronously pick up the output later. Of course in your case, the message table processing could be much simpler, and permanent (I only do the set-up to retrieve the data I have triggered, and undo it afterwards). Best regards, David Tidy IS Technical Management/SAP-Mf Dow Benelux B.V. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: 9 July 2013 15:00 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Question on WRITE statements in ACS and Automation I have a friend who is at z/OS V1.13 He asked me an interesting question that I am thinking of opening a Share requirement on. Let me know what you think When you create ACS code you can put WRITE statements into the process for clarification. Is it possible to capture those WRITEs in an automation product, OPS/MVS, AFOPER, Tivoli, and action the message? If a user is creating a dataset and using an invalid DSN, I could put a write statement in the code that says WRITE MYACS001I Invalid DSN for the storage group requested. Then if it went to SYSLOG I could capture it and send an email to the storage team for review. Or if my user was requesting way to much space for a specify storage pool, I could do something similar. So, it would be nice, in my opinion, to be able to create an event notification that an automation tool could capture and then perform some action (i.e. email the storage team) I understand that I can redirect to a different pool and provide other actions within ACS code. But since a lot of logging goes directly to the DFHSM logs or SYSOUT DDs, I have to have someone manually review to identify what is going on. Another example, there is an ARC0019I message that indicates the CELLS are too small for DFHSM. It is only in the SYSOUT DDs. I will be opening a SHARE requirement to be able to redirect these types of messages to SYSLOG so that an automation tool can send a notification to the storage team. The only way I see of doing it is to filter the output of the task to find the ACS code WRITE statements or filter the DFHSM SYSOUT DDs. Any thoughts are welcome. And if you have any other messages or functions in DFHSM that might need redirection, let me know. Thanks Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286
Re: 64bit
Chase, John wrote: Curious PER, hmmm. Is that only for COBOL 5.1 programs running under CICS? That was the situation when I opened the PMR for which the APAR was opened. Presumably it could have occurred in a batch program as well. Ok. With what LE version is that APAR? z/OS 1.13 (HLE7780) Thanks. Much better written than those hastily written 'Release level 780' in the APAR. I really wish those IBMers working with APARs would write the [full] set of programs and their releases properly. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
Tom Marchant wrote: begin extract So, yes, if your program changes the AMODE after receiving control, you should change it back to what it was. And not just blindly set it to AMODE 31. /end extract and this is supremely good generic advice. I am hard put even to fantasticate a situation in which it is not appropriate. John Gilmore, Ashland, MA 01721 - USA -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Question on WRITE statements in ACS and Automation
Hi Kees, Sorry - yes you are right. I was thinking that I was rerouting joblog ouptut, but in fact I am just trapping syslog output that is not normally passed to automation. Best regards, David Tidy IS Technical Management/SAP-Mf Dow Benelux B.V. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Vernooij, CP (SPLXM) - KLM Sent: 21 October 2014 16:41 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Question on WRITE statements in ACS and Automation David, I think the problem with the ACS WRITE statements is, that the output does not travel the route that can be intercepted by your solution. It goes directly to the JES2 Message file of the job. I have been looking too for a way to collect these message and have them emailed to me, but AFAIK, it is not possible. Any change in this would be welcome. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tidy, David (D) Sent: 21 October, 2014 16:32 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Question on WRITE statements in ACS and Automation Hi Lizette, Just cleaning up some mails, and I came across this. There is a message revision table in Netview that could be used. I have used it in a temporary way when I issue a command from system automation that only generates ouput in a joblog - in my case the revision table is: UPON ( JOBNAME = 'DFSKERN' ) REVISE(Y AUTOMATE) Then I activate a message table that triggers an exec to write each message it sees from the jobname to a global variable stem (incrementing an index), and asynchronously pick up the output later. Of course in your case, the message table processing could be much simpler, and permanent (I only do the set-up to retrieve the data I have triggered, and undo it afterwards). Best regards, David Tidy IS Technical Management/SAP-Mf Dow Benelux B.V. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: 9 July 2013 15:00 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Question on WRITE statements in ACS and Automation I have a friend who is at z/OS V1.13 He asked me an interesting question that I am thinking of opening a Share requirement on. Let me know what you think When you create ACS code you can put WRITE statements into the process for clarification. Is it possible to capture those WRITEs in an automation product, OPS/MVS, AFOPER, Tivoli, and action the message? If a user is creating a dataset and using an invalid DSN, I could put a write statement in the code that says WRITE MYACS001I Invalid DSN for the storage group requested. Then if it went to SYSLOG I could capture it and send an email to the storage team for review. Or if my user was requesting way to much space for a specify storage pool, I could do something similar. So, it would be nice, in my opinion, to be able to create an event notification that an automation tool could capture and then perform some action (i.e. email the storage team) I understand that I can redirect to a different pool and provide other actions within ACS code. But since a lot of logging goes directly to the DFHSM logs or SYSOUT DDs, I have to have someone manually review to identify what is going on. Another example, there is an ARC0019I message that indicates the CELLS are too small for DFHSM. It is only in the SYSOUT DDs. I will be opening a SHARE requirement to be able to redirect these types of messages to SYSLOG so that an automation tool can send a notification to the storage team. The only way I see of doing it is to filter the output of the task to find the ACS code WRITE statements or filter the DFHSM SYSOUT DDs. Any thoughts are welcome. And if you have any other messages or functions in DFHSM that might need redirection, let me know. Thanks Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by
ldapchangepwd
Attempting to use ldapchangepwd. Any idea what is causing error? ldapchangepwd -D cn=TESTUSER,o=IBM,c=US -w ? -n ? -h 127.0.0.1 -p 389 Enter current password == old Enter new password == new ldap_sasl_bind: Credentials are not valid ldap_sasl_bind: additional info: R004062 Credentials are not valid (ldbm_authenticate_user:252) Thanks, Tim Brown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Question on WRITE statements in ACS and Automation
I think I would need a WTO process for ACS code rather than a WRITE statement. Or in addition to a write statement. So for those sections of ACS code I might want to have IF DSN = SYS1.** Then Do Write Restricted HLQ HLQ WTO mymsgid Job JOB Tried to use DSN EXIT END I will see about crafting a share requirement if you think it might be useful. Or perhaps SNMP or MIB or API for other products. But I think that direction maybe a bigger performance hit. I am sure IBM is going to warn against performance issues with something like that. So I would think a warning in using WTO might be appropriate. Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Vernooij, CP (SPLXM) - KLM Sent: Tuesday, October 21, 2014 7:41 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Question on WRITE statements in ACS and Automation David, I think the problem with the ACS WRITE statements is, that the output does not travel the route that can be intercepted by your solution. It goes directly to the JES2 Message file of the job. I have been looking too for a way to collect these message and have them emailed to me, but AFAIK, it is not possible. Any change in this would be welcome. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tidy, David (D) Sent: 21 October, 2014 16:32 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Question on WRITE statements in ACS and Automation Hi Lizette, Just cleaning up some mails, and I came across this. There is a message revision table in Netview that could be used. I have used it in a temporary way when I issue a command from system automation that only generates ouput in a joblog - in my case the revision table is: UPON ( JOBNAME = 'DFSKERN' ) REVISE(Y AUTOMATE) Then I activate a message table that triggers an exec to write each message it sees from the jobname to a global variable stem (incrementing an index), and asynchronously pick up the output later. Of course in your case, the message table processing could be much simpler, and permanent (I only do the set-up to retrieve the data I have triggered, and undo it afterwards). Best regards, David Tidy IS Technical Management/SAP-Mf Dow Benelux B.V. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: 9 July 2013 15:00 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Question on WRITE statements in ACS and Automation I have a friend who is at z/OS V1.13 He asked me an interesting question that I am thinking of opening a Share requirement on. Let me know what you think When you create ACS code you can put WRITE statements into the process for clarification. Is it possible to capture those WRITEs in an automation product, OPS/MVS, AFOPER, Tivoli, and action the message? If a user is creating a dataset and using an invalid DSN, I could put a write statement in the code that says WRITE MYACS001I Invalid DSN for the storage group requested. Then if it went to SYSLOG I could capture it and send an email to the storage team for review. Or if my user was requesting way to much space for a specify storage pool, I could do something similar. So, it would be nice, in my opinion, to be able to create an event notification that an automation tool could capture and then perform some action (i.e. email the storage team) I understand that I can redirect to a different pool and provide other actions within ACS code. But since a lot of logging goes directly to the DFHSM logs or SYSOUT DDs, I have to have someone manually review to identify what is going on. Another example, there is an ARC0019I message that indicates the CELLS are too small for DFHSM. It is only in the SYSOUT DDs. I will be opening a SHARE requirement to be able to redirect these types of messages to SYSLOG so that an automation tool can send a notification to the storage team. The only way I see of doing it is to filter the output of the task to find the ACS code WRITE statements or filter the DFHSM SYSOUT DDs. Any thoughts are welcome. And if you have any other messages or functions in DFHSM that might need redirection, let me know. Thanks Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ldapchangepwd
Tim Brown wrote: Attempting to use ldapchangepwd. Any idea what is causing error? ldapchangepwd -D cn=TESTUSER,o=IBM,c=US -w ? -n ? -h 127.0.0.1 -p 389 Enter current password == old Enter new password == new If you are running this prompting in TSO or batch, it is NOT supported. ldap_sasl_bind: Credentials are not valid ldap_sasl_bind: additional info: R004062 Credentials are not valid (ldbm_authenticate_user:252) What backend are you using? RACF? DB2? What level of LDAP are you using? v2 or v3? What do you see in logfile like this one /etc/ldap/gldlog.output ? If RACF, do you see any ICH408I message. If not, do you see any SMF records for that id? What authenticating method are you using? CRAM-MD5, or DIGEST-MD5? What binding method are you using? I'm thinking of the parameters like -m or -S. What version of ldap and z/OS version are you using? Turn on your debug level for more diagnostics by using -d ? parameter. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
On Tue, 21 Oct 2014 09:29:56 -0500, Paul Gilmartin wrote: I see in SYS1.MACLIB(RETURN): OI15(13),X'01' SET RETURN INDICATION 0160 Yes, It is done after the registers are restored, and it is only if T is specified after the registers to be restored. quote ,T Causes the control program to flag the save area used by the called program. The low-order bit of word 4 of the save area is set to 1 after the registers have been loaded; this designates that a called program has executed a return to its caller. Do not specify this parameter when returning control from an exit routine. /quote I think that this is very old behavior. I doubt that the option is used much. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
On 21 October 2014 10:09, Tom Marchant 000a2a8c2020-dmarc-requ...@listserv.ua.edu wrote: I've never seen a case where BALR is used to return to the caller. Well... Here's the epilog code for a non-main function generated by an oldish version of IBM C: 00010EStart of Epilog 00010E 58D0 D00400413 | L r13,4(,r13) 000112 58E0 D00C00413 | L r14,12(,r13) 000116 9824 D01C00413 | LMr2,r4,28(r13) 00011A 051E 00413 | BALR r1,r14 00011C 0707 00413 | NOPR 7 00011E 000120Start of Literals 000120 0100018D=F'16777613' 000124 05000194=F'83886484' 000128 0900019A=F'150995354' 00012CEnd of Literals Why they use[d] BALR I don't know, but surely they don't plan to return to the NOPR and the certain program check that follows. Perhaps the NOPR can be changed to something else for debugging. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ldapchangepwd
Running in TSO via OMVS session still not supported? Would I have to use an LPAP client outside of Z/OS Tim -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Elardus Engelbrecht Sent: Tuesday, 21 October, 2014 11:42 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ldapchangepwd Tim Brown wrote: Attempting to use ldapchangepwd. Any idea what is causing error? ldapchangepwd -D cn=TESTUSER,o=IBM,c=US -w ? -n ? -h 127.0.0.1 -p 389 Enter current password == old Enter new password == new If you are running this prompting in TSO or batch, it is NOT supported. ldap_sasl_bind: Credentials are not valid ldap_sasl_bind: additional info: R004062 Credentials are not valid (ldbm_authenticate_user:252) What backend are you using? RACF? DB2? What level of LDAP are you using? v2 or v3? What do you see in logfile like this one /etc/ldap/gldlog.output ? If RACF, do you see any ICH408I message. If not, do you see any SMF records for that id? What authenticating method are you using? CRAM-MD5, or DIGEST-MD5? What binding method are you using? I'm thinking of the parameters like -m or -S. What version of ldap and z/OS version are you using? Turn on your debug level for more diagnostics by using -d ? parameter. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: 64bit
In article caarmm9rskjgk-ypgufnhowtvkpbjbykdk0cr2i3vnnrrurx...@mail.gmail.com you wrote: On 21 October 2014 10:09, Tom Marchant 000a2a8c2020-dmarc-requ...@listserv.ua.edu wrote: I've never seen a case where BALR is used to return to the caller. Well... Here's the epilog code for a non-main function generated by an oldish version of IBM C: 00010EStart of Epilog 00010E 58D0 D00400413 | L r13,4(,r13) 000112 58E0 D00C00413 | L r14,12(,r13) 000116 9824 D01C00413 | LMr2,r4,28(r13) 00011A 051E 00413 | BALR r1,r14 00011C 0707 00413 | NOPR 7 00011E 000120Start of Literals 000120 0100018D=F'16777613' 000124 05000194=F'83886484' 000128 0900019A=F'150995354' 00012CEnd of Literals Why they use[d] BALR I don't know, but surely they don't plan to return to the NOPR and the certain program check that follows. Perhaps the NOPR can be changed to something else for debugging. Tony H. It's just a way to pass a parm to the library epilog routine. I would guess that '7' just means 'normal epilog'. The library looks at what R1+1 contains and makes various decisions based on the value. -- Don Poitras - SAS Development - SAS Institute Inc. - SAS Campus Drive sas...@sas.com (919) 531-5637Cary, NC 27513 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Check out BBC - iWonder - How the world came to be run by computer code
_BBC - iWonder - How the world came to be run by computer code_ (http://www.bbc.co.uk/timelines/zxsrcdm) Well it's a framework dumbed down for the airlines-Web version of Space Invaders! -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ldapchangepwd
This works for me: ldapsearch -h mvs7 -D racfid=jojo123,profiletype=user,cn=RACFSY7 -w oldpwd/newpwd -s base -b objectclass=* -- Donald J. dona...@4email.net On Tue, Oct 21, 2014, at 07:58 AM, Tim Brown wrote: Attempting to use ldapchangepwd. Any idea what is causing error? ldapchangepwd -D cn=TESTUSER,o=IBM,c=US -w ? -n ? -h 127.0.0.1 -p 389 Enter current password == old Enter new password == new ldap_sasl_bind: Credentials are not valid ldap_sasl_bind: additional info: R004062 Credentials are not valid (ldbm_authenticate_user:252) Thanks, Tim Brown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- http://www.fastmail.fm - Send your email first class -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ldapchangepwd
Thanks , where is RACFSY7 referred to in DSCONFIG? -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Donald J. Sent: Tuesday, 21 October, 2014 4:12 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ldapchangepwd This works for me: ldapsearch -h mvs7 -D racfid=jojo123,profiletype=user,cn=RACFSY7 -w oldpwd/newpwd -s base -b objectclass=* -- Donald J. dona...@4email.net On Tue, Oct 21, 2014, at 07:58 AM, Tim Brown wrote: Attempting to use ldapchangepwd. Any idea what is causing error? ldapchangepwd -D cn=TESTUSER,o=IBM,c=US -w ? -n ? -h 127.0.0.1 -p 389 Enter current password == old Enter new password == new ldap_sasl_bind: Credentials are not valid ldap_sasl_bind: additional info: R004062 Credentials are not valid (ldbm_authenticate_user:252) Thanks, Tim Brown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- https://urldefense.proofpoint.com/v1/url?u=http://www.fastmail.fm/k=pCpgOv%2FKLW5dYRss05kLEw%3D%3D%0Ar=tQq0J85k4w4CeO1cI0sWanGhPyb3Fq7EC6ctgNHLxNs%3D%0Am=ZLd7j94zTyQxa%2FVaBKKyHfxrRdjH%2FDYQ0OKhKqpVTKM%3D%0As=c46847a5cd0a26892078bc3d6e22a0bf2d595a9220741a4c514743596b3c7c0f - Send your email first class -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ldapchangepwd
That would be your SUFFIX parameter value. -- Donald J. dona...@4email.net On Tue, Oct 21, 2014, at 01:30 PM, Tim Brown wrote: Thanks , where is RACFSY7 referred to in DSCONFIG? -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Donald J. Sent: Tuesday, 21 October, 2014 4:12 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ldapchangepwd This works for me: ldapsearch -h mvs7 -D racfid=jojo123,profiletype=user,cn=RACFSY7 -w oldpwd/newpwd -s base -b objectclass=* -- Donald J. dona...@4email.net On Tue, Oct 21, 2014, at 07:58 AM, Tim Brown wrote: Attempting to use ldapchangepwd. Any idea what is causing error? ldapchangepwd -D cn=TESTUSER,o=IBM,c=US -w ? -n ? -h 127.0.0.1 -p 389 Enter current password == old Enter new password == new ldap_sasl_bind: Credentials are not valid ldap_sasl_bind: additional info: R004062 Credentials are not valid (ldbm_authenticate_user:252) Thanks, Tim Brown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- https://urldefense.proofpoint.com/v1/url?u=http://www.fastmail.fm/k=pCpgOv%2FKLW5dYRss05kLEw%3D%3D%0Ar=tQq0J85k4w4CeO1cI0sWanGhPyb3Fq7EC6ctgNHLxNs%3D%0Am=ZLd7j94zTyQxa%2FVaBKKyHfxrRdjH%2FDYQ0OKhKqpVTKM%3D%0As=c46847a5cd0a26892078bc3d6e22a0bf2d595a9220741a4c514743596b3c7c0f - Send your email first class -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- http://www.fastmail.fm - Faster than the air-speed velocity of an unladen european swallow -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Specify RLSE but omit SPACE values?
I have allocated a data set with:
// DISP=(MOD,CATLG),SPACE=(1,(100,100))
Now, I'd like to update it with:
// DISP=SHR,SPACE=(,,RLSE)
I get a message on missing positional parameter. I'd prefer not
to override the original SPACE options. Must I override, merely
to add RLSE?
Hmmm. In:
http://pic.dhe.ibm.com/infocenter/zos/v2r1/topic/com.ibm.zos.v2r1.ieab600
Syntax
z/OS MVS JCL Reference
SA23-1385-00
I see:
SPACE=
({TRK,}(primary-qty[,second-qty][,directory])[,RLSE][,CONTIG][,ROUND])
({CYL,}[, ] [,][,MXIG ]
({blklgth,} [,ALX ]
({reclgth,} [, ]
Is there a misplaced '(' there? I'm used to coding SPACE=(TRK,pri,(sec,dir))
but that seems to say it should be SPACE=(TRK,(pri,sec,dir)). Is that right?
And the optional [...] don't seem to be nested right.
Could be a fun RCF. I hope they don't just say, Ignore the diagram; rely on
the prose.
-- gil
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Specify RLSE but omit SPACE values?
On 10/21/2014 5:18 PM, Paul Gilmartin wrote:
I have allocated a data set with:
// DISP=(MOD,CATLG),SPACE=(1,(100,100))
Now, I'd like to update it with:
// DISP=SHR,SPACE=(,,RLSE)
Hmmm. Maybe SPACE=(,(,),RLSE) ?? Just a guess.
I get a message on missing positional parameter. I'd prefer not
to override the original SPACE options. Must I override, merely
to add RLSE?
Hmmm. In:
http://pic.dhe.ibm.com/infocenter/zos/v2r1/topic/com.ibm.zos.v2r1.ieab600
Syntax
z/OS MVS JCL Reference
SA23-1385-00
I see:
SPACE=
({TRK,}(primary-qty[,second-qty][,directory])[,RLSE][,CONTIG][,ROUND])
({CYL,}[, ] [,][,MXIG ]
({blklgth,} [,ALX ]
({reclgth,} [, ]
Is there a misplaced '(' there? I'm used to coding SPACE=(TRK,pri,(sec,dir))
but that seems to say it should be SPACE=(TRK,(pri,sec,dir)). Is that right?
Yes, the latter is correct.
-Steve Comstock
And the optional [...] don't seem to be nested right.
Could be a fun RCF. I hope they don't just say, Ignore the diagram; rely on
the prose.
-- gil
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Message Handling
Does anyone know why a message would change when it's sent to the system log? Example: When the message comes out in the CICS started task log it is: 2014292 03:16:16.20 STC31160 0090 +DFHMQ0307 I 10/19/2014 03:16:16 CICSPROD Successful connection to queue manager QMGR. When it hits the system log, it is: 2014290 01:06:05.99 STC25627 0090 +DFHMQ0307 CICSPROD Successful connection to queue manager QMGR. Notice it drops the date/time after the message id. This not only happens with these messages, but others as well. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Message Handling
It looks like it is coming from two different STCs. Did you verify that STC31160 and STC25627 were BOTH the same task (CICS or MQ?) Who are these two STCs/ Can you provide their names? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of gsg Sent: Tuesday, October 21, 2014 4:55 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Message Handling Does anyone know why a message would change when it's sent to the system log? Example: When the message comes out in the CICS started task log it is: 2014292 03:16:16.20 STC31160 0090 +DFHMQ0307 I 10/19/2014 03:16:16 CICSPROD Successful connection to queue manager QMGR. When it hits the system log, it is: 2014290 01:06:05.99 STC25627 0090 +DFHMQ0307 CICSPROD Successful connection to queue manager QMGR. Notice it drops the date/time after the message id. This not only happens with these messages, but others as well. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Specify RLSE but omit SPACE values?
You can use ISPF 3.4 with the data set listed and issue Z or F - Depending on
what you want to do.
Lizette
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Paul Gilmartin
Sent: Tuesday, October 21, 2014 4:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Specify RLSE but omit SPACE values?
I have allocated a data set with:
// DISP=(MOD,CATLG),SPACE=(1,(100,100))
Now, I'd like to update it with:
// DISP=SHR,SPACE=(,,RLSE)
I get a message on missing positional parameter. I'd prefer not to override
the
original SPACE options. Must I override, merely to add RLSE?
Hmmm. In:
http://pic.dhe.ibm.com/infocenter/zos/v2r1/topic/com.ibm.zos.v2r1.ieab600
Syntax
z/OS MVS JCL Reference
SA23-1385-00
I see:
SPACE= ({TRK,}(primary-qty[,second-
qty][,directory])[,RLSE][,CONTIG][,ROUND])
({CYL,}[, ] [,][,MXIG ]
({blklgth,} [,ALX ]
({reclgth,} [, ]
Is there a misplaced '(' there? I'm used to coding
SPACE=(TRK,pri,(sec,dir))
but that seems to say it should be SPACE=(TRK,(pri,sec,dir)). Is that
right?
And the optional [...] don't seem to be nested right.
Could be a fun RCF. I hope they don't just say, Ignore the diagram; rely on
the
prose.
-- gil
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
JCT is not available!
Hi folks, I'm wondering if you guys met the message 'JCT is not available!' on the up right hand side in SDSF panel before? Recently, I tried to check a job log by entering 'S' in front of the job name in SDSF. However, the SDSF prevented me from browsing the job log by issuing a similar message listed above. I checked the manuals and found this explanation: JCT NOT AVAILABLE Explanation: Either the object has no job control table (JCT) or an error occurred trying to process the JCT for the object. User Response: Delete the command or type RESET on the command line. I have two questions. 1. Under what circumstance, will the job have no job control table? I'm thinking if we start a ST with SUB=MSTR, and the *MASTER* scheduler will manage the starting of the ST. Then there may be no JCT of that ST. Could you please share with me what's your opinion? 2. Is there any way/method to get the job log back? If my previous thinking is right, could I stop the ST and start it again without SUB=MSTR? I'm looking forward to hearing from you. Thank you very much! WXD -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Message Handling
DO you have a message automation product? That might be the guilty party. Ed On Oct 21, 2014, at 6:54 PM, gsg wrote: Does anyone know why a message would change when it's sent to the system log? Example: When the message comes out in the CICS started task log it is: 2014292 03:16:16.20 STC31160 0090 +DFHMQ0307 I 10/19/2014 03:16:16 CICSPROD Successful connection to queue manager QMGR. When it hits the system log, it is: 2014290 01:06:05.99 STC25627 0090 +DFHMQ0307 CICSPROD Successful connection to queue manager QMGR. Notice it drops the date/time after the message id. This not only happens with these messages, but others as well. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: JCT is not available!
I see this message routinely in two circumstances. 1. The 'job' is actually a started task running SUB=MSTR, i.e. not under JES. An STC can resemble a job if run from SYS1.STCJOBS, so look at it carefully. 2. The job has steps/tasks that run under OMVS. For example, my ShopzSeries orders always have 'steps' that store PTFs etc. into a ZFS. If I try to select one of those tasks, I get JCT NOT AVAILABLE. Meanwhile, there is at the same time another task in the job that can be selected to show what's going on. For case #1, there is no JOBLOG to recover. However, all messages are recorded in SYSLOG/OPERLOG. You can sift through it by STC number and collect the messages yourself. A bit cumbersome, but nothing is actually lost. For case #2, there is a JOBLOG that can be perused after the fact in the output queue. All messages are collected there ex post facto. . . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Alex Wang Sent: Tuesday, October 21, 2014 8:08 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: JCT is not available! Hi folks, I'm wondering if you guys met the message 'JCT is not available!' on the up right hand side in SDSF panel before? Recently, I tried to check a job log by entering 'S' in front of the job name in SDSF. However, the SDSF prevented me from browsing the job log by issuing a similar message listed above. I checked the manuals and found this explanation: JCT NOT AVAILABLE Explanation: Either the object has no job control table (JCT) or an error occurred trying to process the JCT for the object. User Response: Delete the command or type RESET on the command line. I have two questions. 1. Under what circumstance, will the job have no job control table? I'm thinking if we start a ST with SUB=MSTR, and the *MASTER* scheduler will manage the starting of the ST. Then there may be no JCT of that ST. Could you please share with me what's your opinion? 2. Is there any way/method to get the job log back? If my previous thinking is right, could I stop the ST and start it again without SUB=MSTR? I'm looking forward to hearing from you. Thank you very much! WXD -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: JCT is not available!
The JCT is a JES control block. That message is entirely appropriate. As you surmise, it is because the work unit has not been started under JES auspices (it was started before JES became the primary job entry sub-system, or deliberately afterwards with the SUB=MSTR parameter, or it's some spawned z/Unix process). There is usually a very good reason for that. The started task provides a service that is required before JES is available, or it's functionality is such that it doesn't need, or more particularly, want to rely on JES services, for whatever reason. It is entirely *WRONG*to think that such a started task might be better off started under JES purely for the convenience of being able to view it's job-log. I cannot begin to describe what a horribly bad idea that is. For such a started task (master scheduler initiated), you'll have to use whatever monitoring facilities it provides, or search SYSLOG / OPERLOG for messages it issues. z/Unix stuff has its own ideas about things. Ant. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Alex Wang Sent: Wednesday, 22 October 2014 12:38 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: JCT is not available! Hi folks, I'm wondering if you guys met the message 'JCT is not available!' on the up right hand side in SDSF panel before? Recently, I tried to check a job log by entering 'S' in front of the job name in SDSF. However, the SDSF prevented me from browsing the job log by issuing a similar message listed above. I checked the manuals and found this explanation: JCT NOT AVAILABLE Explanation: Either the object has no job control table (JCT) or an error occurred trying to process the JCT for the object. User Response: Delete the command or type RESET on the command line. I have two questions. 1. Under what circumstance, will the job have no job control table? I'm thinking if we start a ST with SUB=MSTR, and the *MASTER* scheduler will manage the starting of the ST. Then there may be no JCT of that ST. Could you please share with me what's your opinion? 2. Is there any way/method to get the job log back? If my previous thinking is right, could I stop the ST and start it again without SUB=MSTR? I'm looking forward to hearing from you. Thank you very much! WXD -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: JCT is not available!
Anthony: I believe (but cannot prove) that there are *OTHER* reasons for the message. Example: *NONE* of the jobs in my shop were started tasks (outside of inits etc) yet I still (intermittently) got the message. I never did zero in on the cause. Although a job ending might have caused it (like I said I never traced it down) and since I was practically the only person that had all authority to view jobs I didn't hunt for the cause too much as I had other problems and intermittent issues were the least of my worries. Ed On Oct 21, 2014, at 11:14 PM, Anthony Thompson wrote: The JCT is a JES control block. That message is entirely appropriate. As you surmise, it is because the work unit has not been started under JES auspices (it was started before JES became the primary job entry sub-system, or deliberately afterwards with the SUB=MSTR parameter, or it's some spawned z/Unix process). There is usually a very good reason for that. The started task provides a service that is required before JES is available, or it's functionality is such that it doesn't need, or more particularly, want to rely on JES services, for whatever reason. It is entirely *WRONG*to think that such a started task might be better off started under JES purely for the convenience of being able to view it's job-log. I cannot begin to describe what a horribly bad idea that is. For such a started task (master scheduler initiated), you'll have to use whatever monitoring facilities it provides, or search SYSLOG / OPERLOG for messages it issues. z/Unix stuff has its own ideas about things. Ant. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM- m...@listserv.ua.edu] On Behalf Of Alex Wang Sent: Wednesday, 22 October 2014 12:38 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: JCT is not available! Hi folks, I'm wondering if you guys met the message 'JCT is not available!' on the up right hand side in SDSF panel before? Recently, I tried to check a job log by entering 'S' in front of the job name in SDSF. However, the SDSF prevented me from browsing the job log by issuing a similar message listed above. I checked the manuals and found this explanation: JCT NOT AVAILABLE Explanation: Either the object has no job control table (JCT) or an error occurred trying to process the JCT for the object. User Response: Delete the command or type RESET on the command line. I have two questions. 1. Under what circumstance, will the job have no job control table? I'm thinking if we start a ST with SUB=MSTR, and the *MASTER* scheduler will manage the starting of the ST. Then there may be no JCT of that ST. Could you please share with me what's your opinion? 2. Is there any way/method to get the job log back? If my previous thinking is right, could I stop the ST and start it again without SUB=MSTR? I'm looking forward to hearing from you. Thank you very much! WXD -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
DFSORT/ICETOOL pondering
Sometimes I have a need to do a selective copy of a dataset where the selection is both record sequence and record position/part dependent. And by that I mean the record part/position is varying depending on which record it's about. An example (yes, it looks silly): I want to copy position 31 to 40 of all records but from record 8 and 9 I want to copy also (concatenate) position 71 to 80 and from record 6 to 8 I also (concatenate in front) want to copy position 1 to 3. The point of this example is to illustrate the needs of a more general solution. I can see the use of the SUBSET (ICETOOL) for record selection but how do you user DFSORT/ICETOOL to solve the combining record and varying position needs ? I now use a homegrown program for this but it's lacking efficiency to say the least and I'm looking at DFSORTs efficiency and speed. I have been looking at OUTFIL/OUTREC etc. but I can't see a straight forward and general solution/template. I'm hoping for someone who have done this before to supply an example. Best Regards, Thomas Berg ___ Thomas Berg Specialist zOS/RQM/IT Delivery Swedbank AB (Publ) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
