LE Condition Handler
All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. My idea is to write a Cobol condition handler with TRAP(ON) in LE to capture the S222 and at that time read the secondary index and write to disk. I am just not sure of the steps in the Cobol. I could write the condition handler in Assembler or C I dont care. My object is not to loose this data.. Any ideas,opinions are welcome and appreciated. Scott Ford www.idmworks.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Hi John, I do have the Product libraries in the APF,LPALST00,LINKLIST. This are VSAM files which are not allocating though the catalog are shared. On Thu, Aug 27, 2015 at 5:42 PM, John McKown john.archie.mck...@gmail.com wrote: On Thu, Aug 27, 2015 at 3:22 AM, Nathan Astle tcpipat...@gmail.com wrote: Hi, The IKJ message what I am getting is : IKJ56228I DATA SET QWS.SEC.RULES NOT IN CATALOG OR CATALOG CAN NOT BE ACCESSED Explanation: DISP=OLD was specified. The dynamic allocation error code is 1708, 5708, or 5710. For a description of the dynamic allocation return, informational, and error codes, see z/OS Programming: Authorized Assembler Services Guide. Detected by: CALLER Program: DAIRFAIL Could someone please point on what needs to be done from the Product perspective. Nathan This is interesting. I was thinking it was the 1708 return, that is data set not catalogued. However, if it is the 5708 return, then a possibility would be if the dynamic allocation did something, such as setting any bit on in the S99FLAG2 field. This would be to do something like wait for DSN if not immediately available instead of failing, wait for volumes (as in tape mount, I think) , do not serialize DSN (don't issue SYSDSN enq), and so on' ref: http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/IEA2A8C0/26.1.5.1 Could it be that your product is supposed to be APF authorized but isn't on the new system? I.e. the DSN is not in the APF list. Or it is in the LINKLIST on the old system with LNKAUTH=LNKLST whereas on the new system, you have LNKAUTH=APFTAB ? Just a thought. -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
Good point. A path name can be up to 1023 characters long, including all directory names, file names, and separating slashes. So 1023; I stand corrected. The program name (defined how? as the final node of the path name?) would have to be somewhat less, but certainly in the 21st century might be well over 8. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Elardus Engelbrecht Sent: Thursday, August 27, 2015 5:54 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMF Type 30 Charles Mills wrote: Isn't it now (since around 1993 or so) 1024 for a USS program? Including / excluding path length? Compare SMF30EXN. Indeed. After RTFM in my SMF bookie (Ok, v1.12 for now, I will check v1.13 and v2.1 bookies later), I see this interesting snippet: quote The field SMF30EXN provides the name of the program that was run. It is specified as up to 16 characters. MVS load modules can be distinguished from HFS executable files in the SMF30EXN field as follows: - Names that are longer than 8 bytes must be HFS executable files - For names that are 8 bytes or less, check the terminating character: - X'00'--HFS executable file (z/OS UNIX program) - X'40'--MVS load module (MVS program) end-quote Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
On Thu, Aug 27, 2015 at 8:09 AM, John McKown john.archie.mck...@gmail.com wrote: Ah. not a RACF shop. I remember long ago in an ACF2 shop that I had a problem allocating the ACF2 rules data set. What I had to do there was totally remove the catalog entry and start up ACF2 in fail safe mode. Or something Ah, no. I remember. I had to make sure that the ACF2 proc did not start at all. That made the system go into fail safe mode. But that was back when ACF2 actually front-ended (via relinks) a number of IBM load modules. I don't know how to do this in today's ACF2. like that. This was over 20 years ago, so it's a bit fuzzy. What I might try, since your ESM is not up, is to put a PROC in SYS1.PROCLIB which looks something like: -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
Charles Mills wrote: Isn't it now (since around 1993 or so) 1024 for a USS program? Including / excluding path length? Compare SMF30EXN. Indeed. After RTFM in my SMF bookie (Ok, v1.12 for now, I will check v1.13 and v2.1 bookies later), I see this interesting snippet: quote The field SMF30EXN provides the name of the program that was run. It is specified as up to 16 characters. MVS load modules can be distinguished from HFS executable files in the SMF30EXN field as follows: - Names that are longer than 8 bytes must be HFS executable files - For names that are 8 bytes or less, check the terminating character: - X'00'--HFS executable file (z/OS UNIX program) - X'40'--MVS load module (MVS program) end-quote Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
On Thu, Aug 27, 2015 at 7:49 AM, Nathan Astle tcpipat...@gmail.com wrote: Hi John, The System is not yet fully up and it is failing at the Security product So I take it that you can't logon to TSO or a UNIX shell at this point on this system. start up. I can see the Catalog services are available. Ah. not a RACF shop. I remember long ago in an ACF2 shop that I had a problem allocating the ACF2 rules data set. What I had to do there was totally remove the catalog entry and start up ACF2 in fail safe mode. Or something like that. This was over 20 years ago, so it's a bit fuzzy. What I might try, since your ESM is not up, is to put a PROC in SYS1.PROCLIB which looks something like: //NOTHING PROC //NOTHING EXEC PGM=IEFBR14 //NOTHING DD DISP=SHR,DSN=QWS.SEC.RULES And then see what happens when you do the command: S NOTHING,SUB=MSTR This might, or might not, give you some more information. Is JES2/3 up? If so, is the SPOOL shared so that you can see the new system's MVS SYSLOG on the old system. Or are you using the OPERLOG, and if so, can you view that on the old system? Nathan On Thu, Aug 27, 2015 at 6:15 PM, John McKown john.archie.mck...@gmail.com wrote: On Thu, Aug 27, 2015 at 7:36 AM, Andrew Rowley and...@blackhillsoftware.com wrote: Stretching my memory, isn't there something about VSAM files can only be cataloged in 1 catalog, unless they are SYS1.* datasets? I think there is some information in the VVDS? This is correct. There are special dispensations for VSAM data sets which start with SYS1. _or_ are PAGESPACE data sets. But, in this case, the VSAM data set in question is said to be in a _shared_ catalog. Which is certainly allowed. The OP can see it in a 3.4 listing on both systems. I don't remember reading what else has been tried. Personally, on the new system, I think that I'd try a simple TSO ALLOCATE of the DSN in my TSO session. I don't recall if the OP has done this or not. Regards Andrew Rowley -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
No, not irrelevant at all. The original question was to determine when a certain program was executed. The problem is that there is no record in SMF of every program executed. Jobstep program names are recorded in SMF. The certain program might not be a jobstep program, but it might well show up as the highest CPU program. That's why this field is relevant to the original question. Moving on from the original question, why the heck -- 20 years after Open Edition -- would IBM create a program name field and not make it variable length, or at least longer than 8 characters (as they did with SMF30EXN). Or are you saying that the Program name running in the task that used the largest percentage of CPU time in this address space could only be a legacy load module/PDSE program object, not a program residing in an HFS directory? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Bob Shannon Sent: Thursday, August 27, 2015 6:56 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMF Type 30 The program name (defined how? as the final node of the path name?) would have to be somewhat less, but certainly in the 21st century might be well over 8. Irrelevant to the original point. SMF30_Highest_Task_CPU_Program is for tasks, not for processes. If you need an SMF field for processes that supports long names, write a requirement. Bob Shannon Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ +1 800.966.3270 ■ +1 781.577.4321 Unsubscribe From Commercial Email – unsubscr...@rocketsoftware.com Manage Your Subscription Preferences - http://info.rocketsoftware.com/GlobalSubscriptionManagementEmailFooter_SubscriptionCenter.html Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
Or are you saying that the Program name running in the task that used the largest percentage of CPU time in this address space could only be a legacy load module/PDSE program object, not a program residing in an HFS directory? My belief is that the IBM developers know what a task is and would not have included task in the field name if the field applied to anything other than a task. Bob Shannon Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ +1 800.966.3270 ■ +1 781.577.4321 Unsubscribe From Commercial Email – unsubscr...@rocketsoftware.com Manage Your Subscription Preferences - http://info.rocketsoftware.com/GlobalSubscriptionManagementEmailFooter_SubscriptionCenter.html Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Just to get the water flowing I'd make a new Alias in Test system QWST and try alt rename or just repro from QWS.* to QWST.* What are you using for ENQ propagation? GRS, MSX? In a message dated 8/27/2015 7:49:38 A.M. Central Daylight Time, tcpipat...@gmail.com writes: The System is not yet fully up and it is failing at the Security product start up. I can see the Catalog services are available. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Also, if you are not aware, there is an ACF2 list on CA Communities that might
be better able to help
go to support.ca.com and select the COMMUNITY menu option.
or
you could also join the ACF2 list on Yahoogroups
https://groups.yahoo.com/neo/groups/ACF2-L/info
Lizette
-Original Message-
From: Lizette Koehler stars...@mindspring.com
Sent: Aug 27, 2015 7:17 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Information I would need at this point is
1) Did you contact CA ACF2 for assistance? They are very helpful and can
probably resolve this issue more quickly.
2) The output of the following IDCAMS lists
LISTC ENT('QWS.SEC.RULES') all
3) Provide the section of SYSLOG where your IKJ message occurs, 10 lines above
and below the message. I am looking for additional IDC, IGD, IEC, etc type
messages.
4) Show us the manual section in the ACF2 manual that states you use a
SHAREOPT(1,3)
5) Did you contact CA ACF2 for assistance.
5) Have you searched the CA Support website to see if there is already a
suggestion for this issue?
You can code a proc in proclib to do step 2. Then issue a S x and get the
listing. If security is not available, you may not be able to run the job.
The list is great, but if there is this much difficulty, then contacting the
vendor could resolve this issue more quickly.
Lizette
-Original Message-
From: Steely, Mark mark.ste...@hp.com
Sent: Aug 27, 2015 6:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
I think the VVDS needs to be dump and look at the entry and see if the VVDS
has the correct catalog listed.
Thanks
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Nathan Astle
Sent: Thursday, August 27, 2015 7:49 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Hi John,
The System is not yet fully up and it is failing at the Security product
start up. I can see the Catalog services are available.
Nathan
On Thu, Aug 27, 2015 at 6:15 PM, John McKown john.archie.mck...@gmail.com
wrote:
On Thu, Aug 27, 2015 at 7:36 AM, Andrew Rowley
and...@blackhillsoftware.com
wrote:
Stretching my memory, isn't there something about VSAM files can
only be cataloged in 1 catalog, unless they are SYS1.* datasets? I
think there is some information in the VVDS?
This is correct. There are special dispensations for VSAM data sets
which start with SYS1. _or_ are PAGESPACE data sets. But, in this
case, the VSAM data set in question is said to be in a _shared_
catalog. Which is certainly allowed. The OP can see it in a 3.4
listing on both systems. I don't remember reading what else has been
tried. Personally, on the new system, I think that I'd try a simple
TSO ALLOCATE of the DSN in my TSO session. I don't recall if the OP
has done this or not.
Regards
Andrew Rowley
--
Schrodinger's backup: The condition of any backup is unknown until a
restore is attempted.
Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be.
He's about as useful as a wax frying pan.
10 to the 12th power microphones = 1 Megaphone
Maranatha!
John McKown
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Information I would need at this point is
1) Did you contact CA ACF2 for assistance? They are very helpful and can
probably resolve this issue more quickly.
2) The output of the following IDCAMS lists
LISTC ENT('QWS.SEC.RULES') all
3) Provide the section of SYSLOG where your IKJ message occurs, 10 lines above
and below the message. I am looking for additional IDC, IGD, IEC, etc type
messages.
4) Show us the manual section in the ACF2 manual that states you use a
SHAREOPT(1,3)
5) Did you contact CA ACF2 for assistance.
5) Have you searched the CA Support website to see if there is already a
suggestion for this issue?
You can code a proc in proclib to do step 2. Then issue a S x and get the
listing. If security is not available, you may not be able to run the job.
The list is great, but if there is this much difficulty, then contacting the
vendor could resolve this issue more quickly.
Lizette
-Original Message-
From: Steely, Mark mark.ste...@hp.com
Sent: Aug 27, 2015 6:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
I think the VVDS needs to be dump and look at the entry and see if the VVDS
has the correct catalog listed.
Thanks
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Nathan Astle
Sent: Thursday, August 27, 2015 7:49 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Hi John,
The System is not yet fully up and it is failing at the Security product start
up. I can see the Catalog services are available.
Nathan
On Thu, Aug 27, 2015 at 6:15 PM, John McKown john.archie.mck...@gmail.com
wrote:
On Thu, Aug 27, 2015 at 7:36 AM, Andrew Rowley
and...@blackhillsoftware.com
wrote:
Stretching my memory, isn't there something about VSAM files can
only be cataloged in 1 catalog, unless they are SYS1.* datasets? I
think there is some information in the VVDS?
This is correct. There are special dispensations for VSAM data sets
which start with SYS1. _or_ are PAGESPACE data sets. But, in this
case, the VSAM data set in question is said to be in a _shared_
catalog. Which is certainly allowed. The OP can see it in a 3.4
listing on both systems. I don't remember reading what else has been
tried. Personally, on the new system, I think that I'd try a simple
TSO ALLOCATE of the DSN in my TSO session. I don't recall if the OP
has done this or not.
Regards
Andrew Rowley
--
Schrodinger's backup: The condition of any backup is unknown until a
restore is attempted.
Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be.
He's about as useful as a wax frying pan.
10 to the 12th power microphones = 1 Megaphone
Maranatha!
John McKown
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Stretching my memory, isn't there something about VSAM files can only be cataloged in 1 catalog, unless they are SYS1.* datasets? I think there is some information in the VVDS? Regards Andrew Rowley On 27/08/2015 22:24, Nathan Astle wrote: Hi John, I do have the Product libraries in the APF,LPALST00,LINKLIST. This are VSAM files which are not allocating though the catalog are shared. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
On Thu, Aug 27, 2015 at 7:36 AM, Andrew Rowley and...@blackhillsoftware.com wrote: Stretching my memory, isn't there something about VSAM files can only be cataloged in 1 catalog, unless they are SYS1.* datasets? I think there is some information in the VVDS? This is correct. There are special dispensations for VSAM data sets which start with SYS1. _or_ are PAGESPACE data sets. But, in this case, the VSAM data set in question is said to be in a _shared_ catalog. Which is certainly allowed. The OP can see it in a 3.4 listing on both systems. I don't remember reading what else has been tried. Personally, on the new system, I think that I'd try a simple TSO ALLOCATE of the DSN in my TSO session. I don't recall if the OP has done this or not. Regards Andrew Rowley -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
SMF30_Highest_Task_CPU_Program has the program name from the task that reported the largest CPU time percentage for the step (in 30-4, if I understand the manual correctly). Why would IBM make it only 8 characters long? Sigh. Because eight characters is the longest a program name can be. Ref: ATTACH and BLDL. Bob Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ +1 800.966.3270 ■ +1 781.577.4321 Unsubscribe From Commercial Email – unsubscr...@rocketsoftware.com Manage Your Subscription Preferences - http://info.rocketsoftware.com/GlobalSubscriptionManagementEmailFooter_SubscriptionCenter.html Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
Isn't it now (since around 1993 or so) 1024 for a USS program? Compare SMF30EXN. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Bob Shannon Sent: Thursday, August 27, 2015 5:31 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMF Type 30 SMF30_Highest_Task_CPU_Program has the program name from the task that reported the largest CPU time percentage for the step (in 30-4, if I understand the manual correctly). Why would IBM make it only 8 characters long? Sigh. Because eight characters is the longest a program name can be. Ref: ATTACH and BLDL. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Hi John, The System is not yet fully up and it is failing at the Security product start up. I can see the Catalog services are available. Nathan On Thu, Aug 27, 2015 at 6:15 PM, John McKown john.archie.mck...@gmail.com wrote: On Thu, Aug 27, 2015 at 7:36 AM, Andrew Rowley and...@blackhillsoftware.com wrote: Stretching my memory, isn't there something about VSAM files can only be cataloged in 1 catalog, unless they are SYS1.* datasets? I think there is some information in the VVDS? This is correct. There are special dispensations for VSAM data sets which start with SYS1. _or_ are PAGESPACE data sets. But, in this case, the VSAM data set in question is said to be in a _shared_ catalog. Which is certainly allowed. The OP can see it in a 3.4 listing on both systems. I don't remember reading what else has been tried. Personally, on the new system, I think that I'd try a simple TSO ALLOCATE of the DSN in my TSO session. I don't recall if the OP has done this or not. Regards Andrew Rowley -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
The program name (defined how? as the final node of the path name?) would have to be somewhat less, but certainly in the 21st century might be well over 8. Irrelevant to the original point. SMF30_Highest_Task_CPU_Program is for tasks, not for processes. If you need an SMF field for processes that supports long names, write a requirement. Bob Shannon Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ +1 800.966.3270 ■ +1 781.577.4321 Unsubscribe From Commercial Email – unsubscr...@rocketsoftware.com Manage Your Subscription Preferences - http://info.rocketsoftware.com/GlobalSubscriptionManagementEmailFooter_SubscriptionCenter.html Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
Scott Ford wrote: We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. My idea is to write a Cobol condition handler with TRAP(ON) in LE to capture the S222 and at that time read the secondary index and write to disk. I am just not sure of the steps in the Cobol. I could write the condition handler in Assembler or C I dont care. My object is not to loose this data.. Until you get a solution, why not at intervals write out that index to DSN1 and again, but to DSN2. Repeat with DSN1 and so on? Just to keep your index updated regularly on disk. If you can, try putting your indexes in a database, say DB2 or something? AFAIK, COBOL just can't handle a sudden death properly, you'll have to add something else using a trap condition handler. Alternatively, put in RACF this OPERCMDS class profile MVS.CANCEL.STC.name and MVS.STOP.STC.name to prevent rogue ops to play king. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Well, the book (z/OS DFSMS Managing Catalogs) has this to say: The system applies the parameters in IGGCATxx, LOADxx, and SYSCATxx in the following order: 1. Parmlib member IGGCATxx, if specified, takes the highest priority, followed by... 2. Parmlib member LOADxx followed by... 3. SYSCATxx member of SYS1.NUCLEUS followed by... 4. System defined defaults Not everything in SYSCATxx and LOADxx can be put into IGGCATxx. In particular, it's impossible for the system to find the correct catalog containing the entry for the parmlib concatenation data sets in it for the purpose of locating the IGGCATxx member in the first place, without having some other place to put the master catalog name and volume serial. jo.skip.robin...@sce.com (J O Skip Robinson) wrote: Ah, we don't use IGGCATxx. There is also the ancient SYSCATLG member of SYS1.NUCLEUS. I'm sure that LOADxx overrides SYSCATLG, but what about IGGCATxx? If these members specify different values for ALIASLEVEL, who wins the thumb wrestle? -- John Eells z/OS Technical Marketing IBM Poughkeepsie ee...@us.ibm.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: vary dev,console with an IEF238D outstanding.
In every shop that I've worked in, the pool of 3270 devices defined as consoles were solely dedicated to that purpose. A separate pool of 3270 devices not defined as consoles were dedicated as terminals. So I would be perfectly happy to have an CONSOLxx option to formally dedicate the consoles as console only devices, therefore they would not need to be serialized with Q4. That should allow you to vary console devices online or offline even with IEF238D outstanding. On Thu, Aug 27, 2015 at 3:18 AM Cannaerts, Jan jan.cannae...@socmut.be wrote: Thanks Scott for the definitive answer, it does clear up a lot. Like I mentioned, it's not a game breaker really. I can't come up with a situation where this behavior would lock us out of our machine. Unless we really dropped the ball somewhere in the first place. It's more that the list might be interested to know. _Jan -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Scott Ballentine Sent: woensdag 26 augustus 2015 6:13 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: vary dev,console with an IEF238D outstanding. While there is an IEF238D outstanding, in our case because some DD specified a nonexistent volser, vary dev,console gives us IEE799D. quote IEE799D VARY CONSOLE DELAYED - REPLY RETRY OR CANCEL. A VARY CONSOLE command requested that a console be placed online or offline. The system could not process the command due to other processing in the system such as: - Another VARY CONSOLE command - Device allocation in progress /quote I'd expect that. As a general rule, when IEF238D is outstanding, it holds various resources. SYSIEFSD Q4 shared is one of those resources, but there are several others. Device Allocation requires a consistent picture of the online devices, serialized by Q4. There are a lot of processes that can be held up if an IEF238D is outstanding. Over the years, we've tweaked some things to help with Q4 contention, but the general rules for serializing devices with Q4 I describe here have always been true. For most devices, you can VARY them online while IEF238D is outstanding, but not offline. (We only need Q4 shared to make a device eligible for allocation, but to take a device away from allocation, we need Q4 exclusive.) Offline devices will go into a pending offline state until Q4 becomes available. For console devices (I mean those in CONSOLxx, not just 3270's in general) are special. Moving them into console state requires Q4 exclusive, because you're taking the device away from allocation (it's no longer allocatable.) The console state is separate from online or offline. Sorry, that serialization is really necessary. -Scott Ballentine IBM z/OS Device Allocation -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
John McKown wrote: Damn, gotta stop typing on phone email at same time. Change ASID to ACID. Careful fella, multi-tasking is reserved for ladies, not us lame males... ;-D Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
This is not my forte, but I thought I would just throw this out. Could you STC be written with a higher level Assembler stub routine that would be monitoring for things like CANCEL . That routine would then signal a daughter task to provide the function you want? Lizette -Original Message- From: Scott Ford idfzos...@gmail.com Sent: Aug 27, 2015 7:58 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: LE Condition Handler Elardus, I like that also..I like the RACF protection...especially on a STC for Provisioning and Reconciliation. Regards, Scott On Thursday, August 27, 2015, Sam Siegel s...@pscsi.net wrote: On Thu, Aug 27, 2015 at 6:02 AM, Scott Ford idfzos...@gmail.com javascript:; wrote: All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. My idea is to write a Cobol condition handler with TRAP(ON) in LE to capture the S222 and at that time read the secondary index and write to disk. I am just not sure of the steps in the Cobol. Scott - Sorry to have to deliver the bad news. LE condition handlers do not intercept Sx22 abends, even with TRAP(ON). See the LE Programming guide (SA22-7561) chapter 15: TRAP Effects on the Condition Handling Process. Sam I could write the condition handler in Assembler or C I dont care. My object is not to loose this data.. Any ideas,opinions are welcome and appreciated. Scott Ford www.idmworks.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
In a quick test it seems that it is recorded as *PATHNAM when SMF30EXN is sshd. I don't think that fits even a Talmudic definition of program name. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Bob Shannon Sent: Thursday, August 27, 2015 7:28 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMF Type 30 Or are you saying that the Program name running in the task that used the largest percentage of CPU time in this address space could only be a legacy load module/PDSE program object, not a program residing in an HFS directory? My belief is that the IBM developers know what a task is and would not have included task in the field name if the field applied to anything other than a task. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
On Thu, 27 Aug 2015 09:02:57 -0400, Scott Ford idfzos...@gmail.com wrote: All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. If I remember correctly, the P command has no effect unless you accept the command and act on it. Your action could be to save your secondary index, and then terminate. You can trap the abend generated by a C command and, again, write out your index. Alternatively, you could probably mark your program non-cancelable via the PPT. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
On Thu, Aug 27, 2015 at 10:45 AM, Walt Farrell walt.farr...@gmail.com wrote: On Thu, 27 Aug 2015 09:02:57 -0400, Scott Ford idfzos...@gmail.com wrote: All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. If I remember correctly, the P command has no effect unless you accept the command and act on it. Your action could be to save your secondary index, and then terminate. You can trap the abend generated by a C command and, again, write out your index. Alternatively, you could probably mark your program non-cancelable via the PPT. Does making something non-cancelable via the PPT disable the FORCE command as well? IIRC, it does _not_ disable the facility in RESOLVE (BMC product) to do an EXIT. This monster basically directly uses RTM to murder an address space. Basically, if it is critical enough, Scott really needs something which is ASID, in the data base sense. Personally, I ain't talented 'nuf to be writing such. Perhaps the dual, alternating DSNs suggested by Elardus is the way to go. Write index to DSNn, then update record #1 in it (directly) with the STCKE value, making sure to flush buffers in order to harden the values. When the STC is started, it checks the STCKE value in record #1 and starts using the one with the larger value. I guess it would copy that entire DSN to the other to ensure that it is also undamaged. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
On Thu, Aug 27, 2015 at 10:57 AM, John McKown john.archie.mck...@gmail.com wrote: Basically, if it is critical enough, Scott really needs something which is ASID, in the data base sense. Personally, I ain't talented 'nuf to be writing such. Perhaps the dual, alternating DSNs suggested by Elardus is the way to go. Write index to DSNn, then update record #1 in it (directly) with the STCKE value, making sure to flush buffers in order to harden the values. When the STC is started, it checks the STCKE value in record #1 and starts using the one with the larger value. I guess it would copy that entire DSN to the other to ensure that it is also undamaged. Damn, gotta stop typing on phone email at same time. Change ASID to ACID. -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
On Thu, Aug 27, 2015 at 6:02 AM, Scott Ford idfzos...@gmail.com wrote: All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. My idea is to write a Cobol condition handler with TRAP(ON) in LE to capture the S222 and at that time read the secondary index and write to disk. I am just not sure of the steps in the Cobol. Scott - Sorry to have to deliver the bad news. LE condition handlers do not intercept Sx22 abends, even with TRAP(ON). See the LE Programming guide (SA22-7561) chapter 15: TRAP Effects on the Condition Handling Process. Sam I could write the condition handler in Assembler or C I dont care. My object is not to loose this data.. Any ideas,opinions are welcome and appreciated. Scott Ford www.idmworks.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
You cannot do LISTCAT without some extra software support, but you can issue
MODIFY CATALOG commands from the console. I would focus on two. Issue these
commands on both a working system and on the problem system.
First verify that you indeed have two-level alias specified. That is not the
default.
MODIFY CATALOG,REPORT
Look for the alias level setting. If the alias level is not right, you can
change it dynamically. Then verify that after trying to use the catalog, it's
really open.
MODIFY CATALOG,OPEN
If the catalog does not show up in the open list, you need to explore why.
.
.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Lizette Koehler
Sent: Thursday, August 27, 2015 7:39 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Also, if you are not aware, there is an ACF2 list on CA Communities that might
be better able to help go to support.ca.com and select the COMMUNITY menu
option.
or
you could also join the ACF2 list on Yahoogroups
https://groups.yahoo.com/neo/groups/ACF2-L/info
Lizette
-Original Message-
From: Lizette Koehler stars...@mindspring.com
Sent: Aug 27, 2015 7:17 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Information I would need at this point is
1) Did you contact CA ACF2 for assistance? They are very helpful and can
probably resolve this issue more quickly.
2) The output of the following IDCAMS lists
LISTC ENT('QWS.SEC.RULES') all
3) Provide the section of SYSLOG where your IKJ message occurs, 10 lines above
and below the message. I am looking for additional IDC, IGD, IEC, etc type
messages.
4) Show us the manual section in the ACF2 manual that states you use a
SHAREOPT(1,3)
5) Did you contact CA ACF2 for assistance.
5) Have you searched the CA Support website to see if there is already a
suggestion for this issue?
You can code a proc in proclib to do step 2. Then issue a S x and get the
listing. If security is not available, you may not be able to run the job.
The list is great, but if there is this much difficulty, then contacting the
vendor could resolve this issue more quickly.
Lizette
-Original Message-
From: Steely, Mark mark.ste...@hp.com
Sent: Aug 27, 2015 6:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
I think the VVDS needs to be dump and look at the entry and see if the VVDS
has the correct catalog listed.
Thanks
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
On Behalf Of Nathan Astle
Sent: Thursday, August 27, 2015 7:49 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Hi John,
The System is not yet fully up and it is failing at the Security product
start up. I can see the Catalog services are available.
Nathan
On Thu, Aug 27, 2015 at 6:15 PM, John McKown
john.archie.mck...@gmail.com
wrote:
On Thu, Aug 27, 2015 at 7:36 AM, Andrew Rowley
and...@blackhillsoftware.com
wrote:
Stretching my memory, isn't there something about VSAM files can
only be cataloged in 1 catalog, unless they are SYS1.* datasets? I
think there is some information in the VVDS?
This is correct. There are special dispensations for VSAM data
sets which start with SYS1. _or_ are PAGESPACE data sets. But, in
this case, the VSAM data set in question is said to be in a _shared_
catalog. Which is certainly allowed. The OP can see it in a 3.4
listing on both systems. I don't remember reading what else has been
tried. Personally, on the new system, I think that I'd try a simple
TSO ALLOCATE of the DSN in my TSO session. I don't recall if the OP
has done this or not.
Regards
Andrew Rowley
--
Schrodinger's backup: The condition of any backup is unknown until a
restore is attempted.
Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be.
He's about as useful as a wax frying pan.
10 to the 12th power microphones = 1 Megaphone
Maranatha!
John McKown
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
Walt, A big Ty, I like the idea of trapping the abend after the C command is issued. I have routine for the F so all I have to do is code for C and P , correct ? Regards, Scott On Thursday, August 27, 2015, Walt Farrell walt.farr...@gmail.com wrote: On Thu, 27 Aug 2015 09:02:57 -0400, Scott Ford idfzos...@gmail.com javascript:; wrote: All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. If I remember correctly, the P command has no effect unless you accept the command and act on it. Your action could be to save your secondary index, and then terminate. You can trap the abend generated by a C command and, again, write out your index. Alternatively, you could probably mark your program non-cancelable via the PPT. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu javascript:; with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
IBM Support Portal Down?
Can anyone get to the IBM Support Portal? http://www-947.ibm.com/support/entry/portal/support -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM Support Portal Down?
I can get to the screen. What do you mean by DOWN? are you getting an HTTP 404 type error? Lizette -Original Message- From: Staller, Allan allan.stal...@kbmg.com Sent: Aug 27, 2015 7:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: IBM Support Portal Down? Can anyone get to the IBM Support Portal? http://www-947.ibm.com/support/entry/portal/support -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: IBM Support Portal Down?
Receiving The page isn't redirecting properly w/Firefox. Just tried it w/Chrome and all is OK. Restarted Firefox and All is OK... Thanks for your help... snip I can get to the screen. What do you mean by DOWN? are you getting an HTTP 404 type error? Lizette -Original Message- From: Staller, Allan allan.stal...@kbmg.com Sent: Aug 27, 2015 7:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: IBM Support Portal Down? Can anyone get to the IBM Support Portal? http://www-947.ibm.com/support/entry/portal/support /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
Elardus, I like that also..I like the RACF protection...especially on a STC for Provisioning and Reconciliation. Regards, Scott On Thursday, August 27, 2015, Sam Siegel s...@pscsi.net wrote: On Thu, Aug 27, 2015 at 6:02 AM, Scott Ford idfzos...@gmail.com javascript:; wrote: All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. My idea is to write a Cobol condition handler with TRAP(ON) in LE to capture the S222 and at that time read the secondary index and write to disk. I am just not sure of the steps in the Cobol. Scott - Sorry to have to deliver the bad news. LE condition handlers do not intercept Sx22 abends, even with TRAP(ON). See the LE Programming guide (SA22-7561) chapter 15: TRAP Effects on the Condition Handling Process. Sam I could write the condition handler in Assembler or C I dont care. My object is not to loose this data.. Any ideas,opinions are welcome and appreciated. Scott Ford www.idmworks.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu javascript:; with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu javascript:; with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
On Thu, Aug 27, 2015 at 10:03 AM, Lizette Koehler stars...@mindspring.com wrote: This is not my forte, but I thought I would just throw this out. Could you STC be written with a higher level Assembler stub routine that would be monitoring for things like CANCEL . That routine would then signal a daughter task to provide the function you want? Lizette I don't remember if Scott has said, but I'll interject that handling Sx22 abends can only be done by APF authorized programs. Also, if the HLASM is only for operator communications (via MODIFY), then I'd look at using BPX1CCS ( http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/BPXZB1C0/2.26) instead. -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
On Thu, 27 Aug 2015 07:16:34 -0700, Charles Mills charl...@mcn.org wrote: No, not irrelevant at all. The original question was to determine when a certain program was executed. The problem is that there is no record in SMF of every program executed. Jobstep program names are recorded in SMF. You can get such auditing from RACF for non-LPA-resident programs defined in the PROGRAM class. That's still not every program, of course, but it would let you audit everything in the linklist or APF list, for example, or selected other libraries. That may suffice for what the OP needs, or it's at least better than what SMF type 30 will provide. On the other hand, that will be a substantial amount of auditing, and probably more than anyone would want to see in general. And it's of no use if he needs to investigate something that happened in the past, before the auditing was enabled. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
On Thu, 27 Aug 2015 10:16:10 -0500, John McKown john.archie.mck...@gmail.com wrote: On Thu, Aug 27, 2015 at 10:03 AM, Lizette Koehler stars...@mindspring.com wrote: This is not my forte, but I thought I would just throw this out. Could you STC be written with a higher level Assembler stub routine that would be monitoring for things like CANCEL . That routine would then signal a daughter task to provide the function you want? Lizette I don't remember if Scott has said, but I'll interject that handling Sx22 abends can only be done by APF authorized programs. You do not need APF authorization to trap one of those abends. Anyone can do it, and the recovery routine can take appropriate action to terminate nicely. Retry is not possible, though, and if the operator issues a second cancel command the non-APF program cannot trap that one, but the first one can be handled. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
Thanks All, I am going to code up a prototype and test on our Sandbox, so i can see the results of a 'C' command for example. Scott On Thu, Aug 27, 2015 at 12:02 PM, John McKown john.archie.mck...@gmail.com wrote: On Thu, Aug 27, 2015 at 10:57 AM, John McKown john.archie.mck...@gmail.com wrote: Basically, if it is critical enough, Scott really needs something which is ASID, in the data base sense. Personally, I ain't talented 'nuf to be writing such. Perhaps the dual, alternating DSNs suggested by Elardus is the way to go. Write index to DSNn, then update record #1 in it (directly) with the STCKE value, making sure to flush buffers in order to harden the values. When the STC is started, it checks the STCKE value in record #1 and starts using the one with the larger value. I guess it would copy that entire DSN to the other to ensure that it is also undamaged. Damn, gotta stop typing on phone email at same time. Change ASID to ACID. -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Now that your system is up, be sure to 'harden' the dynamic change. These days
alias level is specified in LOADxx in your IPL PARM data set. It defaults to 1
and may not be currently specified at all, which would explain your string of
woes.
.
.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Nathan Astle
Sent: Thursday, August 27, 2015 9:08 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Hi,
Initially Retired Mainframeer Pointed out where my system had Multi Level
Alias support. So i didnt really check but now Yes, after enabling the Multi
level alias facility I was able to pass through the error message.
All was good.
Apology again for not looking into the advise in depth. Not sure how other
datasets(Non VSAM were all good in LPA,LINKLIST and APF).
Nathan
On Thu, Aug 27, 2015 at 9:10 PM, J O Skip Robinson jo.skip.robin...@sce.com
wrote:
You cannot do LISTCAT without some extra software support, but you can
issue MODIFY CATALOG commands from the console. I would focus on two.
Issue these commands on both a working system and on the problem system.
First verify that you indeed have two-level alias specified. That is
not the default.
MODIFY CATALOG,REPORT
Look for the alias level setting. If the alias level is not right, you
can change it dynamically. Then verify that after trying to use the
catalog, it's really open.
MODIFY CATALOG,OPEN
If the catalog does not show up in the open list, you need to explore why.
.
.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
On Behalf Of Lizette Koehler
Sent: Thursday, August 27, 2015 7:39 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Also, if you are not aware, there is an ACF2 list on CA Communities
that might be better able to help go to support.ca.com and select the
COMMUNITY menu option.
or
you could also join the ACF2 list on Yahoogroups
https://groups.yahoo.com/neo/groups/ACF2-L/info
Lizette
-Original Message-
From: Lizette Koehler stars...@mindspring.com
Sent: Aug 27, 2015 7:17 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Information I would need at this point is
1) Did you contact CA ACF2 for assistance? They are very helpful and
can
probably resolve this issue more quickly.
2) The output of the following IDCAMS lists
LISTC ENT('QWS.SEC.RULES') all
3) Provide the section of SYSLOG where your IKJ message occurs, 10
lines
above and below the message. I am looking for additional IDC, IGD,
IEC, etc type messages.
4) Show us the manual section in the ACF2 manual that states you use
a
SHAREOPT(1,3)
5) Did you contact CA ACF2 for assistance.
5) Have you searched the CA Support website to see if there is
already a
suggestion for this issue?
You can code a proc in proclib to do step 2. Then issue a S x
and
get the listing. If security is not available, you may not be able to
run the job.
The list is great, but if there is this much difficulty, then
contacting
the vendor could resolve this issue more quickly.
Lizette
-Original Message-
From: Steely, Mark mark.ste...@hp.com
Sent: Aug 27, 2015 6:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
I think the VVDS needs to be dump and look at the entry and see if
the
VVDS has the correct catalog listed.
Thanks
-Original Message-
From: IBM Mainframe Discussion List
[mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Nathan Astle
Sent: Thursday, August 27, 2015 7:49 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Catalog entry not visible
Hi John,
The System is not yet fully up and it is failing at the Security
product
start up. I can see the Catalog services are available.
Nathan
On Thu, Aug 27, 2015 at 6:15 PM, John McKown
john.archie.mck...@gmail.com
wrote:
On Thu, Aug 27, 2015 at 7:36 AM, Andrew Rowley
and...@blackhillsoftware.com
wrote:
Stretching my memory, isn't there something about VSAM files can
only be cataloged in 1 catalog, unless they are SYS1.* datasets?
I think there is some information in the VVDS?
This is correct. There are special dispensations for VSAM data
sets which start with SYS1. _or_ are PAGESPACE data sets. But, in
this case, the VSAM data set in question is said to be in a
_shared_ catalog. Which is certainly allowed. The OP can see it
in a 3.4 listing on both systems. I don't remember reading what
else has
Re: Catalog entry not visible
Ah, we don't use IGGCATxx. There is also the ancient SYSCATLG member of SYS1.NUCLEUS. I'm sure that LOADxx overrides SYSCATLG, but what about IGGCATxx? If these members specify different values for ALIASLEVEL, who wins the thumb wrestle? . . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John Eells Sent: Thursday, August 27, 2015 9:27 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Catalog entry not visible jo.skip.robin...@sce.com (J O Skip Robinson) wrote: Now that your system is up, be sure to 'harden' the dynamic change. These days alias level is specified in LOADxx in your IPL PARM data set. It defaults to 1 and may not be currently specified at all, which would explain your string of woes. snip One may also choose to specify this in IGGCATxx these days using ALIASLEVEL(n), where n is a number from 1-4. No matter where (un)specified, the default is the same. -- John Eells z/OS Technical Marketing IBM Poughkeepsie ee...@us.ibm.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
Lizette, That's a idea. I guess maybe CEEPIPI..I want to make sure I do this so I don't cause other issues for customers, that would not be good. Regards, Scott On Thursday, August 27, 2015, Lizette Koehler stars...@mindspring.com wrote: This is not my forte, but I thought I would just throw this out. Could you STC be written with a higher level Assembler stub routine that would be monitoring for things like CANCEL . That routine would then signal a daughter task to provide the function you want? Lizette -Original Message- From: Scott Ford idfzos...@gmail.com javascript:; Sent: Aug 27, 2015 7:58 AM To: IBM-MAIN@LISTSERV.UA.EDU javascript:; Subject: Re: LE Condition Handler Elardus, I like that also..I like the RACF protection...especially on a STC for Provisioning and Reconciliation. Regards, Scott On Thursday, August 27, 2015, Sam Siegel s...@pscsi.net javascript:; wrote: On Thu, Aug 27, 2015 at 6:02 AM, Scott Ford idfzos...@gmail.com javascript:; javascript:; wrote: All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. My idea is to write a Cobol condition handler with TRAP(ON) in LE to capture the S222 and at that time read the secondary index and write to disk. I am just not sure of the steps in the Cobol. Scott - Sorry to have to deliver the bad news. LE condition handlers do not intercept Sx22 abends, even with TRAP(ON). See the LE Programming guide (SA22-7561) chapter 15: TRAP Effects on the Condition Handling Process. Sam I could write the condition handler in Assembler or C I dont care. My object is not to loose this data.. Any ideas,opinions are welcome and appreciated. Scott Ford www.idmworks.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu javascript:; with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Mainframes open to internet attacks?
W dniu 2015-08-19 o 00:26, Robert Harrison pisze: From technologyreview.com: http://www.technologyreview.com/news/540011/mainframe-computers-that-handle-our-most-sensitive-data-are-open-to-internet-attacks/ Really? What I understod from the lecture: a) mainframes are old, obsolete, but unfotunately sometimes still in use - which is a sin. b) mainframes are insecure c) some mainframe are directly accessible from Internet, by mistake of course. What I mean: a) b) - IMHO obvious ;-) c) IMHO it is bad idea to make any system directly accessible from Internet. Mainframe, any kind of Unix, Linux, Windows... Some exceptions do apply but it's still platform-irrelevant. What is relevant it's protocol. TN3270 over TLS/SSL is better than any kind of telnet, etc. I'm aware of mainframe z/OS installation which offer free TSO account to anyone. BTW: There are plenty other open stuff on the Net, for example internet cameras. I mean CCTV installed in shops, lifts, etc. I saw webpage which collected such cameras, i.e. I saw shoe shop in my city. ;-) -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorized to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: kont...@mbank.pl Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2015 r. kapitał zakładowy mBanku S.A. (w całości wpłacony) wynosi 168.840.228 złotych. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
jo.skip.robin...@sce.com (J O Skip Robinson) wrote: Now that your system is up, be sure to 'harden' the dynamic change. These days alias level is specified in LOADxx in your IPL PARM data set. It defaults to 1 and may not be currently specified at all, which would explain your string of woes. snip One may also choose to specify this in IGGCATxx these days using ALIASLEVEL(n), where n is a number from 1-4. No matter where (un)specified, the default is the same. -- John Eells z/OS Technical Marketing IBM Poughkeepsie ee...@us.ibm.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
You can trap cancels with ESTAE(X) but interfacing back to LE is not for the feint-hearted. Sx22's are unrecoverable (note the quotes -- you can do it, but it's not for the feint-hearted). Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Sam Siegel Sent: Thursday, August 27, 2015 7:50 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: LE Condition Handler On Thu, Aug 27, 2015 at 6:02 AM, Scott Ford idfzos...@gmail.com wrote: All: I need a sanity check on a design I am wanting to do. We have a Cobol STC running with a Assembler Operator Interface, single thread. I understand I could redo in Assembler and multi-task, redo in C or C++ and thread, but this isnt what I am looking for. Inside the STC we maintain a secondary index of data items. If the Operator issues a 'P ..' or 'C ' we will loose the secondary index. My idea is to write a Cobol condition handler with TRAP(ON) in LE to capture the S222 and at that time read the secondary index and write to disk. I am just not sure of the steps in the Cobol. Scott - Sorry to have to deliver the bad news. LE condition handlers do not intercept Sx22 abends, even with TRAP(ON). See the LE Programming guide (SA22-7561) chapter 15: TRAP Effects on the Condition Handling Process. Sam I could write the condition handler in Assembler or C I dont care. My object is not to loose this data.. Any ideas,opinions are welcome and appreciated. Scott Ford www.idmworks.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
Might be related to the number of devices defined to the environment. Are you talking about above or below private? Mark Jacobs Phil mailto:philyo...@gmail.com August 27, 2015 at 2:32 PM Hello All, What could cause private area to shrink 1M when the system is IPL'd on a different machine as in, in DR? Assume that the image being IPL'd is identical to production. I'm told that there were no changes to parmlib, LPA, nucleus etc. Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Please be alert for any emails that may ask you for login information or directs you to login via a link. If you believe this message is a phish or aren't sure whether this message is trustworthy, please send the original message as an attachment to 'phish...@timeinc.com'. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
I've seen this happen when adding a module to CSA and it causes CSA to cross a 1-meg boundary. CSA expands in 1meg increments. Cliff McNeill From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU on behalf of Phil philyo...@gmail.com Sent: Thursday, August 27, 2015 1:32 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Smaller Private Area in DR Hello All, What could cause private area to shrink 1M when the system is IPL'd on a different machine as in, in DR? Assume that the image being IPL'd is identical to production. I'm told that there were no changes to parmlib, LPA, nucleus etc. Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
IIRC RMFPP has one but don't think it identifies who the owners are? In a message dated 8/27/2015 3:00:13 P.M. Central Daylight Time, stars...@mindspring.com writes: I was looking for a graphic that displays this better than I can write it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
So private area below the line is what is left over after the system carves out everything else. So CSA, HSA (I think - Hardware area), etc I was looking for a graphic that displays this better than I can write it. So The portion of the user private area in each virtual address space that is available to the user's application program is referred to as its region. Except for the 16 KB system region area, each storage area in the private area has a counterpart in the extended private area. The private area contains the following areas: A local system queue area (LSQA) A scheduler work area (SWA) Subpools 229 and 230 (the requestor protect key area) A 16 KB system region area (used by the initiator) A private user region for running programs and storing data. The private area user region can be any size up to the size of the entire private area (from the top end of the prefixed storage area (PSA) to the beginning, or bottom end, of the common service area (CSA)) minus the size of LSQA, SWA, subpools 229 and 230, and the system region: for example, 220 KB. It is recommended that the region is 420 KB less to allow for recovery termination management (RTM) processing. The segment sizes are one megabyte, therefore CSA is rounded up to the nearest megabyte. The private area is in increments of one megabyte. Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of phil yogendran Sent: Thursday, August 27, 2015 12:43 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Smaller Private Area in DR Thanks all for the responses. I'm referring to private below the line. Unfortunately, there's no dump or map of storage to do any meaningful debugging. The obvious reason is that something was added somewhere for private to drop 1M. I'm aware it changes in 1M chunks. However, 'nothing changed' is what I'm told. Mark, can you elaborate please? Would that be in the IODF that was picked up in DR? Thanks On Thu, Aug 27, 2015 at 3:01 PM, Ed Finnell 000248cce9f3-dmarc-requ...@listserv.ua.edu wrote: Have to examine all the parts. CSA, ECSA, etc that take away from private. Something like Mark's IPLINFO is a starter or the PRIVAT mapper in IVP lib is another choice. In a message dated 8/27/2015 1:47:44 P.M. Central Daylight Time, mark.jac...@custserv.com writes: Might be related to the number of devices defined to the environment. Are you talking about above or below private? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Smaller Private Area in DR
Hello All, What could cause private area to shrink 1M when the system is IPL'd on a different machine as in, in DR? Assume that the image being IPL'd is identical to production. I'm told that there were no changes to parmlib, LPA, nucleus etc. Thanks. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
Have to examine all the parts. CSA, ECSA, etc that take away from private. Something like Mark's IPLINFO is a starter or the PRIVAT mapper in IVP lib is another choice. In a message dated 8/27/2015 1:47:44 P.M. Central Daylight Time, mark.jac...@custserv.com writes: Might be related to the number of devices defined to the environment. Are you talking about above or below private? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
Thanks all for the responses. I'm referring to private below the line. Unfortunately, there's no dump or map of storage to do any meaningful debugging. The obvious reason is that something was added somewhere for private to drop 1M. I'm aware it changes in 1M chunks. However, 'nothing changed' is what I'm told. Mark, can you elaborate please? Would that be in the IODF that was picked up in DR? Thanks On Thu, Aug 27, 2015 at 3:01 PM, Ed Finnell 000248cce9f3-dmarc-requ...@listserv.ua.edu wrote: Have to examine all the parts. CSA, ECSA, etc that take away from private. Something like Mark's IPLINFO is a starter or the PRIVAT mapper in IVP lib is another choice. In a message dated 8/27/2015 1:47:44 P.M. Central Daylight Time, mark.jac...@custserv.com writes: Might be related to the number of devices defined to the environment. Are you talking about above or below private? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
How different was the I/O configuration? Adding devices can reduce private. Different devices can take different storage amounts for UCB and drivers. Different hardware can have different recovery modules loaded, changing private size. We recently dynamically added DASD. O problem, even over an IPL. Updated IOCP/IOCDS to make them permanent, power-on reset, and IPL. Lost 1 meg from private and had to adjust CSA/SQA. Dennis Roach, CISSP, PMP IT Security Administration Senior Analyst 2727 Allen Parkway, Wortham Building 3rd Floor, Houston, TX 77019 Work: 713-831-8799 Cell: 713-591-1059 Email: dennis.ro...@aig.com Report information security incidents to: aiglr_security_incide...@aig.com and (818) 673-4030 All opinions expressed by me are mine and may not agree with my employer or any person, company, or thing, living or dead, on or near this or any other planet, moon, asteroid, or other spatial object, natural or manufactured, since the beginning of time. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of phil yogendran Sent: Thursday, August 27, 2015 2:43 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Smaller Private Area in DR Thanks all for the responses. I'm referring to private below the line. Unfortunately, there's no dump or map of storage to do any meaningful debugging. The obvious reason is that something was added somewhere for private to drop 1M. I'm aware it changes in 1M chunks. However, 'nothing changed' is what I'm told. Mark, can you elaborate please? Would that be in the IODF that was picked up in DR? Thanks On Thu, Aug 27, 2015 at 3:01 PM, Ed Finnell 000248cce9f3-dmarc-requ...@listserv.ua.edu wrote: Have to examine all the parts. CSA, ECSA, etc that take away from private. Something like Mark's IPLINFO is a starter or the PRIVAT mapper in IVP lib is another choice. In a message dated 8/27/2015 1:47:44 P.M. Central Daylight Time, mark.jac...@custserv.com writes: Might be related to the number of devices defined to the environment. Are you talking about above or below private? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
stars...@mindspring.com (Lizette Koehler) wrote: So private area below the line is what is left over after the system carves out everything else. So CSA, HSA (I think - Hardware area), etc I was looking for a graphic that displays this better than I can write it. snip A reasonable graphic is in the Init and Tuning Guide: http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/iea2e181/1.3.1?SHELF=all13be9DT=20120816173408CASE= The usual problem is that the specified CSA allocation happens to place the end of the *specified* area within a whisker of a 1M boundary in one direction or another. The area *allocated* by the system for CSA is almost always greater than what you specify. As others have observed, the system rounds up to the next MB unless you happen (whether by accident or design) to land exactly on a MB boundary with your CSA specification. Don't do that. Here's why: A lot of configuration changes can cause the system to allocate more common ahead of CSA, and can push the end of the specified CSA allocation amount over a 1M boundary, causing the system to extend the end of it to the next 1M boundary. This can eat an entire MB of private to contain as little as a few bytes more of common. Some of these things are I/O configuration changes, and some of those can come about from defining devices as needing UCBs below that used to be above. Also, changes to the LPA list will move the starting address around, as can the modules included in the NUCLEUS at IPL time--which is partly or even mostly outside your control. Alternatively, you might IPL in a configuration that uses less common storage, cross the boundary in the other direction, gain an entire MB of private, and lose nearly an entire MB of CSA. Running short of CSA is no fun, either. It's a reasonable practice IMO to find out where the CSA *specification* lands you with respect to the next 1MB boundary. If the answer is not pretty close to 512K, adjust the CSA allocation to make it so. At the time you make such a change, the *actual amount* of CSA you get will stay the same. The boundaries will stay stable unless and until something else causes the starting address of CSA to move in one direction or the other. Minor changes in the nucleus, LPA, and I/O configuration sizes are much less likely to make you cross the 1M boundary unawares, and tend to leave the ending address (that 1M boundary) where you want it, preserving the size of available private, the approximate size of CSA, and your sanity. Of course, you want to recheck the end of the specification and the next 1M boundary once in a while, and (continue to!) monitor used CSA to make sure overt action (such as reducing what's in the LPA list) is not needed to pull the starting address back far enough to preserve CSA free space. -- John Eells z/OS Technical Marketing IBM Poughkeepsie ee...@us.ibm.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
A pocket protector's worth of Display Commands. http://idcp.marist.edu/pdfs/ztidbitz/MVS%20CONSOLE%20COMMANDS.pdf In a message dated 8/27/2015 3:55:31 P.M. Central Daylight Time, ee...@us.ibm.com writes: Of course, you want to recheck the end of the specification and the next 1M boundary once in a while, and (continue to!) monitor used CSA to make sure overt action (such as reducing what's in the LPA list) is not needed to pull the starting address back far enough to preserve CSA free space. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: LE Condition Handler
On 27 August 2015 at 12:32, Scott Ford idfzos...@gmail.com wrote: Thanks All, I am going to code up a prototype and test on our Sandbox, so i can see the results of a 'C' command for example. BTW, you also mentioned the P (STOP) command. This doesn't lead to any kind of x22 abend, and is a very different kettle of fish from a C (CANCEL). If you aren't already handling STOP commands in your code, then LE will never encounter one. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
If the IODF has more LOCANY=NO devices, you can lose virtual storage below the line to UCBs. Bob On 8/27/2015 3:42 PM, phil yogendran wrote: Thanks all for the responses. I'm referring to private below the line. Unfortunately, there's no dump or map of storage to do any meaningful debugging. The obvious reason is that something was added somewhere for private to drop 1M. I'm aware it changes in 1M chunks. However, 'nothing changed' is what I'm told. Mark, can you elaborate please? Would that be in the IODF that was picked up in DR? Thanks On Thu, Aug 27, 2015 at 3:01 PM, Ed Finnell 000248cce9f3-dmarc-requ...@listserv.ua.edu wrote: Have to examine all the parts. CSA, ECSA, etc that take away from private. Something like Mark's IPLINFO is a starter or the PRIVAT mapper in IVP lib is another choice. In a message dated 8/27/2015 1:47:44 P.M. Central Daylight Time, mark.jac...@custserv.com writes: Might be related to the number of devices defined to the environment. Are you talking about above or below private? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Mainframes open to internet attacks?
In 55df2edd.5090...@bremultibank.com.pl, on 08/27/2015 at 05:38 PM, R.S. r.skoru...@bremultibank.com.pl said: What I understod from the lecture: a) mainframes are old, obsolete, but unfotunately sometimes still in use - which is a sin. If they do the job as well as or better than available alternatives then they're not obsolete. b) mainframes are insecure Compared to what? -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
All, Thank you very much for all the informative comments. I am familiar with the layout of an address space but the refresher is always welcome. Thanks John, the comments about CSA allocation was particularly instructive. As many of you pointed out, I too now believe that changes to the I/O configuration is the likely culprit as DR was at a vendor site. I will do more work to figure out how we can accommodate these configuration changes in future. Thanks again. On Thu, Aug 27, 2015 at 6:14 PM, J O Skip Robinson jo.skip.robin...@sce.com wrote: I did not see in this thread any mention of who owns the DR environment. We own and manage our own DR environment, so we know exactly what's there. If OP's DR is in the hands of a vendor, then the I/O configuration may differ as others have indicated. In particular, UCB location can make a big difference if there are lots of devices. I believe that LOCANY defaults to NO. Unless specifically coded for above-the-line location, UCBs in a large configuration can take up a lot of space below 16M. If as others have suggested the specified CSA value is already close to a megabyte boundary, a lot of unexpected UCBs could cause COMMON to encroach on PRIVATE. . . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Ed Finnell Sent: Thursday, August 27, 2015 2:09 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Smaller Private Area in DR A pocket protector's worth of Display Commands. http://idcp.marist.edu/pdfs/ztidbitz/MVS%20CONSOLE%20COMMANDS.pdf In a message dated 8/27/2015 3:55:31 P.M. Central Daylight Time, ee...@us.ibm.com writes: Of course, you want to recheck the end of the specification and the next 1M boundary once in a while, and (continue to!) monitor used CSA to make sure overt action (such as reducing what's in the LPA list) is not needed to pull the starting address back far enough to preserve CSA free space. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Smaller Private Area in DR
I did not see in this thread any mention of who owns the DR environment. We own and manage our own DR environment, so we know exactly what's there. If OP's DR is in the hands of a vendor, then the I/O configuration may differ as others have indicated. In particular, UCB location can make a big difference if there are lots of devices. I believe that LOCANY defaults to NO. Unless specifically coded for above-the-line location, UCBs in a large configuration can take up a lot of space below 16M. If as others have suggested the specified CSA value is already close to a megabyte boundary, a lot of unexpected UCBs could cause COMMON to encroach on PRIVATE. . . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Ed Finnell Sent: Thursday, August 27, 2015 2:09 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Smaller Private Area in DR A pocket protector's worth of Display Commands. http://idcp.marist.edu/pdfs/ztidbitz/MVS%20CONSOLE%20COMMANDS.pdf In a message dated 8/27/2015 3:55:31 P.M. Central Daylight Time, ee...@us.ibm.com writes: Of course, you want to recheck the end of the specification and the next 1M boundary once in a while, and (continue to!) monitor used CSA to make sure overt action (such as reducing what's in the LPA list) is not needed to pull the starting address back far enough to preserve CSA free space. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: ENQ rname_addr description
On 2015-08-26 12:31, Abe Kornelis wrote: I have always interpreted as qualified by the qname, though I will gladly admit this is an inference not directly implied by the text itself, and therefore subject to discussion. (not intending to start one right now, though). This seems amply covered in the second introductory paragraph: ... ENQ identifies the resource by a pair of names, the qname and the rname, ... and needn't be restated, less clearly in the description of the RNAME parameter. On 2015-08-27 12:37, Walt Farrell wrote: On Wed, 26 Aug 2015 07:18:33 -0600, Paul Gilmartin wrote: In: z/OS MVS Programming: Assembler Services Reference ABE-HSP SA23-1369-00 under ENQ I read: ... ,rname addr Specifies the address of the name used together with qname to represent a single resource. The name must be from 1 to 255 bytes long, can be qualified, and can contain any valid hexadecimal character. What's a qualified name, as opposed to unqualified? Does this simply mean a conventional data set name containing periods is acceptable? If so, I believe that can be qualified adds no meaning to the description. I've always interpreted it to mean that the name could contain periods. It does not simply mean that a dsname is acceptable, as dsnames have additional rules that do not apply to rnames. any ... character completely covers that; it allows the name to contain periods. It might be suitable to have a sidebar describing the common use of QNAME and RNAME for data set name ENQs. But that's better left elsewhere. I do intend to submit an RCF about the otiose and possibly misleading use of valid and hexadecimal. I believe there's no such thing as an invalid or non-hexadecimal character which must not appear in the rname. If there is no such thing as an invalid or non-hexadecimal character, then I don't see how that statement can be misleading. The universe of possible names would be the same in either case. It would only be misleading if it removed some valid rname possibilities. Suppose I say All feathered birds are vertebrates. Doesn't that lead the reader to stop and ponder what birds are not feathered (none, discounting chicks) and whether any might not be vertebrates? More concisely, simply All birds are vertebrates. Similarly for valid and hexadecimal, which neither extend nor restrict the universe, but simply add confusion. I agree that an RCF is in order, though I'm unsure how to describe the rname contents in a clearer fashion. Omit the words valid and hexadecimal and can be qualified. By the way, I think you should have posted that to ibm-main. It's not really about using the assembler or assembler language in general, but rather about doc for a specific z/OS macro. It's likely that some interested parties are not watching this list. OK. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Mainframes open to internet attacks?
Radoslaw Skorupka wrote: c) IMHO it is bad idea to make any system directly accessible from Internet. Mainframe, any kind of Unix, Linux, Windows... Which leaves...what? Is Wang still selling machines? (But those were systems, too...) Timothy Sipples IT Architect Executive, Industry Solutions, IBM z Systems, AP/GCG/MEA E-Mail: sipp...@sg.ibm.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Mainframes open to internet attacks?
mike.a.sch...@gmail.com (Mike Schwab) writes: How about Multics? Designed from the start to be multi-user and highly secure. some of the CTSS people went to the 5th flr and did Multics. Other of the CTSS people went to the IBM science center on the 4th flr and did cp67/cms, the internal network, online services, etc. Being in the same bldg. separated by one flr, there was some rivalry. One of the early tests was when science center ported apl\360 to cms for cms\apl ... it allowed typical apl\360 16kbyte workspaces to be increased to virtual memory size ... and also added API that allowed access of system services (like file read/write). Opening APL to real-world applications attracted a lot of internal locations to start using the cambridge system remotesly. A group of business planners in Armonk loaded the most valuable corporate asset (customer details) on cambridge system to do business modeling applications in cms\apl. we had some interesting issues since non-employess (cambridge area univ students, instructors, professors) also had online access to the cambridge system. some posts mentioning science center http://www.garlic.com/~lynn/subtopic.html#545tech some multics installations: http://www.multicians.org/site-afdsc.html http://www.multicians.org/mgd.html#DOCKMASTER other old reference to DOCKMASTER org. (gone 404 but lives on at wayback machine): http://web.archive.org/web/20090117083033/http://www.nsa.gov/research/selinux/list-archive/0409/8362.shtml and old reference to afds coming by to talk about 20 vm/4341 systems ... but then that was increased to 220 (posted in multics discussion group) http://www.garlic.com/~lynn/2001m.html#email790404 Recently a european that worked in NATO claimed that they got 6000 vm/4341 systems. Note that Multics was implemented in PLI. Up through the 90s, the major tcp/ip bugs/exploits were because of buffer length related bugs epidemic in c-language implementations (and still continues to be a frequent source of exploits). The original ibm mainframe tcp/ip product was implemented in vs/pascal and had *none* of these epidemic bugs found in c-language implementations. As an aside, for various reasons this implementation had some significant performance issues, getting 44kbytes/sec aggregate using 3090 processor. I did the rfc1044 enhancements and some tuning tests at cray research got sustained channel speed throughput between cray and 4341, using only modest amount of 4341 (possibly 500 times improvement in bytes moved per instruction executed). The (non-rfc1044) version was also made available on MVS by simulating the required VM functions. Much later the communication group contracted for TCP/IP support through VTAM. After the initial demonstration, the communication group told the contractor that everybody *knows* that a *correct* version of TCP/IP runs slower than LU6.2 and they will only be paying for a *correct* version. I also had other rivalry with the 5th flr. One of my hobbies was providing enhanced operating systems to internal locations ... some old email regarding CSC/VM (later it was SJR/VM, after I transferred to san jose research): http://www.garlic.com/~lynn/2006w.html#email750102 http://www.garlic.com/~lynn/2006w.html#email750430 It wasn't fair to compare the total number of Multics systems that had ever existed with the total number of vm370 customer systems or even the total number of internal vm370 systems. However, for a time, I had a few more internal csc/vm systems than the total number of Multics systems. -- virtualization experience starting Jan1968, online at home since Mar1970 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Mainframes open to internet attacks?
Hi All, I’m actually the person interviewed in this (frankly overblown) article. Thankfully I had a chance to talk again about this project here: https://www.bostonglobe.com/ideas/2015/08/13/remote-corner-internet-art-sprouts/joPVVFqBnctHanbtUBLhzL/story.html https://www.bostonglobe.com/ideas/2015/08/13/remote-corner-internet-art-sprouts/joPVVFqBnctHanbtUBLhzL/story.html Radoslaw, I’m so glad you were able to attend one of my talks (was it the Skytalks or BSidesLV?). However, I think you misunderstood the point I was trying to make. I’ve constantly touted how stupid the information security industry has been in thinking mainframes were old and obsolete. See this article about one of my first talks from two years ago: http://www.darkreading.com/attacks-breaches/cutting-through-the-mystique-of-testing-the-mainframe/d/d-id/1140239 http://www.darkreading.com/attacks-breaches/cutting-through-the-mystique-of-testing-the-mainframe/d/d-id/1140239 my story hasn’t really changed since. My toolset has, and participation is slowly increasing, but not fast enough. In fact, my co-speaker and I, at the most recent DEFCON, were making fun of the audience for not knowing what CICS was despite how important it likely was to their daily lives. On the topic on whether they are secure or not, thats up to the implementation. I know of someone who claims ‘give me an account and I can own your mainframe’. He doesn’t do it through magical 0-days, he’s using misconfigurations and easy to access tools (for example, in one instance he found a surrogate profile for an account with system special open to everyone because it was an ‘emergency id’). But this is true of any platform. zLinux is just as secure as z/OS, if both are configured correctly. Finally, on to the ‘art project’ as I like to call it. Back, long ago, when I was on x.25 networks looking for things to play with I might encounter a screen like these. I just find them amazing and beautiful (and a little nostalgic to be honest). Having them be on the internet doesn’t really matter, if they are configured correctly. My assumption is that they are on the internet on purpose and are no different than a staff landing page (for example: https://fs.aircanada.ca/idp/SSO.saml2 https://fs.aircanada.ca/idp/SSO.saml2, i found this through literally 1 second on google). If you want to see other interesting ’things' on the internet check out SHODANs twitter feed for devices like ‘Lake Pumping Stations’ and ‘Skilift in France’: https://twitter.com/shodanhq https://twitter.com/shodanhq I realize this is likely way off-topic for this discussion list but feel free to email me if you have questions or concerns (or are interested in how I did it). Phil On Aug 27, 2015, at 9:00 PM, IBM-MAIN automatic digest system lists...@listserv.ua.edu wrote: Date:Thu, 27 Aug 2015 17:38:05 +0200 From:R.S. r.skoru...@bremultibank.com.pl mailto:r.skoru...@bremultibank.com.pl Subject: Re: Mainframes open to internet attacks? W dniu 2015-08-19 o 00:26, Robert Harrison pisze: From technologyreview.com http://technologyreview.com/: http://www.technologyreview.com/news/540011/mainframe-computers-that-handle-our-most-sensitive-data-are-open-to-internet-attacks/ http://www.technologyreview.com/news/540011/mainframe-computers-that-handle-our-most-sensitive-data-are-open-to-internet-attacks/ Really? What I understod from the lecture: a) mainframes are old, obsolete, but unfotunately sometimes still in use - which is a sin. b) mainframes are insecure c) some mainframe are directly accessible from Internet, by mistake of course. What I mean: a) b) - IMHO obvious ;-) c) IMHO it is bad idea to make any system directly accessible from Internet. Mainframe, any kind of Unix, Linux, Windows... Some exceptions do apply but it's still platform-irrelevant. What is relevant it's protocol. TN3270 over TLS/SSL is better than any kind of telnet, etc. I'm aware of mainframe z/OS installation which offer free TSO account to anyone. BTW: There are plenty other open stuff on the Net, for example internet cameras. I mean CCTV installed in shops, lifts, etc. I saw webpage which collected such cameras, i.e. I saw shoe shop in my city. ;-) -- Radoslaw Skorupka Lodz, Poland -- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość włączając w to wszelkie jej kopie
Re: Mainframes open to internet attacks?
How about Multics? Designed from the start to be multi-user and highly secure. On Thu, Aug 27, 2015 at 11:19 PM, Timothy Sipples sipp...@sg.ibm.com wrote: Radoslaw Skorupka wrote: c) IMHO it is bad idea to make any system directly accessible from Internet. Mainframe, any kind of Unix, Linux, Windows... Which leaves...what? Is Wang still selling machines? (But those were systems, too...) Timothy Sipples IT Architect Executive, Industry Solutions, IBM z Systems, AP/GCG/MEA E-Mail: sipp...@sg.ibm.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
New field in V2R1. Why would IBM make it only 8 characters long? Sigh. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Oren, Yifat Sent: Thursday, August 27, 2015 1:22 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMF Type 30 While we are at it - SMF30_Highest_Task_CPU_Program has the program name from the task that reported the largest CPU time percentage for the step (in 30-4, if I understand the manual correctly). -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
For starters I'd run this job and publish the results here: Jobcard... //STEP1 EXEC PGM=IDCAMS,REGION=0M //SYSPRINT DD SYSOUT=* //SYSINDD * LISTC ENT(QWS.SEC.RULES) ALL /* I'd also consider changing the DISP=OLD to DISP=SHR as I'm wondering if something running has the file allocated. Dan -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Nathan Astle Sent: Thursday, August 27, 2015 4:22 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Catalog entry not visible Hi, The IKJ message what I am getting is : IKJ56228I DATA SET QWS.SEC.RULES NOT IN CATALOG OR CATALOG CAN NOT BE ACCESSED Explanation: DISP=OLD was specified. The dynamic allocation error code is 1708, 5708, or 5710. For a description of the dynamic allocation return, informational, and error codes, see z/OS Programming: Authorized Assembler Services Guide. Detected by: CALLER Program: DAIRFAIL Could someone please point on what needs to be done from the Product perspective. Nathan On Thu, Aug 27, 2015 at 12:43 PM, retired mainframer retired-mainfra...@q.com wrote: Does the catalog entry point to the correct volume? -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Nathan Astle Sent: Wednesday, August 26, 2015 9:56 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Catalog entry not visible Hi Even when I try to put the fully qualified in the PROC dd statement it fails with device allocation error. Other datasets in the same volume are being read. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
I have reviewed all the replies, but it seemed no progress is made, so here is my shot at this... Nathan Astle wrote: I can view the failing dataset using 3.4 from the driving system. And also on the ACF system you're trying to IPL? I really hope you have fallback volsers, VSAM, catalogs, etc in place... The failing dataset are VSAM file How was it created? Show us the DEFINE statements and all its parameters. Initially these VSAM file were pointing to driving master catalog then I did the repromergcat from a master catalog to a user catalog Show us the REPRO, MERGECAT and IMPORT statements used and the results of them. Then defined the two level alias After you created the VSAM dataset? On what Master Catalog? I believe you're out of luck, because usually you get first your alias in place and then do DEFINE + cataloguing work. (Usage of RELATE(catalog) may help, but ... ) As others asked, is your system configured correctly? The usercat is import connected to the IPLing system mastercat I believe, but can't test, but ACF and other ESM should have their datasets on the Master Catalog. RACF must have its datasets defined in the Master Catalog. I should know, I'm working with it. ;-) Is there a way to do list cat command from the console ? AFAIK, no, unless as others suggested, you put something in to read the commands. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Hi The SHAREOPTN is (1,3) for VSAM file. Are there a reason for behind the failure ? Some of the google hits for the error message says improper catalog sharing. Nathan On Thursday 27 August 2015, Nathan Astle tcpipat...@gmail.com wrote: Hi, The IKJ message what I am getting is : IKJ56228I DATA SET QWS.SEC.RULES NOT IN CATALOG OR CATALOG CAN NOT BE ACCESSED Explanation: DISP=OLD was specified. The dynamic allocation error code is 1708, 5708, or 5710. For a description of the dynamic allocation return, informational, and error codes, see z/OS Programming: Authorized Assembler Services Guide. Detected by: CALLER Program: DAIRFAIL Could someone please point on what needs to be done from the Product perspective. Nathan On Thu, Aug 27, 2015 at 12:43 PM, retired mainframer retired-mainfra...@q.com javascript:_e(%7B%7D,'cvml','retired-mainfra...@q.com'); wrote: Does the catalog entry point to the correct volume? -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU javascript:_e(%7B%7D,'cvml','IBM-MAIN@LISTSERV.UA.EDU');] On Behalf Of Nathan Astle Sent: Wednesday, August 26, 2015 9:56 PM To: IBM-MAIN@LISTSERV.UA.EDU javascript:_e(%7B%7D,'cvml','IBM-MAIN@LISTSERV.UA.EDU'); Subject: Re: Catalog entry not visible Hi Even when I try to put the fully qualified in the PROC dd statement it fails with device allocation error. Other datasets in the same volume are being read. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu javascript:_e(%7B%7D,'cvml','lists...@listserv.ua.edu'); with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Nathan Astle wrote: The SHAREOPTN is (1,3) for VSAM file. Are there a reason for behind the failure ? Some of the google hits for the error message says improper catalog sharing. I would rather look at ACF recommendation about SHAREOPTN, not at Google. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Does the catalog entry point to the correct volume? -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Nathan Astle Sent: Wednesday, August 26, 2015 9:56 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Catalog entry not visible Hi Even when I try to put the fully qualified in the PROC dd statement it fails with device allocation error. Other datasets in the same volume are being read. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: vary dev,console with an IEF238D outstanding.
Thanks Scott for the definitive answer, it does clear up a lot. Like I mentioned, it's not a game breaker really. I can't come up with a situation where this behavior would lock us out of our machine. Unless we really dropped the ball somewhere in the first place. It's more that the list might be interested to know. _Jan -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Scott Ballentine Sent: woensdag 26 augustus 2015 6:13 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: vary dev,console with an IEF238D outstanding. While there is an IEF238D outstanding, in our case because some DD specified a nonexistent volser, vary dev,console gives us IEE799D. quote IEE799D VARY CONSOLE DELAYED - REPLY RETRY OR CANCEL. A VARY CONSOLE command requested that a console be placed online or offline. The system could not process the command due to other processing in the system such as: - Another VARY CONSOLE command - Device allocation in progress /quote I'd expect that. As a general rule, when IEF238D is outstanding, it holds various resources. SYSIEFSD Q4 shared is one of those resources, but there are several others. Device Allocation requires a consistent picture of the online devices, serialized by Q4. There are a lot of processes that can be held up if an IEF238D is outstanding. Over the years, we've tweaked some things to help with Q4 contention, but the general rules for serializing devices with Q4 I describe here have always been true. For most devices, you can VARY them online while IEF238D is outstanding, but not offline. (We only need Q4 shared to make a device eligible for allocation, but to take a device away from allocation, we need Q4 exclusive.) Offline devices will go into a pending offline state until Q4 becomes available. For console devices (I mean those in CONSOLxx, not just 3270's in general) are special. Moving them into console state requires Q4 exclusive, because you're taking the device away from allocation (it's no longer allocatable.) The console state is separate from online or offline. Sorry, that serialization is really necessary. -Scott Ballentine IBM z/OS Device Allocation -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
Hi, The IKJ message what I am getting is : IKJ56228I DATA SET QWS.SEC.RULES NOT IN CATALOG OR CATALOG CAN NOT BE ACCESSED Explanation: DISP=OLD was specified. The dynamic allocation error code is 1708, 5708, or 5710. For a description of the dynamic allocation return, informational, and error codes, see z/OS Programming: Authorized Assembler Services Guide. Detected by: CALLER Program: DAIRFAIL Could someone please point on what needs to be done from the Product perspective. Nathan On Thu, Aug 27, 2015 at 12:43 PM, retired mainframer retired-mainfra...@q.com wrote: Does the catalog entry point to the correct volume? -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Nathan Astle Sent: Wednesday, August 26, 2015 9:56 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Catalog entry not visible Hi Even when I try to put the fully qualified in the PROC dd statement it fails with device allocation error. Other datasets in the same volume are being read. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMF Type 30
While we are at it - SMF30_Highest_Task_CPU_Program has the program name from the task that reported the largest CPU time percentage for the step (in 30-4, if I understand the manual correctly). Regards, Yifat -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Martin Packer Sent: 26 August 2015 21:45 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMF Type 30 Also SMF30EXN is sometimes usefully filled in with a Unix program name. But not often, IME. Cheers, Martin Martin Packer, zChampion, Principal Systems Investigator, Worldwide Banking Center of Excellence, IBM +44-7802-245-584 email: martin_pac...@uk.ibm.com Twitter / Facebook IDs: MartinPacker Blog: https://www.ibm.com/developerworks/mydeveloperworks/blogs/MartinPacker From: Elardus Engelbrecht elardus.engelbre...@sita.co.za To: IBM-MAIN@LISTSERV.UA.EDU Date: 26/08/2015 19:11 Subject:Re: SMF Type 30 Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Steely, Mark wrote: I need to do some research to determine when a certain program was executed. It would be nice to also have the job name and / or userid that executed the program. I think SMF type 30 would provide this information. Do anyone have a program that provides this type of information. I don’t have any SMF reporting products. We are z/OS v1r13. Others gave excellent replies including DAF and other freebies. But, if your program was called by another program, you're probably out of luck. SMF type 30 has these useful fields amongst a lot of other fields: SMF30JBN (Job name) SMF30PGM (Program name) SMF30STM (Step name) Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Catalog entry not visible
On Thu, Aug 27, 2015 at 3:22 AM, Nathan Astle tcpipat...@gmail.com wrote: Hi, The IKJ message what I am getting is : IKJ56228I DATA SET QWS.SEC.RULES NOT IN CATALOG OR CATALOG CAN NOT BE ACCESSED Explanation: DISP=OLD was specified. The dynamic allocation error code is 1708, 5708, or 5710. For a description of the dynamic allocation return, informational, and error codes, see z/OS Programming: Authorized Assembler Services Guide. Detected by: CALLER Program: DAIRFAIL Could someone please point on what needs to be done from the Product perspective. Nathan This is interesting. I was thinking it was the 1708 return, that is data set not catalogued. However, if it is the 5708 return, then a possibility would be if the dynamic allocation did something, such as setting any bit on in the S99FLAG2 field. This would be to do something like wait for DSN if not immediately available instead of failing, wait for volumes (as in tape mount, I think) , do not serialize DSN (don't issue SYSDSN enq), and so on' ref: http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/IEA2A8C0/26.1.5.1 Could it be that your product is supposed to be APF authorized but isn't on the new system? I.e. the DSN is not in the APF list. Or it is in the LINKLIST on the old system with LNKAUTH=LNKLST whereas on the new system, you have LNKAUTH=APFTAB ? Just a thought. -- Schrodinger's backup: The condition of any backup is unknown until a restore is attempted. Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be. He's about as useful as a wax frying pan. 10 to the 12th power microphones = 1 Megaphone Maranatha! John McKown -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
