Re: Any shop use UNIX in a production job?

[Alan(GMAIL)Watthey]

BPXWDYN is a Unix Service as far as I am concerned as it's part of z/OS Unix 
System Services.  Check out which manual it's documented in.  I suspect it's 
under the Unix FMID as well but I haven't checked that part.

I consider anything that begins BPX to be z/OS Unix System Services but I'm 
willing to be corrected on that one.  I certainly haven't used them all.

-Original Message-
From: Paul Gilmartin  
Sent: 14 April 2020 5:16 pm
Subject: Re: Any shop use UNIX in a production job?

On Tue, 14 Apr 2020 12:59:54 +0300, Alan(GMAIL)Watthey wrote:

>John,
>
>You make it sound like Rexx and Unix are mutually exclusive.  I have a Unix 
>job that runs in production.  Well, it depends on your definition of 
>production of course.  It actually runs on every system we have.
>
>It's started each midnight by CROND so definitely only has access to Unix 
>services and it is all written in Rexx.
>
What do you mean to restrict by "only  has access to Unix services"?
That Rexx can perform allocations with BPXWDYN.  It can invoke load modules 
with ADDRESS LINKMVS.  It can use ADDRESS TSO
(surrogate) and thereby ISPF services.

Is there anything it could have done under IRXJCL, but not under UNIX?
(Or are you just asserting the not "mutually exclusive"?)

The exception I see is initiator ENQ serialization and deadlock prevention.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Any shop use UNIX in a production job?

[Alan(GMAIL)Watthey]

Agghh.  Of course I meant CA-SPOOL.

-Original Message-
From: Alan(GMAIL)Watthey 
Sent: 14 April 2020 1:00 pm
To: IBM Mainframe Discussion List 
Subject: RE: Any shop use UNIX in a production job?

John,

You make it sound like Rexx and Unix are mutually exclusive.  I have a Unix job 
that runs in production.  Well, it depends on your definition of production of 
course.  It actually runs on every system we have.

It's started each midnight by CROND so definitely only has access to Unix 
services and it is all written in Rexx.

It basically takes the SYSLOGD files (another Unix process) that are created 
each day in /tmp/syslog and writes them off to Jes2 spool with all the correct 
control info so CA-VIEW can pick them up and populate its database (with all 
the correct headers filled in so we can filter as we wish).  We only have a 
short history in /tmp/syslog but as big as we like in CA-VIEW.

Regards,
Alan

-Original Message-
From: John McKown  
Sent: 13 April 2020 3:07 pm
Subject: Any shop use UNIX in a production job?

Other than the implicit use of UNIX by things such as FTP, I mean. In 
particular I am speaking of keeping production data in a UNIX file, rather than 
a legacy dataset; use of scripting via /bin/sh, awk, or other, use of any of 
the BPX* UNIX callable services.

Just curious. I use awk at times for doing stuff in my personal activities.
But my manager dislikes UNIX so I can't use it in any of my "production"
jobs because "nobody knows UNIX" and "everybody knows REXX".

--
People in sleeping bags are the soft tacos of the bear world.
Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Any shop use UNIX in a production job?

[Alan(GMAIL)Watthey]

John,

You make it sound like Rexx and Unix are mutually exclusive.  I have a Unix job 
that runs in production.  Well, it depends on your definition of production of 
course.  It actually runs on every system we have.

It's started each midnight by CROND so definitely only has access to Unix 
services and it is all written in Rexx.

It basically takes the SYSLOGD files (another Unix process) that are created 
each day in /tmp/syslog and writes them off to Jes2 spool with all the correct 
control info so CA-VIEW can pick them up and populate its database (with all 
the correct headers filled in so we can filter as we wish).  We only have a 
short history in /tmp/syslog but as big as we like in CA-VIEW.

Regards,
Alan

-Original Message-
From: John McKown  
Sent: 13 April 2020 3:07 pm
Subject: Any shop use UNIX in a production job?

Other than the implicit use of UNIX by things such as FTP, I mean. In 
particular I am speaking of keeping production data in a UNIX file, rather than 
a legacy dataset; use of scripting via /bin/sh, awk, or other, use of any of 
the BPX* UNIX callable services.

Just curious. I use awk at times for doing stuff in my personal activities.
But my manager dislikes UNIX so I can't use it in any of my "production"
jobs because "nobody knows UNIX" and "everybody knows REXX".

--
People in sleeping bags are the soft tacos of the bear world.
Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM PCOMM Utilities

[Alan(GMAIL)Watthey]

Arye,

I have V13.0.2 and I can confirm that the Utilities option is not there.  I'd 
open a PMR (or is it Case nowadays) with IBM about this.

I've already had them write a fix for me on V13 due to the Menu Bar 
Customisation not working correctly.

Regards,
Alan Watthey

-Original Message-
From: Arye Shemer  
Sent: 18 November 2019 10:14 pm
Subject: IBM PCOMM Utilities

IHAC who is installing PCOMM 13.
The  Utilities menu does not appears where is should be by IBM
KNOWLEDGECENTER:
>From the Start -> Programs -> IBM® Personal Communications -> Utilities menu, 
>select Certificate Management.

Customer is trying to use Certificate Manager to use the Key DB to import the 
signer certificate.

Has anyone understand the problem described above and help ?

Thank you,
Arye Shemer.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z14 SE clocks sync to HMC/NTP

[Alan(GMAIL)Watthey]

Jim,

What's wrong with telling the two SE's to get their time from the same NTP 
server?  That's what I got our SE to set up.  

Regards,
Alan Watthey

-Original Message-
From: Jim Elliott  
Sent: 21 June 2019 5:14 pm
Subject: z14 SE clocks sync to HMC/NTP

We have an issue where the 2 Support Elements on a z14 (3907) don't have the 
same clock value and don't match the HMC clock. The HMC is getting the time 
from an NTP server. There is no STP in this environment, and all the doc seems 
to talk about using STP. How do we get the SEs to sync up to the clock on the 
HMC without STP?

Regards, Jim

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Validate SAN switch

[Alan(GMAIL)Watthey]

You could just try the various commands available to see what you get.

D IOS,FICON
D M=SWITCH(ss)
D M=DEV(,(cc)),ROUTE=BOTH
D M=DEV(,(cc)),LINKINFO=COMPARE

For the D M=DEV.  These are examples as there are a few options for various 
things so check out the manual.  Note you must obviously specify a single path 
hence the inclusion of the CHPID (cc).  However, do a D M=DEV() to get a 
list of all the CHPIDs available.

Regards,
Alan Watthey

-Original Message-
From: Peter  
Sent: 01 May 2019 10:09 am
Subject: Re: Validate SAN switch

'On your z/OS you might also have the latest command additions to display stuff 
like the SFPs and light intensity on fibres which you might find useful'

Interesting any idea from zOS level I can use the commands on zOS ?

On Wed, 1 May, 2019, 9:34 AM Alan(GMAIL)Watthey, 
wrote:

> Peter,
>
> Well, if an interface goes down that z/OS has in its IODF then you'll 
> probably get loads of messages out about it on the z/OS consoles.  
> However, if another interface goes down (say an ISL or a backend tape) 
> then you won't.
>
> I specify that SYSLOG from my SAN Directors is sent to a server (there 
> it is logged, emails sent, incidents generated, whatever) and then I 
> can see everything that is going on.  We have Brocade so I also enable 
> MAPS and get transient information about CRC, latency, etc issues 
> logged which z/OS never sees.
>
> If you've got the FMS option (CUP) and generate that in the IODF and 
> vary it online then there is information sent to z/OS on that link as well 
> (eg.
> RMF).
>
> I know there's a problem before anyone else does.  Resolving it is 
> another issue of course.
>
> How do you check from the Director?  I use the switchshow and 
> porterrshow commands on my Brocades but there are loads of others.  
> See the manuals for your particular Director.  There's also the web 
> interface.  Limited, but it might show what you need.
>
> On your z/OS you might also have the latest command additions to 
> display stuff like the SFPs and light intensity on fibres which you 
> might find useful.  I prefer to use the Directors.
>
> Regards,
> Alan Watthey
>
> -Original Message-
> From: Peter 
> Sent: 30 April 2019 1:53 pm
> Subject: Validate SAN switch
>
> Hi
>
> This is just a general question
>
> If any one of the switch is in error or down. How do we validate or 
> check from the Mainframe (zOS) that a particular ficon is not working 
> ? Is it just displaying the ficon device alone will be enough ?
> Then how do we check from SAN switch login ?
>
> Any advise would be helpful.
>
> Peter
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Validate SAN switch

[Alan(GMAIL)Watthey]

Peter,

Well, if an interface goes down that z/OS has in its IODF then you'll probably 
get loads of messages out about it on the z/OS consoles.  However, if another 
interface goes down (say an ISL or a backend tape) then you won't.

I specify that SYSLOG from my SAN Directors is sent to a server (there it is 
logged, emails sent, incidents generated, whatever) and then I can see 
everything that is going on.  We have Brocade so I also enable MAPS and get 
transient information about CRC, latency, etc issues logged which z/OS never 
sees.

If you've got the FMS option (CUP) and generate that in the IODF and vary it 
online then there is information sent to z/OS on that link as well (eg. RMF).

I know there's a problem before anyone else does.  Resolving it is another 
issue of course.

How do you check from the Director?  I use the switchshow and porterrshow 
commands on my Brocades but there are loads of others.  See the manuals for 
your particular Director.  There's also the web interface.  Limited, but it 
might show what you need.

On your z/OS you might also have the latest command additions to display stuff 
like the SFPs and light intensity on fibres which you might find useful.  I 
prefer to use the Directors.

Regards,
Alan Watthey

-Original Message-
From: Peter  
Sent: 30 April 2019 1:53 pm
Subject: Validate SAN switch

Hi

This is just a general question

If any one of the switch is in error or down. How do we validate or check from 
the Mainframe (zOS) that a particular ficon is not working ? Is it just 
displaying the ficon device alone will be enough ?
Then how do we check from SAN switch login ?

Any advise would be helpful.

Peter

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: TCPIP IP address for current LPAR

[Alan(GMAIL)Watthey]

Stan,

There's a big difference between an IP address of the current stack and a 
usable IP address of the current stack.  It would not be much use giving an IP 
address of, say, a hipersocket interface home address which is not routable.  
Although you can find out all the home addresses (there have been a few 
solutions given for that) you would not know which one to pass back to the 
remote application.

You could assume that the primary IP address is a good one to use (it would be 
if SOURCEVIPA were in use) or you could do what DB2 resync processing does.  
The DB2 guys just code a DNS name for that and then the resolver translates it 
using /etc/ipnodes so that's what DB2 passes to the end server to use to 
connect back in.

Regards,
Alan Watthey

-Original Message-
From: Stan Weyman  
Sent: 29 April 2019 3:00 pm
Subject: TCPIP IP address for current LPAR

   Is there an accessible control block that holds the IP address (or 
addresses) for the current LPAR I'm running on?   I have need to pass back this 
address to another remote application and would prefer to interrogate a control 
block rather than issue commands to obtain same a la D TCPIP,,NETSTAT,HOME 
(although this would be my alternative).   A sample snippet of code would be 
great but the location should let me get there.  

   Is there any other option that getting the @ from a control block or using D 
TCPIP,,NETSTAT,HOME?

   Thanks ahead of time 

  Regards
  Stan


 

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Where does ISPF determine how to repsond to "Attention" function?

[Alan(GMAIL)Watthey]

There may be a few more variables to consider here to understand all the 
differences.  I certainly can't remember all the nuances off the top of my head.

I would think the logmode used might affect what the ATTN (ESC) key does (and 
SYS-REQ).  SNA supports it whereas NON-SNA does not.  Then there is the 
SNAEXT/NOSNAEXT parameter in TELNET that might have an effect.

Reset/PA1 is going to work on NON-SNA but maybe not on SNA if the SLU is in 
bracket and does not have direction.  That's normal on TSO if I remember 
correctly.

What about TN3270E as opposed to TN3270?

Someone already mentioned a session manager in the middle which could change 
things.

A bit of testing would be needed to confirm anything though.  One tends to find 
something that works at your particular shop with your users and forget what 
all the other options do.

Regards,
Alan Watthey

-Original Message-
From: Attila Fogarasi  
Sent: 20 February 2019 5:46 am
Subject: Re: Where does ISPF determine how to repsond to "Attention" function?

Peter, the answer to your PA1 Reshow mystery is simple:  this is deliberate 
behaviour by ISPF which treats PA1 differently when keyboard is locked or 
unlocked.  Pressing PA1 when unlocked (for example editing full screen as in 
your friend's case) will cause ISPF to treat PA1 as Reshow -- same as PA2.  
Pressing PA1 a second time will cause ISPF to treat it as ATTN which means 
interrrupt whatever is currently executing.  By contrast if PA1 is pressed when 
the keyboard is locked (e.g. unlock using the Reset key and then PA1) will 
always be treated as an ATTN.  All this changes if ISPF is invoked from a CLIST 
with an Attention exit but that is a topic for advanced or masochistic users.
So the state of the keyboard locked/unlocked is different in your 2 cases.
Lots of configuration options will cause this difference, but it has nothing to 
do with data streams constructed by the TN3270E emulator.  Note that is the 
keyboard state as observed by ISPF and not necessarily what you see at the 
keyboard :)

On Wed, Feb 20, 2019 at 10:51 AM Farley, Peter x23353 < 
peter.far...@broadridge.com> wrote:

> Experiment showed me that both PCOMM and Vista TN3270 seem to send the 
> same thing for "Attention", as both emulators work using "Attention" 
> as "reshow" on my employer's network.  Unfortunately there is no 
> chance I could arrange to get a buffer trace from my employer's 
> mainframe communications team when we have no problem.
>
> I'm not sure what intermediary system(s) my friend uses there.  I can 
> ask, but my friend was quite happy to learn about using PA1 / PA2 for 
> "reshow", so it may be a moot point.
>
> Thanks to all for your replies to satisfy my curiosity.  I love 
> learning like this, in a community that cares enough to educate and inform.
>
> Peter
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Seymour J Metz
> Sent: Tuesday, February 19, 2019 6:17 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Where does ISPF determine how to repsond to "Attention"
> function?
>
> ISPF uses VTIOC facilities, e.g., TGET, TPG, TPUT,  to communicate 
> with the terminal. By default VTIOC will interpret ATTN or PA1 as 
> attention and
> PA2 as reshow. However,
>
>  1. It's anybody's guess whether PCOMM send ATTN or PA1 for "Attention".
>
>  2. ISPF runs in full screen mode, so things are a little different.
>
>  3. The above assumes that VTIOC is in session with the terminal, not 
> with an intermediate program.
>
> From what you wrote I would assume that at your friend's shop the 
> terminal is coming in through, e.g., NVAS, TPX.
>
>
> --
> Shmuel (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
>
> 
> From: IBM Mainframe Discussion List  on 
> behalf of Farley, Peter x23353 
> Sent: Monday, February 18, 2019 5:20 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Where does ISPF determine how to repsond to "Attention" function?
>
> [Dual-posted to ISPF-L and IBM-MAIN]
>
> On my employer's z/OS 2.2 system and as far back as they have employed 
> me
> (OS/390 R10 IIRC), pressing "Attention" (Esc on my PCOMM keyboard map) 
> while in an ISPF screen "refreshes" the screen to the last stable 
> state, so if you accidentally erased a whole line of program code or 
> JCL you can recover what was there before the erase as long as you 
> didn't press Enter or any PF/PA key before pressing "Attention".
>
> On a friend's z/OS system (not sure of the release), pressing "Attention"
> at any ISPF screen causes the terminal to be taken out of service 
> (VTAM INACT).
>
> My question is where and how does ISPF determine how to respond to 
> "Attention" to refresh the screen instead of making the terminal 
> INACT?  Or is that a VTAM function/setting of some kind?  If it is 
> VTAM, where is it specified?
>
> Just curious here, no actual problem to be solved ("Doctor!  Doctor!  
> It hurts when I do th

Re: Zowe for systems programmer ?

[Alan(GMAIL)Watthey]

Hi,

I've been reading this thread with some interest and it's easy to come up with 
loads of arguments why updating datasets with ISPF is better as it works and 
has been the way it's been done since before I started in the seventies.  
Likewise for VM and VSE although I haven't had contact with those for many a 
year.  However, this is usually not the best argument for anything and denies 
progress.

For me, I guess at the end of the day it doesn't matter on the technicalities 
so long as I can do the equivalent of the ISPF COMP command with MD/MDD/D/DD.  
This shows me what changes I am about to make and whether they really are the 
changes I meant to make  This covers others updating the dataset as well as my 
own typos.  Even with ISPF locking on the dataset, sometimes I've made updates 
to copies of many members in many PDS's days in advance of a really big change 
so it can happen that someone else has made a change in the intervening time.  
COMP will detect that so I can add other's changes to mine at the last minute.

I'd also need to be able to get back to the earlier versions without actually 
having a network.  When we test we can sometimes find the OSA consoles the only 
thing working.  A quick ISPF edit plus IPL can usually correct such issues.  
Imagine messing up some of the main system PROCs such as VTAM.  I'd need to 
edit the pack from another system.  All is possible with ISPF.

Regards,
Alan Watthey

-Original Message-
From: David Crayford  
Sent: 31 August 2018 6:45 am
Subject: Re: Zowe for systems programmer ?

On 31/08/2018 8:21 AM, Andrew Rowley wrote:
>> Of course it's possible to prevent simultaneous edits, at least to 
>> the extent that you claim ISPF does. ISPF doesn't REALLY prevent 
>> simultaneous edits; it relies on a convention, and you have to hope 
>> that everyone follows the convention. That's the issue that started 
>> this thread. In Unix that's traditionally been done with a lock 
>> directory playing the role of an ENQ, but it can be done. It's just 
>> that -- no one does, because source control is a better solution.
> Everyone has to follow the convention, and on z/OS they largely do. 
> Many think that new z/OS applications should continue to follow the 
> convention, regardless of what people on other platforms do.
>
> Source control is not a better solution, it is a solution to a 
> slightly different problem. When using source control you STILL need 
> to make sure that 2 people are not updating the same file at the same 
> time - it is just the window that is smaller. 

Using a distributed VCS like Git everybody has their own copy of the 
source code so there is never a case off two people updating the same 
file at the same time. Conflicts are detected when pushing changes and 
that's when merging kicks in.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: FICON "Invalid attachment failure"

[Alan(GMAIL)Watthey]

Radoslaw,

What are we talking about here?  Cisco or Brocade?  Which model?  What was
the 'exact' message logged in the switch itself?

Regards,
Alan Watthey

-Original Message-
From: R.S.  
Sent: 22 August 2018 1:17 pm
Subject: FICON "Invalid attachment failure"

Two FICON channels were connected to a switch.
Both signal an error "Invalid attachment failure" (this is visible on SE)
I checked port#, zoning, HCD/IODF and have no idea what to check futher.
z13 FICON Express16S, DCX8510-4 with 8Gbps SFP.


Any clue?

-- 
Radoslaw Skorupka
Lodz, Poland




==

Jeśli nie jesteś adresatem tej wiadomości:

- powiadom nas o tym w mailu zwrotnym (dziękujemy!),
- usuń trwale tę wiadomość (i wszystkie kopie, które wydrukowałeś lub
zapisałeś na dysku).
Wiadomość ta może zawierać chronione prawem informacje, które może
wykorzystać tylko adresat.Przypominamy, że każdy, kto rozpowszechnia
(kopiuje, rozprowadza) tę wiadomość lub podejmuje podobne działania, narusza
prawo i może podlegać karze.

mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950
Warszawa,www.mBank.pl, e-mail: kont...@mbank.pl. Sąd Rejonowy dla m. st.
Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, KRS
025237, NIP: 526-021-50-88. Kapitał zakładowy (opłacony w całości)
według stanu na 01.01.2018 r. wynosi 169.248.488 złotych.

If you are not the addressee of this message:

- let us know by replying to this e-mail (thank you!),
- delete this message permanently (including all the copies which you have
printed out or saved).
This message may contain legally protected information, which may be used
exclusively by the addressee.Please be reminded that anyone who disseminates
(copies, distributes) this message or takes any similar action, violates the
law and may be penalised.

mBank S.A. with its registered office in Warsaw, ul. Senatorska 18, 00-950
Warszawa,www.mBank.pl, e-mail: kont...@mbank.pl. District Court for the
Capital City of Warsaw, 12th Commercial Division of the National Court
Register, KRS 025237, NIP: 526-021-50-88. Fully paid-up share capital
amounting to PLN 169,248,488 as at 1 January 2018.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Any VTAM service to query an LU?

[Alan(GMAIL)Watthey]

Charles,

Have you considered writing an SPO (Secondary Program Operator) and issuing
the D NET command you want?  Then you will get exactly the same information
back which you say has everything.

You just need a definition in VTAMLST for your APPL and you can run it from
TSO or anywhere.

Regards,
Alan Watthey

-Original Message-
From: Charles Mills [mailto:charl...@mcn.org] 
Sent: 17 July 2018 1:20 am
Subject: Any VTAM service to query an LU?

Is there a VTAM macro or call that will return machine-readable status
information for an LU? 

I am looking for information more or less equivalent to what D NET,ID=luname
returns but in a program-friendly rather than human-friendly format.

I RTFMs but perhaps I am Ring the wrong FMs.

Thanks,

Charles

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: NVAS admin panel issue

[Alan(GMAIL)Watthey]

If you look in the EMSGAL VSAM dataset you will see all the defined 
administrators.  You may have to REPRO the data out to a flat file to read it 
of course.  There are different types of administrators (system, group, 
broadcast) so you'll have to work out which is which but if you know your users 
this should fairly obvious.  I'm not sure but there may be an 'S' in the entry 
for a system operator.

Regards,
Alan Watthey

-Original Message-
From: saurabh khandelwal [mailto:sourabhkhandelwal...@gmail.com] 
Sent: 15 July 2018 3:38 pm
Subject: Re: NVAS admin panel issue

Hello  Elardus *,*

Sorry for late reply.

I run this BATCHLO utility  and output was

NV/AS Batch Load & Reporting
Initialization





NV/AS Batch Load & Reporting Options:





EXEC,UID=PUBUSER,UNLOCK






Consistency Check of the NV/AS Database





NV/AS Batch Load & Reporting
Statistics







Correct commands:0



Incorrect commands:  0


Total commands:  0




Couple of other points,

1) I didnt find pubuser in our RACF
2) Now we are not able to get into admin panel because, we don't know which
user is having admin access.
3) Is there any way that we can use this pubuser to define other admin
user. But not sure how.


On Thu, Jul 12, 2018 at 2:57 PM, Elardus Engelbrecht <
elardus.engelbre...@sita.co.za> wrote:

> George Rodriguez wrote:
>
> >On the ADM menu there's an option 7 - Define an Administrator for making
> a regular user an administrator. You need to be an Admin already to use
> this option. If I'm right, the initial system came with a default
> administrator.
>
> The default one is PUBUSER. What the password is, is a guess. If RACF is
> required to logon, it should be easy to fix that.
>
>
> >To get a list of who's already define as an administrator, select option
> 7, on option User enter a ? and on the command line enter l (list).
>
> Of course you need to be an admin in the first place... ;-)
>
> Or run this job:
>
> //BATCHLO  EXEC PGM=EMSBXPMC,REGION=2M,
> // PARM='EXEC,UID=PUBUSER,UNLOCK'
> //STEPLIB   DD DSN=?=SHR
> //EMSBSRTS  DD DSN=?,DISP=SHR
> //EMSBSRTG  DD DSN=?,DISP=SHR
> //EMSBSRTU  DD DSN=?,DISP=SHR
> //EMSBPLDT  DD DSN=?,DISP=SHR
> //EMSBGPRF  DD DSN=?,DISP=SHR
> //EMSBALLT  DD DSN=?,DISP=SHR
> //EMSBGAL   DD DSN=?,DISP=SHR
> //SYSPRINT  DD SYSOUT=*,DCB=(LRECL=133,RECFM=FBA)
> //EMSBREPO  DD SYSOUT=*,DCB=(LRECL=133,RECFM=FBA)
> //EMSBLIST  DD SYSOUT=*,DCB=(LRECL=133,RECFM=FBA)
> //SYSUDUMP  DD SYSOUT=*
> //EMSBCOMM  DD *
>  LIST   ADMINISTRATOR,
>   USER_ID=*,
>   GROUP_NAME=*
>
> Groete / Greetings
> Elardus Engelbrecht
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>



-- 
Thanks & Regards
Saurabh Khandelwal

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: NVAS admin panel issue

[Alan(GMAIL)Watthey]

Saurabh,

As you were already told on the Netview forum, you need to be defined as an 
NVAS Administrator.  Your userid is obviously not.  However, you can instead 
update the settings in batch and then restart NVAS.

Regards,
Alan Watthey

-Original Message-
From: saurabh khandelwal [mailto:sourabhkhandelwal...@gmail.com] 
Sent: 10 July 2018 6:04 pm
Subject: NVAS admin panel issue

Hello Group,


We getting below message frequently on our syslog


EMS0675E VTAM INQUIRE FAILED FOR LU=A1OXMAP  RC=1453

EMS0675E VTAM INQUIRE FAILED FOR LU=A1OXCICS RC=1453

EMS0675E VTAM INQUIRE FAILED FOR LU=A1OXMAP  RC=1453

EMS0675E VTAM INQUIRE FAILED FOR LU=A1OXCICS RC=1453


I would like to remove these message and for doing this I logged into NVAS
but i m unable to get admin panel. . I just get parameter panel with adm
command but I am unable to get the panel to delete these LU.


when I type adm on main nvas screen , I get Maintain user parameters
screen. I am unable to get this admin screen where i can use option 4 to
delete these unwanted LU.





EMSPU1 Maintain User Parameters


&nb sp;  GR Name :
Terminal: A01IP449

Application . . . ACB Name:  User . .:
AS54

Last Update  . .: Group. .:
CRTGRP2

   & nbsp;
 Default Group: Y

Fill in or change the following:


  Selection ID  . . . . . __   (1-99) Default Application _  (Y/N)
;

  Msg. Received Indicator _(N=Normal/J=Jump/I=
Information)

  Jump Key  . . . . . . .  (PFnn/PAnn/ATTN)


  Logon Profile . . . . . _(U=User/G=Group/S=System)
   &nbs p;

  Active Profile  . . . . _(1/2) If User Profile


  Profile 1 Comment . . . ___   Profile 2 Comment
___

  Application ID Display  _(Y=Yes/N=No)





Variables for Logon profile:
 ;

  &UID . . .   &UVAR1 . .   &UVAR2 . .


  &ACCNO . .   &UVAR3 . .   &UVAR4 . .


  &PWD . . .   &NPW . . .   &OPW . .
.




Enter a command: d (display), u (update), or l (list).




Can anybody help me to remove these EMS0675E  message from NVAS

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IEFA107I when pointing to dataset alias

[Alan(GMAIL)Watthey]

Walt,

You are correct for the RELATE type alias.  The one that is linked directly to 
the dataset (ie. The alias gets deleted when the dataset gets deleted).

However, with a bit of extra work you can use SYMBOLICRELATE type alias instead 
and that is allowed to go in a different catalog (see OA52218).  However, I ran 
into a problem whereby if you want to delete the alias again you need ALTER 
access to the catalog.  I PMRed it and IBM have recently closed APAR OA54588 to 
fix it.


Regards,
Alan Watthey

-Original Message-
From: Walt Farrell [mailto:walt.farr...@gmail.com] 
Sent: 01 May 2018 3:59 am
Subject: Re: IEFA107I when pointing to dataset alias

On Mon, 30 Apr 2018 12:32:26 -0500, Paul Gilmartin  wrote:

>There ought to be an RFE tnat when the lookup fails in B's catalog the search 
>should
>be re-driven from A's catalog.

How could that possibly work?

I reference B.DATA.SET and so the system goes to the catalog that B directs it 
to. In that catalog, it finds no record for B.DATA.SET (because the ALIAS 
record is in the catalog for A).

Having found no record for B.DATA.SET, the system has no idea that it's an 
alias, nor any clue which other catalog it ought to look in.

The only way it could work would be to change the base functionality so the 
ALIAS record could go in B's catalog, and I doubt that would happen at this 
late date.

-- 
Walt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Creating a list of authorised libaries in Rexx

[Alan(GMAIL)Watthey]

Thanks for all the replies.  I guess the consensus is that I build the list 
myself.  I did suspect this but I wanted to make sure I was not missing 
something obvious.

I do know about the various Rexx procedures already in existence and have 
written some before to check LNK and LPA dataset names are to our standard so I 
have a starting point.  Not only the APF, LPA and LNK can be authorised of 
course but the manual seems reasonably clear on what they all are.  The 
in-memory lists should suffice and get around all the dynamic and library 
renaming possibilities I highlighted.

Sorry for the original subject on this chain as I was playing with replying to 
an earlier post to get the correct destination email address and somehow forgot 
to fill that bit in again. Oulook doesn't cope with digests very well (or I 
don't).

Regards,
Alan Watthey

-Original Message-
From: Carmen Vitullo [mailto:cvitu...@hughes.net] 
Sent: 19 April 2018 3:53 pm
Subject: Re: IBM-MAIN Digest - 17 Apr 2018 to 18 Apr 2018 (#2018-108)

At z/os 2.1 with some SDSF PTF's I think and at 2.2 the SDSFAUX address space 
provides, parmlib,proclib,apf,linklist,dynamic exit,enq,address space 
memory...any other good info 





Carmen Vitullo 

- Original Message -----

From: "Alan(GMAIL)Watthey"  
To: IBM-MAIN@LISTSERV.UA.EDU 
Sent: Thursday, April 19, 2018 12:36:55 AM 
Subject: Re: IBM-MAIN Digest - 17 Apr 2018 to 18 Apr 2018 (#2018-108) 

Hi listers, 



I was wondering if there was an easy way to get all the authorised libraries 
on a z/OS system. I am looking ultimately for a Rexx solution. 



Now I obviously know about 'D PROG,APF' but according to the manual there 
are many more authorised libraries than these. Also, there is PROGxx to 
look at but SYS1.LINKLIB and SYS1.SVCLIB are authorised whether or not they 
are specified in PROGxx. Then we have all of LPA which is authorised 
(pageable, fixed, modified and dynamic). Maybe someone has changed a 
default library name (such as SYS1.LPALIB or SYS1.LINKLIB). Maybe someone 
has dynamically added or deleted an authorised library. LINKLIST might be 
automatically authorised or it might not. 



Will I have to build this entire list myself (that looks a bit daunting to 
me), is there some obscure (or even obvious) MVS command available I have 
never used before or can I find it somewhere in memory? 



Regards, 

Alan Watthey 


-- 
For IBM-MAIN subscribe / signoff / archive access instructions, 
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM-MAIN Digest - 17 Apr 2018 to 18 Apr 2018 (#2018-108)

[Alan(GMAIL)Watthey]

Hi listers,

 

I was wondering if there was an easy way to get all the authorised libraries
on a z/OS system.  I am looking ultimately for a Rexx solution.

 

Now I obviously know about 'D PROG,APF' but according to the manual there
are many more authorised libraries than these.  Also, there is PROGxx to
look at but SYS1.LINKLIB and SYS1.SVCLIB are authorised whether or not they
are specified in PROGxx.  Then we have all of LPA which is authorised
(pageable, fixed, modified and dynamic).  Maybe someone has changed a
default library name (such as SYS1.LPALIB or SYS1.LINKLIB).  Maybe someone
has dynamically added or deleted an authorised library.  LINKLIST might be
automatically authorised or it might not.

 

Will I have to build this entire list myself (that looks a bit daunting to
me), is there some obscure (or even obvious) MVS command available I have
never used before or can I find it somewhere in memory?

 

Regards,

Alan Watthey


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Hardware upgrade z13 to z14....Yikes

[Alan(GMAIL)Watthey]

We are in the early stages of doing an 'upgrade' and we have been told that
this means the serial number does not change (obviously the model number
does).  An 'upgrade' is much cheaper allegedly.

Same serial number CPCs must apparently never see each other so I've set up
a VLAN on the HMCLAN just for this new CPC and it's HMC.  We've put one of
the new HMCs on the prod LAN and one on the segregated LAN.  We'll switch
them both to the prod LAN when the old CPC is disconnected.

Also your existing HMCs (if you keep any) may not be able to see the new CPC
without a software upgrade which their hardware may not be able to support.
The new HMCs will see the old CPCs (if you have any) without issue (once on
the same LAN).

Some software checks the model number when doing a serial number check so
even when the serial number stays the same they will need a new code.

We plan to test the new box and then change over to it in its entirety in
one go.  We have a few spare ports on our Ficon Directors but nowhere near
enough to connect new and old in their entirety so I'm connecting a few
CHPIDs up front to give access and then moving the rest over during the
changeover.  They'll already all be in the IO defs everywhere as I'll change
the port address (old to new) on the Ficon Director as I swap the cables.

Regards,
Alan Watthey

-Original Message-
From: Ward, Mike S [mailto:mw...@ssfcu.org] 
Sent: 26 February 2018 7:28 pm
Subject: Re: Hardware upgrade z13 to z14Yikes

What also comes to mind, if you have 3rd party software make sure to contact
them about the new CPU. Even if it's a 1 to 1 swap they may want to charge
an upgrade fee. You also have a new CPU serial number so make sure any 3rd
party software that requires a specific cpu serial number is updated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: DASD problem

[Alan(GMAIL)Watthey]

One suggestion and I'm talking Brocade here.  Presumably Cisco have something 
similar but I'm not familiar with those.  Are we using multiple switches here 
and are there ISLs between them?

If so, an ISL can only go 10km and then you should have the Extended Fabric 
License.  This allows you to allocate the extra buffer credits to the ISLs that 
are required to use the full bandwidth.  Even 10km needs extra buffer credits 
allocating (it's not the default) but that support is built into the basic 
license.

Regards,
Alan Watthey

-Original Message-
From: Tommy Tsui [mailto:tommyt...@gmail.com] 
Sent: 21 February 2018 7:22 am
Subject: Re: DASD problem

Is there any way to improve the pprc command latency and round trip delay
time?
Anything can tune on DASD Hardware or switch side?
Anything can tune on os side? BUFNO,

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: DASD problem

[Alan(GMAIL)Watthey]

Tommy,

This sounds like the PPRC links might be a bit slow or there are not enough of 
them.

What do you have?  Direct DASD to DASD or via a single SAN switch or even 
cascaded?  What settings (Gbps) are all the interfaces running at (you can ask 
the switch for the switch and RMF for the DASD)?

What type of fibre are they?  LX or SX?  What kind of length are they?

Any queueing?

There are so many variables that can affect the latency.  Are there any of the 
above that you can improve on?

I can't remember what IBM recommends but 80% sounds a little high to me.  They 
are only used for writes (not reads).

Regards,
Alan Watthey

-Original Message-
From: Tommy Tsui [mailto:tommyt...@gmail.com] 
Sent: 15 February 2018 12:15 am
Subject: DASD problem

>
> Hi all,


Our shop found the most job elapse time prolong due to pprc synchronization
versus without pprc mode. It's almost 4 times faster if without pprc
synchronization. Is there any parameters we need to tune on z/os or disk
subsystem side? We found the % disk util in RMF report over 80,
Any help will be appreciated. Many thanks

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Dynamic command to Activate NJE TCP

[Alan(GMAIL)Watthey]

Peter,

It's a while since I did this but I usually just copy/pasted whatever I had 
coded in the new startup options and added a few commas and issued it as a JES2 
command.  You obviously need to add a $ADD or $T command as appropriate but I 
don't remember not being able to add anything new or change anything already 
there.  The $DEL command is a bit limited as some things cannot actually be 
deleted.  They just hang around until the next WARM start.  If I remember 
correctly the DESTIDs can be a bit of a pain as JES2 invents some of those 
itself so changing node names can run into them so you need to $DEL them first. 
 You might have to stop certain things before they can be changed but many can 
be changed whilst active.

The JES2 manual is very good at telling you what can be changed with a HOT, 
WARM or COLD start.

My next test was always a $PJES2,ABEND as that reads the new startup deck and 
tells me about any problems in it which I can quickly fix.  Do this at a 
quieter time obviously but I never got any complaints from anyone.  Some things 
won't work whilst JES2 is down (usually less than a minute for us) but these 
seem to be minimal and unimportant (perhaps TSO STATUS).

The final test was the next IPL of course.

Hope this helps.

Regards,
Alan Watthey

-Original Message-
From: Peter [mailto:dbajava...@gmail.com] 
Sent: 22 January 2018 6:00 pm
Subject: Dynamic command to Activate NJE TCP

Hello All,

Cross Posted

Is there anyone who have tried activating NJE TCP connections dynamically ?

Any set of commands that can issued sequentially ?

Could someone point me ?

Peter

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SYSPLEX distance

[Alan(GMAIL)Watthey]

Kees,

It all helps and it's always nice to know others are doing it successfully.
Your comments on SCMFSD are particularly interesting (not at all you say) as
I'm sure some cleaning up is possible there.

I read somewhere that IBM expect nearly all requests to become asynchronous
eventually.  Processors are becoming quicker whereas the speed of light
isn't, so the heuristic algorithm used will deem spinning too costly for
shorter and shorter distances.

Groetjes,
Alan


-Original Message-
From: Vernooij, Kees (ITOPT1) - KLM [mailto:kees.verno...@klm.com] 
Sent: 11 January 2018 11:03 am
Subject: Re: SYSPLEX distance

If this helps: 
We run a parallel sysplex with sites at 16 - 18 km (2 separate routes with
some difference in distance) with active systems and CFs at both sites,
without problems.
Most Sync CF Requests to the Remote CFs are converted to Async.
To minimize the Async/Remote CF delays, we configure structures over the CFs
in such a way that the most busy or most important structures are in the
busiest or the most important site.
We do not use System Managed Coupling Facility Structure Duplexing. All our
applications are able to recover their structures well.
SMCFSD's inter-CF communication would add a number of elongated delays to
each CF update request. The advantage of SMCFSD is that each site has a copy
of the structure and intelligence can chose the nearest (=fastest) CF for
read requests.

Kees.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Changing password on IBM Link

[Alan(GMAIL)Watthey]

Jesse,

I fear you may not be looking at the correct DNS record.  This looks like the 
'A' record (the default for nslookup) and you need to look at the 'TXT' record. 
 The 'A' record has nothing to do with the origin IP address of an email.  The 
'A' record is the IP address they want you to contact them on.

The commands you need are as follows:
nslookup
set type=txt
us.ibm.com

Others have mentioned the sender being notified of the rejection.  Error 
notifications would go back to the RFC 821 MAIL FROM header specification which 
may not be set to accept them (I can only see the RFC 822 headers).  However, 
I'm pretty sure the SMTP conversation will show up the failure but someone 
actually has to be looking out for those errors.  It would be mixed in with 
timeouts, retries, destination errors and loads of other things going wrong so 
perhaps difficult to spot manually anyway.

Your link is fine for resetting a password you remember but a forgotten 
password needs the email link.  Just don't forget your password I guess.

Regards,
Alan Watthey

-Original Message-
From: Jesse 1 Robinson [mailto:jesse1.robin...@sce.com] 
Sent: 09 January 2018 9:02 pm
Subject: Re: Changing password on IBM Link

I got an off-list pointer to this address: 
https://www.ibm.com/account/profile/us?page=signinview

It allowed me to change my password without an intervening verification email. 
As such, it worked for this purpose but might disappear without notice.

In response to the password change, I got a confirmation email from 
ibma...@us.ibm.com, which reached my Inbox with no problem. It certainly looks 
like the same id/domain that the verification email comes from, which leads me 
back to the idea of a difference in the note construction itself. 

BTW NSLOOKUP here (sce.com) for us.ibm.com shows 172.28.128.15 . I get lots of 
email from us.ibm.com. AFAIK the password verification email is the only one 
that fails to reach my Inbox. 

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-543-6132 Office ⇐=== NEW
robin...@sce.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Alan(GMAIL)Watthey
Sent: Tuesday, January 09, 2018 5:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Changing password on IBM Link

I'm not saying it is the same problem that you are getting but we have the 
problem of not receiving certain emails from the PMR registration process.
They never get through from anyone (although someone once said they tried 50 
times and eventually one got through).

This first raised its head sending from my personal email address to my company 
email address.  When I cornered a Microsoft Exchange guy here he did some 
checking and said it was being rejected because the email was coming from an 
origin IP address that was not registered.  They had recently added checking to 
their email system and these failed the check.  So, for example, if the email 
comes from f...@foo.bar then the IP addresses of all the foo.bar email servers 
have to be registered under the foo.bar name.  This is done in the public 
facing DNS by the owner of the foo.bar domain.  I had to go to my personal DNS 
entry and add the appropriate entry.  Since then my emails have got through 
fine.  Fortunately my ISP had a webpage explaining how to add this because it 
was all new to me.

More and more email systems are apparently checking this DNS entry is correct 
to prevent spoofing.  It stops me sending an email pretending to be from 
bill.ga...@microsoft.com (for example) as that would originate in my ISP's 
email server which is not an IP address registered by the owners of 
microsoft.com.  I think I can live with that restriction.

If you've never heard of it then read up about SPF (Sender Policy Framework) in 
Wikipedia.

I have no idea who to contact in IBM to check their end.  I tried sending some 
emails (haha) to no avail.  We still have problems.

I tried sending a password reset email from 'Service Request' to my company 
email 15 minutes ago and it never got through so the problem still appears to 
exist.

Windows NSLOOKUP (maybe others) will show you the SPF settings for US.IBM.COM 
(or any other domain).

When I checked just now US.IBM.COM has the following specified:
"v=spf1 ip4:148.163.158.5 ip4:148.163.156.1 a:d25xlcore010.ca.ibm.com 
a:isource.boulder.ibm.com a:y01exnat001.ahe.pok.ibm.com 
a:y01acxsmtp001.ahe.pok.ibm.com a:y01acxsmtp002.ahe.pok.ibm.com 
a:g01zcdsmtp002.ahe.pok.ibm.com ip4:129.33.239.88"

I'm still working on our problem trying to find the correct people to resolve 
it.  At this stage I can confidently say it's either us or IBM!!

However, I can say that I just checked the last PMR update email (header) that 
got through and it came from srdonotreply @ 

Re: Changing password on IBM Link

[Alan(GMAIL)Watthey]

I'm not saying it is the same problem that you are getting but we have the
problem of not receiving certain emails from the PMR registration process.
They never get through from anyone (although someone once said they tried 50
times and eventually one got through).

This first raised its head sending from my personal email address to my
company email address.  When I cornered a Microsoft Exchange guy here he did
some checking and said it was being rejected because the email was coming
from an origin IP address that was not registered.  They had recently added
checking to their email system and these failed the check.  So, for example,
if the email comes from f...@foo.bar then the IP addresses of all the
foo.bar email servers have to be registered under the foo.bar name.  This is
done in the public facing DNS by the owner of the foo.bar domain.  I had to
go to my personal DNS entry and add the appropriate entry.  Since then my
emails have got through fine.  Fortunately my ISP had a webpage explaining
how to add this because it was all new to me.

More and more email systems are apparently checking this DNS entry is
correct to prevent spoofing.  It stops me sending an email pretending to be
from bill.ga...@microsoft.com (for example) as that would originate in my
ISP's email server which is not an IP address registered by the owners of
microsoft.com.  I think I can live with that restriction.

If you've never heard of it then read up about SPF (Sender Policy Framework)
in Wikipedia.

I have no idea who to contact in IBM to check their end.  I tried sending
some emails (haha) to no avail.  We still have problems.

I tried sending a password reset email from 'Service Request' to my company
email 15 minutes ago and it never got through so the problem still appears
to exist.

Windows NSLOOKUP (maybe others) will show you the SPF settings for
US.IBM.COM (or any other domain).

When I checked just now US.IBM.COM has the following specified:
"v=spf1 ip4:148.163.158.5 ip4:148.163.156.1 a:d25xlcore010.ca.ibm.com
a:isource.boulder.ibm.com a:y01exnat001.ahe.pok.ibm.com
a:y01acxsmtp001.ahe.pok.ibm.com a:y01acxsmtp002.ahe.pok.ibm.com
a:g01zcdsmtp002.ahe.pok.ibm.com ip4:129.33.239.88"

I'm still working on our problem trying to find the correct people to
resolve it.  At this stage I can confidently say it's either us or IBM!!

However, I can say that I just checked the last PMR update email (header)
that got through and it came from srdonotreply @ us.ibm.com from IP
148.163.158.5 which is in their list above.  Also I sent a password reset to
my personal email address and it said it came from ibmacct @ us.ibm.com from
IP 167.89.77.139 which is not in their list.  I guess my ISP doesn't check
(yet).  It appears they might outsource this password service hence the
problem lies there as that IP address is someone called sendgrid.net.

I will keep digging but it is low priority.

Anyway, I would advise checking with whoever looks after your email system
and ask them to check in their logs as to why the email is being rejected.
It might be as above or it might be something else.

Regards,
Alan Watthey

-Original Message-
From: Jesse 1 Robinson [mailto:jesse1.robin...@sce.com] 
Sent: 09 January 2018 1:45 am
Subject: Changing password on IBM Link

I need to change my password on IBM Link. After 20 years managing the same
userid, I find that there is now a new confirmation process that did not
exist a few months ago. I am sent an email to verify my email address.
Unfortunately that email never reaches my Inbox. I've tried over and over;
it never shows up. A problem ticket with my email folks has not resolved the
issue.

It's reminiscent of an old problem with IBM Main, where the confirmation
email for a new subscription also does not show up. I learned some time ago
that just that particular note is lacking a 'Sender' and is therefore
treated here as spam. I can't prove it's the same issue with the IBM.COM
confirmation, but it smells familiar.

Anyone else having issues?

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-543-6132 Office <= NEW
robin...@sce.com


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SYSPLEX distance

[Alan(GMAIL)Watthey]

Thanks to everyone for their insights and pointers on this matter.  It is
obviously going to be very complicated to predict what might happen if we
increase from our current 0.3km to something like (say) 20km.

The IBM Redbook I mentioned suggests an IBM service to analyse some data
(presumably SMF) that can give some information.  If that were to highlight
our particularly bad transactions it would be very useful.  I suspect we
have some badly written ones that would be particularly susceptible to
longer CF response times.  Does anyone know if this service still exists and
where one might find it?

I'll see if I can find the 2017 information Timothy mentioned below as this
is new to me (any pointers - here, offline or Sametime as appropriate).  The
Asynchronous CF feature was mentioned in an earlier response but we will
have to upgrade our software to get there.  However, that was already in the
planning.

I have no idea where the question originally came from but maybe they feel
that with the two sites so close together, if they lose one system then they
could very easily lose the other as well.  This would affect our Business
Continuity (Metro Mirror).  Our DR site (Global Mirror) is safe being much
further away but of course would realistically take at least an hour (on a
good day and with a following wind) to get the end users connected in to.

Regards,
Alan Watthey

-Original Message-
From: Timothy Sipples [mailto:sipp...@sg.ibm.com] 
Sent: 04 January 2018 8:42 am
Subject: Re: SYSPLEX distance

Please make sure you take one recent (late 2016) innovation into
consideration: Asynchronous CF Lock Duplexing. My understanding is that
this recently introduced Coupling Facility feature offers performance
improvements in many scenarios, including some distance "stretched"
Parallel Sysplexes. IBM published some related performance test data only
last year (2017). If you're looking at older references, you might be
missing a lot.

It could be helpful to understand the motivation(s) behind the question. As
a notable example, does somebody want to create (or maintain) a
"BronzePlex" to satisfy Parallel Sysplex aggregation rules? (Those rules
are becoming less relevant now, at least, but that's a separate point.) As
another example, if the focus is on protecting and preserving data, then it
might make sense to stretch the storage but not the Sysplex.



Timothy Sipples

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SYSPLEX distance

[Alan(GMAIL)Watthey]

I have had a strange request from management as to how far apart we can move
our production systems.  I know there are limitations on how far the (in
this case) two systems (and two coupling facilities) can be apart and I've
dug up an old IBM Redbook on the issue where they did tests with a sysplex
at 0, 20, 40, 60 and 80 kms apart.  Physical limitations (eg. FICON) don't
seem to be an issue.  We are a CICS and DB2 shop so the manual certainly
addressed issues that we might see but it is dated 2008 so has anything
changed since then?  CICS and DB2 have moved on a long way in that time.

 

I was thinking of saying up to 10km but this is really a finger in the air
value.  Maybe it's only 5 and maybe its 20 or 30.  Can we just throw CPU and
memory at it as I would think we would have a lot more transactions running
at the same time with some (but not all apparently) having extra delays
incurred?  The transaction increases suggested in that manual are
milleseconds and these days (with all the distributed systems involved) the
users are happy to get 10 second response times.  Admitted this can involve
many, many transactions behind the scenes from the application servers to
populate their crowded browser screens.  Gone are the days of data-entry
pools and sub-second responses.

 

What I was wondering is there anyone out there with real life experience on
this kind of activity.  How far apart do people run their sysplex systems?
What gotchas sprang up to relieve them of their sanity?  Any pointers would
be gratefully appreciated.

 

Regards,

Alan Watthey

 

From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of IBM-MAIN automatic digest system
Sent: 03 January 2018 8:00 am
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: IBM-MAIN Digest - 1 Jan 2018 to 2 Jan 2018 (#2018-2)

 

 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Cobol upgrade 6.2 linklist

[Alan(GMAIL)Watthey]

Peter,

PDSE's cannot be compressed by anyone but they still are compressed by the
system automagically (compress here being the term IBM use for the space
reclaim).  PDSEs get fragmented and the fragments can become unusable.  Free
space (from deleted or replaced members) is not immediately added to the
spare pool as there may still be pointers into the PDSE to members that have
been deleted (connections).  This compress is done at open for output when
it is the only open for output and there are no connections.  ISPF has some
recovery trickery built in to invoke this rule.

I first ran into this issue with Netview.  I was updating my Rexx and
eventually it said there was no room left in the PDSE (D37 I believe).  I
read up on it then.  Netview luckily provides a command to free and
reallocate all its libraries so they get compressed at the next open for
output I did (from ISPF).

Regards,
Alan Watthey

-Original Message-
From: Peter Hunkeler [mailto:p...@gmx.ch] 
Sent: 20 December 2017 7:09 pm
Subject: AW: Re: Cobol upgrade 6.2 linklist

>Since it is a PDSE dataset it will always have an active connection  and so
will not be able to perform >automatic compression. 
>Thus it will get full. 


Compress PDSE's? This is the (single, maybe) advantage of PDSEs: There is no
need to compress.


--
Peter Hunkeler
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: How to find what performed an OMVS unmount?

[Alan(GMAIL)Watthey]

Jesse,

/etc/auto.master only contains pointers to other files.

Your parameters should all be in the two files you mention (in /share/etc).  Of 
course there are defaults for certain parameters there.

Regards,
Alan Watthey

-Original Message-
From: Jesse 1 Robinson [mailto:jesse1.robin...@sce.com] 
Sent: 23 December 2017 10:09 pm
Subject: Re: How to find what performed an OMVS unmount?

My reply to Jamie's note went directly to her for some reason...

So I’m sort of right but probably not germane here. We have this in 
/etc/auto.master :

/u/share/etc/auto.map.u  
/home1 /share/etc/auto.map.home1  

No mention here of UNMOUNT or DURATION. From experience I'm guessing that we 
get unmounted after some default duration.

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-543-6132 Office ⇐=== NEW
robin...@sce.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Peter Hunkeler
Sent: Saturday, December 23, 2017 10:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):AW: Re: How to find what performed an OMVS unmount?

 

>Somewhere I got the impression that a mounted file system could get unmounted 
>by OMVS if it went long enough without being 'used'. If that happened, I don't 
>know that any associated record would be cut. If I'm wrong, then never mind.  


When the a directory is managed by automount, then file systems will be 
auto-mounted at first access. The automount policy offers an auto-unmount 
option.


Explicitly mounted file systems are not automagically unmounted ever.


--
Peter Hunkeler


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Moving from NJE over ESCON CTC to IP

[Alan(GMAIL)Watthey]

Dave,

There must be a reason why are you using the hipersocket IP address and not
just the default TCPIP stack IP address and perhaps this is where your
problem lies.  Could this just be a simple TCPIP routing issue?  It sounds
like you know you have a route from this z/OS system to 192.169.1.3 (using
the hipersocket).

However, when NJE starts a session it gives the packet an origin IP address.
The value of this is completely controlled by you (or your network guy).  It
could be the default for this TCPIP stack or it could be something you have
specified on a SRCIP statement or in a BIND parameter.

Is this origin IP address routable from the other z/OS?  When sending a
response to your signon request it will send it back to this origin IP
address so it must have a route to it.  If not the packet will go who knows
where.  Maybe the default route out the OSA where it hits a firewall.

If you are planning on using 192.168.1.x for all NJE communication then
maybe you need to specify each z/OS system's hipersocket IP address as the
origin.  Alternatively, don't use SOURCEVIPA at all for the hipersocket
interface.

Of course if this is your problem the solution depends completely upon your
network design and where packets might route during interface outages.

Regards,
Alan.


-Original Message-
From: Gibney, Dave [mailto:gib...@wsu.edu] 
Sent: 01 November 2017 10:51 pm
Subject: Moving from NJE over ESCON CTC to IP

I think I've done an equivalent set of JESPARMS, but I get this
  $HASP568 NODE=AISDEVL - AUTOMATIC CONNECT (SOCKET=AISDEVL)
  IAZ0543I NETSRV4 TCP/IP connection with IP Addr: 192.168.1.3
 Port: 175 Initiated
  IAZ0543I NETSRV4 TCP/IP connection with IP Addr: 192.168.1.3
 Port: 175 Successful
  IAZ0543I NETSRV4 TCP/IP connection with IP Addr:
 srcpos02.ad.wsu.edu
Port: 175 ended due to failure of NJETCP Signon to complete within
allotted time

For all connection. The 192.168.1 network is over Hipersocket

Undoubtably, I am missing something simple in the TFM

Dave Gibney
Information Technology Services
Washington State University


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z14 FICON and (old) Brocade switch

[Alan(GMAIL)Watthey]

What are they gossipping about?  Certainly the new Multihop feature won't
work on old SAN Switches. That's where you have three switches in the path.
Ficon has only supported either a single hop or one hop (cascading) up until
now.

Also, old switches might not support dynamic routing.  Old switches may only
support static switching (port routing on really old switches and the
slightly better device routing on less old switches).

Old switches won't support 16Gbps either so they'll negotiate down to 8 or
lower.  That'll depend upon fibre type and distance as well.


-Original Message-
From: R.S. [mailto:r.skoru...@bremultibank.com.pl] 
Sent: 25 October 2017 2:38 pm
Subject: z14 FICON and (old) Brocade switch

I heard some gossips about z14 with new FICON Express16S+ and old FICON 
switches. Is it real issue or just FUD to sell new SAN devices?

I have some 5100 switches (8Gbps) and I don't like to replace it just 
because it "wasn't certified".

Any clue?

-- 
Radoslaw Skorupka
Lodz, Poland




==


--
 Treść tej wiadomości może zawierać informacje prawnie chronione Banku
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być
jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś
adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej
przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie,
rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie
zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo,
prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale
usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub
zapisane na dysku.

 This e-mail may contain legally privileged information of the Bank and is
intended solely for business use of the addressee. This e-mail may only be
received by the addressee and may not be disclosed to any third parties. If
you are not the intended addressee of this e-mail or the employee authorized
to forward it to the addressee, be advised that any dissemination, copying,
distribution or any other similar activity is legally prohibited and may be
punishable. If you received this e-mail by mistake please advise the sender
immediately by using the reply facility in your e-mail software and delete
permanently this e-mail including any copies of it either printed or saved
to hard drive.

 mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa,
www.mBank.pl, e-mail: kont...@mbank.plsąd Rejonowy dla m. st. Warszawy XII
Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców
KRS 025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2016 r.
kapitał zakładowy mBanku S.A. (w całości wpłacony) wynosi 168.955.696
złotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Hipersockets question

[Alan (GMAIL) Watthey]

Gadi,

Your problem could be caused by the routing from z/OS to z/LINUX or it could
be caused by the routing back from z/LINUX to z/OS.

I suggest using the TSO PING command with the SRCIP option so you know which
IP is being used at both ends and which IP z/LINUX is routing back to.

Try it with different z/OS home addresses.  That way you might find some of
your home addresses work and others don't.  That might narrow down your
problem.

Regards,
Alan Watthey
-Original Message-
From: גדי בן אבי [mailto:gad...@malam.com] 
Sent: 22 February 2017 10:02 am
Subject: Hipersockets question

Hi,

Our computer has 4 z/OS partitions and a zLinux partition.

I defined a Hipersockets channel and made the appropriate definitions in
TCP/IP.

I can ping the all of the z/OS partitions from the z/OS partitions and from
the zLinux partition

I cannot ping the zLinux partition from the z/OS partition.

I can ping the z/OS partitions from the zLinux partition.

I cannot use FTP between the z/OS partitions and the zLinux partition.

Can anyone help me solve this problem?

Gadi

לתשומת ליבך, בהתאם לנהלי חברת מלם מערכות בע"מ ו/או כל חברת בת ו/או חברה
קשורה שלה (להלן : "החברה") וזכויות החתימה בהן, כל הצעה, התחייבות או מצג מטעם
החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו
החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק)
המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה
לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that
in accordance with Malam and/or its subsidiaries (hereinafter : "Malam")
regulations and signatory rights, no offer, agreement, concession or
representation is binding on the Malam, unless accompanied by a duly signed
separate document (or a scanned version thereof), affixed with the Malam
seal.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: CLOCKxx - ACCURACY Parameter - IEA032E message

[Alan (GMAIL) Watthey]

Glenn,

Now I don't know your exact setup but this is what I have seen.  I don't use 
the accuracy parameter.  I don't see why the STP needs to be using an external 
time source directly to be accurate.  NTP is a nifty protocol that takes 
latency into account right back to the root of the chain so it should be fairly 
accurate so long as the chain is maintained.  At very high accuracy it does 
needs a better protocol but 50ms should be doable with the basic protocol.

STP will only move the CPC time in small increments, about 1 second every 7 
hours I believe.  This is so no application sees the time go backwards.  If you 
change the NTP time by one second then the CPC would be more than 50 ms out for 
just under 7 hours.  To me 6 hours of alerts seems quite reasonable for that 
one second change.

If the HMCs lose connection with the higher NTP server then they 'should' add 
10 seconds to the root dispersion and anyone querying its time, such as STP, 
would then know it is unusable.  Certainly if you had Cisco switches or Brocade 
Ficon Directors getting their time from your HMC they would have noticed this 
increase and would have written a message to their logs saying they were 
switching to local time.  I see that. Occasionally.

After the chain is re-established it takes a few calls for things to settle 
down and the root dispersion to come back down such that the time becomes 
usable again.  At that point all callers will revert back to using NTP time.  
Again I see the Brocades write a log message to this effect.

Now admittedly I have not monitored an HMC as I actually have an NTP server 
(Windows box as it happens) that supplies all the mainframe boxes, switches, 
consoles, HMCs, DASD, etc.  In fact anything on the LAN that supports getting 
NTP time (even tape cameras).  I run a monitor on this box every hour and if 
the root dispersion goes over 10 then I alert.  It gets the time from some LAN 
box somewhere that gets it from somewhere else, etc all the way up to some 
stratum 0 device which is presumably an atomic clock on the Internet but I'm 
guessing that bit.  All I know is that I am at stratum level 6.

Regards,
Alan Watthey
-Original Message-
From: Jousma, David [mailto:david.jou...@53.com] 
Sent: 04 January 2017 3:54 pm
Subject: Re: CLOCKxx - ACCURACY Parameter - IEA032E message

Glenn,

I wasn’t even familiar with this keyword until you brought it up.  However, a 
couple of comments.   In our shop, we have the HMC's acting as NTP clients to 
external NIST servers for time updates, and as NTP servers for STP, and the 
mainframe as NTP server for the rest of the datacenter.   Our HMC's have 
firewall rules configured to allow outbound connections to be able to reach 
NIST.  I realize we could have configured STP to go to NIST directly for time 
updates, but we didn’t want to expose the SE's (even via firewall) to the 
internet for time updates directly.

It would seem to me, that for the accuracy keyword to work, that STP must be 
using external time sources directly?  Or is ACCURACY only really reporting on 
clock steering events > 50 milliseconds(in your case)?

I ask, because we had an event several months back, where our Firewall team 
botched up the rules, and all of our HMC's lost internet access to NIST, and 
even though the boxes phoned home to IBM, our own internal problem 
notifications procedures broke down, and time was allowed to drift for over a 
week.  In our case, STP was fat, dumb, and happy because he was communicating 
nicely with his NTP servers(multiple HMCs), and it was the HMC's that were 
falling out of accuracy.   So, I don’t know if this would help me or not.

_
Dave Jousma
Manager Mainframe Engineering, Assistant Vice President
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Glenn Miller
Sent: Tuesday, January 03, 2017 5:46 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: CLOCKxx - ACCURACY Parameter - IEA032E message

A few months ago we activated the "ACCURACY" parameter with a value of 50 ( the 
default is zero ) on a few of our z/OS systems ( all systems are z/OS V2R1 ).  
We verified that the "IEA034I THE TOD CLOCK ACCURACY MONITOR IS ACTIVE." is 
issued whenever these z/OS systems are IPL'ed.
Until Saturday night, we have never received any "alert" from this TOD CLOCK 
ACCURACY MONITOR.  However, we did receive the following message on each z/OS 
system that has that monitor active:
IEA032E TOD CLOCK ACCURACY LIMITS MAY HAVE BEEN EXCEEDED.

The IEA032E messages occurred around 8PM Eastern Time on December 31, 2016. The 
IEA032E messages were repeated every hour on each z/OS system until about 2AM 
on January 1, 2017, or about 6 hours after they started.  Also, the IEA032E 
messages have not re-occurred since that 2AM timeframe.

Re: Recommendations for RECOVERY options

[Alan (GMAIL) Watthey]

Jim,

As the network guy who looks after the SAN I would not be expecting my z/OS
guys to do anything in this situation.  In fact z/OS cannot see our whole
SAN as I have other things on it (eg. ISLs, backend tapes).  Fortunately,
the Brocade switches are dedicated to the mainframes and devices used by the
mainframes here.  The Brocade will see issues that it recovers from well
before z/OS sees anything.

Of course, I don't know exactly what your problem was and what your Brocade
would have seen but I'd suggest the bottleneckmon command to detect latency
issues.  Running the porterrshow command from time to time would also give
you a good idea as to whether your SFPs and fibres are performing as well as
they should.  If you have the Fabric Vision/Watch licenses then you do fancy
stuff like fence errant ports before they impact anything.


Regards,
Alan Watthey
-Original Message-
From: James Peddycord [mailto:j...@ntrs.com] 
Sent: 28 December 2016 4:56 pm
Subject: Recommendations for RECOVERY options

NTAC:3NS-20
We had a situation with a bad cable that resulted in a huge performance
impact due to the default way that z/OS (we are at 1.13) handles error
recovery on Ficon paths.
The symptoms were many (thousands) of IOS050I messages in the task's joblog,
followed by an IOS450E message, which took the path offline to a single
device.
This was happening for every device (around 3000) that the affected path was
attached to.
As soon as I saw the messages I configured the CHPID offline and the problem
stopped.
We have put in automation that will immediately configure a CHPID offline as
soon as a single IOS450E message is detected, and now I am experimenting
with RECOVERY options.
IBM recommended to set RECOVERY,PATH_SCOPE=CU, set the PATH_INTERVAL to 1
and leave PATH_THRESHOLD=10, and adjust from there.

Due to the paperwork involved with making any change in our environment, I
would like to implement this with a minimum of 'adjustment'.

Does anyone have any recommendations?
We are running on z13s, 16G Ficon through Brokade switches to IBM DS88xx
DASD.

Thanks,
Jim


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN