Re: CEE3512S / CSV034I

[Denis]

 Hi Henri,
if you google the reason code you find other entries that point to not enough 
region size. So try increasing the region size?
Denis.

On Thursday, November 9, 2023 at 10:31:52 PM GMT+1, Henri Kuiper 
 wrote:  
 
 Heya Fellow Mainframers,

I'm trying to do some 'normal ES256K' JWT token signage with python...

on my 'test SYSPLEX' this works like a charm.yet one hop over I get the
following

CEE3512S An HFS load of module
/.../site-packages/cryptography/hazmat/bindings/_openssl.abi3.so
failed. The system return code was 000157; the reason code was
0BDF019B.

MSGTXT: CSV034I PGMF FETCH FAILED FOR THE REQUESTED MODULE. RETURN CODE 14,
REASON CODE 26110021 PATHNAME =
/../site-packages/cryptography/hazmat/bindings/_openssl.abi3.so

I've checked all the obvious stuff : perms, openssl versions,
module/package versions for cryptography, python version etc. and they're
all the same...

. Does anyone have another idea where to look?...

Thanks!

*Henri Kuiper*
*zdevops*

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  

Re: SORT Help with JFY and SQZ

[Wayne Bickerdike]

Agree, however, it took me less than 2 minutes to add the code for FIELD
card.

I was responding to the original, however, here's the extra code,

OUT2.I = 'RPT FIELD,TABLE,'||Dbname|| VERSION
SAY REC.I
SAY OUT.I
SAY OUT2.I
D
"EXECIO * DISKW  OFILE(STEM OUT. FINIS "
"EXECIO * DISKW  OFILE(STEM OUT2. FINIS "

Adding a return code for an empty file is also trivial.





On Fri, Nov 10, 2023 at 2:28 PM Sri h Kolusu  wrote:

> >> I tried this in REXX, more familiar for me than DFSORT.
>
> Wayne,
>
> Thanks for the REXX code, however, please note that there is additional
> processing.  OP wants to generate 2 different command files and make a copy
> of the input along with setting a return code if the input file is empty,
> so that they can skip further processing.
>
> Rexx is good at some tasks, but it is not good at I/O when compared to
> DFSORT.
>
> Thanks,
> Kolusu
> DFSORT Development
> IBM Corporation
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


-- 
Wayne V. Bickerdike

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SORT Help with JFY and SQZ

[Sri h Kolusu]

>> I tried this in REXX, more familiar for me than DFSORT.

Wayne,

Thanks for the REXX code, however, please note that there is additional 
processing.  OP wants to generate 2 different command files and make a copy of 
the input along with setting a return code if the input file is empty, so that 
they can skip further processing.

Rexx is good at some tasks, but it is not good at I/O when compared to DFSORT. 

Thanks,
Kolusu
DFSORT Development
IBM Corporation

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SORT Help with JFY and SQZ

[Wayne Bickerdike]

I would probably use a 26 char ALPHA string and index into that to
avoid the stem variable with the hard coded A to F.

or a Hex to Char based on the suffix value

Been a while since I saw Datacom/DB dictionary output :)

On Fri, Nov 10, 2023 at 1:13 PM Wayne Bickerdike  wrote:

> I tried this in REXX, more familiar for me than DFSORT.
>
> My code:
>
> Stor = ''
> ALPHA.1 = 'A'
> ALPHA.2 = 'B'
> ALPHA.3 = 'C'
> ALPHA.4 = 'D'
> ALPHA.5 = 'E'
> ALPHA.6 = 'F'
> "ALLOC F(IFILE) DA('BDB204.OUTLIST(FROM)') SHR REUSE   "
> "ALLOC F(OFILE) DA('BDB204.OUTLIST(TO)') SHR REUSE   "
>   "EXECIO * DISKR  IFILE(STEM REC. FINIS "
> Suffix = 0
> DO I = 1 TO REC.0
>   Parse Value REC.I ,
>   with DBID . . WORD1 Dbname VERSION .
> If POS(Dbname,Stor) > 0 Then Suffix = Suffix + 1
> Else Suffix = 1
>   Stor = Stor || Dbname
>   OUT.I = 'UTL COPY,TABLE,'||Dbname|| ,
>   VERSION || ','|| WORD1 || RIGHT('000' ||DBID,4) || ALPHA.Suffix
>   SAY REC.I
>   SAY OUT.I
> END
>   "EXECIO * DISKW  OFILE(STEM OUT. FINIS "
>
> 400  B400-DATABASE 1001 BRN   B400-BRANCH-BLDG (1001)
> T
> UTL COPY,TABLE,B400-BRANCH-BLDG(1001),BRN0400A
>
> 400  B400-DATABASE3 HST   B400-TRANHIST  (0003) H
>
> UTL COPY,TABLE,B400-TRANHIST(0003),HST0400A
>
> 400  B400-DATABASE4 HST   B400-TRANHIST  (0004) H
>
> UTL COPY,TABLE,B400-TRANHIST(0004),HST0400B
>
> 400  B400-DATABASE5 HST   B400-TRANHIST  (0005) H
>
> UTL COPY,TABLE,B400-TRANHIST(0005),HST0400C
>
> ***
>
>
> On Fri, Nov 10, 2023 at 4:56 AM Don Johnson <
> 02ee771a0785-dmarc-requ...@listserv.ua.edu> wrote:
>
>> Kolusu, thanks once again! This is now complete and working as I had
>> hoped!
>>
>> Have a good evening!
>> Don
>>
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>>
>
>
> --
> Wayne V. Bickerdike
>
>

-- 
Wayne V. Bickerdike

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SORT Help with JFY and SQZ

[Wayne Bickerdike]

I tried this in REXX, more familiar for me than DFSORT.

My code:

Stor = ''
ALPHA.1 = 'A'
ALPHA.2 = 'B'
ALPHA.3 = 'C'
ALPHA.4 = 'D'
ALPHA.5 = 'E'
ALPHA.6 = 'F'
"ALLOC F(IFILE) DA('BDB204.OUTLIST(FROM)') SHR REUSE   "
"ALLOC F(OFILE) DA('BDB204.OUTLIST(TO)') SHR REUSE   "
  "EXECIO * DISKR  IFILE(STEM REC. FINIS "
Suffix = 0
DO I = 1 TO REC.0
  Parse Value REC.I ,
  with DBID . . WORD1 Dbname VERSION .
If POS(Dbname,Stor) > 0 Then Suffix = Suffix + 1
Else Suffix = 1
  Stor = Stor || Dbname
  OUT.I = 'UTL COPY,TABLE,'||Dbname|| ,
  VERSION || ','|| WORD1 || RIGHT('000' ||DBID,4) || ALPHA.Suffix
  SAY REC.I
  SAY OUT.I
END
  "EXECIO * DISKW  OFILE(STEM OUT. FINIS "

400  B400-DATABASE 1001 BRN   B400-BRANCH-BLDG (1001) T
UTL COPY,TABLE,B400-BRANCH-BLDG(1001),BRN0400A
400  B400-DATABASE3 HST   B400-TRANHIST  (0003) H
UTL COPY,TABLE,B400-TRANHIST(0003),HST0400A
400  B400-DATABASE4 HST   B400-TRANHIST  (0004) H
UTL COPY,TABLE,B400-TRANHIST(0004),HST0400B
400  B400-DATABASE5 HST   B400-TRANHIST  (0005) H
UTL COPY,TABLE,B400-TRANHIST(0005),HST0400C
***

On Fri, Nov 10, 2023 at 4:56 AM Don Johnson <
02ee771a0785-dmarc-requ...@listserv.ua.edu> wrote:

> Kolusu, thanks once again! This is now complete and working as I had hoped!
>
> Have a good evening!
> Don
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


-- 
Wayne V. Bickerdike

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[kekronbekron]

Nice one Rob!
Good to see MFM (or a rebirth of it) makes its way to SDSF.



On Friday, November 10th, 2023 at 04:09, Rob Scott  
wrote:


> As others have pointed out, monitoring the "fetch" of a load module is very 
> doable, whereas monitoring any subsequent usage of the executable is much 
> more difficult.
> 
> In z/OS 3.1, SDSF introduced the "module fetch monitor" feature that was 
> inspired by the previous Poughkeepsie tool "MFM". We sit on the CSVFETCH and 
> CSVLLIX1 dynamic exits to capture both program fetch and VLF fetch events (no 
> need to front-end SVCs).
> 
> This capability might provide some insight into what you require, however it 
> cannot tell the whole story.
> 
> Rob Scott
> Rocket Software
> 
> 
> From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU on behalf of 
> Steve Thompson ste...@wkyr.net
> 
> Sent: Thursday, November 9, 2023 10:15:12 PM
> To: IBM-MAIN@LISTSERV.UA.EDU IBM-MAIN@LISTSERV.UA.EDU
> 
> Subject: Re: SMF record for number of program executions?
> 
> EXTERNAL EMAIL
> 
> 
> 
> 
> 
> If you are willing to write an exit to get the info, you can get
> it via a CSV exit (I forget its name, but ALL "LOAD"s go through
> it). Understand, if you use that exit, it has to have a very
> short code path, can't cause a wait of any kind, or you will
> cause problems for all address spaces in that LPAR. The idea is
> to capture the DSN & member and immediately write it to an SMF
> buffer or similar so you can immediately return control.
> 
> But other than what others have said, there is no other way to
> see all dynamically loaded subroutines or load-modules. You will
> not capture static routines as the LNKEDT doesn't use that
> interface.
> 
> I believe that IBM Products make use of that or another
> undocumented path through VLF that is handling LLA and a bit of
> caching of modules.
> 
> Regards,
> Steve Thompson
> 
> 
> 
> On 11/9/2023 4:56 PM, Glenn Miller wrote:
> 
> > Hi Linda,
> > When I have been requested to provide that information, I have used the IBM 
> > Z Software Asset Management ( aka iZSAM ) software product, which was 
> > previously known as IBM Tivoli Asset Discovery for z/OS ( aka TADz ).
> > 
> > Glenn Miller
> > 
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> 
> 
> 
> Rocket Software, Inc. and subsidiaries ? 77 Fourth Avenue, Waltham MA 02451 ? 
> Main Office Toll Free Number: +1 855.577.4323
> Contact Customer Support: 
> https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
> Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
> http://www.rocketsoftware.com/manage-your-email-preferences
> Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy
> 
> 
> This communication and any attachments may contain confidential information 
> of Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
> prohibited. If you are not the intended recipient, please notify Rocket 
> Software immediately and destroy all copies of this communication. Thank you.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Steve Beaver]

SMF 30’s

Sent from my iPhone

No one said I could type with one thumb 

> On Nov 9, 2023, at 18:34, Lennie Dymoke-Bradshaw 
> <032fff1be9b4-dmarc-requ...@listserv.ua.edu> wrote:
> 
> I believe the capability of understanding and counting program LOADs is in 
> the latest version of SDSF for z/OS 3.1. (I hope Rob Scott will correct this 
> if I am wrong).
> However, I do not think this necessarily answers the question posed. That 
> question related to the number of times a program is executed, rather than 
> the number of times it is LOADed, LINKed to or even ATTACHed. A program can 
> be loaded (using a LOAD SVC) and then executed multiple times. That execution 
> can be via a LINK SVC but could just as easily be via a CALL, which is 
> effectively a BASR or BALR, a machine instruction which does not offer the 
> level of traceability that the LOAD, LINK and ATTACH services offer. As such 
> a load module monitor such as that in SDSF will not address the issue.
> If the load module is marked not reusable and not reentrant, then I think it 
> is unlikely to be reused after a first execution. I would expect it to be 
> DELETEd and then re-LOADed. I don't think normal processing of the module 
> using language environment will allow reuse.
> If that is the case, then the question might be able to be answered for a 
> specific module that is neither reentrant nor reusable.
> Lennie Dymoke-Bradshaw
> https://rsclweb.com 
> ‘Dance like no one is watching. Encrypt like everyone is.’
> 
> -Original Message-
> From: IBM Mainframe Discussion List  On Behalf Of 
> Steve Thompson
> Sent: 09 November 2023 22:15
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: SMF record for number of program executions?
> 
> If you are willing to write an exit to get the info, you can get it via a CSV 
> exit (I forget its name, but ALL "LOAD"s go through it). Understand, if you 
> use that exit, it has to have a very short code path, can't cause a wait of 
> any kind, or you will cause problems for all address spaces in that LPAR. The 
> idea is to capture the DSN & member and immediately write it to an SMF buffer 
> or similar so you can immediately return control.
> 
> But other than what others have said, there is no other way to see all 
> dynamically loaded subroutines or load-modules. You will not capture static 
> routines as the LNKEDT doesn't use that interface.
> 
> I believe that IBM Products make use of that or another undocumented path 
> through VLF that is handling LLA and a bit of caching of modules.
> 
> Regards,
> Steve Thompson
> 
> 
> 
>> On 11/9/2023 4:56 PM, Glenn Miller wrote:
>> Hi Linda,
>> When I have been requested to provide that information, I have used the IBM 
>> Z Software Asset Management ( aka iZSAM ) software product, which was 
>> previously known as IBM Tivoli Asset Discovery for z/OS ( aka TADz ).
>> 
>> Glenn Miller
>> 
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions, send 
>> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
> lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Lennie Dymoke-Bradshaw]

I believe the capability of understanding and counting program LOADs is in the 
latest version of SDSF for z/OS 3.1. (I hope Rob Scott will correct this if I 
am wrong).
However, I do not think this necessarily answers the question posed. That 
question related to the number of times a program is executed, rather than the 
number of times it is LOADed, LINKed to or even ATTACHed. A program can be 
loaded (using a LOAD SVC) and then executed multiple times. That execution can 
be via a LINK SVC but could just as easily be via a CALL, which is effectively 
a BASR or BALR, a machine instruction which does not offer the level of 
traceability that the LOAD, LINK and ATTACH services offer. As such a load 
module monitor such as that in SDSF will not address the issue.
If the load module is marked not reusable and not reentrant, then I think it is 
unlikely to be reused after a first execution. I would expect it to be DELETEd 
and then re-LOADed. I don't think normal processing of the module using 
language environment will allow reuse.
If that is the case, then the question might be able to be answered for a 
specific module that is neither reentrant nor reusable.
Lennie Dymoke-Bradshaw
https://rsclweb.com 
‘Dance like no one is watching. Encrypt like everyone is.’

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Steve Thompson
Sent: 09 November 2023 22:15
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SMF record for number of program executions?

If you are willing to write an exit to get the info, you can get it via a CSV 
exit (I forget its name, but ALL "LOAD"s go through it). Understand, if you use 
that exit, it has to have a very short code path, can't cause a wait of any 
kind, or you will cause problems for all address spaces in that LPAR. The idea 
is to capture the DSN & member and immediately write it to an SMF buffer or 
similar so you can immediately return control.

But other than what others have said, there is no other way to see all 
dynamically loaded subroutines or load-modules. You will not capture static 
routines as the LNKEDT doesn't use that interface.

I believe that IBM Products make use of that or another undocumented path 
through VLF that is handling LLA and a bit of caching of modules.

Regards,
Steve Thompson



On 11/9/2023 4:56 PM, Glenn Miller wrote:
> Hi Linda,
> When I have been requested to provide that information, I have used the IBM Z 
> Software Asset Management ( aka iZSAM ) software product, which was 
> previously known as IBM Tivoli Asset Discovery for z/OS ( aka TADz ).
>
> Glenn Miller
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Schmitt, Michael]

> determining how many "times" it was used (executed) requires a tool like 
> STROBE

Unless IBM Enterprise COBOL for z/OS version 6 is making a call out to an IGZ 
module on every entry into the program, and one was able to hook such a IGZ 
module.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Michael Oujesky
Sent: Thursday, November 9, 2023 5:21 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SMF record for number of program executions?

While others have already responded about how to determine how many
times a program has been fetched into storage, determining how many
"times" it was used (executed) requires a tool like STROBE that
provides statistics on how many samples were taken while in the programs code.

Michael

At 01:00 PM 11/9/2023, L H wrote:

>Hello,
>
>I need to count the number of times some programs are executed on z/OS.
>
>Not job names or CICS Tranids, but the times Cobol object code executed.
>
>Does anyone know if a SMF record exists to record this, or does anyone have
>an Assembler program to read the SMF and produce the counts?  Or a Merrill
>example?
>
>Any assistance or reference to manuals, cbttape, etc., is appreciated.
>
>Thanks, Linda
>
>--
>For IBM-MAIN subscribe / signoff / archive access instructions,
>send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Michael Oujesky]

While others have already responded about how to determine how many 
times a program has been fetched into storage, determining how many 
"times" it was used (executed) requires a tool like STROBE that 
provides statistics on how many samples were taken while in the programs code.


Michael

At 01:00 PM 11/9/2023, L H wrote:


Hello,

I need to count the number of times some programs are executed on z/OS.

Not job names or CICS Tranids, but the times Cobol object code executed.

Does anyone know if a SMF record exists to record this, or does anyone have
an Assembler program to read the SMF and produce the counts?  Or a Merrill
example?

Any assistance or reference to manuals, cbttape, etc., is appreciated.

Thanks, Linda

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Kinda fun

[Paul Gilmartin]

On Thu, 9 Nov 2023 16:18:17 -0600, Glenn Knickerbocker wrote:
>
>I've heard tales (probably at KTRU) of reading magnetic tape/cards with iron 
>filings and a loupe.
> 
I believe I saw one.  A flat container of ferrite slurry with a transparent top
and a diamagnetic membrane bottom.  Pressed against the tape, it clearly
showed record gaps.  Reading the data would have been a challenge,
even at lowest density.

-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Rob Scott]

As others have pointed out, monitoring the "fetch" of a load module is very 
doable, whereas monitoring any subsequent usage of the executable is much more 
difficult.

In z/OS 3.1, SDSF introduced the "module fetch monitor" feature that was 
inspired by the previous Poughkeepsie tool "MFM". We sit on the CSVFETCH and 
CSVLLIX1 dynamic exits to capture both program fetch and VLF fetch events (no 
need to front-end SVCs).

This capability might provide some insight into what you require, however it 
cannot tell the whole story.

Rob Scott
Rocket Software


From: IBM Mainframe Discussion List  on behalf of 
Steve Thompson 
Sent: Thursday, November 9, 2023 10:15:12 PM
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: Re: SMF record for number of program executions?

EXTERNAL EMAIL





If you are willing to write an exit to get the info, you can get
it via a CSV exit (I forget its name, but ALL "LOAD"s go through
it). Understand, if you use that exit, it has to have a very
short code path, can't cause a wait of any kind, or you will
cause problems for all address spaces in that LPAR. The idea is
to capture the DSN & member and immediately write it to an SMF
buffer or similar so you can immediately return control.

But other than what others have said, there is no other way to
see all dynamically loaded subroutines or load-modules. You will
not capture static routines as the LNKEDT doesn't use that
interface.

I believe that IBM Products make use of that or another
undocumented path through VLF that is handling LLA and a bit of
caching of modules.

Regards,
Steve Thompson



On 11/9/2023 4:56 PM, Glenn Miller wrote:
> Hi Linda,
> When I have been requested to provide that information, I have used the IBM Z 
> Software Asset Management ( aka iZSAM ) software product, which was 
> previously known as IBM Tivoli Asset Discovery for z/OS ( aka TADz ).
>
> Glenn Miller
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



Rocket Software, Inc. and subsidiaries ? 77 Fourth Avenue, Waltham MA 02451 ? 
Main Office Toll Free Number: +1 855.577.4323
Contact Customer Support: 
https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
http://www.rocketsoftware.com/manage-your-email-preferences
Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy


This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Mario Bezzi]

If the question is how many times a module was loaded, IZSAM, and several 
others can answer it. If the question is how many times that [sub]program was 
actually invoked, IZSAM and similar can't help.

As far as I know there is only one product able to do it. 

Having a vested interest I will refrain from mentioning it on the list.

Mario

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Kinda fun

[Glenn Knickerbocker]

On Wed, 8 Nov 2023 09:49:34 -0500, Rick Troth  wrote:
>Cards and printed paper are even human readable. Wow.

I've heard tales (probably at KTRU) of reading magnetic tape/cards with iron 
filings and a loupe.

¬R

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Steve Thompson]

If you are willing to write an exit to get the info, you can get 
it via a CSV exit (I forget its name, but ALL "LOAD"s go through 
it). Understand, if you use that exit, it has to have a very 
short code path, can't cause a wait of any kind, or you will 
cause problems for all address spaces in that LPAR. The idea is 
to capture the DSN & member and immediately write it to an SMF 
buffer or similar so you can immediately return control.


But other than what others have said, there is no other way to 
see all dynamically loaded subroutines or load-modules. You will 
not capture static routines as the LNKEDT doesn't use that 
interface.


I believe that IBM Products make use of that or another 
undocumented path through VLF that is handling LLA and a bit of 
caching of modules.


Regards,
Steve Thompson



On 11/9/2023 4:56 PM, Glenn Miller wrote:

Hi Linda,
When I have been requested to provide that information, I have used the IBM Z 
Software Asset Management ( aka iZSAM ) software product, which was previously 
known as IBM Tivoli Asset Discovery for z/OS ( aka TADz ).

Glenn Miller

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Glenn Miller]

Hi Linda,
When I have been requested to provide that information, I have used the IBM Z 
Software Asset Management ( aka iZSAM ) software product, which was previously 
known as IBM Tivoli Asset Discovery for z/OS ( aka TADz ).

Glenn Miller

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM APAR Names (APAR fix)

[Radoslaw Skorupka]

One of the threads is about APAR fix vel ++APAR.
Well, I used to teach SMP/E, IBM course ES26.

Here is exempt from Instructor Guide:
"APAR fixes are used to update an element. SMP/E invokes a superzap 
utility to update the module in place. Relinking the load module is 
usually not necessary. APAR fixes are referred to as corrective service."


And the APAR fix is named "emergency service". And the distinction 
between APAR and APAR fix is clearly described.
The material is copyrighted, so I won't put more, but the chapter 
explains the difference between PTF, APAR fix and usermod.
The name "APAR fix" is used many times and it is indeed the fix for the 
problem described in APAR.
BTW: Actually I'm not sure whether APAR fix has to be tied/linked to 
APAR or can be created without it. AFAIK this is only procedural, not 
"hardcoded" in any SMP/E logic. However I believe, despite of above 
every APAR fix is for some APAR.


BTW: Every element has a version. But it is more complex: there is a 
FMID "basic" version ID. Then the element can be updated (replaced) and 
get RMID, which is PTF number (last PTF which replaced the element). 
Then the element can be modified using APAR fix and gets UMID, which is 
APAR fix number. A usermod also modifies the element and element gets 
another UMID.
As a result, an element can have one FMID, zero to one RMID and zero to 
multiple UMIDs.


--
Radoslaw Skorupka
Lodz, Poland




W dniu 05.11.2023 o 15:54, Eric D Rossman pisze:

I'm not going to claim that I know the whole history of IBM Service 
(specifically in z), but I will say that Anthony and Seymour are the closest to 
accurate.

I can say that I have 20+ years of experience in ICSF Level 2 (the main 
debuggers near the start of my career) and Level 3 (the ones who write the fix) 
and was (for a time) the Level 3 lead.

We no longer have PMRs (now Cases) but the concept is the same. A customer 
reports a problem. L2 looks it over, trying to see if this is (usually in this 
order):
1. usage question (how do I use ...?)
2. customer mistake (crypto [ICSF, System SSL, etc.] and security [SAF, RACF, etc.], in 
particular, are very complicated and easy to "oopsie")
3. known problem (customers failing to apply service in a timely happens more 
than we would like to see)
4. a new problem

If it looks like a new problem, L2 works with L3 to decide and open an APAR (Authorized 
Problem Analysis Report) ["Authorised" if you are not in the US 😊]

Honestly, until today, I had never heard the phrase "APAR Fix". We always call 
them ++APARs and they are how we (internally) test our fixes. Back when ICSF was a web 
deliverable, our naming was all over the place for ++APARs. Now, we have a system that we 
stick to. I cannot guarantee that all z/OS components use the same system, but there is 
never a chance of a collision in naming. At some point in the past, I know that each 
rebuild would assign the next letter, (AAn for the first ++APAR, regardless of 
release) which would lead to collisions in naming. Nowadays, at least in my experiences, 
any ++APARs that we build replace the O with another letter (usually in the range A-J, 
but occasionally Z [at least for ICSF]) and that letter will be used for ALL ++APARs at a 
given release. For example, all ICSF HCR77D1 ++APARs will be DAn. Then, if we rebuild 
a ++APAR, the name stays the same but it acquires a REWORK() date. For example, a recent 
fix I shipped for HCR77D1 had its last ++APAR as:
++APAR(DAn) REWORK(2023271).

++APARs are not commonly given out, as we do it only if we want feedback on the 
fix from reporting customers. This is most common when the problem is really 
hard to reproduce EXACTLY (such as storage leaks that depend on some 
interactions of different workloads where we can get close but not exactly the 
same results as reported). It can also happen when we want confirmation that 
there is no side effect from a fix (very uncommon but sometimes we want the 
extra comfort when providing very complicated fixes).

I've never seen PTF stand for anything other than "Program Temporary Fix." Our 
tooling always makes a PTF SUP its corresponding ++APAR, even if we never shipped the 
++APAR to customers, just in case.

An APAR doesn't fix anything. It's just the "wrapper" for the fixes. For what 
it's worth, ++APARs are built using the same tooling as PTFs in order for our internal 
testing to be as close as possible to the PTFs that we ship.

As for "current practice," what specifically are you referring to? The vast 
majority of z/OS-related APARs would be OAn. Most vendor products that I've seen just 
use a different first letter. I cannot speak to how they name ++APARs or PTFs.

Eric Rossman



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Steve Wong]

Hello Linda,
We have a program that produces the results you are seeking.
If you are interested in learning more about our free Beta Test Program, please 
contact us at i...@dtssoftware.com

Regards,
Steve


From: IBM Mainframe Discussion List  on behalf of L H 

Sent: Thursday, November 9, 2023 2:00 PM
To: IBM-MAIN@LISTSERV.UA.EDU 
Subject: SMF record for number of program executions?

Hello,

I need to count the number of times some programs are executed on z/OS.

Not job names or CICS Tranids, but the times Cobol object code executed.

Does anyone know if a SMF record exists to record this, or does anyone have
an Assembler program to read the SMF and produce the counts?  Or a Merrill
example?

Any assistance or reference to manuals, cbttape, etc., is appreciated.

Thanks, Linda

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

CEE3512S / CSV034I

[Henri Kuiper]

Heya Fellow Mainframers,

I'm trying to do some 'normal ES256K' JWT token signage with python...

on my 'test SYSPLEX' this works like a charm.yet one hop over I get the
following

CEE3512S An HFS load of module
/.../site-packages/cryptography/hazmat/bindings/_openssl.abi3.so
failed. The system return code was 000157; the reason code was
0BDF019B.

MSGTXT: CSV034I PGMF FETCH FAILED FOR THE REQUESTED MODULE. RETURN CODE 14,
REASON CODE 26110021 PATHNAME =
/../site-packages/cryptography/hazmat/bindings/_openssl.abi3.so

I've checked all the obvious stuff : perms, openssl versions,
module/package versions for cryptography, python version etc. and they're
all the same...

. Does anyone have another idea where to look?...

Thanks!

*Henri Kuiper*
*zdevops*

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Charles Mills]

As @Ituriel says, If you want the jobstep program it is found in some of the 
SMF 30 records. No trick to finding it. IIRC it is very straightforward.

"Every program" comes up here from time to time and is basically impossible. 
There is no supported way. If you want to intercept SVCs (and I suspect you 
don't!) then you can get most of them. You are still not at 100%. A user could, 
for example, read in a program using BPAM and then branch to it.

There is another program name in one of the SMF segments. Highest CPU 
utilization program or something like that. It's an additional clue, but it is 
nowhere near "every program."

Charles

On Thu, 9 Nov 2023 19:14:23 +, Ituriel do Neto 
 wrote:

>If the program you want is specified in EXEC PGM= statement, then it is 
>possible to use SMF 30.
>
>If it is a subroutine, then it will be much more complicated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMF record for number of program executions?

[Ituriel do Neto]

If the program you want is specified in EXEC PGM= statement, then it is 
possible to use SMF 30.

If it is a subroutine, then it will be much more complicated.


Best Regards

Ituriel do Nascimento Neto
z/OS System Programmer






Em quinta-feira, 9 de novembro de 2023 às 16:01:27 BRT, L H 
 escreveu: 





Hello,

I need to count the number of times some programs are executed on z/OS.

Not job names or CICS Tranids, but the times Cobol object code executed.

Does anyone know if a SMF record exists to record this, or does anyone have
an Assembler program to read the SMF and produce the counts?  Or a Merrill
example?

Any assistance or reference to manuals, cbttape, etc., is appreciated.

Thanks, Linda

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SMF record for number of program executions?

[L H]

Hello,

I need to count the number of times some programs are executed on z/OS.

Not job names or CICS Tranids, but the times Cobol object code executed.

Does anyone know if a SMF record exists to record this, or does anyone have
an Assembler program to read the SMF and produce the counts?  Or a Merrill
example?

Any assistance or reference to manuals, cbttape, etc., is appreciated.

Thanks, Linda

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SORT Help with JFY and SQZ

[Don Johnson]

Kolusu, thanks once again! This is now complete and working as I had hoped!

Have a good evening!
Don

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SORT Help with JFY and SQZ

[Ituriel do Neto]

I think there is also another option, like below

 //STEP1  EXEC PGM=ICETOOL                                     
//TOOLMSG DD SYSOUT=*                                          
//DFSMSG  DD SYSOUT=*                                          
//IN      DD DISP=SHR,DSN=YOUR.DATASET 
//TOOLIN  DD *                                                 
* SET RC=12 IF THE 'IN' DATA SET IS EMPTY, OR                  
* SET RC=0 IF THE 'IN' DATA SET IS NOT EMPTY                   
 COUNT FROM(IN) EMPTY                                          
/*                                                             


Best Regards

Ituriel do Nascimento Neto
z/OS System Programmer






Em quinta-feira, 9 de novembro de 2023 às 13:18:44 BRT, Sri h Kolusu 
 escreveu: 





>> If the input file has no records to process, I would like to set a return 
>> code so I can bypass further processing. Is there a way that I can tweak 
>> this SORT input that you gave me to know if the SORTCMD1 file is empty, and 
>> set a CC for the step?

Don,

Yes, we can set a return code if the file is empty.  Cameron has the right idea 
of using NULLOUT, however it will NOT work in your case as you are using OUTFIL 
processing.  So, the parm you need to use is NULLOFL.

So, change this statement

OUTFIL BUILD=(1,133)

To

OUTFIL BUILD=(1,133),NULLOFL=RC4

This will set RC=4 when the input file is EMPTY.

Thanks,
Kolusu
DFSORT Development
IBM Corporation




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SORT Help with JFY and SQZ

[Sri h Kolusu]

>> If the input file has no records to process, I would like to set a return 
>> code so I can bypass further processing. Is there a way that I can tweak 
>> this SORT input that you gave me to know if the SORTCMD1 file is empty, and 
>> set a CC for the step?

Don,

Yes, we can set a return code if the file is empty.  Cameron has the right idea 
of using NULLOUT, however it will NOT work in your case as you are using OUTFIL 
processing.   So, the parm you need to use is NULLOFL.

So, change this statement

OUTFIL BUILD=(1,133)

To

OUTFIL BUILD=(1,133),NULLOFL=RC4

This will set RC=4 when the input file is EMPTY.

Thanks,
Kolusu
DFSORT Development
IBM Corporation



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SORT Help with JFY and SQZ

[Cameron Conacher]

I believe that NULLOUT might help you here. (OPTION Statement)

Temporarily overrides the NULLOUT installation option, which specifies the 
action to be taken by DFSORT when there are no records for the SORTOUT data 
set, as indicated by an OUT count of 0 in message ICE054I RC0 specifies that 
DFSORT should issue message ICE173I, set a return code of 0, and continue 
processing when there are no records for the SORTOUT data set. RC4 specifies 
that DFSORT should issue message ICE173I, set a return code of 4, and continue 
processing when there are no records for the SORTOUT data set. RC16 specifies 
that DFSORT should issue message ICE206A, terminate, and give a return code of 
16 when there are no records for the SORTOUT data set.


Thanks

…….Cameron

From: IBM Mainframe Discussion List  On Behalf Of Don 
Johnson
Sent: Thursday, November 9, 2023 10:48 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SORT Help with JFY and SQZ

Hi Kolusu, I have one question about a situation that just came up. If the 
input file has no records to process, I would like to set a return code so I 
can bypass further processing. Is there a way that I can tweak this SORT input 
that you


Hi Kolusu, I have one question about a situation that just came up.



If the input file has no records to process, I would like to set a return code 
so I can bypass further processing. Is there a way that I can tweak this SORT 
input that you gave me to know if the SORTCMD1 file is empty, and set a CC for 
the step?



Don



--

For IBM-MAIN subscribe / signoff / archive access instructions,

send email to lists...@listserv.ua.edu with 
the message: INFO IBM-MAIN


American Express made the following annotations

This e-mail was sent to you by a representative of Amex Bank of Canada, P.O. 
Box 3204, Station "F", Toronto, ON, M1W 3W7, www.americanexpress.ca. If you no 
longer wish to receive these e-mails, please notify the sender by reply e-mail.

This e-mail is solely for the intended recipient and may contain confidential 
or privileged information. If you are not the intended recipient, any 
disclosure, copying, use, or distribution of the information included in this 
e-mail is prohibited. If you have received this e-mail in error, please notify 
the sender by reply e-mail and immediately and permanently delete this e-mail 
and any attachments. Thank you.

American Express a fait les remarques suivantes
Ce courriel vous a été envoyé par un représentant de la Banque Amex du Canada, 
C.P. 3204, succursale F, Toronto (Ontario) M1W 3W7, www.americanexpress.ca. Si, 
par la suite, vous ne souhaitez plus recevoir ces courriels, veuillez en aviser 
les expéditeurs par courriel.

Ce courriel est réservé au seul destinataire indiqué et peut renfermer des 
renseignements confidentiels et privilégiés. Si vous n’êtes pas le destinataire 
prévu, toute divulgation, duplication, utilisation ou distribution du courriel 
est interdite. Si vous avez reçu ce courriel par erreur, veuillez en aviser 
l’expéditeur par courriel et détruire immédiatement le courriel et toute pièce 
jointe. Merci.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SORT Help with JFY and SQZ

[Don Johnson]

Hi Kolusu, I have one question about a situation that just came up.

If the input file has no records to process, I would like to set a return code 
so I can bypass further processing. Is there a way that I can tweak this SORT 
input that you gave me to know if the SORTCMD1 file is empty, and set a CC for 
the step?

Don

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Rexx TRANSLATE command

[Farley, Peter]

Looks to me like that google group is just a mirror of the regular email list, 
at least the most recent messages there are all reflected in my ISPF-L email 
folder.

But you are correct that there is not much activity on that list.

Peter

From: IBM Mainframe Discussion List  On Behalf Of 
Paul Gilmartin
Sent: Thursday, November 9, 2023 9:21 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Rexx TRANSLATE command

On Thu, 9 Nov 2023 11: 59: 06 +, Seymour J Metz wrote: >The translate 
function is part of REXX, not part of ISPF. You are having an ISPF issue. > 
>I've never tried modifying ZSCREEN, but I suspect that translating the whole 
thing

On Thu, 9 Nov 2023 11:59:06 +, Seymour J Metz wrote:



>The translate function is part of REXX, not part of ISPF. You are having an 
>ISPF issue.

>

>I've never tried modifying ZSCREEN, but I suspect that translating the whole 
>thing is messing up the format that ISPF expects.

>

I didn't know that was supposed to work.



> Is ISPF-L still a thing?

>

It sorta moved to Google.  Seems dormant:





--

This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Rexx TRANSLATE command

[Paul Gilmartin]

On Thu, 9 Nov 2023 11:59:06 +, Seymour J Metz wrote:

>The translate function is part of REXX, not part of ISPF. You are having an 
>ISPF issue.
>
>I've never tried modifying ZSCREEN, but I suspect that translating the whole 
>thing is messing up the format that ISPF expects.
>
I didn't know that was supposed to work.

> Is ISPF-L still a thing?
>
It sorta moved to Google.  Seems dormant:


-- 
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Sv: Rexx TRANSLATE command

[Lars Höglund]

I think that I found it

ZSCREENI is just a "photo" of the screen, so '00'x is presented as "blank" 
(nondisplay) in Edit and View, but '.' when in Browse. 
So the '.' will be treated as a '.' ('4B'x) and not what is really is ('00'x)

So VCURSOR will not work in that situation

//Lasse

-Ursprungligt meddelande-
Från: IBM Mainframe Discussion List  För Seymour J 
Metz
Skickat: den 9 november 2023 12:59
Till: IBM-MAIN@LISTSERV.UA.EDU
Ämne: Re: Rexx TRANSLATE command

The translate function is part of REXX, not part of ISPF. You are having an 
ISPF issue.

I've never tried modifying ZSCREEN, but I suspect that translating the whole 
thing is messing up the format that ISPF expects. Is ISPF-L still a thing?

-- 
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
עַם יִשְׂרָאֵל חַי




From: IBM Mainframe Discussion List  on behalf of 
Lars Höglund 
Sent: Thursday, November 9, 2023 3:31 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Rexx TRANSLATE command

Hi

Looking at Doug Nadel VCURSOR and having a problem understanding the TRANSLATE 
he Is doing

trtable='abcdefghijklmnopqrstuvwxyz'   /* Setup valid dsname chars   */
trtable=trtable!!translate(trtable)!!'ÅÄÖ0123456789.''-ä()'
trtable=translate(xrange('00'x,'FF'x),,trtable,' ')
zscreeni=translate(zscreeni,,trtable,' ') /* Remove non-Dsn chars*/

It works most of the times (in Edit, View, Browse, SDSF...)

But when I'm using it on datasetnames with '00'x surrounding it, it works in 
Edit and View, NOT in Browse mode

Doesn't TRANSLATE work the same way regardless of mode?

Sample:

.K39828.ISP.EXEC.. HEX BEFORE AND AFTER
40DF4CED4CECC004CCE4CCCDDC4CDC4CCECD4
00239828B927B5753010857025669501540163590

  K39828.ISP.EXEC   NO HEX
44DF4CED4CECC444DD4CCE444
00239828B927B5753000560857000

The result:

   Menu  Utilities  Compilers  Help
 sss
BROWSEK39828.A.CNTL(VCUR) - 01.01  Li   Data set not cataloged
 Command ===>  Scroll ===> CSR
* Top of Data **
.K39828.ISP.EXEC.. HEX BEFORE AND AFTER
  K39828.ISP.EXEC   NO HEX
 Bottom of Data 


   _
   e 'K39828..K39828.ISP.EXEC..' was not found in catalog. e
   _

//Lasse

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Anyone with zCX docker hands on?

[Kirk Wolf]

On many archs, ChaCha20-Poly1305 is implemented using vector instructions. On 
z/OS, OpenSSH now supports a SIMD (vector) enhance version.  Not quite as good 
as CPACF with AES+SHA256 however.

Kirk Wolf
Dovetailed Technologies
http:// coztoolkit.com

On Thu, Nov 9, 2023, at 12:21 AM, Timothy Sipples wrote:
> Tony Harminc wrote:
> >Do the zArch crypto instructions support the crypto operations used by
> >Wireguard? I see PCKMO supports Curve25519 for key exchange, but I'm not
> >seeing any of the others. Does the apparent high performance of the
> >symmetric crypto running on a CP or specialty engine outdo the crypto
> >hardware on z?
> 
> WireGuard has been part of the Linux kernel since kernel 5.6 (March 29, 
> 2020). WireGuard leans heavily on ChaCha20-Poly1305. Its designers picked 
> ChaCha20-Poly1305 in large part because even generic implementations 
> typically perform well even on extremely resource limited systems.
> 
> Even so, ChaCha20-Poly1305 performance optimizations are possible to raise 
> “excellent” to “super excellent” performance. See here for one important 
> example:
> 
> https://community.ibm.com/community/user/ibmz-and-linuxone/blogs/bill-ofarrell/2023/09/22/killer-crypto-in-go-on-zos-crypto-acceleration
> 
> The mainline Linux kernel includes a non-generic, performance optimized 
> implementation of ChaCha20-Poly1305 for s390x. Refer to 
> arch/s390/crypto/chacha-s390.S. Wireguard is supposed to use kernel default 
> cryptographic APIs if/when it doesn’t supply its own, so it should pick up 
> those same ChaCha20-Poly1305 optimizations on s390x. Or at least that’s my 
> understanding, and only with a cursory glance at kernel source code.
> 
> —
> Timothy Sipples
> Senior Architect
> Digital Assets, Industry Solutions, and Cybersecurity
> IBM zSystems/LinuxONE, Asia-Pacific
> sipp...@sg.ibm.com
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Rexx TRANSLATE command

[Seymour J Metz]

The translate function is part of REXX, not part of ISPF. You are having an 
ISPF issue.

I've never tried modifying ZSCREEN, but I suspect that translating the whole 
thing is messing up the format that ISPF expects. Is ISPF-L still a thing?

-- 
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
עַם יִשְׂרָאֵל חַי




From: IBM Mainframe Discussion List  on behalf of 
Lars Höglund 
Sent: Thursday, November 9, 2023 3:31 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Rexx TRANSLATE command

Hi

Looking at Doug Nadel VCURSOR and having a problem understanding the TRANSLATE 
he Is doing

trtable='abcdefghijklmnopqrstuvwxyz'   /* Setup valid dsname chars   */
trtable=trtable!!translate(trtable)!!'ÅÄÖ0123456789.''-ä()'
trtable=translate(xrange('00'x,'FF'x),,trtable,' ')
zscreeni=translate(zscreeni,,trtable,' ') /* Remove non-Dsn chars*/

It works most of the times (in Edit, View, Browse, SDSF...)

But when I'm using it on datasetnames with '00'x surrounding it, it works in 
Edit and View, NOT in Browse mode

Doesn't TRANSLATE work the same way regardless of mode?

Sample:

.K39828.ISP.EXEC.. HEX BEFORE AND AFTER
40DF4CED4CECC004CCE4CCCDDC4CDC4CCECD4
00239828B927B5753010857025669501540163590

  K39828.ISP.EXEC   NO HEX
44DF4CED4CECC444DD4CCE444
00239828B927B5753000560857000

The result:

   Menu  Utilities  Compilers  Help
 sss
BROWSEK39828.A.CNTL(VCUR) - 01.01  Li   Data set not cataloged
 Command ===>  Scroll ===> CSR
* Top of Data **
.K39828.ISP.EXEC.. HEX BEFORE AND AFTER
  K39828.ISP.EXEC   NO HEX
 Bottom of Data 


   _
   e 'K39828..K39828.ISP.EXEC..' was not found in catalog. e
   _

//Lasse

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Connect Direct - AUthentication using Proxy

[Rasmussen, A. (Andre)]

Hi

You will have to enable the security exits (Stage 1 and Stage 2) for option 2.
Client authentication is only an added security layer for TLS and enabled 
within Secure+. It has nothing to do with the actual transfer access required 
to place files. For this you will need local userids with their respective 
remote userids defined in the AUTH file.

Regards
Andre

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Gilson Cesar de Oliveira
Sent: Tuesday, November 07, 2023 23:15
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Connect Direct - AUthentication using Proxy

⚠️ CAUTION: EXTERNAL SENDER - Please be careful when opening links and 
attachments. ⚠️ Please report any suspicious mail to phish...@nedbank.co.za. 
Nedbank Information Security

Dear list,



We are planning to enable Security in Connect Direct for 
external partners and we can see, as far as I understood, three options:



1.  Enable Security exit and define all the external userids to
authenticate using this exit with interface to RACF;
2.  Create an internal userid which will be translated using the proxy
(AUTH file) and allowing some functions within the Connect Direct 
(Authorization File).

For example, external userid JOHN, when starting a transmission to node
CD.NODE.L1 will be "INTUSER"  which will have authority in RACF to create a 
dataset with HLQ=TST.FILE.CPY1



3.  Authentication with Certificate and Node. Using this option will
allow the user JOHN from node CD.NODE.L1 to be authenticated using the node and 
the Common Name (CN) defined in the certificate without using userid and 
password.



For all the options described above, we have some questions:



*   Do we need to enable the security exits (Stage 1 and Stage 2) for
option 2?
*   In option 3, do we need to enable anything else than the
configuration in Secure+ to enable Cliente Auth ?
*   For option 3, where the authentication is made using node and
certificate, does the user can transfer files or only submit process ??
*   For option 3, do we need to define an internal userid through the
proxy and allow this userid to create datasets when transmitting data to our 
internal node ??



If someone have any experience with it and could help, I really appreciate that.



Thanks in advance,



Gilson



--
O software antivírus AVG realizou uma checagem de vírus neste e-mail.
http://www.avg.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Nedbank Limited group of companies (Nedbank) disclaimer and confidentiality 
notice:

This email, including any attachments (email), contains information that is 
confidential and is meant only for intended recipients. You may not share or 
copy the email or any part of it, unless the sender has specifically allowed 
you to do so. If you are not an intended recipient, please delete the email 
permanently and let Nedbank know that you have deleted it by replying to the 
sender or calling the Nedbank Contact Centre on +27 (0)800 555 111 (local) or 
+27 (0)10 2170 000 (international).

This email is not confirmation of a transaction or a Nedbank statement and is 
not offering or inviting anyone to take up any financial products or services, 
unless the content specifically indicates that it does so. Nedbank will not be 
liable for any errors or omissions in this email. The views and opinions are 
those of the author and not necessarily those of Nedbank.

The names of the Nedbank Board of Directors and Company Secretary are available 
here: http://www.nedbank.co.za/terms/DirectorsNedbank.htm. Nedbank Ltd Reg No 
1951/09/06.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Rexx TRANSLATE command

[Lars Höglund]

Hi

Looking at Doug Nadel VCURSOR and having a problem understanding the TRANSLATE 
he Is doing

trtable='abcdefghijklmnopqrstuvwxyz'   /* Setup valid dsname chars   */
trtable=trtable!!translate(trtable)!!'ÅÄÖ0123456789.''-ä()'
trtable=translate(xrange('00'x,'FF'x),,trtable,' ')
zscreeni=translate(zscreeni,,trtable,' ') /* Remove non-Dsn chars*/

It works most of the times (in Edit, View, Browse, SDSF...)

But when I'm using it on datasetnames with '00'x surrounding it, it works in 
Edit and View, NOT in Browse mode

Doesn't TRANSLATE work the same way regardless of mode?

Sample:

.K39828.ISP.EXEC.. HEX BEFORE AND AFTER
40DF4CED4CECC004CCE4CCCDDC4CDC4CCECD4
00239828B927B5753010857025669501540163590

  K39828.ISP.EXEC   NO HEX
44DF4CED4CECC444DD4CCE444
00239828B927B5753000560857000

The result:

   Menu  Utilities  Compilers  Help
 sss
BROWSEK39828.A.CNTL(VCUR) - 01.01  Li   Data set not cataloged
 Command ===>  Scroll ===> CSR
* Top of Data **
.K39828.ISP.EXEC.. HEX BEFORE AND AFTER
  K39828.ISP.EXEC   NO HEX
 Bottom of Data 


   _
   e 'K39828..K39828.ISP.EXEC..' was not found in catalog. e
   _

//Lasse

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN