Re: z/OSMF problem

2019-07-26 Thread Mike Shorkend
Thanks Mark, I will give it a try.

On Thu, 25 Jul 2019, 21:37 Mark Charles,  wrote:

> I just set up z/OSMF and remember the answer to this:  MEMLIMIT parameter
> needs to actually work.  This can be controlled by SMFPRMxx and/or SMF
> exits.  You probably won't get any messages from SMF when SMF sets your
> limit too low, by ignoring what is coded on your EXEC statement.
>
> My test system works with SMFPRMxx parameter MEMLIMIT=350M.  My IZUSVR1
> Proc (from IBM) asks for 4G, but probably doesn't get that...
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


RACFICE2 CERTEXP DFSORT

2019-07-26 Thread Sankaranarayanan, Vignesh
Hello All,

This is more of a SORT question than RACF or certs, so posting here.
Below is the 'CERTEXP' JCL member in RACFICE2 that shows all certs that are 
expiring in the next 'n' days.
//USER01I  JOB MSGLEVEL=(1,1),NOTIFY=&SYSUID,CLASS=A,
// MSGCLASS=H,REGION=19M
//*
//RACFICE   EXEC PGM=ICETOOL,PARM='MSGPRT=ALL'
//TOOLMSG   DD SYSOUT=*
//PRINT DD SYSOUT=*
//DFSMSGDD SYSOUT=*
//DBUDATA   DD DISP=SHR,DSN=MARKN.TEST.IRRDBU00
//TEMP0001  DD DISP=(NEW,DELETE,DELETE),SPACE=(CYL,(20,5,0)),
//  UNIT=SYSALLDA
//TOOLINDD *
 SORTFROM(DBUDATA) TO(TEMP0001) USING(CERT)
 DISPLAY FROM(TEMP0001) LIST(PRINT) -
 PAGE -
 TITLE('Expired or Nearly Expired Certificates') -
 DATE(YMD/) -
 TIME(12:)  -
 BLANK -
 ON(010,60,CH)  HEADER('Name') -
 ON(266,10,CH)  HEADER('Start Date') -
 ON(286,10,CH)  HEADER('End Date')
//CERTCNTL  DD *
 SORTFIELDS=(10,8,CH,A)
 INCLUDE COND=(5,4,CH,EQ,C'0560',AND,
 286,10,CH,NE,C'  ',AND,
 286,10,CH,LT,DATE1(-)+30)
 OPTION  VLSHRT

It shows the cert "name", which is some eye-blurring text.
I've dug through the IRRDBU00 record layout notes and found the following
# 0207 User certificate name record
 6 -  13 USCERT_NAME   owner ID
15 - 260 USCERT_CERT_NAME  cert "name"
   262 - 293 USCERT_CERTLABL   label

# 0500 General resource basic data record
 6 - 251 GRBD_NAME cert "name"
   253 - 260 GRBD_CLASS_NAME   RACF class name (DIGTCERT)
   271 - 280 GRBD_CREATE_DATE  cert "creation" date

# 0560 General Resource Certificate Data
 6 - 251 GRCERT_NAME   cert "name"
   253 - 260 GRCERT_CLASS_NAME RACF class name (DIGTCERT)
   262 - 271 GRCERT_START_DATE
   273 - 280 GRCERT_START_TIME
   282 - 291 GRCERT_END_DATE
   293 - 300 GRCERT_END_TIME
   311 - 320 GRCERT_KEY_SIZE   key size in bits

# 0561 General Resource Certificate References
 6 - 251 CERTR_NAMEcert "name"
   253 - 260 CERTR_CLASS_NAME  RACF class name (DIGTCERT)
   262 - 507 CERTR_RING_NAME   RACF ring profile name

# 0562 General Resource Key Ring Data
 6 - 251 KEYR_NAME RACF ring profile name
   253 - 260 KEYR_CLASS_NAME   RACF class name (DIGTRING)
   509 - 516 KEYR_CERT_USAGE   cert usage (PERSONAL/SITE/CERTAUTH)
   518 - 521 KEYR_CERT_DEFAULT personal?
   523 - 554 KEYR_CERT_LABEL   label

# 1560 General Resource Certificate Information
 6 - 251 CERTN_NAMEcert "name"
   253 - 260 CERTN_CLASS_NAME  RACF class name (DIGTCERT)
   262 -1285 CERTN_ISSUER_DN   Issuer DN
  1287 -2310 CERTN_SUBJECT_DN  Subject DN
  2312 -2327 CERTN_SIG_ALG cert signing algo

I request your help to merge all cert-related record types from IRRDBU00 
(hopefully just the ones listed here - 0207, 0500, 0560, 0561, 0562, 1560), and 
dedupe it based on the unique cert "name" field.
Once done, I need help printing out all the other fields mentioned above so as 
to get a table of all certs with all related info in a readable format (a CSV 
would be great!).
And finally, the ability to filter the output based on 'n' days, so that I can 
see what certs are expiring in the next 'n' days.

Thank you so much for your help, I'm hoping this will benefit many folks on the 
list.

- Vignesh
Mainframe Infrastructure


MARKSANDSPENCER.COM

Unless otherwise stated above:
Marks and Spencer plc
Registered Office:
Waterside House
35 North Wharf Road
London
W2 1NW

Registered No. 214436 in England and Wales.

Telephone (020) 7935 4422
Facsimile (020) 7487 2670

www.marksandspencer.com

Please note that electronic mail may be monitored.

This e-mail is confidential. If you received it by mistake, please let us know 
and then delete it from your system; you should not copy, disclose, or 
distribute its contents to anyone nor act in reliance on this e-mail, as this 
is prohibited and may be unlawful.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: RACFICE2 CERTEXP DFSORT

2019-07-26 Thread Sri h Kolusu
> I request your help to merge all cert-related record types from
> IRRDBU00 (hopefully just the ones listed here - 0207, 0500, 0560,
> 0561, 0562, 1560), and dedupe it based on the unique cert "name" field.
> Once done, I need help printing out all the other fields mentioned
> above so as to get a table of all certs with all related info in a
> readable format (a CSV would be great!).
> And finally, the ability to filter the output based on 'n' days, so
> that I can see what certs are expiring in the next 'n' days.
>
> Thank you so much for your help, I'm hoping this will benefit many
> folks on the list.
>

Vignesh,


There is an earlier discussion similar to your requirement  which dealt
with user events. Here is a link to that topic

https://groups.google.com/d/msg/bit.listserv.ibm-main/V-Im5LCmV7Y/5T9yzeVOAgAJ

You can follow the same approach for your record-types and build 1 common
record format and pad it with spaces for the missing values.

You can use SUM FIELDS=NONE to eliminate the duplicates.

If you have trouble converting that sample, Please send me a sample of the
input (1 record per type at the least) and I can show you a way to do it.

Thanks,
Kolusu

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread John McKown
On Thu, Jul 25, 2019 at 4:19 PM Tom Marchant <
000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote:

> On Thu, 25 Jul 2019 14:47:13 -0500, John McKown wrote:
>
> >I just don't see any _simple_ way to do this. I need to convert the
> >gdgbase(0) into gdgbase.GVnn absolute. Believe it or not, I have a
> >product which creates a number of PDS libraries (not PDSE) which are GDG.
> I
> >want to generate some JCL which is the equivalent of:
> >
> >//SYSUT1 DD DISP=SHR,DSN=GDGBASE(0)(MEMBER)
> >
> >Which is a JCL error.
>
> I take it since you want (0) that you just want to read the member
> from the latest generation.
>
> How about an IEBCOPY step where you specify GDGBASE(0) on
> INDD (or whatever) and select MEMBER to be unloaded to a
> temporary data set?
>

I guess. But, given that I'm on z/OS 1.12, I can't make the member to be
select a value on a PROC.

I'm giving up on this. I'm just royally P.O.'ed with the vendor anyway
right now.



>
> --
> Tom Marchant
>
>
-- 
A sine curve goes off to infinity, or at least the end of the blackboard.
-- Prof. Steiner

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread Tom Marchant
On Fri, 26 Jul 2019 07:44:51 -0500, John McKown wrote:

>On Thu, Jul 25, 2019 at 4:19 PM Tom Marchant <
>000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote:
>
>> How about an IEBCOPY step where you specify GDGBASE(0) on
>> INDD (or whatever) and select MEMBER to be unloaded to a
>> temporary data set?
>>
>
>I guess. But, given that I'm on z/OS 1.12, I can't make the member to be
>select a value on a PROC.

Well, then, an IEBCOPY step to copy the PDS to a temporary PDS, 
then a step to read the member from the temporary PDS.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: What's the intent of the "LOAD AND ZERO RIGHTMOST BYTE" instruction?

2019-07-26 Thread Mike Schwab
Well, the hardware does move a 256 byte area aligned on a 256 bytes
boundary very efficiently.  And would allow you to load the register
with an address without storing the last byte.  So a storage pool with
allocation of multiples of 256 bytes would greatly helped.

On Thu, Jul 25, 2019 at 10:53 PM Phil Smith III  wrote:
>
> Peter Relson wrote:
>
> >I don't know the answer, but the usual answer is:
>
> >because either the Java team or the compiler team found something
>
> >beneficial to having it.
>
>
>
> Which leads one to wonder.at what point does the C in CISC make this a losing 
> proposition? Are we there yet?
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



-- 
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread ITschak Mugzach
Not sure if possible, but i would give a try to jcl refer back. Step 1 use
the dd as dummy, but run a rexx to free and allocate the right ddname with
a member name received from jcl parm.
Step 2 reference the dd, but it is now a different name.

ITschak

בתאריך יום ו׳, 26 ביולי 2019, 15:50, מאת Tom Marchant ‏<
000a2a8c2020-dmarc-requ...@listserv.ua.edu>:

> On Fri, 26 Jul 2019 07:44:51 -0500, John McKown wrote:
>
> >On Thu, Jul 25, 2019 at 4:19 PM Tom Marchant <
> >000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote:
> >
> >> How about an IEBCOPY step where you specify GDGBASE(0) on
> >> INDD (or whatever) and select MEMBER to be unloaded to a
> >> temporary data set?
> >>
> >
> >I guess. But, given that I'm on z/OS 1.12, I can't make the member to be
> >select a value on a PROC.
>
> Well, then, an IEBCOPY step to copy the PDS to a temporary PDS,
> then a step to read the member from the temporary PDS.
>
> --
> Tom Marchant
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: USS script : how to test that a MVS Dataset exists ?

2019-07-26 Thread Jerry Callen
(Another "too late" reply. That'll teach me to go on vacation.)

This script illustrates how to do it, but I'm not sure it would work early in 
the IPL sequence (since it needs to run TSO commands):

#!/bin/sh

if /bin/tsocmd "listd '$1'" >/dev/null 2>/dev/null ; then
  echo "$1 exists"
else
  echo "$1 does not exist"
fi

-- Jerry

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: USS script : how to test that a MVS Dataset exists ?

2019-07-26 Thread Jerry Callen
> So I cannot use the "tso" Unix command...

Doh. 

Never mind.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread Lionel B Dyck
I have REXX code that uses LISTC to find the latest fqdn but that isn't always 
desired even if it is the only way.

I just created an RFE requesting LISTDSI provide support for relative GDG - 
please add your vote  
http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=134932



Lionel B. Dyck <
Website: http://www.lbdsoftware.com

"Worry more about your character than your reputation.  Character is what you 
are, reputation merely what others think you are." - John Wooden

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
ITschak Mugzach
Sent: Friday, July 26, 2019 7:55 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TSO REXX -- find absolute generation # from relative?

Not sure if possible, but i would give a try to jcl refer back. Step 1 use the 
dd as dummy, but run a rexx to free and allocate the right ddname with a member 
name received from jcl parm.
Step 2 reference the dd, but it is now a different name.

ITschak

בתאריך יום ו׳, 26 ביולי 2019, 15:50, מאת Tom Marchant ‏<
000a2a8c2020-dmarc-requ...@listserv.ua.edu>:

> On Fri, 26 Jul 2019 07:44:51 -0500, John McKown wrote:
>
> >On Thu, Jul 25, 2019 at 4:19 PM Tom Marchant < 
> >000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote:
> >
> >> How about an IEBCOPY step where you specify GDGBASE(0) on INDD (or 
> >> whatever) and select MEMBER to be unloaded to a temporary data set?
> >>
> >
> >I guess. But, given that I'm on z/OS 1.12, I can't make the member to be
> >select a value on a PROC.
>
> Well, then, an IEBCOPY step to copy the PDS to a temporary PDS,
> then a step to read the member from the temporary PDS.
>
> --
> Tom Marchant
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: PATH NOT VALIDATED

2019-07-26 Thread (K.K.Paradox)T.Kobayashi

Hello,

Thank you for your reply, I tried varying the PATH online.
But the problem was not solved.
Next time, I will try to change the IOCP (added CUADD).

Best regards,
Toyokazu Kobayashi

- Original Message - 
From: "Mark Charles" 

Newsgroups: bit.listserv.ibm-main
To: 
Sent: Friday, July 26, 2019 3:12 AM
Subject: Re: PATH NOT VALIDATED


Have you tried Varying on the devices?  Validation may happen at that point?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread Juan Escamilla
Try the following:

/* Rexx  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
/* determine the absolute generation of a GDG*/
/* Execute the rexx passing it the GDG Base and the relative */
/* generation number */
/* generation number */
/* ex ABSOLGDG GDGB(GDG BASE) GEN(0) */
/* Note:  if you don't specify GEN, it will default to 0 */
/* ex ABSOLGDG GDGB(GDG BASE) GEN(0) */
/*   */
Trace "N"
ddn  = "DDN"
gdgb = "SYSGM.CA.OPSMVS.DATASET.BACKUP"
gen  = "0"

parse upper arg 1 'GDGB(' gdgb ')'   ,
1 'GEN(' gen ')',
1  parmstring

parse upper var parmstring parmstring
If Pos('DEBUG',parmstring) > 0 Then trace i

If gdgb = "" then
 do
   say ""
   say "GDG Base Missing, Rerun REXX and Specify GDGBASE(gdg base)"
   exit 16
 end

If gen = "" then
 do
   say ""
   say "GEN not specified, defaulting to relative generation zero"
   gen = 0
 end

rtrc = BPXWDYN("ALLOC FI(DDN) DA('" || gdgb || "("gen")')" ,
   " SHR REUSE  RTDSN(RTDSN) ")

if rtrc = 0 then
 do
   say ""
   say "Return Code from Dynamic Allocation:" rtrc
   say "Absolute Generation Dataset:" RTDSN
 end
else
 do
   say ""
   say "Error in allocating GDG, Dynamic allocation Return Code:" rtrc
 end

exit rtrc

Use the following JCL example:

//* 
//* executes absolgdg rexx to determine the absolute generation
//*
//*  %absolgdg gdgb(SYSGM.CA.OPSMVS.DATASET.BACKUP)
//*  %absolgdg gdgb(SYSGM.CA.OPSMVS.DATASET.BACKUP) gen(-2)
//*
//* 
//JS020EXEC PGM=IKJEFT1B
//SYSEXEC   DD DISP=SHR,DSN=VZWX4J.REXX.EXEC
//SYSTSPRT  DD SYSOUT=(,)
//SYSTSIN   DD *
 %absolgdg gdgb(SYSGM.CA.OPSMVS.DATASET.BACKUP)
 %absolgdg gdgb(SYSGM.CA.OPSMVS.DATASET.BACKUP) gen(-2)
//

Let me know if this helps or if you need changes.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Stay current with what's new in DFSMS

2019-07-26 Thread Glenn Wilcock
The DFSMS team recently created a LinkedIn Group for z/OS DFSMS: 
https://www.linkedin.com/groups/12238880/  Join the group to stay current on 
the latest enhancements, tips, news, etc.  For example, while z/OS release RFAs 
describe all of the major enhancements in a release, they don't include all of 
the minor RAS items and RFEs.  In my latest post to the group, I list all of 
the DFSMShsm RFEs that are included in V2R4... with more to follow later in the 
year.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Stay current with what's new in DFSMS

2019-07-26 Thread Alexander Riedel

Hi Glenn,

outside of US is LinkedIn not so popular and common. Without account it 
is not possible to read the group.
Would you please so kind to post your infos also to this discussion list 
or on some IBM-webpage.


Thanks,
Alexander


-- Original Message --
From: "Glenn Wilcock" 
To: IBM-MAIN@listserv.ua.edu
Sent: 26.07.2019 17:33:56
Subject: Stay current with what's new in DFSMS


The DFSMS team recently created a LinkedIn Group for z/OS DFSMS: 
https://www.linkedin.com/groups/12238880/  Join the group to stay current on 
the latest enhancements, tips, news, etc.  For example, while z/OS release RFAs 
describe all of the major enhancements in a release, they don't include all of 
the minor RAS items and RFEs.  In my latest post to the group, I list all of 
the DFSMShsm RFEs that are included in V2R4... with more to follow later in the 
year.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: What's the intent of the "LOAD AND ZERO RIGHTMOST BYTE" instruction?

2019-07-26 Thread Charles Mills
Take some (any) big C or COBOL program and run it through the relevant
compiler with the pseudo-assembler output option turned on, OPT and ARCH(9
or 10). Then do an ISPF FIND for the op code. No guarantees of course.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Peter Relson
Sent: Thursday, July 25, 2019 5:04 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: What's the intent of the "LOAD AND ZERO RIGHTMOST BYTE"
instruction?

I don't know the answer, but the usual answer is:
because either the Java team or the compiler team found something 
beneficial to having it.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread Dale R. Smith
On Thu, 25 Jul 2019 14:47:13 -0500, John McKown  
wrote:

>I just don't see any _simple_ way to do this. I need to convert the
>gdgbase(0) into gdgbase.GVnn absolute. Believe it or not, I have a
>product which creates a number of PDS libraries (not PDSE) which are GDG. I
>want to generate some JCL which is the equivalent of:
>
>//SYSUT1 DD DISP=SHR,DSN=GDGBASE(0)(MEMBER)
>
>Which is a JCL error.
>
>--
>A sine curve goes off to infinity, or at least the end of the blackboard.
>-- Prof. Steiner
>
>Maranatha! <><
>John McKown

John, here is a REXX Function that will do what you want.  It uses LISTCAT and 
is based on another function that I wrote that also retrieves some other 
information on the specified GDG Data Set.  Since you were only interested in 
the Absolute GDG Data Set  Name, I removed the other code and simplified the 
function.  Enjoy!

/*-- GETGDG --*/
/* Get the Absolute Generation for a specified Relative Generation.   */
/* Format:   GETGDG dsn   */
/* Where:dsn - GDG Data Set Name with Relative Generation Number: */
/* (0) (+0) (-n)  */
/*   hlq.dsn1(+0)  hlq.dsn2(-4)  hlq.dsn3(0)  */
/* Returns:  Return Code 0 followed by GDG Data Set Name with the */
/*   Absolute Generation Number:  0 hlq.dsn1.GVnn */
/*   Error Return Code and no DSN if a problem occurs:  n */
/*   Return Code of 2 indicates a missing/invalid DSN.*/
/* Examples: Parse Value GETGDG('HLQ.DSN.GDG(+0)') With src absdsn .  */
/*   If src   \= 0  Then (error processing)   */
/*   If absdsn = '' Then (error processing)   */
/**/
/*   dsn = 'HLQ.BASE.GDG(-2)' */
/*   Parse Value GETGDG(dsn) With src olddsn .*/
/*   If src   \= 0  Then (error processing)   */
/*   If olddsn = '' Then (error processing)   */
/**/
GETGDG:  Procedure  
   Arg dsn .
   If dsn = '' Then Return 2
   If Pos('.',dsn) = 0 Then Return 2
   Parse Var dsn dsn . '(' gen . ')' .  
   If gen = '' Then Return 2   
   cmd = "LISTCAT ENTRIES('"dsn"') GDG ALL"
   Call OutTrap 'REC.' 
   cmd 
   src = rc
   Call OutTrap 'OFF'  
   If src \= 0 Then
  Do   
 If rec.0 > 0 Then Say rec.1   
 Return src
  End  
   If rec.0 = 0 Then Return 8  
   osdsn = ''  
   num = Abs(gen) + 1  
   m = 0   
   Do s = rec.0 to 1 by -1 
  Parse Var rec.s type . '--' value .  
  If type \= 'NONVSAM' Then Iterate s  
  m = m + 1
  If num = m Then  
 Do
osdsn = value  
Leave s
 End 
   End /* Do s = rec.0 to 1 by -1 */ 
   Drop rec. 
   If osdsn = '' Then Return 12  
   Return 0 osdsn

-- 
Dale R. Smith 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OS V2R4 product documentation is published!

2019-07-26 Thread Susan Shumway
Thanks for pointing that out, Kirk. I'm passing this along to our 
builders so that they can investigate. In the meantime, if you need to 
point to a library PDF from anywhere, try linking to either of these 
types of pages instead:
- KC landing page of the containing element, for example 
https://www.ibm.com/support/knowledgecenter/SSLTBW_2.4.0/com.ibm.zos.v2r4.e0z/e0z.htm 
, which directly links to all the PDF files in that element.
- The abstract page for the book in the z/OS V2R4 Library of PDFs, for 
example 
https://www.ibm.com/servers/resourcelink/svc00100.nsf/pages/zOSV2R4ga320890 
, which directly links to just the one PDF file.


-Sue Shumway
On 7/24/2019 3:38 PM, Kirk Wolf wrote:

There's a more serious problem:  something on your server is broken when
downloading PDFs from some clients.   You are given an HTTP 400 Bad Request
response.

Browsers seem to work, but url links in PDFs from two PDF viewers that I
tried are completely broken.  This makes it impossible to have, say, a
SHARE pdf presentation that links to an IBM V2R4 pdf publication.

(It isn't something related to different "User-Agent" strings; I tried
copying my Chrome agent string to curl -A and it fails the same way.)

Here's an example of the failure using "curl":

*> curl -v -L
https://www-01.ibm.com/servers/resourcelink/svc00100.nsf/pages/zOSV2R4sc276806/$file/foto100_v2r4.pdf
*
*   Trying 104.114.1.42...
* Connected to www-01.ibm.com (104.114.1.42) port 443 (#0)
* found 149 certificates in /etc/ssl/certs/ca-certificates.crt
* found 596 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_RSA_AES_256_GCM_SHA384
* server certificate verification OK
* server certificate status verification SKIPPED
* common name: www.ibm.com (matched)
* server certificate expiration date OK
* server certificate activation date OK
* certificate public key: RSA
* certificate version: #3
* subject: C=US,ST=New York,L=Armonk,O=IBM,CN=www.ibm.com
* start date: Tue, 11 Jun 2019 00:00:00 GMT
* expire date: Mon, 20 Apr 2020 12:00:00 GMT
* issuer: C=US,O=DigiCert Inc,OU=www.digicert.com,CN=GeoTrust RSA CA 2018
* compression: NULL
* ALPN, server accepted to use http/1.1

GET

/servers/resourcelink/svc00100.nsf/pages/zOSV2R4sc276806//foto100_v2r4.pdf
HTTP/1.1

Host: www-01.ibm.com
User-Agent: curl/7.47.0
Accept: */*


< HTTP/1.1 400 Bad Request
< Server: Lotus-Domino
< Content-Type: text/html; charset=US-ASCII
< Content-Length: 257
< X-Content-Type-Option: nosniff
< Strict-Transport-Security: max-age=0
< Cache-Control: no-cache
< Expires: Wed, 24 Jul 2019 19:27:02 GMT
< Date: Wed, 24 Jul 2019 19:27:02 GMT
< Connection: keep-alive
<
http://www.w3.org/TR/html4/loose.dtd";>


Error

ErrorHTTP Web Server: Unknown Command Exception

* Connection #0 to host www-01.ibm.com left intact


On Wed, Jul 24, 2019 at 1:07 PM Susan Shumway  wrote:


Hi Kirk,

Yes, the URLs are all unique to the release for many reasons that
currently trump the convenience of having release-agnostic "latest"
URLs. Things always change, so I can't say that it will be like that
forever, but it's how the library is structured for now.

In case it helps, this URL doesn't change from release to release - it's
our z/OS Internet Library page of links to everything, and it's the
first URL that I tell everybody to bookmark:

http://www.ibm.com/servers/resourcelink/svc00100.nsf/pages/zosInternetLibrary


-Sue Shumway


On 7/24/2019 11:18 AM, Kirk Wolf wrote:

Thanks Susan,

I have a question:  the URL references to the PDFs look like they *might*
be specific to the update/revision.
For example:


https://www-01.ibm.com/servers/resourcelink/svc00100.nsf/pages/zOSV2R4sc276806/$file/foto100_v2r4.pdf


Is there a stable URL to the "latest" V2R4 pub edition for a given

manual?


Perhaps asking about stable URLs isn't something that IBM wants to

discuss

:-)

On Tue, Jul 23, 2019 at 3:58 PM Susan Shumway 

wrote:



Hi all,

All formats of the z/OS V2R4 product documentation are now published!
Links to everything are on the z/OS Internet Library:



https://www.ibm.com/servers/resourcelink/svc00100.nsf/pages/zosInternetLibrary


One important item of note is that the revision markers are not showing
up in the Knowledge Center content (for both V2R4 and V2R3). We are
actively working the issue with the appropriate teams and hope to have
it resolved quickly. In the meantime, see the "Summary of Changes"
section of each deliverable for details about what has changed, or use
the PDFs to see revision markers within the content.

Otherwise, as always, we welcome and value your input, so let us know
what you think!

-Sue Shumway

--
Sue Shumway
z/OS Product Documentation Lead
IBM Poughkeepsie
chale...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@

Re: z/OS V2R4 product documentation is published!

2019-07-26 Thread Susan Shumway

Hi Kees,

Okay, please point me to such a PDF as an example if you come across 
one. They should all be the same, with form numbers that you can copy 
and paste as text, so it would be an anomaly.


-Sue Shumway

On 7/25/2019 2:01 AM, Vernooij, Kees - KLM , ITOP NM wrote:

Hi Sue,

I was talking in general, I am sure if I saw it in IBM publications.

Kees.



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Susan Shumway
Sent: 24 July, 2019 20:10
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS V2R4 product documentation is published!

Hi Gil and Kees,

Interesting - can you point me to an example? Some PDFs that I just
tested all have form numbers that I can copy and paste...

-Sue Shumway

On 7/24/2019 2:05 AM, Vernooij, Kees - KLM , ITOP NM wrote:

I agree, a small detail, but a large irritator, seen often.

Kees


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]

On

Behalf Of Paul Gilmartin
Sent: 24 July, 2019 6:23
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z/OS V2R4 product documentation is published!

On Tue, 23 Jul 2019 16:57:37 -0400, Susan Shumway wrote:


All formats of the z/OS V2R4 product documentation are now published!
Links to everything are on the z/OS Internet Library:


https://www.ibm.com/servers/resourcelink/svc00100.nsf/pages/zosInternetLi

brary



Thanks, very nice on first glance!

 ...
Otherwise, as always, we welcome and value your input, so let us know
what you think!


But, grrr!, the part number on the cover of at least one PDF book is a
graphic; nearly impossible to copy and paste in a review.

Thanks,
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


For information, services and offers, please visit our web site:

http://www.klm.com. This e-mail and any attachment may contain
confidential and privileged material intended for the addressee only. If
you are not the addressee, you are notified that no part of the e-mail or
any attachment may be disclosed, copied or distributed, and that any other
action related to this e-mail or attachment is strictly prohibited, and
may be unlawful. If you have received this e-mail by error, please notify
the sender immediately by return e-mail, and delete this message.


Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or

its employees shall not be liable for the incorrect or incomplete
transmission of this e-mail or any attachments, nor responsible for any
delay in receipt.

Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch

Airlines) is registered in Amstelveen, The Netherlands, with registered
number 33014286




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
Sue Shumway
z/OS Product Documentation Lead
IBM Poughkeepsie
chale...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message.

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt.
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
Sue Shumway
z/OS Product Documentation Lead
IBM Poughkeepsie
chale...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu 

Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread Seymour J Metz
I know that you don't like CSI, but IMHO that's the best way to go. 
Postprocessing the LISTC output is easy, but will break if IBM changes the 
format.

In the long run, have you considered asking IBM for a CI enhancement to allow 
both generation and member in DSN, or to allow relative generations in LISTDSI?


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List  on behalf of 
John McKown 
Sent: Thursday, July 25, 2019 3:47 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: TSO REXX -- find absolute generation # from relative?

I just don't see any _simple_ way to do this. I need to convert the
gdgbase(0) into gdgbase.GVnn absolute. Believe it or not, I have a
product which creates a number of PDS libraries (not PDSE) which are GDG. I
want to generate some JCL which is the equivalent of:

//SYSUT1 DD DISP=SHR,DSN=GDGBASE(0)(MEMBER)

Which is a JCL error.

--
A sine curve goes off to infinity, or at least the end of the blackboard.
-- Prof. Steiner

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OS V2R4 product documentation is published!

2019-07-26 Thread Susan Shumway

Hi gil,

I'll pass your questions on to the builder to answer.

-Sue Shumway

On 7/24/2019 5:19 PM, Paul Gilmartin wrote:

On Wed, 24 Jul 2019 20:18:55 +, Seymour J Metz wrote:


Associations? Doesn't the IBM server send file types? Doesn't Chrome support 
file types, which have been in HTTP
since Old Man Noach cornered the market in Gopher Wood.

(Isn't that metaphor getting kinda stale?)

It's OK o use associations if the server doesn't send file types; it's not OK 
to ignore the file types that the server send.

Extensions are for dancers.


I (and I suspect the previous poster) were using the expanded .zip archive,
newly available.  Zip has little facility to store MIME Content-types.  I 
readily
created a MacOS association that opens Adobe Reader when I click on
index.pdx.  We don't know how to educate (some) browsers to that association.

Is there a published Content-type for .pdx?

Is that index.pdx accessible via HTTP, or only by extraction from the .zip?
If the former, what does IBM's HTTPD supply as Content-type?

The trend among browsers is to become increasingly dumb about MIME
headers and to rely more on filename extensions or even guessing from
content.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
Sue Shumway
z/OS Product Documentation Lead
IBM Poughkeepsie
chale...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread Lionel B Dyck
I just submitted this RFE this morning that will address this issue (if/when):

https://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=134932

Note that there is another RFE for a LISTDSI enhancement for which the 
developers asked for more input so that implies they may be open to updating 
LISTDSI and if the code is open why not do multiple RFE's 😊


Lionel B. Dyck <
Website: http://www.lbdsoftware.com

"Worry more about your character than your reputation.  Character is what you 
are, reputation merely what others think you are." - John Wooden

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Seymour J Metz
Sent: Friday, July 26, 2019 12:17 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TSO REXX -- find absolute generation # from relative?

I know that you don't like CSI, but IMHO that's the best way to go. 
Postprocessing the LISTC output is easy, but will break if IBM changes the 
format.

In the long run, have you considered asking IBM for a CI enhancement to allow 
both generation and member in DSN, or to allow relative generations in LISTDSI?


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List  on behalf of 
John McKown 
Sent: Thursday, July 25, 2019 3:47 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: TSO REXX -- find absolute generation # from relative?

I just don't see any _simple_ way to do this. I need to convert the
gdgbase(0) into gdgbase.GVnn absolute. Believe it or not, I have a product 
which creates a number of PDS libraries (not PDSE) which are GDG. I want to 
generate some JCL which is the equivalent of:

//SYSUT1 DD DISP=SHR,DSN=GDGBASE(0)(MEMBER)

Which is a JCL error.

--
A sine curve goes off to infinity, or at least the end of the blackboard.
-- Prof. Steiner

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OS V2R4 product documentation is published!

2019-07-26 Thread Paul Gilmartin
On Fri, 26 Jul 2019 13:17:47 -0400, Susan Shumway wrote:
>
>Okay, please point me to such a PDF as an example if you come across
>one. They should all be the same, with form numbers that you can copy
>and paste as text, so it would be an anomaly.
> 
I may have panicked needlessly (and infected Kees along with me?)  Viewing
a PDF with MacOS Preview (unsupported?) and attempting to select all the text
on the cover selected also the background graphic.  But if I Copy and View
Clipboard it appears as Rich Text, with much formatting.  But when I Paste
as Text, I see the legible:

z/OS
Version 2 Release 4
DFSORT Application Programming Guide
IBM
 SC23-6878-40

... So, I'll confess, false alarm.  Haven't tried with Adobe Reader.

Thanks,
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OS V2R4 product documentation is published!

2019-07-26 Thread Susan Shumway

Okay, that's good to hear! Thanks for the follow-up, gil.

-Sue Shumway

On 7/26/2019 2:16 PM, Paul Gilmartin wrote:

On Fri, 26 Jul 2019 13:17:47 -0400, Susan Shumway wrote:


Okay, please point me to such a PDF as an example if you come across
one. They should all be the same, with form numbers that you can copy
and paste as text, so it would be an anomaly.


I may have panicked needlessly (and infected Kees along with me?)  Viewing
a PDF with MacOS Preview (unsupported?) and attempting to select all the text
on the cover selected also the background graphic.  But if I Copy and View
Clipboard it appears as Rich Text, with much formatting.  But when I Paste
as Text, I see the legible:

z/OS
Version 2 Release 4
DFSORT Application Programming Guide
IBM
  SC23-6878-40

... So, I'll confess, false alarm.  Haven't tried with Adobe Reader.

Thanks,
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
Sue Shumway
z/OS Product Documentation Lead
IBM Poughkeepsie
chale...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread Paul Gilmartin
On Fri, 26 Jul 2019 12:37:26 -0500, Lionel B Dyck wrote:

>I just submitted this RFE this morning that will address this issue (if/when):
>
>https://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=134932
>
>Note that there is another RFE for a LISTDSI enhancement for which the 
>developers asked for more input so that implies they may be open to updating 
>LISTDSI and if the code is open why not do multiple RFE's 😊
> 
If you're inclined to go that way, among my favorites would be:
o Liberate LISTDSI from TSO so it could be used alike from IRXJCL and OMVS Rexx.
o Support LISTDSI( ... FILE ... ) for uncatalogued data sets, even allocated 
zFS files.
  Of course many results would be "N/A", but some could be fetched from 
TIOT/JFCB.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TSO REXX -- find absolute generation # from relative?

2019-07-26 Thread Lionel B Dyck
Sounds like another good RFE - go for it.

I think getting the current LISTDSI updated/enhanced will probably be easier 
than that major enhancement but I could be wrong.


Lionel B. Dyck <
Website: http://www.lbdsoftware.com

"Worry more about your character than your reputation.  Character is what you 
are, reputation merely what others think you are." - John Wooden

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Paul Gilmartin
Sent: Friday, July 26, 2019 1:56 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: TSO REXX -- find absolute generation # from relative?

On Fri, 26 Jul 2019 12:37:26 -0500, Lionel B Dyck wrote:

>I just submitted this RFE this morning that will address this issue (if/when):
>
>https://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=1
>34932
>
>Note that there is another RFE for a LISTDSI enhancement for which the 
>developers asked for more input so that implies they may be open to 
>updating LISTDSI and if the code is open why not do multiple RFE's 😊
> 
If you're inclined to go that way, among my favorites would be:
o Liberate LISTDSI from TSO so it could be used alike from IRXJCL and OMVS Rexx.
o Support LISTDSI( ... FILE ... ) for uncatalogued data sets, even allocated 
zFS files.
  Of course many results would be "N/A", but some could be fetched from 
TIOT/JFCB.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: z/OS V2R4 product documentation is published!

2019-07-26 Thread Paul Gilmartin
On Tue, 23 Jul 2019 16:57:37 -0400, Susan Shumway wrote:
>
>All formats of the z/OS V2R4 product documentation are now published!
>Links to everything are on the z/OS Internet Library:
>https://www.ibm.com/servers/resourcelink/svc00100.nsf/pages/zosInternetLibrary
>...
>Otherwise, as always, we welcome and value your input, so let us know
>what you think!
>
Here, I'll be harsh about the formatting of the index.html file as extracted
from the large .zip file.  An excerpt:
...
z/OS UNIX System Services
Title   
  Order number Last modified  Download
z/OS UNIX System Services Programming Tools 
  SA23-2282-40 10-Jul-19 Link bpxa600_v2r4.pdf (1.38MB)
z/OS UNIX System Services Programming: Assembler Callable Services Reference
  SA23-2281-40 10-Jul-19 Link bpxb100_v2r4.pdf (5.61MB)
...
The "Link" field is extraneous; it just wastes screen space.  Better
to eliminate it and make one of the other fields ("Title" is best) an 
active relative URL to the document.

It's unclear what "Download" is good for.  I can copy it into a browser search
window and Google finds me the document at IBM.com.  Kinda roundabout.

The "Link" is too far from the Title.  On some documents, to be sure I click the
correct link I must use the edge of a window as a straightedge.  A good design
principle is to place the column with the most variable length rightmost, 
regardless
of its importance.

So:
z/OS UNIX System Services
Order number  Last mod   Download   Title
SA23-2282-40  10-Jul-19  bpxa600_v2r4.pdf  (1.38MB) z/OS UNIX System Services 
Programming Tools
SA23-2281-40  10-Jul-19  bpxb100_v2r4.pdf  (5.61MB) z/OS UNIX System Services 
Programming: Assembler Callable Services Reference
...
Thanks,
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: What's the intent of the "LOAD AND ZERO RIGHTMOST BYTE" instruction?

2019-07-26 Thread Tony Harminc
On Fri, 26 Jul 2019 at 08:52, Mike Schwab  wrote:

> Well, the hardware does move a 256 byte area aligned on a 256 bytes
> boundary very efficiently.  And would allow you to load the register
> with an address without storing the last byte.  So a storage pool with
> allocation of multiples of 256 bytes would greatly helped.
>

I thought of that... But then for generality maybe the instruction should
be something like Load and Zero Rightmost
Sufficient-to-address-a-cache-line Bits.

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


TSS Certificate Process

2019-07-26 Thread Steely.Mark
I got this request from a customer:

I need a keyring on the SYSX top secret database for XXID01. I have a 
Certificate Authority key at XX.CER
and a personal key at XX.PFX.
This is for SMPE RECEIVE ORDER processing.

What are the steps to get this setup. I did execute a CHKCERT on  XX.CER 
and it  did display the Certificate.

THIS CERTIFICATE IS NOT REGISTER WITH CA-TOP SECRET
SERIAL# = xx
ISSUER DISTINGUISHED NAME:
 .CN=xxl CA.O=.C=US
SUBJECT DISTINGUISHED NAME:
 CN=xxl CA.O=xx.C=US
PUBLIC KEY SIZE = 2048
PUBLIC KEY TYPE = RSA
ALGORITHM = sha-1WithRSAEncryption
NOT BEFORE = 2002/05/21 04:00:00 UTC
NOT AFTER = 2022/05/21 04:00:00 UTC
TSS0300I CHKCERT FUNCTION SUCCESSFUL

I then tried to do a GENCERT but the error stated that I need to provide 
SIGNWITH.

Not sure what information to provide.

I need step by step instructions.

Any help would be appreciated. I have never worked with CERTS.

Thank You


*** Disclaimer ***
This communication (including all attachments) is solely for the use of the 
person to whom it is addressed and is a confidential AAA communication. If you 
are not the intended recipient, any use, distribution, printing, or copying is 
prohibited. If you received this email in error, please immediately delete it 
and notify the sender.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Stay current with what's new in DFSMS

2019-07-26 Thread Tony Harminc
On Fri, 26 Jul 2019 at 11:34, Glenn Wilcock  wrote:

> The DFSMS team recently created a LinkedIn Group for z/OS DFSMS:
> https://www.linkedin.com/groups/12238880/  Join the group to stay current
> on the latest enhancements, tips, news, etc.  For example, while z/OS
> release RFAs describe all of the major enhancements in a release, they
> don't include all of the minor RAS items and RFEs.  In my latest post to
> the group, I list all of the DFSMShsm RFEs that are included in V2R4...
> with more to follow later in the year.
>

Why, imaginably, would I want to use Linkedin for something like this? Why
not just post the info to IBM-MAIN? Linkedin is for job hunters, not for
technical discussions. And it requires registration, is owned by Microsoft,
and all kinds of other bad things.

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-07-26 Thread Clark Morris
[Default] On 7 Jun 2019 09:26:29 -0700, in bit.listserv.ibm-main
sme...@gmu.edu (Seymour J Metz) wrote:

>How many vulnerabilities have you seen that did not come down to people? Those 
>sysprogs are just the tip of the iceberg as far as configuration, enforcement, 
>management, policy, procedure, protocol and training vulnerabilities are 
>concerned. Yes, I've seen code vulnerabilities, but they're ju8st noise 
>compared to the other isswues.
>
>I come at this from the other end; when I had RACF SPECIAL I refused to give 
>myself UID(0) because it was an unnecessary risk.

Are the tools to set up and administer z/OS systems as easy to use as
those available for setting up and administering Linux systems? Unix
system? Windows systems?  Is an Apache server running on a z series
mainframe any more secure than one running on Linux?  To the extent
Mainframes are available from other vendors such as Unisys, how does
their security compare?  Is z/TPF as secure as z/OS? How about z/VM
and z/VSE?

Clark Morris 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN