Re: cURL and security

2020-07-24 Thread David Crayford
If you're using Jira Server you can use OAuth 
https://developer.atlassian.com/server/jira/platform/oauth/?_ga=2.40787751.465693275.1595561515-1486646620.1590036113. 



While not impossible it's tricky to use cURL. There are client libraries 
in several programming languages 
https://bitbucket.org/atlassianlabs/atlassian-oauth-examples/src/master/.


On 2020-07-24 1:42 PM, Luke Wilby wrote:

Thanks David.

Sadly, for us, it uses basic auth and the base64 encoded token is as good as a 
password. Our auditors would make life difficult.



-Original Message-
From: IBM Mainframe Discussion List  On
Behalf Of David Crayford
Sent: Friday, July 24, 2020 13:33 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: cURL and security

Use tokens
https://developer.atlassian.com/cloud/jira/platform/basic-auth-for-rest-
apis/

On 2020-07-24 11:21 AM, Luke Wilby wrote:

Hey David

Do you authenticate to Jira when using cURL? How?


-Original Message-
From: IBM Mainframe Discussion List  On
Behalf Of David Crayford
Sent: Friday, July 24, 2020 12:29 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: cURL and security

On 2020-07-23 2:17 PM, kekronbekron wrote:

It would be best to consider switching to the z/OS Client Web
Enablement

Toolkit.

There are sample programs for REXX / ASM / COB .. and I'm positive
there'll

be a Python client pretty soon (IBM Open Enterprise Python for z/OS).

To me the idea of writing a web client in assembler is preposterous.
COBOL is almost as bad and I would opt to use bpxwunix() with curl
over the Web Enabelment Toolkit any day.
I can create a Jira ticket with a couple of lines of curl. I would
suggest writing a REXX script using the WET would be considerably more

effort.

Don't think cURL is loved that much on Z.

Are you speaking from experience? Not loved by who? Anybody who

knows

how to use z/OS UNIX shells knows how to use curl. I used curl only
yesterday to install a shell utility from github with a simple one-liner.

sh -c "$(curl -fsSL
https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"



Hmm .. unless client auth is required at the cURL target, you don't
need to

worry about client certs, right?

Just plop on the target server's CA cert (interim & root CA) public
keys in a

user keyring, and point CWET to the user keyring.

Server auth will work just fine.

- KB

‐‐‐ Original Message ‐‐‐
On Thursday, July 23, 2020 10:20 AM, Filip Palian


wrote:

Hey,

You can read login credentials from within a script at run time
from a separate file containing password. This file should have an
adequate permissions and ownership set of course.

Alternatively, if you control the target, perhaps you can whitelist
your curl/client.

I hope that helps.

Cheers,
F

W dniu czwartek, 23 lipca 2020 Luke akal...@hotmail.com napisał(a):


Hi All
I'm wondering if anyone is using cURL on z/OS in a production setting?
I'm interested how to utilise cURL when the target URL requires
authentication.
We can't use Basic Auth because we are not able to store usernames

and

password in scripts or batch jobs.
We can't easily use certificates because our users on z/OS do not
have certificates and our Windows based corporate certificate
management

doesn't

allow users access to the private keys of their Windows certificates.
Anyone else using cURL for DevOps on z/OS and how are you securing

it?

For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-

MAIN

--

For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO
IBM-MAIN


-- For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO
IBM-MAIN

-
- For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO
IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Sending email from the Mainframe

2020-07-24 Thread Timothy Sipples
Grant Taylor asks:
>What happens to email if CSSMTP (AT-TLS) is configured
>to *require* encryption and the receiving system doesn't
>support encryption?

Fundamentally the same thing(s) that happen when the network connection is 
down or too slow (times out), for whatever reasons. Network encryption is 
part and parcel of the network path. This class of failures must already 
be catered for. In this case, Len Sasso's organization is mandating TLS 
1.2+, and I agree with Shmuel Metz who wrote:
>If management has decreed that all SMTP traffic be encrypted,
>then barring a configuration error the relay will accept
>encrypted traffic.

Moreover, it's entirely possible that your attitude would only increase 
relay administrators' burdens, the people who currently have to manage, 
support, monitor, and audit the e-mail traffic from the one and only 
system still transmitting over an unencrypted connection, a connection 
modality they'd very much like to retire as quickly as possible. You know, 
that "old, obsolete mainframe" that you're actively arguing should 
actually be as old and obsolete as you can possibly force it to be. (TLS 
is *really* not new.) Or it's entirely possible that the relay 
administrators aren't inclined or equipped to provide even mediocre 
service levels for unencrypted connections, or even that there's a lone 
dedicated relay gathering dust in a wiring closet somewhere to support 
this one unencrypted connection, a relay that nobody left in the 
organization even understands or really knows about, that isn't backed up 
or DR protected, that still runs on a 10 Mbps Ethernet segment that 
miraculously hasn't been disconnected yet. Hence the unencrypted 
connection is MORE prone to failure, not less. All very possible, even 
predictable and likely. And I haven't even gotten to the regulatory issues 
and penalties.

Conceivably you could also reduce or eliminate your personal security 
authentication failure planning and handling (hopefully automated) 
responsibilities if you effectively disable your SAF security provider, 
such as RACF. Then those few pesky authentication and authorization 
rejections wouldn't occur, and everyone could just go to the pub and stay 
there (or whatever). That's the logical consequence of your argument, 
isn't it? I don't think you've got a strong argument.

Sorry to be blunt here, but I feel compelled to offer my personal view (as 
always). My colleagues (and I mean that word expansively, in and out of 
IBM) work really hard to deliver and support truly cutting edge 
capabilities, including downright amazing security capabilities, in/for 
this unique and indispensable platform. And this community, overall, often 
works really hard to put these capabilities into practice, in many cases 
literally to keep civilization functioning. Then there are a few people 
who manage a few of these systems, and...well, let's all strive to do 
better, OK?

[Why am I expecting a minor Twitter storm now? :-)]

- - - - - - - - - -
Timothy Sipples
I.T. Architect Executive
Digital Asset & Other Industry Solutions
IBM Z & LinuxONE
- - - - - - - - - -
E-Mail: sipp...@sg.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Encrypting z/OS SNMP traps to Windows SNMP server

2020-07-24 Thread Timothy Sipples
Attila Fogarasi wrote:
>CA Common Services supports SNMPv3 with DES encryption and SHA-5 and
>MD5 authentication, hopefully that works with your Solar Winds Orion
>server.

Even if the target server currently supports DES, I don't recommend this 
idea. It's entirely possible, even likely, that the next release update 
will disable support for DES. It'd be a very short-term solution at best.

Are there any other encryption and hashing algorithms that CA Common 
Services SNMPv3 supports? For example, is it possible to configure CA 
Common Services to use whatever z/OS System SSL supports?

- - - - - - - - - -
Timothy Sipples
I.T. Architect Executive
Digital Asset & Other Industry Solutions
IBM Z & LinuxONE
- - - - - - - - - -
E-Mail: sipp...@sg.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: cURL and security

2020-07-24 Thread David Crayford
z/OS Connect supports OAuth 2 but you will need to use a programming 
language with a library and provision an authorization server. If you 
are already using Java, which you are for z/OS Connect, you have lots of 
options. You can script it using
Groovy. You can also use Node.js which has a library and is an IBM 
product. Python is an option. Either way, you can write a batch job to 
do this with a bit of programming involved.


Auditors are a PITA. They have blanket rules which don't always make 
sense. z/OSMF has only just started to support JWTs and I can't find any 
doc mentioning OAuth.


On 2020-07-24 1:48 PM, Luke Wilby wrote:

We are using Rocket's cURL. Fully supported and everything.

The primary use case at the moment:

Stop and Start z/OS Connect APIs using the z/OS Connect REST interface, from a 
batch job with no password on the user account.

Eventually, we'll want to do similar stuff for other targets and using other 
clients not on z/OS (off the top of my head...Jenkins to zOSMF, python on Linux 
to DB2 REST, etc).




-Original Message-
From: IBM Mainframe Discussion List  On
Behalf Of kekronbekron
Sent: Friday, July 24, 2020 15:03 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: cURL and security

Oh ok ... guess I didn't realize that WET is being provided primarily for
'backward compatibility'.
Thanks for the clarification on the other bits.


Using cURL or libcurl is not inherently dangerous. Any code that goes
into production should be peer reviewed. You can write bad code in any
language using any tool.

Again ... you've over-generalized a very specific scenario I said folks should
be wary of.
I didn't say curl or any other tool is dangerous, piping source-unknown scripts
to bash is!

- KB

‐‐‐ Original Message ‐‐‐
On Friday, July 24, 2020 10:15 AM, David Crayford 
wrote:


On 2020-07-24 12:02 PM, kekronbekron wrote:


I wouldn't. I would recommend using a sophisticated networking
library like Java or whatever your favorite language is on the JVM.
Can't figure out if you're kidding...

No, I'm not kidding! IMO, unless you have a critical requirement to
web enable legacy languages then I would avoid WET at all costs. A
quick browse of the samples is enough to conclude that while it may
work it is hideously complicated compared to similar function in
modern languages. So, why not just use a better language? I almost
died laughing when I saw how complicated it is to parse JSON in REXX
using the WET.


Who told you that? My employer offers a cURL port for z/OS and
it's well maintained with support for production environment.
Ok, Rocket's curl?
What's the percentage of clients that want a separate product for

something that also comes with (or at least used to?) the OS (Ported Tools).

FYI, IBM sold ported tools to Rocket years ago. There is no cURL that
comes with z/OS.


Yes, everything I'm saying is subjective...
Adoption would be much higher if Ported Tools' curl were actively

developed.

It is! And you can download it for free if you just want to write
in-house tooling. If you want to use cURL in production then you will
have to buy support.


Eh ... I didn't say curl-ing a script is dangerous and CWET isn't.
I meant piping any source-unknown script direct for execution is not a

great idea.

Using cURL or libcurl is not inherently dangerous. Any code that goes
into production should be peer reviewed. You can write bad code in any
language using any tool.


-   KB

‐‐‐ Original Message ‐‐‐
On Friday, July 24, 2020 8:53 AM, David Crayford dcrayf...@gmail.com

wrote:

On 2020-07-24 11:12 AM, kekronbekron wrote:


Just mentioned ASM / COB CWET for options really.
They're a a lot more involved than the Python client (when that's

available).

curl is ok as a user, but when you want to productionize something, I

would think the recommendation would be to use CWET.

I wouldn't. I would recommend using a sophisticated networking
library like Java or whatever your favorite language is on the JVM.
Not saying curl is a bad tool, it is handy & does what it does.
Ease of use does not mean it's the solution of choice in many

controlled environments.

By loved I mean does it get upgrades/improvements?
Who told you that? My employer offers a cURL port for z/OS and
it's well maintained with support for production environment.
I don't know I'm just asking..
curl-ing a shell script directly is bit ... dangerous.
That's purely subjective. I don't see why cURL would be any more
dangerous than writing a Python script or using CWET.

Lots of people are using Git for DevOps on z/OS and that uses cURL
for ssh and https transport.


Not in this case as the script is available to inspect.
--

For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO
IBM-MAIN

For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--

For IBM-MAIN subscrib

Re: DFSORT task (I hope)

2020-07-24 Thread R.S.

Gentlemen,
Thank you for your help. JOIN is the function I know less than other 
features. Time to change it, since it is good thing.


I'll look at Smart DFSORT Tricks, especially I'm also author of one of 
them. ;-)
(it was ~20 years ago, Frank Yeager asked me for that trick, nothing 
big, just a trick)


Regards
--
Radoslaw Skorupka
Lodz, Poland







W dniu 23.07.2020 o 17:03, Sri h Kolusu pisze:

I see it is candidate for REXX script, but DFSORT job seems to be more

elegant.

Radoslaw Skorupka,

As Max already shown DFSORT does have an elegant file matching capability
using JOINKEYS.  Please check the  smart DFSORT trick "Create files with
matching and non-matching records"  which is available at

https://www.ibm.com/support/pages/node/665475


If you want to do it DFSORT, I think you'll have to use ICETOOL with the

SPLICE option.

Joe,

SPLICE is an older technique and has limitations(many to many match),
using Joinkeys is the ideal solution for this case


You can use JOIN function of DFSORT:

Max,

Excellent !! Thank you.


Thanks,
Kolusu
DFSORT Development
IBM Corporation

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
.



==

Jeśli nie jesteś adresatem tej wiadomości:

- powiadom nas o tym w mailu zwrotnym (dziękujemy!),
- usuń trwale tę wiadomość (i wszystkie kopie, które wydrukowałeś lub zapisałeś 
na dysku).
Wiadomość ta może zawierać chronione prawem informacje, które może wykorzystać 
tylko adresat.Przypominamy, że każdy, kto rozpowszechnia (kopiuje, rozprowadza) 
tę wiadomość lub podejmuje podobne działania, narusza prawo i może podlegać 
karze.

mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 
Warszawa,www.mBank.pl, e-mail: kont...@mbank.pl. Sąd Rejonowy dla m. st. 
Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, KRS 025237, 
NIP: 526-021-50-88. Kapitał zakładowy (opłacony w całości) według stanu na 
01.01.2020 r. wynosi 169.401.468 złotych.

If you are not the addressee of this message:

- let us know by replying to this e-mail (thank you!),
- delete this message permanently (including all the copies which you have 
printed out or saved).
This message may contain legally protected information, which may be used 
exclusively by the addressee.Please be reminded that anyone who disseminates 
(copies, distributes) this message or takes any similar action, violates the 
law and may be penalised.

mBank S.A. with its registered office in Warsaw, ul. Senatorska 18, 00-950 
Warszawa,www.mBank.pl, e-mail: kont...@mbank.pl. District Court for the Capital 
City of Warsaw, 12th Commercial Division of the National Court Register, KRS 
025237, NIP: 526-021-50-88. Fully paid-up share capital amounting to PLN 
169.401.468 as at 1 January 2020.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


DISPLAY DUMP,ERRDATA rant

2020-07-24 Thread Binyamin Dissen
Isn't it about time that the 64 bit registers and ARs be included in the
display? The 64 bit EPSW is shown.

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: cURL and security

2020-07-24 Thread Dave Jones
Would this be of any use here:
https://www.stunnel.org/

Stunnel is a proxy designed to add TLS encryption functionality to existing 
clients and servers without any changes in the programs' code. Its architecture 
is optimized for security, portability, and scalability (including 
load-balancing), making it suitable for large deployments.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: cURL and security

2020-07-24 Thread David Crayford

How is that any different to using AT-TLS?

On 2020-07-24 8:48 PM, Dave Jones wrote:

Would this be of any use here:
https://www.stunnel.org/

Stunnel is a proxy designed to add TLS encryption functionality to existing 
clients and servers without any changes in the programs' code. Its architecture 
is optimized for security, portability, and scalability (including 
load-balancing), making it suitable for large deployments.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: DISPLAY DUMP,ERRDATA rant

2020-07-24 Thread Steve Smith
I'm sure it is.  btw, that's the 128-bit PSW :-).

sas

On Fri, Jul 24, 2020 at 8:33 AM Binyamin Dissen 
wrote:

> Isn't it about time that the 64 bit registers and ARs be included in the
> display? The 64 bit EPSW is shown.
>
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: DISPLAY DUMP,ERRDATA rant

2020-07-24 Thread Seymour J Metz
Yes. I'd advise an RFE.



--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Binyamin Dissen [bdis...@dissensoftware.com]
Sent: Friday, July 24, 2020 8:32 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: DISPLAY DUMP,ERRDATA rant

Isn't it about time that the 64 bit registers and ARs be included in the
display? The 64 bit EPSW is shown.

--
Binyamin Dissen 
http://secure-web.cisco.com/1GEsp9YvuusmEPw7PJw8LzLOX4fwVbaxX9NDFGXKf7qdQrx4N6Xj-7w0jgqxFJSpr07cnofXFjN2uGTQn3GwAkGVipMF8xxl5TKtYFRNpLs9KDYOFfUoUPuMvYXvEMkirzNL76xL9eLS1AkaFRN-SIgtjTtVXmEdjqb0QePtglQPEslKsYTAwR2RIBdA3bmX20y90u9-13bd1QDs0R9KLCIaZyxudnXGSfOz5mjTXuukYGLO0PxAZM0LlmdKGfRwvr2IW-RFhVohkIZ1pV92o3fRwI8ccOVUX-eNS64-iR-QDsbXTbMc298C1b9OfN98B_X7hoDG9_rUZxnRr765c4FwjvbRydsRUiMJslKDOU4rO5Z2lEJoTg0xBDn8SHx-Sf5Pk7tKpuOpxsrVugTIYJY2mNqLkJfvzmNILwSkF3FG_lXD9_Hdz0cCHd5BK4m1m/http%3A%2F%2Fwww.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Help with technique to identify data for last time/date an event occurred

2020-07-24 Thread Lizette Koehler
I have the following data

 

JOBN1 JOBNO  DATE-RAN  TIME-RAN  Condition-Code

JOB123123456  22Jul20201000   0

JOB123123356  22Jul2020   0

JOB123120056  22Jul20200100   0

JOB123A  121156  22Jul20201300   0

JOB123B  122356  22Jul20200100   0

JOB123B  125656  22Jul20201325   0

JOB123C  120956  22Jul20201300   0

JOB123D  121756  22Jul20202300   0

 

 

I am not sure what would be the best way to get the following output

 

I just want the job (plus details) from the last run.  So if a job name runs
10 times, what is the very last time it ran

 

JOB123123456  22Jul20201000   0

JOB123B  125656  22Jul20201325   0

JOB123C  120956  22Jul20201300   0

JOB123D  121756  22Jul20202300   0

 

 

I can put it in an Excel and possibly use LAST or MIN/MAX functions

 

I can probably code REXX to do this

 

Maybe even DFSORT/ICETOOL

 

 

Just not sure what would be the easiest.  I will have several million
entries where I just need the last time a specific job ran.

 

 

 

Thanks

 

 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Help with technique to identify data for last time/date an event occurred

2020-07-24 Thread retired mainframer
If you specify the key as job name plus date plus time and sort descending
and keep only 1, DFSORT should give you what you want.

> -Original Message-
> From: IBM Mainframe Discussion List  On
> Behalf Of Lizette Koehler
> Sent: Friday, July 24, 2020 11:25 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Help with technique to identify data for last time/date an event
occurred
> 
> I have the following data
> 
> 
> 
> JOBN1 JOBNO  DATE-RAN  TIME-RAN  Condition-Code
> 
> JOB123123456  22Jul20201000   0
> 
> JOB123123356  22Jul2020   0
> 
> JOB123120056  22Jul20200100   0
> 
> JOB123A  121156  22Jul20201300   0
> 
> JOB123B  122356  22Jul20200100   0
> 
> JOB123B  125656  22Jul20201325   0
> 
> JOB123C  120956  22Jul20201300   0
> 
> JOB123D  121756  22Jul20202300   0
> 
> 
> 
> 
> 
> I am not sure what would be the best way to get the following output
> 
> 
> 
> I just want the job (plus details) from the last run.  So if a job name
runs
> 10 times, what is the very last time it ran
> 
> 
> 
> JOB123123456  22Jul20201000   0
> 
> JOB123B  125656  22Jul20201325   0
> 
> JOB123C  120956  22Jul20201300   0
> 
> JOB123D  121756  22Jul20202300   0
> 
> 
> 
> 
> 
> I can put it in an Excel and possibly use LAST or MIN/MAX functions
> 
> 
> 
> I can probably code REXX to do this
> 
> 
> 
> Maybe even DFSORT/ICETOOL
> 
> 
> 
> 
> 
> Just not sure what would be the easiest.  I will have several million
> entries where I just need the last time a specific job ran.
> 
> 
> 
> 
> 
> 
> 
> Thanks
> 
> 
> 
> 
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Help with technique to identify data for last time/date an event occurred

2020-07-24 Thread Sri h Kolusu
Lizette,

It is quite simple with DFSORT.  Your output is missing the JOB123A  121156
22JUL20201300  record.  Assuming that it is a typo, use the following
DFSORT JCL

The date field is at position 18  (day 18-19 month 20-22 year 23-26)

//STEP0100 EXEC PGM=SORT
//SYSOUT   DD SYSOUT=*
//SORTIN   DD *
+1+2+3+4+5+
JOBN1 JOBNO  DATE-RAN  TIME-RAN  CONDITION-CODE
JOB123   123456  22JUL20201000   0
JOB123   123356  22JUL2020   0
JOB123   120056  22JUL20200100   0
JOB123A  121156  22JUL20201300   0
JOB123B  122356  22JUL20200100   0
JOB123B  125656  22JUL20201325   0
JOB123C  120956  22JUL20201300   0
JOB123D  121756  22JUL20202300   0
//SORTOUT  DD SYSOUT=*
//SYSINDD *
  OPTION SKIPREC=1 $ SKIP HEADER
  INREC OVERLAY=(81:23,4,UFF,EDIT=(),  $ YEAR
20,3,CHANGE=(2,C'JAN',C'01',   $ MONTH TO NUM
   C'FEB',C'02',
   C'MAR',C'03',
   C'APR',C'04',
   C'MAY',C'05',
   C'JUN',C'06',
   C'JUL',C'07',
   C'AUG',C'08',
   C'SEP',C'09',
   C'OCT',C'10',
   C'NOV',C'11',
   C'DEC',C'12'),
 NOMATCH=(C'00'),
   18,2,UFF,EDIT=(TT)) $ DAY

  SORT FIELDS=(01,8,CH,A,  $ JOBNAME
   81,8,UFF,A, $ RUNDATE
   31,4,UFF,A) $ RUNTIME

  OUTFIL REMOVECC,NODETAIL,
  BUILD=(80X),
  HEADER2=('JOBN1 JOBNO  DATE-RAN  TIME-RAN  ',
   'CONDITION-CODE'),
  SECTIONS=(1,8,
  TRAILER3=(1,80))
/*

The output from the above job is

JOBN1 JOBNO  DATE-RAN  TIME-RAN  CONDITION-CODE
JOB123   123456  22JUL20201000   0
JOB123A  121156  22JUL20201300   0
JOB123B  125656  22JUL20201325   0
JOB123C  120956  22JUL20201300   0
JOB123D  121756  22JUL20202300   0

Further if you have any questions please let me know

Thanks,
Kolusu
DFSORT Development
IBM Corporation

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Help with technique to identify data for last time/date an event occurred

2020-07-24 Thread Lizette Koehler
Thank you very much



-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of
Sri h Kolusu
Sent: Friday, July 24, 2020 12:40 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Help with technique to identify data for last time/date an
event occurred

Lizette,

It is quite simple with DFSORT.  Your output is missing the JOB123A  121156
22JUL20201300  record.  Assuming that it is a typo, use the following
DFSORT JCL

The date field is at position 18  (day 18-19 month 20-22 year 23-26)

//STEP0100 EXEC PGM=SORT
//SYSOUT   DD SYSOUT=*
//SORTIN   DD *
+1+2+3+4+5+
JOBN1 JOBNO  DATE-RAN  TIME-RAN  CONDITION-CODE
JOB123   123456  22JUL20201000   0
JOB123   123356  22JUL2020   0
JOB123   120056  22JUL20200100   0
JOB123A  121156  22JUL20201300   0
JOB123B  122356  22JUL20200100   0
JOB123B  125656  22JUL20201325   0
JOB123C  120956  22JUL20201300   0
JOB123D  121756  22JUL20202300   0
//SORTOUT  DD SYSOUT=*
//SYSINDD *
  OPTION SKIPREC=1 $ SKIP HEADER
  INREC OVERLAY=(81:23,4,UFF,EDIT=(),  $ YEAR
20,3,CHANGE=(2,C'JAN',C'01',   $ MONTH TO NUM
   C'FEB',C'02',
   C'MAR',C'03',
   C'APR',C'04',
   C'MAY',C'05',
   C'JUN',C'06',
   C'JUL',C'07',
   C'AUG',C'08',
   C'SEP',C'09',
   C'OCT',C'10',
   C'NOV',C'11',
   C'DEC',C'12'),
 NOMATCH=(C'00'),
   18,2,UFF,EDIT=(TT)) $ DAY

  SORT FIELDS=(01,8,CH,A,  $ JOBNAME
   81,8,UFF,A, $ RUNDATE
   31,4,UFF,A) $ RUNTIME

  OUTFIL REMOVECC,NODETAIL,
  BUILD=(80X),
  HEADER2=('JOBN1 JOBNO  DATE-RAN  TIME-RAN  ',
   'CONDITION-CODE'),
  SECTIONS=(1,8,
  TRAILER3=(1,80))
/*

The output from the above job is

JOBN1 JOBNO  DATE-RAN  TIME-RAN  CONDITION-CODE
JOB123   123456  22JUL20201000   0
JOB123A  121156  22JUL20201300   0
JOB123B  125656  22JUL20201325   0
JOB123C  120956  22JUL20201300   0
JOB123D  121756  22JUL20202300   0

Further if you have any questions please let me know

Thanks,
Kolusu
DFSORT Development
IBM Corporation

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Started task stopping immediately. No error messages.

2020-07-24 Thread Skippy the Ancient
Has anyone seeing a started task immediately after you start it?  No ACF2 
messages. No error codes.
Nothing.

Help?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Started task stopping immediately. No error messages.

2020-07-24 Thread Steely.Mark
Add TIME=1440 to the EXEC DD. 

Thanks

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Skippy the Ancient
Sent: Friday, July 24, 2020 2:48 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Started task stopping immediately. No error messages.

ATTENTION: This e-mail came from an external source. Do not open attachments or 
click on links from unknown or unexpected emails.


Has anyone seeing a started task immediately after you start it?  No ACF2 
messages. No error codes.
Nothing.

Help?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

*** Disclaimer ***
This communication (including all attachments) is solely for the use of the 
person to whom it is addressed and is a confidential AAA communication. If you 
are not the intended recipient, any use, distribution, printing, or copying is 
prohibited. If you received this email in error, please immediately delete it 
and notify the sender.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Started task stopping immediately. No error messages.

2020-07-24 Thread Charles Mills
A started proc is just JCL that executes some program. Any program *might* 
behave as you describe. IEFBR14 would behave as you describe. People would 
probably need more specifics to be able to help.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Skippy the Ancient
Sent: Friday, July 24, 2020 12:48 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Started task stopping immediately. No error messages.

Has anyone seeing a started task immediately after you start it?  No ACF2 
messages. No error codes.
Nothing.

Help?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Started task stopping immediately. No error messages.

2020-07-24 Thread Wayne Bickerdike
Wrap a job card around it and submit the proc. Could be anything. Check the
job output.

On Sat, Jul 25, 2020, 06:28 Charles Mills  wrote:

> A started proc is just JCL that executes some program. Any program *might*
> behave as you describe. IEFBR14 would behave as you describe. People would
> probably need more specifics to be able to help.
>
> Charles
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Skippy the Ancient
> Sent: Friday, July 24, 2020 12:48 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Started task stopping immediately. No error messages.
>
> Has anyone seeing a started task immediately after you start it?  No ACF2
> messages. No error codes.
> Nothing.
>
> Help?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Started task stopping immediately. No error messages.

2020-07-24 Thread Steve Horein
This. As an automation guy, I've encountered support folks changing
PGM= to PGM=IEFBR14 to keep  from executing while
maintenance is being done, or when they're drafting the change task to
retire it. And who do you think the Operations staff calls when they can't
get the task to keep running? Three guesses...

On Fri, Jul 24, 2020 at 3:28 PM Charles Mills  wrote:

> A started proc is just JCL that executes some program. Any program *might*
> behave as you describe. IEFBR14 would behave as you describe. People would
> probably need more specifics to be able to help.
>
> Charles
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Skippy the Ancient
> Sent: Friday, July 24, 2020 12:48 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Started task stopping immediately. No error messages.
>
> Has anyone seeing a started task immediately after you start it?  No ACF2
> messages. No error codes.
> Nothing.
>
> Help?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Started task stopping immediately. No error messages.

2020-07-24 Thread McCabe, Ron
For Skippy the Ancient,

Are you saying that you started a Started Task and cannot see any output in 
SDSF?  You can see the job start and end on the console, true?  If it's the 
output you are wondering about then you have the output for your started tasks 
going to a class that gets purged right away.  There was a discussion about 
this a while back ... sorry I don't have the dates when this discussion 
happened.

Thanks,
Ron McCabe
Manager of Mainframe/Midrange Systems
Mutual of Enumclaw

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Steve Horein
Sent: Friday, July 24, 2020 3:06 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Started task stopping immediately. No error messages.

CAUTION: This email is from an external address. Please be careful of links and 
attachments.


This. As an automation guy, I've encountered support folks changing PGM= to PGM=IEFBR14 to keep  from executing while maintenance is 
being done, or when they're drafting the change task to retire it. And who do 
you think the Operations staff calls when they can't get the task to keep 
running? Three guesses...

On Fri, Jul 24, 2020 at 3:28 PM Charles Mills  wrote:

> A started proc is just JCL that executes some program. Any program
> *might* behave as you describe. IEFBR14 would behave as you describe.
> People would probably need more specifics to be able to help.
>
> Charles
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On Behalf Of Skippy the Ancient
> Sent: Friday, July 24, 2020 12:48 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Started task stopping immediately. No error messages.
>
> Has anyone seeing a started task immediately after you start it?  No
> ACF2 messages. No error codes.
> Nothing.
>
> Help?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Confidentiality Notice: This e- mail and all attachments may contain 
CONFIDENTIAL information and are meant solely for the intended recipient. It 
may contain controlled, privileged, or proprietary information that is 
protected under applicable law and shall not be disclosed to any unauthorized 
third party. If you are not the intended recipient, you are hereby notified 
that any unauthorized review, action, disclosure, distribution, or reproduction 
of any information contained in this e- mail and any attachments is strictly 
PROHIBITED. If you received this e- mail in error, please reply to the sender 
immediately stating that this transmission was misdirected, and delete or 
destroy all electronic and paper copies of this e-mail and attachments without 
disclosing the contents. This e- mail does not grant or assign rights of 
ownership in the proprietary subject matter herein, nor shall it be construed 
as a joint venture, partnership, teaming agreement, or any other formal 
business relationship.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Help with technique to identify data for last time/date an event occurred

2020-07-24 Thread Paul Gilmartin
On Fri, 24 Jul 2020 12:40:17 -0700, Sri h Kolusu wrote:
>
>//SYSINDD *
>  OPTION SKIPREC=1 $ SKIP HEADER
>  INREC OVERLAY=(81:23,4,UFF,EDIT=(),  $ YEAR
>20,3,CHANGE=(2,C'JAN',C'01',   $ MONTH TO NUM
>   C'FEB',C'02',
>   C'MAR',C'03',
>...
If one has control over the input format, one can simplify coding
by requiring the *standard* ISO 8601 format for dates.
https://xkcd.com/1179/

ISO 8601 also mitigates the burden of locale-sensitive coding.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Started task stopping immediately. No error messages.

2020-07-24 Thread Charles Mills
SDSF ST may be your friend. I was the guy who started the thread @Ron mentions 
and ST provided me with clues.

Why a job or STC would not be in I, O, H or DA but would be in ST is beyond me 
but that is a subject for a different thread.

Charles


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of McCabe, Ron
Sent: Friday, July 24, 2020 3:19 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Started task stopping immediately. No error messages.

For Skippy the Ancient,

Are you saying that you started a Started Task and cannot see any output in 
SDSF?  You can see the job start and end on the console, true?  If it's the 
output you are wondering about then you have the output for your started tasks 
going to a class that gets purged right away.  There was a discussion about 
this a while back ... sorry I don't have the dates when this discussion 
happened.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Where is the data compression manual SA22-7208

2020-07-24 Thread John Ganci
The latest Principles of Operation (SA22-7832-12), item 8 on page xxx, 
indicates that the compression facility is described in SA22-7208. However, I 
am unable to find anything but references to "SA22-7208". There is a post from 
12MAY2011 asking the same question. Following the links provided there took me 
to an IBM site where manuals for z/OS 1.13, etc. Looking through these was a 
dead end. Anyone know where I might find the manual?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Started task stopping immediately. No error messages.

2020-07-24 Thread Mike Schwab
As long as one file from the job remains, the whole job is visible from ST.
Individual files might be deleted by print class, command, printing,
or spooling to an output manager.

On Fri, Jul 24, 2020 at 6:13 PM Charles Mills  wrote:
>
> SDSF ST may be your friend. I was the guy who started the thread @Ron 
> mentions and ST provided me with clues.
>
> Why a job or STC would not be in I, O, H or DA but would be in ST is beyond 
> me but that is a subject for a different thread.
>
> Charles
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On 
> Behalf Of McCabe, Ron
> Sent: Friday, July 24, 2020 3:19 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Started task stopping immediately. No error messages.
>
> For Skippy the Ancient,
>
> Are you saying that you started a Started Task and cannot see any output in 
> SDSF?  You can see the job start and end on the console, true?  If it's the 
> output you are wondering about then you have the output for your started 
> tasks going to a class that gets purged right away.  There was a discussion 
> about this a while back ... sorry I don't have the dates when this discussion 
> happened.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



-- 
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Started task stopping immediately. No error messages.

2020-07-24 Thread Mike Schwab
You should at least see a start and stop message in the system log.

On Fri, Jul 24, 2020 at 2:58 PM Skippy the Ancient  wrote:
>
> Has anyone seeing a started task immediately after you start it?  No ACF2 
> messages. No error codes.
> Nothing.
>
> Help?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



-- 
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Where is the data compression manual SA22-7208

2020-07-24 Thread Sri h Kolusu
> However, I am unable to find anything but references to "SA22-7208".
Anyone know where I might find the manual?

Use the following link

https://www-05.ibm.com/e-business/linkweb/publications/servlet/pbi.wss

Select your country

On the next panel click on "Search for publications" - search for
publications based on your own selection criteria

Input  SA22-7208 into "Publication number" field and "Start Search"

The search returns "ESA/390 Data Compression (SA22-7208-01)"

Follow the prompts to Download the manuals

You need softcopy librarian to view it. if you don't have it then you can
download it from here

https://www.ibm.com/support/pages/downloadable-free-bookmanager-tools-and-components

Kolusu


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Where is the data compression manual SA22-7208

2020-07-24 Thread John Ganci
Thanks. Alas,  my PC runs Linux. Softcopy librarian appears to be Windows-only 
even though the link you provided to get it indicates that it runs on Linux and 
Windows. Looks like Linux support has been removed. The following link

https://www.ibm.com/support/pages/node/724765

claims to have softcopy reader for Linux (version 3.7), but clicking the link 
yields a "we're sorry; link may have been moved or deleted".

The link where SA22-7208 was found has an option to read it online as well as 
download it via HTTP. Hovering your mouse over the button for "Read" shows

publibfp.dhe.ibm.com/cgi-bin/bookmgr/books/dz9ar602

but clicking it takes you to

https://www-01.ibm.com/servers/resourcelink/svc00100.nsf/pages/zos-library-archives?OpenDocument

which is PDF books only. (I did search through the various links there for 
SA22-7802 but did not find it.)

I was able to download dz9ar602.boo via the "Download HTTP" button, but I can't 
read it without a reader!

Summary: found the book but cannot read it online; can download the .boo 
version, but cannot read it since there does not appear to be a Linux version 
of softcopy reader.

A web search for "linux version of ibm softcopy reader" yielded a promising 
link 

https://www.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.ab0in02/ab0in02298.htm

but the instructions there led me down the same path as above. Ditto for the 
instructions found in GC31-8311-47 "Installing, Managing, and Using the Online 
Library".

Anyone have any other suggestions?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Where is the data compression manual SA22-7208

2020-07-24 Thread Ed Jaffe

On 7/24/2020 9:39 PM, John Ganci wrote:

Anyone have any other suggestions?



It's horrible compression. Why not use modern IBM Z compression? That 
doc should be a lot easier to come by...



--
Phoenix Software International
Edward E. Jaffe
831 Parkview Drive North
El Segundo, CA 90245
https://www.phoenixsoftware.com/



This e-mail message, including any attachments, appended messages and the
information contained therein, is for the sole use of the intended
recipient(s). If you are not an intended recipient or have otherwise
received this email message in error, any use, dissemination, distribution,
review, storage or copying of this e-mail message and the information
contained therein is strictly prohibited. If you are not an intended
recipient, please contact the sender by reply e-mail and destroy all copies
of this email message and do not otherwise utilize or retain this email
message or any or all of the information contained therein. Although this
email message and any attachments or appended messages are believed to be
free of any virus or other defect that might affect any computer system into
which it is received and opened, it is the responsibility of the recipient
to ensure that it is virus free and no responsibility is accepted by the
sender for any loss or damage arising in any way from its opening or use.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Where is the data compression manual SA22-7208

2020-07-24 Thread Alan Young
-Original Message-
>From: John Ganci <0313d5d8c097-dmarc-requ...@listserv.ua.edu>
>Sent: Jul 24, 2020 9:39 PM
>To: IBM-MAIN@LISTSERV.UA.EDU
>Subject: Re: Where is the data compression manual SA22-7208
>
>Thanks. Alas,  my PC runs Linux. Softcopy librarian appears to be Windows-only 

Its been a while since I ran it in linux. IIRC, its java with some extra stuff. 
Try 7z or another archive extractors to get it unpacked. Take a look at the 
.bat files. They run java with a jar file... just translate the commands. My 
notes indicate I had better luck with 3.8 than 4.0. Although there appears to 
be 5.x versions now. The FTP directory linked 
ftp://public.dhe.ibm.com/ps/products/bookmanager/tools/ is open and you may 
find other useful bits there. Good Luck.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN