Shopz - Consolidated inventory of products report - load error

[Dazzo, Matt]

Hey Gm folks, anybody having issues with creating an order for rsu maintenance 
on shopz? I am trying to create a new maintenance order and upload the 
consolidated inventory report in step 2 of 5 but I keep getting the error 
below. First attempt was yesterday but it's still not working today.  By the 
way this worked for me 2 weeks ago, has anything changed I'm not aware of?


  1.  I create the report using PGM=GIMXSID,PARM='INVENTORY=IBM,L=ENU'
  2.  SMPXTOUT DD DCB=(RECFM=FB,LRECL=12560),
  3.  Upload to workstation in bin format
  4.  Try to upload to shopz (step 2 of 5) during order creation and get the 
error below.
  5.  Tried on multiple web browsers  (chrome and Edge)


ERROR: SZGP01: An error occurred while loading software report. Please try to 
upload it again.

Thanks,
Matt


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

HCD CBDA383I Error

[Dazzo, Matt]

Good day, we are running zos 2.2.  I'm working in HCD to change devices 3390 to 
3390B to begin implementing PAV. From the I/O Device List panel (CBDPDVF1) I 
can over type the device 3390 to 3390B but when I hit enter to make the change 
I get the following error below.

E   CBDA383I Length of the value for parameter READ-ONLY for device
 4000 is larger than permitted by the UDT CBDES002.

Any help or direction is appreciated.

Thanks Matt







--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

TCPIP NETMONITOR Parm

[Dazzo, Matt]

I need to dynamically activate  NETMONITOR SMFS in TCPIP using obey command. 
Seems pretty harmless but I'd like to ask if there any concerns when turning on 
these services? Any gotcha's to be aware of? Does it cause additional SMF 
records to be written?

Thanks,

Matt Dazzo


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

IBM Software License Review

[Dazzo, Matt]

We have been notified by IBM that we have been selected for a 'Software License 
Review'. I have not experienced this pleasure before and I am wondering what 
the  experience is like? What kinds of information do they request?  How is the 
info gathered?


Thanks,

Matt


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SFTP SSH Client Issues

[Dazzo, Matt]

Thanks Allan, I learned that there actually several sftp servers behind 1 or 
more load balancers. So maybe there is something going on with the connection 
that the open ssh client cannot handle? 

Do you or any else know of any other sftp client software either free or 
commercial we can look at? All involved think it's the open ssh client because 
it's the only one having the problem, well that we know of. 

Thanks 
Matt

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Allan Staller
Sent: Tuesday, July 02, 2019 8:55 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SFTP SSH Client Issues

Check the service your SSH client is receiving.
If I understand the reported symptoms, you can get this behavior if z/OS does 
not dispatch the SSH Client.

Many of the same items vis-à-vis (network and FTP) also apply to SSH.

Routing?
Class of Service?
What is happening at time of observed issues. Excessive remote activity, 
excessive local activity?

Run a traceroute to the remote site. See if there are any major lags in the 
path.

HTH,

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Dazzo, Matt
Sent: Tuesday, July 2, 2019 7:45 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: SFTP SSH Client Issues

We are running zos 2.2 with cozbatch 5.5.0 to initiate ssh sftp client session 
to a linux server over the internet. We get the error 'Received disconnect from 
xxx.0.xx.xxx: 11: Sending of channel data timed out' at peak times on the 
server through the day, this is not our server. I have run a tcp packet trace 
and sent it off to IBM, I have that response below but they are saying there 
are retransmissions on the connection that the client is not handling. The 
server folks tell me they have no other clients that have problems.

Here is the catch, it only happens with the ssh client. I can pull over 200 
files using filezilla on my desktop and same for my RH linux guest on zvm.

I'm at a loss as to where to go with this issue, wonder if anyone else has ever 
had this issue or might have suggestions to try?

Thanks Matt


Current job settings

-oConnectTimeout=600"
-oServerAliveInterval=600"
-oTCPKeepAlive=yes"
-oServerAliveCountMax=5"

IBM Response to trace info

- There is a significant level of packet loss between these systems,
   which is forcing retransmission of packets.  Your local network
   support team will need to investigate that.

 - The server system is very sluggish in performing the retransmissions.
   There are long periods where it is not sending the missing data,
   which is likely why the server's administrators are saying that the
   client is not responding (it can't respond at the application layer
   until the missing data arrives).  One example I examined, it was 9
   seconds before the retransmission occurred, for another (closer to
   the end) it was 79 seconds.  That is way beyond normal!  That
   system's administrators need to contact the TCP software's vendor to
   get this corrected.


Thanks,



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN
::DISCLAIMER::
--
The contents of this e-mail and any attachment(s) are confidential and intended 
for the named recipient(s) only. E-mail transmission is not guaranteed to be 
secure or error-free as information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or may contain viruses in transmission. 
The e mail and its contents (with or without referred errors) shall therefore 
not attach any liability on the originator or HCL or its affiliates. Views or 
opinions, if any, presented in this email are solely those of the author and 
may not necessarily reflect the views or opinions of HCL or its affiliates. Any 
form of reproduction, dissemination, copying, disclosure, modification, 
distribution and / or publication of this message without the prior written 
consent of authorized representative of HCL is strictly prohibited. If you have 
received this email in error please delete it and notify the sender 
immediately. Before opening any email and/or attachments, please check them for 
viruses and other defects.
--

--
For IBM-MAIN subscribe / signoff / archive access instructions, 

SFTP SSH Client Issues

[Dazzo, Matt]

We are running zos 2.2 with cozbatch 5.5.0 to initiate ssh sftp client session 
to a linux server over the internet. We get the error 'Received disconnect from 
xxx.0.xx.xxx: 11: Sending of channel data timed out' at peak times on the 
server through the day, this is not our server. I have run a tcp packet trace 
and sent it off to IBM, I have that response below but they are saying there 
are retransmissions on the connection that the client is not handling. The 
server folks tell me they have no other clients that have problems.

Here is the catch, it only happens with the ssh client. I can pull over 200 
files using filezilla on my desktop and same for my RH linux guest on zvm.

I'm at a loss as to where to go with this issue, wonder if anyone else has ever 
had this issue or might have suggestions to try?

Thanks Matt


Current job settings

-oConnectTimeout=600"
-oServerAliveInterval=600"
-oTCPKeepAlive=yes"
-oServerAliveCountMax=5"

IBM Response to trace info

- There is a significant level of packet loss between these systems,
   which is forcing retransmission of packets.  Your local network
   support team will need to investigate that.

 - The server system is very sluggish in performing the retransmissions.
   There are long periods where it is not sending the missing data,
   which is likely why the server's administrators are saying that the
   client is not responding (it can't respond at the application layer
   until the missing data arrives).  One example I examined, it was 9
   seconds before the retransmission occurred, for another (closer to
   the end) it was 79 seconds.  That is way beyond normal!  That
   system's administrators need to contact the TCP software's vendor to
   get this corrected.


Thanks,



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

MVS Job Position

[Dazzo, Matt]

There is a Sr mainframe system programmer position open in Long Island NY. This 
position is a full time position and requires being onsite at the company's 
headquarters. The platform consists of IBM mainframe, z/OS 2.2, DB2, CICS, RACF 
along with numerous vendor products to support. Salary is commensurate with 
experience.

Please contact me offline for additional info.

Thanks Matt
mda...@pch.com


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Job Posting Question

[Dazzo, Matt]

Are job postings allowed on this forum?

Thanks
Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

FTP to zvm

[Dazzo, Matt]

Running zvm 6.3 and I'm looking to ftp a file from my desktop to pmaint.cf0.

I updated the system config file on my desktop and trying to ftp it back to 
zvm. Problem is PMAINT CF0 (ReadOnly)

How do I get this to be read/write?

I tried using maint630 user but can't seem to find the location of system 
config file when I'm signed on.

I sign on using user=pmaint
cd pmaint.cf0
dir  - displays the existing files.

230 PMAINT logged in; working directory = PMAINT 191
ftp> cd pmaint.cf0
250-Working directory is PMAINT CF0 (ReadOnly)
250 for write access, send 'ACCT minidisk-mult-password'
ftp> dir

Thanks Matt, if this is not the correct place to ask this question please point 
me in the right direction. tks

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Cobol call in SOAP/XML

[Dazzo, Matt]

We have a legacy cobol program that our developers would like to modify and 
make it participate as a client of web services (a method call in SOAP/XML) by 
using the z/OS Client Web Enablement Toolkit.  I'm wondering if someone could 
share a sample of cobol code that uses this technology? The information would 
helpful to our group trying to get this done.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SOAP Calls

[Dazzo, Matt]

Our applications folks are asking if there is a way to do SOAP calls from 
cobol? Does Cobol V62 support SOAP from the cobol program or does the V62 cobol 
program have to use CICS web services for SOAP?

Thanks
Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Restful Call

[Dazzo, Matt]

Thank you all.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Tim Hare
Sent: Monday, November 13, 2017 9:19 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Restful Call

z/OS 2.2 has a set of callable routines that provide HTTP client capabilities.  
I saw a presentation at SHARE San Antonio.  I think it is part of the 'web 
enablement toolkit' - see this link

https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.ieac100/ieac1-cwe-http.htm

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Restful Call

[Dazzo, Matt]

Yes, COBOL batch is the RESTFUL client.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Monday, November 13, 2017 1:30 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Restful Call

COBOL batch is the RESTFUL client?
I ask because I'm confused by:  "We are looking for  zos to access a unix box 
as the client. "

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Mon, Nov 13, 2017 at 9:52 AM, Matt Dazzo < 
00a854d4f854-dmarc-requ...@listserv.ua.edu> wrote:

> I am researching the ability to support restful calls in a cobol batch 
> environment. We are currently running zos 2.2 with the WEB ENABLEMENT 
> TOOLKIT AVAILABLE. Our cobol level is 4.2. I'm trying to determine if 
> we can support restful calls in our current environment? We are 
> looking for zos to access a unix box as the client. Can someone 
> enlighten me if this is possible in my current environment, this is 
> all new to me? If additional info is required please let me know, 
> thanks Matt
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

multiple RSA public keys for the same host

[Dazzo, Matt]

We have been using Co:z SFTP with Coz: Batch for a few years. We are always 
connecting as an ssh client as we are not using sshd server at this time. For 
every connection to every server I noticed that the RSA cert is added to the 
known hosts file. So there are many, many of the same RSA certs for each server 
in the known hosts file. I believe this only started happening a few/several 
months ago but can't pin point the exact time. RSU1702 and additional PTF's 
were applied  also a few months ago. I went back through the held data for the 
maint but did not find anything pertaining to the host file.  We are at the 
latest level of cozbatch and coz:sftp, and at zos2.2.

Is anyone else experiencing this and what might cause this to happen?

Thanks
Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Apache Virtual Server Setup

[Dazzo, Matt]

I believe my problem now stems from the default statements provided with the 
webserver.  See below, these statements come before my virtual server 
statements.  


   Options FollowSymLinks - this is the original ibm setup. 
 
AllowOverride None   
FileETag All -INode 

   Require all denied - this is the original ibm setup  
 

The error message in the logs files is:  AH01630: client denied by server 
configuration: /etc/websrv1/' 

The browser message is: 

You don't have permission to access / on this server.
IBM_HTTP_Server Server at test1 Port 80

It seems the ' Require all granted'  in the virtual server statement maybe are 
not being recognized.  
 
# START Virtual host 1

ServerName MVSTEST1.li.pch.com   
   DocumentRoot /etc/websrv1/PCHshare/   
   DirectoryIndex welcome.html   
   
   
 Require all granted 
   
#  
# START Virtual host 2 
 
   ServerName MVSTEST2.li.pch.com 
   DocumentRoot /etc/websrv1/
   DirectoryIndex welcome.html   
   
   
 Require all granted 
 
#

Any help is appreciated with these directives, thanks Matt


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Neubert, Kevin
Sent: Tuesday, November 29, 2016 1:59 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Apache Virtual Server Setup

No DocumentRoot in your VirtualHost?


   DocumentRoot /etc/websrv1/PCHshare
   DirectoryIndex welcome.html



   # Access/Options Here


Regards,

Kevin

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Tuesday, November 29, 2016 8:56 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Apache Virtual Server Setup

I am trying to setup a virtual server on zos 2.2 apache http server. My intent 
is to have anyone coming in on ip 12.1.1.12:80  to be directed to a welcome 
page html. But I keep getting the access error below. I have tried many, many 
different directive variations but no luck. Any examples or assistance is 
appreciated. Thanks Matt

If this is not the correct forum for this please let me know. tks

# START Virtual Server 1 statements.

#

DirectoryIndex welcome.html

Require all granted

 
 
#

Forbidden

You don't have permission to access / on this server.
IBM_HTTP_Server Server at 27.1.39.74 Port 80

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Apache Virtual Server Setup

[Dazzo, Matt]

I am trying to setup a virtual server on zos 2.2 apache http server. My intent 
is to have anyone coming in on ip 12.1.1.12:80  to be directed to a welcome 
page html. But I keep getting the access error below. I have tried many, many 
different directive variations but no luck. Any examples or assistance is 
appreciated. Thanks Matt

If this is not the correct forum for this please let me know. tks

# START Virtual Server 1 statements.

#

DirectoryIndex welcome.html

Require all granted

 
 
#

Forbidden

You don't have permission to access / on this server.
IBM_HTTP_Server Server at 27.1.39.74 Port 80

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Dazzo, Matt]

RS, what do you mean by 'setup lpar in advance?' We will be doing a scheduled 
IPL this weekend so I have an opportunity should I need to make a config 
change. 

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of R.S.
Sent: Wednesday, October 19, 2016 12:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded


Whole ICSF setup, including Master Key introduction can be done without IPL.

However you have to set up the LPAR in advance. Those changes can be done 
dynamically or ...Activate will be required. In the last case IPL is a result.

--
Radoslaw Skorupka
Lodz, Poland








W dniu 2016-10-19 o 17:46, Mark Jacobs - Listserv pisze:
> Unless you have a TKE, you will have to use the ICSF panels to enter 
> the master keys. So yes, you'll need to IPL each image to do so. Just 
> a heads up that if you perform ICSF Master Key changes (recommended), 
> you might have to first enter the previous set of keys, then the 
> current set. I can elaborate on why if you'd like.
>
> Mark Jacobs
>
>> Jesse 1 Robinson 
>> October 19, 2016 at 11:41 AM
>> We are installing a z13s and going through preliminary setup. When 
>> selecting the Crypto tab in an Image profile, I was a bit alarmed by 
>> this message:
>>
>> Attention: You must install the 'IBM CP Assist for Cryptographic 
>> Functions'
>> (CPACF) feature if a cryptographic candidate is selected from the 
>> list box.
>> Otherwise, some functions of Integrated Cryptographic Service 
>> Facility (ICSF) may fail.
>>
>> I spoke to the person who created and placed the order. He assured me 
>> that CPACF had been ordered and that no one he talked to believed 
>> that it requires explicit 'activation'. So I went to a z12 that has 
>> been in service for years. I see the same warning message on the 
>> Crypto tab. So it appears to be standard boilerplate that does not 
>> reflect the status of CPACF.
>>
>> We're still exploring how to set the Master Key. We had thought that 
>> it was an HCM task, but now we're led to believe that it's done 
>> through ICSF. Which means that we have to IPL (each?) LPAR in order 
>> to set it. The guy who did this for years is gone.
>>
>> .
>> .
>> J.O.Skip Robinson
>> Southern California Edison Company
>> Electric Dragon Team Paddler
>> SHARE MVS Program Co-Manager
>> 323-715-0595 Mobile
>> 626-302-7535 Office
>> robin...@sce.com
>>
>>
>> -Original Message-
>> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
>> On Behalf Of Kirk Wolf
>> Sent: Wednesday, October 19, 2016 8:20 AM
>> To: IBM-MAIN@LISTSERV.UA.EDU
>> Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded
>>
>> Right. I've never seen this particular error caused by a missing 
>> CPACF feature.
>> More likely either ICSF is not started or the correct userids do not 
>> have access to the necessary ICSF features via SAF/RACF.
>>
>> Kirk Wolf
>> Dovetailed Technologies
>> http://dovetail.com
>>



---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru 
Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. 
Wedug stanu na dzie 01.01.2016 r. kapita zakadowy mBanku S.A. (w caoci 
wpacony) wynosi 168.955.696 zotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to 

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Dazzo, Matt]

RS, Kirk thanks. 

I was able to confirm from the SE that CPACF is enabled.

 I have started configuring ICSF and trying to determine the size of the CKDS. 
For now ICSF will be used for SSH-ftp,  I am not sure if a lot of keys are 
dynamically created or is just the master key going to be in there? From 
reading ICSF programmers guide I take it that it depends on what ICSF will be 
used for will determine if a lot of keys are created. I rather not create a 
CKDS too large if I don't have to. Any comments would be helpful. 

Thanks Matt





-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Wednesday, October 19, 2016 11:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Right.  I've never seen this particular error caused by a missing CPACF feature.
More likely either ICSF is not started or the correct userids do not have 
access to the necessary ICSF features via SAF/RACF.

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 10:13 AM, R.S. 
wrote:

> W dniu 2016-10-19 o 17:05, John Eells pisze:
>
>> R.S. wrote:
>> 
>>
>>> Double click on CPC icon. Instance Information tab, bottom right 
>>> corner "CP Assist for Crypto functions:
>>> Installed".
>>>
>>
>> Note also that CPACF is a feature, so if it's not installed 
>> (enabled), you need to order the feature to get it installed. 
>> (Whether its enablement or lack thereof matters in this context, I 
>> have no clue.)
>>
>> Isn't it enabled by default for all customers except North Korea ? 
>> ;-)
>
> --
> Radoslaw Skorupka
> Lodz, Poland
>
>
>
>
>
>
> ---
> Tre   tej wiadomo ci mo e zawiera  informacje prawnie chronione Banku
> przeznaczone wy  cznie do u ytku s u bowego adresata. Odbiorc  mo e by 
> jedynie jej adresat z wy  czeniem dost pu osób trzecich. Je eli nie 
> jeste adresatem niniejszej wiadomo ci lub pracownikiem upowa nionym do 
> jej przekazania adresatowi, informujemy,  e jej rozpowszechnianie, 
> kopiowanie, rozprowadzanie lub inne dzia anie o podobnym charakterze jest 
> prawnie
> zabronione i mo e by  karalne. Je eli otrzyma e  t  wiadomo   omy kowo,
> prosimy niezw ocznie zawiadomi  nadawc  wysy aj c odpowied  oraz trwale
> usun   t  wiadomo   w  czaj c w to wszelkie jej kopie wydrukowane lub
> zapisane na dysku.
>
> This e-mail may contain legally privileged information of the Bank and 
> is intended solely for business use of the addressee. This e-mail may 
> only be received by the addressee and may not be disclosed to any 
> third parties. If you are not the intended addressee of this e-mail or 
> the employee authorized to forward it to the addressee, be advised 
> that any dissemination, copying, distribution or any other similar 
> activity is legally prohibited and may be punishable. If you received 
> this e-mail by mistake please advise the sender immediately by using 
> the reply facility in your e-mail software and delete permanently this 
> e-mail including any copies of it either printed or saved to hard drive.
>
> mBank S.A. z siedzib  w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
> www.mBank.pl, e-mail: kont...@mbank.pl S d Rejonowy dla m. st. 
> Warszawy XII Wydzia  Gospodarczy Krajowego Rejestru S dowego, nr 
> rejestru przedsi biorców KRS 025237, NIP:
> 526-021-50-88. Wed ug stanu na dzie  01.01.2016 r. kapita  zak adowy 
> mBanku S.A. (w ca o ci wp acony) wynosi 168.955.696 z otych.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Implementing ICSF - FOTS1949 PRNG is not seeded

[Dazzo, Matt]

This is totally new world for me so bear with me.  Been reading for several 
hours on trying to determine what I need to satisfy the support of 'OpenSSH 
requires that a working /dev/random device' as I got the error  'FOTS1949 PRNG 
is not seeded' when testing SSH-FTP on my newly installed zos2.2 system.

I determined that  ICSF has to be implemented (started) but does CPACF have to 
be  enabled ? From reading the archives I found in a thread that displaying the 
CPU would show if the CPACF is enabled?

Below is a display of our CPU, appears the CPACF is not enabled? Does this 
require an IPL?

D M=CPU
IEE174I 09.46.57 DISPLAY M 216
PROCESSOR STATUS
ID  CPU  SERIAL
00  + 024E7E2828
01  + 024E7E2828
02  +I024E7E2828
03  NI
04  NI
05  NI


Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

ZOS 2.2 Books - Again

[Dazzo, Matt]

I know the books topic has been around the block several times and I have 
searched the archives but have not found an answer to using the PDF collection 
on zos, or maybe I missed it.

I have downloaded the PDF collection and acrobat index to my work station and 
have it working. Is there anyway to have the PDF collection in USS with an 
index to all the books? Rather not have to build a htlm index by hand. Does 
anyone have a html index to share or is there an other way?

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ZOS 2.2 Install - Alias to Catalog

[Dazzo, Matt]

Software upgrade, the previous install was not used as a model.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of John Eells
Sent: Tuesday, June 28, 2016 12:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: ZOS 2.2 Install - Alias to Catalog

Are you using the Full System Replacement or Software Upgrade installation 
path?  If the latter, did you use your prior saved configuration to model the 
new one after?

Dazzo, Matt wrote:
> I am working on a software upgrade install of zos 2.2 and have a question 
> about what catalog to use in the 'ALIAS TO CATALOG' cpp install panel.  After 
> the install is complete I'd like to continue to us my current master catalog 
> for zos 2.2. So do I create a new temporary user catalog as the zos 2.2 mcat 
> and plug that name in that panel entry or do I put my current master cat name 
> in the panel entry? Below is a snip it of the panel.
>
> Thanks Matt
>
>
> S  AliasSTA Target System Catalog Data Set Name   Type
> -   ---   
> AOP  CATALOG.Z22MCAT  
>  MCAT
> ASM   M  CATALOG.Z22MCAT  
>  MCAT

--
John Eells
IBM Poughkeepsie
ee...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ZOS 2.2 Install - Alias to Catalog

[Dazzo, Matt]

New dsn's go down as SSA.SYS1.LINKLIB. Then later get renamed to SYS1.LINKLIB 
on the new res volume without updating the catalog? That would leave the 
indirect catalog entry for SYS1.LINKLIB  pointing to the new res volume at IPL. 
Then there is a cleanup of SSA.* dsn's. Where am I going wrong? Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of retired mainframer
Sent: Tuesday, June 28, 2016 11:55 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: ZOS 2.2 Install - Alias to Catalog

How do you intend to handle the DSNs that are common when the datasets are not, 
e.g., SYS1.LINKLIB?

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Dazzo, Matt
> Sent: Tuesday, June 28, 2016 8:41 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: ZOS 2.2 Install - Alias to Catalog
> 
> I am working on a software upgrade install of zos 2.2 and have a 
> question
about what
> catalog to use in the 'ALIAS TO CATALOG' cpp install panel.  After the
install is complete
> I'd like to continue to us my current master catalog for zos 2.2. So 
> do I
create a new
> temporary user catalog as the zos 2.2 mcat and plug that name in that
panel entry or do I put
> my current master cat name in the panel entry? Below is a snip it of 
> the
panel.
> 
> Thanks Matt
> 
> 
> S  AliasSTA Target System Catalog Data Set Name   Type
> -   ---   
>AOP  CATALOG.Z22MCAT
MCAT
>ASM   M  CATALOG.Z22MCAT
MCAT

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

ZOS 2.2 Install - Alias to Catalog

[Dazzo, Matt]

I am working on a software upgrade install of zos 2.2 and have a question about 
what catalog to use in the 'ALIAS TO CATALOG' cpp install panel.  After the 
install is complete I'd like to continue to us my current master catalog for 
zos 2.2. So do I create a new temporary user catalog as the zos 2.2 mcat and 
plug that name in that panel entry or do I put my current master cat name in 
the panel entry? Below is a snip it of the panel.

Thanks Matt


S  AliasSTA Target System Catalog Data Set Name   Type
-   ---   
   AOP  CATALOG.Z22MCAT 
  MCAT
   ASM   M  CATALOG.Z22MCAT   
MCAT



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SFTP Compression

[Dazzo, Matt]

Thank you all for your help, we found that the server needed a setting modified.

Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Thursday, June 09, 2016 9:11 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SFTP Compression

Marc is correct.

Also, if you have z/OS V2R2 OpenSSH and a zEDC card, you can do this:

cozsftp -C -ozEDCCompression=yes  user@host

(you would have to authorize the user to use zEDC using SAF/RACF)

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Thu, Jun 9, 2016 at 6:41 AM, Marc Manuel <mmanue...@gmail.com> wrote:

> Yes "-C" should work.
>
> You can add "-vvv" to have sysout trace where you can find for example :
>
>
> Co:Z SFTP version: 3.6.0 (6.4p1) 2015-12-08 Copyright (C) Dovetailed 
> Technologies, LLC. 2008-2014. All rights reserved.
> (.)
> debug1: compress outgoing: raw data 105008594, compressed 1430152, 
> factor
> 0.01
>
>
> debug1: compress incoming: raw data 123765, compressed 28604, factor 
> 0.23
>
> ()
>
>
> 2016-06-08 13:40 GMT+02:00 Dazzo, Matt <
> 00a854d4f854-dmarc-requ...@listserv.ua.edu>:
>
> > I have a request to see if we can turn on wire-compression for sftp. 
> > We are using Cozbatch for SFTP (SSH), I have done some testing using 
> > the -C parameter as shown below but I can't confirm if this is 
> > working? Would
> this
> > be correct? If not, can anyone shed some light on this?
> >
> > Thanks Matt
> >
> > Co:Z SFTP version: 2.4.4 (5.0p1) 2014-03-18 Copyright (C) Dovetailed 
> > Technologies, LLC. 2008-2013. All rights
> reserved.
> >
> > $coz_bin/cozsftp $ssh_opts  -b-  -C  $remoteuser@$server < >
> > 
> > -- For IBM-MAIN subscribe / signoff / archive access instructions, 
> > send email to lists...@listserv.ua.edu with the message: INFO 
> > IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SFTP Compression

[Dazzo, Matt]

Upgraded to version 3.6.3 and still not seeing compression messages, are there 
other mvs system or Zos unix requirements that maybe we do not have in place? 

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Thursday, June 09, 2016 9:11 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SFTP Compression

Marc is correct.

Also, if you have z/OS V2R2 OpenSSH and a zEDC card, you can do this:

cozsftp -C -ozEDCCompression=yes  user@host

(you would have to authorize the user to use zEDC using SAF/RACF)

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Thu, Jun 9, 2016 at 6:41 AM, Marc Manuel <mmanue...@gmail.com> wrote:

> Yes "-C" should work.
>
> You can add "-vvv" to have sysout trace where you can find for example :
>
>
> Co:Z SFTP version: 3.6.0 (6.4p1) 2015-12-08 Copyright (C) Dovetailed 
> Technologies, LLC. 2008-2014. All rights reserved.
> (.)
> debug1: compress outgoing: raw data 105008594, compressed 1430152, 
> factor
> 0.01
>
>
> debug1: compress incoming: raw data 123765, compressed 28604, factor 
> 0.23
>
> ()
>
>
> 2016-06-08 13:40 GMT+02:00 Dazzo, Matt <
> 00a854d4f854-dmarc-requ...@listserv.ua.edu>:
>
> > I have a request to see if we can turn on wire-compression for sftp. 
> > We are using Cozbatch for SFTP (SSH), I have done some testing using 
> > the -C parameter as shown below but I can't confirm if this is 
> > working? Would
> this
> > be correct? If not, can anyone shed some light on this?
> >
> > Thanks Matt
> >
> > Co:Z SFTP version: 2.4.4 (5.0p1) 2014-03-18 Copyright (C) Dovetailed 
> > Technologies, LLC. 2008-2013. All rights
> reserved.
> >
> > $coz_bin/cozsftp $ssh_opts  -b-  -C  $remoteuser@$server < >
> > 
> > -- For IBM-MAIN subscribe / signoff / archive access instructions, 
> > send email to lists...@listserv.ua.edu with the message: INFO 
> > IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SFTP Compression

[Dazzo, Matt]

Thanks, but on version Co:Z SFTP version: 2.4.4, I did not get the messages 
'debug1: compress outgoing: raw data'. I did not get any messages about 
compression.

In the process of upgrading to version 3.6.3 to see if that makes a difference. 
Below is may settings.

$coz_bin/cozsftp  $ssh_opts -b- -C -vvv $remoteuser@$server <mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Thursday, June 09, 2016 9:11 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SFTP Compression

Marc is correct.

Also, if you have z/OS V2R2 OpenSSH and a zEDC card, you can do this:

cozsftp -C -ozEDCCompression=yes  user@host

(you would have to authorize the user to use zEDC using SAF/RACF)

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Thu, Jun 9, 2016 at 6:41 AM, Marc Manuel <mmanue...@gmail.com> wrote:

> Yes "-C" should work.
>
> You can add "-vvv" to have sysout trace where you can find for example :
>
>
> Co:Z SFTP version: 3.6.0 (6.4p1) 2015-12-08 Copyright (C) Dovetailed 
> Technologies, LLC. 2008-2014. All rights reserved.
> (.)
> debug1: compress outgoing: raw data 105008594, compressed 1430152, 
> factor
> 0.01
>
>
> debug1: compress incoming: raw data 123765, compressed 28604, factor 
> 0.23
>
> ()
>
>
> 2016-06-08 13:40 GMT+02:00 Dazzo, Matt <
> 00a854d4f854-dmarc-requ...@listserv.ua.edu>:
>
> > I have a request to see if we can turn on wire-compression for sftp. 
> > We are using Cozbatch for SFTP (SSH), I have done some testing using 
> > the -C parameter as shown below but I can't confirm if this is 
> > working? Would
> this
> > be correct? If not, can anyone shed some light on this?
> >
> > Thanks Matt
> >
> > Co:Z SFTP version: 2.4.4 (5.0p1) 2014-03-18 Copyright (C) Dovetailed 
> > Technologies, LLC. 2008-2013. All rights
> reserved.
> >
> > $coz_bin/cozsftp $ssh_opts  -b-  -C  $remoteuser@$server < >
> > 
> > -- For IBM-MAIN subscribe / signoff / archive access instructions, 
> > send email to lists...@listserv.ua.edu with the message: INFO 
> > IBM-MAIN
> >
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SFTP Compression

[Dazzo, Matt]

I have a request to see if we can turn on wire-compression for sftp. We are 
using Cozbatch for SFTP (SSH), I have done some testing using the -C parameter 
as shown below but I can't confirm if this is working? Would this be correct? 
If not, can anyone shed some light on this?

Thanks Matt

Co:Z SFTP version: 2.4.4 (5.0p1) 2014-03-18
Copyright (C) Dovetailed Technologies, LLC. 2008-2013. All rights reserved.

$coz_bin/cozsftp $ssh_opts  -b-  -C  $remoteuser@$server <

Re: LARGEDS and Z11 Mode

[Dazzo, Matt]

Anybody have issues restoring jobs offloaded to tape that are z2 mode after 
going to z11 mode?

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of David Purdy
Sent: Wednesday, June 01, 2016 11:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: LARGEDS and Z11 Mode

Matt, I did a $DCKPTSPACE before and after the $ACTIVATE just to review. Added 
the parameter BERTUSE on a second $DCKPTSPACE command to insure no calculation 
errors and a second review. I believe the JOE count changed, but there may have 
been other spool activity going on.

Also $PJES2,ABEND and restarted JES to verify JES would work while I was logged 
on and able to fix it.

David



On Wednesday, June 1, 2016 Dazzo, Matt 
<00a854d4f854-dmarc-requ...@listserv.ua.edu> wrote:
Allen, Oops wanted to include this into the original post. Appears to me there 
should be plenty of free records here? The increase I believe is 302? Thanks 
Matt

$HASP852 CKPTSPACE
$HASP852 CKPTSPACE BERTNUM=32100,BERTFREE=31657,BERTWARN=80,
$HASP852 CKPT1=(CAPACITY=6288,UNUSED=4446),CKPT2=() 

$HASP895 $DACTIVATE 997
$HASP895 JES2 CHECKPOINT MODE IS CURRENTLY Z2
$HASP895 THE CURRENT CHECKPOINT:
$HASP895 -- CONTAINS 32100 BERTS AND BERT UTILIZATION IS 1
$HASP895 PERCENT.
$HASP895 -- CONTAINS 1847 4K RECORDS.
$HASP895 z11 CHECKPOINT MODE ACTIVATION WILL:
$HASP895 -- EXPAND CHECKPOINT SIZE TO 2149 4K RECORDS.
$HASP895 -- REQUIRE 0 ADDITIONAL BERTS AND UTILIZATION
$HASP895 WOULD REACH 1 PERCENT.
$HASP895 z11 ACTIVATION WILL FAIL IF ISSUED FROM THIS MEMBER.
$HASP895 THE FOLLOWING ISSUES PREVENT ACTIVATION:
$HASP895 -- LARGEDS SUPPORT MUST BE ACTIVATED.
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Wednesday, June 01, 2016 10:34 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: LARGEDS and Z11 Mode

Should do it. 

I presume this will occur on the z/OS 1.13 system prior to the upgrade.

$TSPOOLDEF should present no issues.

At z/OS 1.13 you can issue $DACTIVATE, LEVEL=Z2 to "backout the upgrade. This 
*IS NOT* available on z/OS 2.2. 

Z11 mode has been out for such a long time that I cannot forsee any issues at 
this point in time. 

You *MIGHT* consider enlarging the checkpoint dataset based on "$HASP895 -- 
EXPAND CHECKPOINT SIZE TO 2149 4K RECORDS.". I can't be certain without seeing 
the O/P of $DCHKPTSPACE.

HTH,



Planning for z1.13 to 2.2 upgrade and found that we need to move to jes2 
checkpoint mode Z11. We are a monplex so no MAS to be concerned about. I gather 
from reading the jes2 init and tuning, Reference guide and JES2 Performance and 
Availability Considerations in Redbooks the following.

Use $DACTIVATE command and resolve outstanding requirements, for me that looks 
like moving to LARGEDS support.
Change SPOOLDEF, LARGEDS=ALLOWED ($T SPOOLDEF,LARGEDS=ALLOWED) Issue $ACTIVE

Did I miss any steps? thanks Matt

This would be done during a scheduled system outage so there would be no 
activity.

What I can't find is how to test afterward, what problems to look for, how to 
back out if necessary?

Below is the display of the jes dactivate.
$HASP895 $DACTIVATE 997
$HASP895 JES2 CHECKPOINT MODE IS CURRENTLY Z2
$HASP895 THE CURRENT CHECKPOINT:
$HASP895 -- CONTAINS 32100 BERTS AND BERT UTILIZATION IS 1
$HASP895 PERCENT.
$HASP895 -- CONTAINS 1847 4K RECORDS.
$HASP895 z11 CHECKPOINT MODE ACTIVATION WILL:
$HASP895 -- EXPAND CHECKPOINT SIZE TO 2149 4K RECORDS.
$HASP895 -- REQUIRE 0 ADDITIONAL BERTS AND UTILIZATION
$HASP895 WOULD REACH 1 PERCENT.
$HASP895 z11 ACTIVATION WILL FAIL IF ISSUED FROM THIS MEMBER.
$HASP895 THE FOLLOWING ISSUES PREVENT ACTIVATION:
$HASP895 -- LARGEDS SUPPORT MUST BE ACTIVATED.

This email ? including attachments ? may contain confidential information. If 
you are not the intended recipient, do not copy, distribute or act on it. 
Instead, notify the sender immediately and delete the message.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: LARGEDS and Z11 Mode

[Dazzo, Matt]

Allen, Oops wanted to include this into the original post. Appears to me there 
should be plenty of free records here? The increase I believe is 302? Thanks 
Matt

$HASP852 CKPTSPACE
$HASP852 CKPTSPACE  BERTNUM=32100,BERTFREE=31657,BERTWARN=80, 
$HASP852CKPT1=(CAPACITY=6288,UNUSED=4446),CKPT2=()

$HASP895 $DACTIVATE 997
$HASP895 JES2 CHECKPOINT MODE IS CURRENTLY Z2
$HASP895 THE CURRENT CHECKPOINT:
$HASP895  -- CONTAINS 32100 BERTS AND BERT UTILIZATION IS 1
$HASP895 PERCENT.
$HASP895  -- CONTAINS 1847 4K RECORDS.
$HASP895 z11 CHECKPOINT MODE ACTIVATION WILL:
$HASP895  -- EXPAND CHECKPOINT SIZE TO 2149 4K RECORDS.
$HASP895  -- REQUIRE 0 ADDITIONAL BERTS AND UTILIZATION
$HASP895 WOULD REACH 1 PERCENT.
$HASP895 z11 ACTIVATION WILL FAIL IF ISSUED FROM THIS MEMBER.
$HASP895 THE FOLLOWING ISSUES PREVENT ACTIVATION:
$HASP895  -- LARGEDS SUPPORT MUST BE ACTIVATED.
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Wednesday, June 01, 2016 10:34 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: LARGEDS and Z11 Mode

Should do it. 

I presume this will occur on the z/OS 1.13 system prior to the upgrade.

$TSPOOLDEF should present no issues.

At z/OS 1.13 you can issue $DACTIVATE, LEVEL=Z2 to "backout the upgrade. This 
*IS NOT* available on z/OS 2.2. 

Z11 mode has been out for such a long time that I cannot forsee any issues at 
this point in time. 

You *MIGHT* consider enlarging the checkpoint dataset based on  "$HASP895  -- 
EXPAND CHECKPOINT SIZE TO 2149 4K RECORDS.".  I can't be certain without seeing 
the O/P of $DCHKPTSPACE.

HTH,



Planning for z1.13 to 2.2 upgrade and found that we need to move to jes2 
checkpoint mode Z11. We are a monplex so no MAS to be concerned about. I gather 
from reading the jes2 init and tuning, Reference guide and JES2 Performance and 
Availability Considerations in Redbooks the following.

Use $DACTIVATE command and resolve outstanding requirements, for me that looks 
like moving to LARGEDS support.
Change SPOOLDEF, LARGEDS=ALLOWED ($T SPOOLDEF,LARGEDS=ALLOWED) Issue $ACTIVE

Did I miss any steps? thanks Matt

This would be done during a scheduled system outage so there would be no 
activity.

What I can't find is how to test afterward, what problems to look for, how to 
back out if necessary?

Below is the display of the jes dactivate.
$HASP895 $DACTIVATE 997
$HASP895 JES2 CHECKPOINT MODE IS CURRENTLY Z2
$HASP895 THE CURRENT CHECKPOINT:
$HASP895  -- CONTAINS 32100 BERTS AND BERT UTILIZATION IS 1
$HASP895 PERCENT.
$HASP895  -- CONTAINS 1847 4K RECORDS.
$HASP895 z11 CHECKPOINT MODE ACTIVATION WILL:
$HASP895  -- EXPAND CHECKPOINT SIZE TO 2149 4K RECORDS.
$HASP895  -- REQUIRE 0 ADDITIONAL BERTS AND UTILIZATION
$HASP895 WOULD REACH 1 PERCENT.
$HASP895 z11 ACTIVATION WILL FAIL IF ISSUED FROM THIS MEMBER.
$HASP895 THE FOLLOWING ISSUES PREVENT ACTIVATION:
$HASP895  -- LARGEDS SUPPORT MUST BE ACTIVATED.

This email ? including attachments ? may contain confidential information. If 
you are not the intended recipient, do not copy, distribute or act on it. 
Instead, notify the sender immediately and delete the message.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

LARGEDS and Z11 Mode

[Dazzo, Matt]

Planning for z1.13 to 2.2 upgrade and found that we need to move to jes2 
checkpoint mode Z11. We are a monplex so no
MAS to be concerned about. I gather from reading the jes2 init and tuning, 
Reference guide and JES2 Performance and Availability Considerations in 
Redbooks the following.

Use $DACTIVATE command and resolve outstanding requirements, for me that looks 
like moving to LARGEDS support.
Change SPOOLDEF, LARGEDS=ALLOWED ($T SPOOLDEF,LARGEDS=ALLOWED)
Issue $ACTIVE

Did I miss any steps? thanks Matt

This would be done during a scheduled system outage so there would be no 
activity.

What I can't find is how to test afterward, what problems to look for, how to 
back out if necessary?

Below is the display of the jes dactivate.
$HASP895 $DACTIVATE 997
$HASP895 JES2 CHECKPOINT MODE IS CURRENTLY Z2
$HASP895 THE CURRENT CHECKPOINT:
$HASP895  -- CONTAINS 32100 BERTS AND BERT UTILIZATION IS 1
$HASP895 PERCENT.
$HASP895  -- CONTAINS 1847 4K RECORDS.
$HASP895 z11 CHECKPOINT MODE ACTIVATION WILL:
$HASP895  -- EXPAND CHECKPOINT SIZE TO 2149 4K RECORDS.
$HASP895  -- REQUIRE 0 ADDITIONAL BERTS AND UTILIZATION
$HASP895 WOULD REACH 1 PERCENT.
$HASP895 z11 ACTIVATION WILL FAIL IF ISSUED FROM THIS MEMBER.
$HASP895 THE FOLLOWING ISSUES PREVENT ACTIVATION:
$HASP895  -- LARGEDS SUPPORT MUST BE ACTIVATED.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: LOGR Format Level

[Dazzo, Matt]

Thanks Mark

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mark Zelden
Sent: Wednesday, May 18, 2016 5:49 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: LOGR Format Level

On Wed, 18 May 2016 14:04:59 -0400, Dazzo, Matt <mda...@pch.com> wrote:

>>Started the 1.13 to 2.2 migration guide and they suggest upgrading 
>>LOGR dsn's to  level HBB7705, we are at HBB6603. We are a monoplex 
>>shop and probably always  will be. Is there any need to take this action in 
>>our environment?


>
> Below are the dsn's defined in couplxx member.  
> 
>DATA   TYPE(LOGR)  
>  PCOUPLE(SYS1.LOGR.ZOS.TECH01,OSPAG2)
> ACOUPLE(SYS1.LOGR.ZOS.TECH02,OSMCAT)
> 
>When I issue command D LOGGER,CONN,SYSPLEX,LSN=*, the display does not contain 
>those
> datasets.  Does that mean nothing  is writing to them?   
 
The command you issued displays logstreams, not couple data sets.  Do you see 
any
DASD logstreams in use?   I'm assuming you do.

To display the LOGR couple data sets the command would be:
   D XCF,COUPLE,TYPE=LOGR  or D XCF,CPL,TYPE=LOGR

I would have to go back and RTFM to know for sure, but IIRC the change was for 
SMDUPLEX (support system managed duplex rebuilding of structures) which you 
would never use in a monoplex.  So no, you don't have to do it but it wouldn't 
hurt and if it were me, I would do it anyway.

Regards,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS ITIL v3 
Foundation Certified mailto:m...@mzelden.com Mark's MVS Utilities: 
http://www.mzelden.com/mvsutil.html
Systems Programming expert at http://search390.techtarget.com/ateExperts/
--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: LOGR Format Level

[Dazzo, Matt]

Elardus, I do not much at all about logr . Below are the dsn's defined in 
couplxx member. 

DATA   TYPE(LOGR) 
   PCOUPLE(SYS1.LOGR.ZOS.TECH01,OSPAG2)   
   ACOUPLE(SYS1.LOGR.ZOS.TECH02,OSMCAT)   

When I issue command D LOGGER,CONN,SYSPLEX,LSN=*, the display does not contain 
those datasets.  Does that mean nothing  is writing to them?  

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Elardus Engelbrecht
Sent: Wednesday, May 18, 2016 12:13 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: LOGR Format Level

Dazzo, Matt wrote:

>Started the 1.13 to 2.2 migration guide and they suggest upgrading LOGR dsn's 
>to level HBB7705, we are at HBB6603. We are a monoplex shop and probably 
>always will be. Is there any need to take this action in our environment?

What are you using to write to those LOGR datasets?

>The archives did contain some info but it was very old, would like some up to 
>date comments.

Probably you need to do resizing those LOGR datasets if they are small and 
updated regularly?

Groete / Greetings
Elardus Engelbrecht

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

LOGR Format Level

[Dazzo, Matt]

Started the 1.13 to 2.2 migration guide and they suggest upgrading LOGR dsn's 
to level HBB7705, we are at HBB6603. We are a monoplex shop and probably always 
will be. Is there any need to take this action in our environment?

The archives did contain some info but it was very old, would like some up to 
date comments.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Fixcat vs Hardware PSP Buckets

[Dazzo, Matt]

I would like to verify that using fixcat category IBM.Device.Server.zBC12-2828 
is the same as checking PSP BUCKETS for DEVICE 2828?

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508

[Dazzo, Matt]

Dave, you get the gold star! 

SSLV3 did it! 

Thanks to all

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Gibney, David Allen,Jr
Sent: Wednesday, February 24, 2016 3:25 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508

 UA75508 is sup'd by UA76977 on my system.
TELNETGLOBALS 
  SSLV3   

And I am using a keyring in RACF


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Dazzo, Matt
> Sent: Wednesday, February 24, 2016 12:15 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> 
> Dave, what statements did you add? Thanks
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Gibney, David Allen,Jr
> Sent: Wednesday, February 24, 2016 3:12 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> 
> When I hit a similar issue with z/OS 1.13, I was able to use SSLV3 in 
> TELNETGLOBALS to revive it.
> 
> 
> > -Original Message-
> > From: IBM Mainframe Discussion List 
> > [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Dazzo, Matt
> > Sent: Wednesday, February 24, 2016 12:08 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> >
> > Yes, OA46489 is on (PTF UA75508).
> >
> > The error I  get is a pop up window with
> >
> > Unable to establish secure socket
> > error:1409443E:SSL routine:SSL3_READ_BYTES:tlsv1 alert protocol 
> > version
> >
> > The SSL handshake failed
> >
> > -Original Message-
> > From: IBM Mainframe Discussion List 
> > [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler
> > Sent: Wednesday, February 24, 2016 2:43 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> >
> > Also, according to OA47183 you may also need to install OA46489.  
> > Did that occur as well?
> >
> >  APAR OA46489 fixed the problem it reported but introduced a
> > new problem.  We recommend OA46489 stay installed.
> >  Without OA46489, gsk_environment_open() would default to
> > enable the SSL V2 and SSL V3 protocols.  They would need to
> > be disabled explicitly if they were not wanted.
> >  Once OA46489 is installed, these protocols are disabled by
> > default, but they can be enabled explicitly.
> >
> >  In either case, the default settings can be overriden by
> > either environment variables (GSK_PROTOCOL_SSLV2 or
> > GSK_PROTOCOL_SSLV3) or through a call to the
> > gsk_attribute_set_enum() API specifying enumeration
> > identifiers (GSK_PROTOCOL_SSLV2 or GSK_PROTOCOL_SSLV3).
> >
> >  Users of applications requiring the use of SSL V2 or SSL V3
> > will need to enable the support through environment
> > variables, application configuration settings when available
> > or through the use of AT-TLS to control the secure
> > connections.
> >
> >  The RACF/SAF checks resulting in the SMF 80 records were
> > being used by System SSL to aid in the setting of the
> > protocols.
> >
> > Lizette
> >
> >
> > > -Original Message-
> > > From: IBM Mainframe Discussion List 
> > > [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler
> > > Sent: Wednesday, February 24, 2016 12:40 PM
> > > To: IBM-MAIN@LISTSERV.UA.EDU
> > > Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> > >
> > > Do you get any other error messages?
> > > What symptoms (other than cannot connect) do you see?
> > >
> > > Have you joined the TCPIP List?  If not, that might another place 
> > > to post this question.
> > > To join, if you have not done so, use this
> > > TCPIP To subscribe, send mail to lists...@vm.marist.edu
> with
> > the
> > > command (paste it!) in the e-mail message body:
> > > SUBSCRIBE IBMTCP-L
> > > Or this url and go to the bottom of the webpage:
> > > https://urldefense.proofpoint.com/v2/url?u=http-3A__www2.marist.ed
> > > u_
> > > ht
> > > bin_wlvindex-3FIBMTCP-
> > 2DL=CwIFAg=C3yme8gMkxg_ihJNXS06ZyWk4EJm8Ldrr
> > > vxQb-
> >
> Je7sw=u9g8rUevBoyCPAdo5sWE9w=CRofWQTXXgb6KmHLlJrnSam05tho
> > NHMd
> > > B_VOomVg_Eg=rOJ4DtKQqEFdifEvZGdeKipWsA9CngvYNfzKGylX--4=
>

Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508

[Dazzo, Matt]

Dave, what statements did you add? Thanks

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Gibney, David Allen,Jr
Sent: Wednesday, February 24, 2016 3:12 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508

When I hit a similar issue with z/OS 1.13, I was able to use SSLV3 in 
TELNETGLOBALS to revive it.


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Dazzo, Matt
> Sent: Wednesday, February 24, 2016 12:08 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> 
> Yes, OA46489 is on (PTF UA75508).
> 
> The error I  get is a pop up window with
> 
> Unable to establish secure socket
> error:1409443E:SSL routine:SSL3_READ_BYTES:tlsv1 alert protocol 
> version
> 
> The SSL handshake failed
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Lizette Koehler
> Sent: Wednesday, February 24, 2016 2:43 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> 
> Also, according to OA47183 you may also need to install OA46489.  Did 
> that occur as well?
> 
>  APAR OA46489 fixed the problem it reported but introduced a
> new problem.  We recommend OA46489 stay installed.
>  Without OA46489, gsk_environment_open() would default to
> enable the SSL V2 and SSL V3 protocols.  They would need to
> be disabled explicitly if they were not wanted.
>  Once OA46489 is installed, these protocols are disabled by
> default, but they can be enabled explicitly.
> 
>  In either case, the default settings can be overriden by
> either environment variables (GSK_PROTOCOL_SSLV2 or
> GSK_PROTOCOL_SSLV3) or through a call to the
> gsk_attribute_set_enum() API specifying enumeration
> identifiers (GSK_PROTOCOL_SSLV2 or GSK_PROTOCOL_SSLV3).
> 
>  Users of applications requiring the use of SSL V2 or SSL V3
> will need to enable the support through environment
> variables, application configuration settings when available
> or through the use of AT-TLS to control the secure
> connections.
> 
>  The RACF/SAF checks resulting in the SMF 80 records were
> being used by System SSL to aid in the setting of the
> protocols.
> 
> Lizette
> 
> 
> > -Original Message-
> > From: IBM Mainframe Discussion List 
> > [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler
> > Sent: Wednesday, February 24, 2016 12:40 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> >
> > Do you get any other error messages?
> > What symptoms (other than cannot connect) do you see?
> >
> > Have you joined the TCPIP List?  If not, that might another place to 
> > post this question.
> > To join, if you have not done so, use this
> > TCPIP   To subscribe, send mail to lists...@vm.marist.edu  with
> the
> > command (paste it!) in the e-mail message body:
> > SUBSCRIBE IBMTCP-L
> > Or this url and go to the bottom of the webpage:
> > https://urldefense.proofpoint.com/v2/url?u=http-3A__www2.marist.edu_
> > ht
> > bin_wlvindex-3FIBMTCP-
> 2DL=CwIFAg=C3yme8gMkxg_ihJNXS06ZyWk4EJm8Ldrr
> > vxQb-
> Je7sw=u9g8rUevBoyCPAdo5sWE9w=CRofWQTXXgb6KmHLlJrnSam05tho
> NHMd
> > B_VOomVg_Eg=rOJ4DtKQqEFdifEvZGdeKipWsA9CngvYNfzKGylX--4=
> >
> > Lizette
> >
> >
> > > -Original Message-
> > > From: IBM Mainframe Discussion List 
> > > [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Dazzo, Matt
> > > Sent: Wednesday, February 24, 2016 12:36 PM
> > > To: IBM-MAIN@LISTSERV.UA.EDU
> > > Subject: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> > >
> > > After applying RSU maintenance to our zos1.13 sandbox system I 
> > > have run into a problem (that I expected from reading the hold 
> > > data) with
> > > TN3270
> > and SSL.
> > > SSLv2 & 3 are now defaulted to off. All our tn3270 sessions are 
> > > configured to use ssl, I tested with TLS and they work fine. I'd 
> > > like to enable ssl3 until we can get all the tn3270 users changed 
> > > over to tls on
> > my terms.
> > > * The PTF disabled SSL by default, but they can be enabled
> > explicitly.
> > >
> > > According to the apar info it is possible to override the new 
> > > default (ssl
> > > off) in 2 ways, one with environment variable 

Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508

[Dazzo, Matt]

Yes, OA46489 is on (PTF UA75508). 

The error I  get is a pop up window with

Unable to establish secure socket
error:1409443E:SSL routine:SSL3_READ_BYTES:tlsv1 alert protocol version

The SSL handshake failed

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lizette Koehler
Sent: Wednesday, February 24, 2016 2:43 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508

Also, according to OA47183 you may also need to install OA46489.  Did that 
occur as well?

 APAR OA46489 fixed the problem it reported but introduced a
new problem.  We recommend OA46489 stay installed.
 Without OA46489, gsk_environment_open() would default to
enable the SSL V2 and SSL V3 protocols.  They would need to
be disabled explicitly if they were not wanted.
 Once OA46489 is installed, these protocols are disabled by
default, but they can be enabled explicitly.
 
 In either case, the default settings can be overriden by
either environment variables (GSK_PROTOCOL_SSLV2 or
GSK_PROTOCOL_SSLV3) or through a call to the
gsk_attribute_set_enum() API specifying enumeration
identifiers (GSK_PROTOCOL_SSLV2 or GSK_PROTOCOL_SSLV3).
 
 Users of applications requiring the use of SSL V2 or SSL V3
will need to enable the support through environment
variables, application configuration settings when available
or through the use of AT-TLS to control the secure
connections.
 
 The RACF/SAF checks resulting in the SMF 80 records were
being used by System SSL to aid in the setting of the
protocols.

Lizette


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Lizette Koehler
> Sent: Wednesday, February 24, 2016 12:40 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> 
> Do you get any other error messages?
> What symptoms (other than cannot connect) do you see?
> 
> Have you joined the TCPIP List?  If not, that might another place to 
> post this question.
> To join, if you have not done so, use this
> TCPIP To subscribe, send mail to lists...@vm.marist.edu  with the
> command (paste it!) in the e-mail message body:
> SUBSCRIBE IBMTCP-L
> Or this url and go to the bottom of the webpage:
> http://www2.marist.edu/htbin/wlvindex?IBMTCP-L
> 
> Lizette
> 
> 
> > -Original Message-
> > From: IBM Mainframe Discussion List 
> > [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Dazzo, Matt
> > Sent: Wednesday, February 24, 2016 12:36 PM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: SSLv3 & SSLv3 - APAR OA47183, PTF UA75508
> >
> > After applying RSU maintenance to our zos1.13 sandbox system I have 
> > run into a problem (that I expected from reading the hold data) with 
> > TN3270
> and SSL.
> > SSLv2 & 3 are now defaulted to off. All our tn3270 sessions are 
> > configured to use ssl, I tested with TLS and they work fine. I'd 
> > like to enable ssl3 until we can get all the tn3270 users changed 
> > over to tls on
> my terms.
> > * The PTF disabled SSL by default, but they can be enabled
> explicitly.
> >
> > According to the apar info it is possible to override the new 
> > default (ssl
> > off) in 2 ways, one with environment variable and the other (not the 
> > preferred
> > method) with RACF profiles. Any help in getting this resolved is
> appreciated.
> > Matt
> >
> > So far I have tried adding the below to /etc/profile export 
> > GSK_PROTOCOL_SSLV3_ON export GSK_PROTOCOL_SSLV2_ON
> >
> > And add the below to my telnet profile, I still cannot connect using ssl.
> >
> > ENCRYPT
> > SSL_RC4_SHA
> > SSL_RC4_MD5
> > SSL_AES_256_SHA
> > SSL_AES_128_SHA
> > SSL_3DES_SHA
> > SSL_DES_SHA
> > SSL_RC4_MD5_EX
> > SSL_RC2_MD5_EX
> > SSL_NULL_SHA
> > SSL_NULL_MD5
> > SSL_NULL_Null
> > ENDENCRYPT

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

SSLv3 & SSLv3 - APAR OA47183, PTF UA75508

[Dazzo, Matt]

After applying RSU maintenance to our zos1.13 sandbox system I have run into a 
problem (that I expected from reading the hold data) with TN3270 and SSL. SSLv2 
& 3 are now defaulted to off. All our tn3270 sessions are configured to use 
ssl, I tested with TLS and they work fine. I'd like to enable ssl3 until we can 
get all the tn3270 users changed over to tls on my terms.
* The PTF disabled SSL by default, but they can be enabled explicitly.

According to the apar info it is possible to override the new default (ssl off) 
in 2 ways, one with environment variable and the other (not the preferred 
method) with RACF profiles. Any help in getting this resolved is appreciated. 
Matt

So far I have tried adding the below to /etc/profile
export GSK_PROTOCOL_SSLV3_ON
export GSK_PROTOCOL_SSLV2_ON

And add the below to my telnet profile, I still cannot connect using ssl.

ENCRYPT
SSL_RC4_SHA
SSL_RC4_MD5
SSL_AES_256_SHA
SSL_AES_128_SHA
SSL_3DES_SHA
SSL_DES_SHA
SSL_RC4_MD5_EX
SSL_RC2_MD5_EX
SSL_NULL_SHA
SSL_NULL_MD5
SSL_NULL_Null
ENDENCRYPT


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Using IBM z/OS TDMF Product to Migrate 3390-9 to 3390-27's

[Dazzo, Matt]

Ok tks.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mike Schwab
Sent: Wednesday, February 17, 2016 11:04 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Using IBM z/OS TDMF Product to Migrate 3390-9 to 3390-27's

Yes.  It migrates to ML1/2 then recalls to any enabled volume.  Which is why to 
quiesce old volumes before starting.  And it might be wise to do a few of the 
largest datasets with a dataset command, so it grabs large amounts of few 
volumes.

On Wed, Feb 17, 2016 at 9:55 AM, Dazzo, Matt 
<00a854d4f854-dmarc-requ...@listserv.ua.edu> wrote:
> Mike, with the sms migrate command does hsm have to active? I 
> interpret that to be true from reading the hsm admin guide. Does that 
> sound correct? Tks Matt
>
> Migrating an SMS-managed volume
> You can cause data sets to migrate from an SMS-managed volume by using the 
> MIGRATE command. The MIGRATE VOLUME command can override some management 
> class attributes that control when an SMS-managed data set is eligible to 
> migrate, depending on the form of the command. The MIGRATE VOLUME command 
> migrates data sets for which the management class COMMAND OR AUTO MIGRATE 
> attribute has the value of BOTH only.
>
> When you issue a MIGRATE VOLUME command for an SMS-managed volume:
> migration is from level 0 volumes to ML1 or ML2 volumes only.
> the volume is considered to be DFSMShsm-managed. DFSMShsm maintains control 
> records for the volume until a DELVOL command is issued for that volume.
> a list of the management class definitions required for processing the 
> SMS-managed data sets on the volume is obtained.
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Mike Schwab
> Sent: Tuesday, February 16, 2016 3:19 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Using IBM z/OS TDMF Product to Migrate 3390-9 to 
> 3390-27's
>
> Yes, you can use TDMF / FDRPAS / etc, to move a volume to the same size or 
> larger.  After the move is complete TDMF or you run ICKDSF to pick up the new 
> size.
>
> The VTOC and VTOCIX are not extended.  You should select the volumes with the 
> hardest to move datasets.  If you need to increase the VTOC / VTOCIX, you can 
> do that right after you get the new size.  Or you can create new volumes and 
> migrate the datasets from all old volumes.
>
> Remaining volumes will need to have the datasets moved to volumes on your new 
> hardware.
>
> https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zo
> s.v2r1.ieag100/v1stor.htm VARY SMS,VOLUME(volser,sysx),QUIESCE or (V 
> SMS,VOLUME(volser,sysx),Q) will disable allocations to old volumes, unless it 
> does not have enough space on non-Quiesce volumes.
>
> https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zo
> s.v2r1.arcf000/migratesmsvolume.htm?lang=en
> After setting volser to Q, command MIGRATE VOLUME(volser) DAYS(0) will 
> migrate datasets to other volumes in the storage group.  Datasets in use or 
> not eligible to migrate will be left behind.
>
> https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zo
> s.v2r1.arcf000/s6068.htm?lang=en VSAM datasets with 2+ AIXs must be 
> migrated with a command to the base cluster name.
>
> LDMF (Part of TDMF) can help move up datasets left on old volumes.
>
>
> On Tue, Feb 16, 2016 at 1:53 PM, Jasi Grewal 
> <ja...@hotmail.com<mailto:ja...@hotmail.com>> wrote:
>> Greetings, I would like to know, if we can use IBM z/OS TDMF to migrate z/VM 
>> and zLinux DASD to newer model 3390-27's from 3390-09.
>> The other problem is that we don't have that many targets as Source vols so 
>> every MDISK would have to be migrated to consume DASD Space and does TDMF 
>> supports the feature of copying MDISK's from Source to Targets or does it 
>> only supports Full Volumes migration.
>>
>> Or do we use copyddr tool to copy mdisks from source to targets from z/VM 
>> System.
>> Any experiences or recommendations would be greatly appreciated.
>>
>> Thanks in advance,
>> Regards,
>> Jasi Grewal.
>>
>> -
>> - For IBM-MAIN subscribe / signoff / archive access instructions, 
>> send email to 
>> lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with the 
>> message: INFO IBM-MAIN
>
>
>
> --
> Mike A Schwab, Springfield IL USA
> Where do Forest Rangers go to get away from it all?
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@lists

Re: Using IBM z/OS TDMF Product to Migrate 3390-9 to 3390-27's

[Dazzo, Matt]

Mike, with the sms migrate command does hsm have to active? I interpret that to 
be true from reading the hsm admin guide. Does that sound correct? Tks Matt

Migrating an SMS-managed volume
You can cause data sets to migrate from an SMS-managed volume by using the 
MIGRATE command. The MIGRATE VOLUME command can override some management class 
attributes that control when an SMS-managed data set is eligible to migrate, 
depending on the form of the command. The MIGRATE VOLUME command migrates data 
sets for which the management class COMMAND OR AUTO MIGRATE attribute has the 
value of BOTH only.

When you issue a MIGRATE VOLUME command for an SMS-managed volume:
migration is from level 0 volumes to ML1 or ML2 volumes only.
the volume is considered to be DFSMShsm-managed. DFSMShsm maintains control 
records for the volume until a DELVOL command is issued for that volume.
a list of the management class definitions required for processing the 
SMS-managed data sets on the volume is obtained.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mike Schwab
Sent: Tuesday, February 16, 2016 3:19 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Using IBM z/OS TDMF Product to Migrate 3390-9 to 3390-27's

Yes, you can use TDMF / FDRPAS / etc, to move a volume to the same size or 
larger.  After the move is complete TDMF or you run ICKDSF to pick up the new 
size.

The VTOC and VTOCIX are not extended.  You should select the volumes with the 
hardest to move datasets.  If you need to increase the VTOC / VTOCIX, you can 
do that right after you get the new size.  Or you can create new volumes and 
migrate the datasets from all old volumes.

Remaining volumes will need to have the datasets moved to volumes on your new 
hardware.

https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.ieag100/v1stor.htm
VARY SMS,VOLUME(volser,sysx),QUIESCE or (V SMS,VOLUME(volser,sysx),Q) will 
disable allocations to old volumes, unless it does not have enough space on 
non-Quiesce volumes.

https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.arcf000/migratesmsvolume.htm?lang=en
After setting volser to Q, command MIGRATE VOLUME(volser) DAYS(0) will migrate 
datasets to other volumes in the storage group.  Datasets in use or not 
eligible to migrate will be left behind.

https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.arcf000/s6068.htm?lang=en
VSAM datasets with 2+ AIXs must be migrated with a command to the base cluster 
name.

LDMF (Part of TDMF) can help move up datasets left on old volumes.


On Tue, Feb 16, 2016 at 1:53 PM, Jasi Grewal 
> wrote:
> Greetings, I would like to know, if we can use IBM z/OS TDMF to migrate z/VM 
> and zLinux DASD to newer model 3390-27's from 3390-09.
> The other problem is that we don't have that many targets as Source vols so 
> every MDISK would have to be migrated to consume DASD Space and does TDMF 
> supports the feature of copying MDISK's from Source to Targets or does it 
> only supports Full Volumes migration.
>
> Or do we use copyddr tool to copy mdisks from source to targets from z/VM 
> System.
> Any experiences or recommendations would be greatly appreciated.
>
> Thanks in advance,
> Regards,
> Jasi Grewal.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the 
> message: INFO IBM-MAIN



--
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: 
INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Using IBM z/OS TDMF Product to Migrate 3390-9 to 3390-27's

[Dazzo, Matt]

We are facing the need to migrate off 3390-3, and probably some 3390-9 to 
mod-27's, so I am seeking the best process to take. This is a new endeavor for 
me so I am learning and looking for the best method of course with our current 
tools on hand,  We do not have TDMF or FDR just DFDSS, hsm is not used either.  
Any direction or comments is appreciated. 

Our DB2 data is sms managed but for all other data we use BMC Mainview SRM, 
does SRM provide any tools?

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mike Schwab
Sent: Tuesday, February 16, 2016 3:19 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Using IBM z/OS TDMF Product to Migrate 3390-9 to 3390-27's

Yes, you can use TDMF / FDRPAS / etc, to move a volume to the same size or 
larger.  After the move is complete TDMF or you run ICKDSF to pick up the new 
size.

The VTOC and VTOCIX are not extended.  You should select the volumes with the 
hardest to move datasets.  If you need to increase the VTOC / VTOCIX, you can 
do that right after you get the new size.  Or you can create new volumes and 
migrate the datasets from all old volumes.

Remaining volumes will need to have the datasets moved to volumes on your new 
hardware.

https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.ieag100/v1stor.htm
VARY SMS,VOLUME(volser,sysx),QUIESCE or (V SMS,VOLUME(volser,sysx),Q) will 
disable allocations to old volumes, unless it does not have enough space on 
non-Quiesce volumes.

https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.arcf000/migratesmsvolume.htm?lang=en
After setting volser to Q, command MIGRATE VOLUME(volser) DAYS(0) will migrate 
datasets to other volumes in the storage group.  Datasets in use or not 
eligible to migrate will be left behind.

https://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.arcf000/s6068.htm?lang=en
VSAM datasets with 2+ AIXs must be migrated with a command to the base cluster 
name.

LDMF (Part of TDMF) can help move up datasets left on old volumes.


On Tue, Feb 16, 2016 at 1:53 PM, Jasi Grewal  wrote:
> Greetings, I would like to know, if we can use IBM z/OS TDMF to migrate z/VM 
> and zLinux DASD to newer model 3390-27's from 3390-09.
> The other problem is that we don't have that many targets as Source vols so 
> every MDISK would have to be migrated to consume DASD Space and does TDMF 
> supports the feature of copying MDISK's from Source to Targets or does it 
> only supports Full Volumes migration.
>
> Or do we use copyddr tool to copy mdisks from source to targets from z/VM 
> System.
> Any experiences or recommendations would be greatly appreciated.
>
> Thanks in advance,
> Regards,
> Jasi Grewal.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



--
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Data Replication

[Dazzo, Matt]

We are looking at solutions to replicate DB2 data on MVS into Hadoop on the 
Mapr platform.  One solution being reviewed is IBM(r) InfoSphere(tm) Data 
Replication for DB2 (IBM IIR CDC) running on MVS. I'm wondering how many shops 
out there are using this solution? Any user experience's or comments would be 
appreciated.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: CP Assist for Cryptographic Functions (CPACF)

[Dazzo, Matt]

Greg, we are told by a third party vendor that their program uses CFB if 
available and will have a marked performance improvement. I sent them job 
listing and they are telling me that only CBC is being used and that CFB may 
not be enabled. Is it possible that CFB is not enabled? No where can I find a 
procedure to configure CFB. We do not have ICSF but have CPACF #3863. 
 Tks Matt  

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Greg Boyd
Sent: Saturday, September 26, 2015 11:57 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: CP Assist for Cryptographic Functions (CPACF)

Cipher Feedack Mode in the hardware was introduced with MSA-4 which came with 
the z196/z114 machines.  That means that these machines (and later) support new 
assembler instructions that prefrom chaining operations:  KMF (Cipher Message 
with CFB (Cipher Feedback Mode)), KMCTR (Cipher Message with Counter) and KMO 
(Cipher Message with OFB (Output Feedback Mode)).

You can read more about these instructions in the Principles of Operations 
manuals.  I don't remember whether these instructions were retrofitted to the 
z10 CPACF hardware.  Although according to IBM's TechDoc 'Cryptographic Support 
for for z/OS V1R10-V1R12 (HCR7780)' at 
https://www.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/FLASH10716, similar 
support was retrofitted to the CEX3C on the z10.

Prior to this hardware technology being available, ICSF supported cipher 
feedback mode.  That is, by specifying the appropriate parm in the rule array, 
ICSF would handle the chaining while using the KM and KMC instructions to 
perform the encryption.  The new instructions provided a) better performance by 
doing the work in hardware instead of relying on software to do the chaining 
and b) some new chaining options.

All that said, do you want to use CFB in your app (using the new instructions)? 
or in an app using the ICSF APIs? or with System SSL (since you reference the 
SSL messages)?  If you want to use the native instructions on a z10, I'd try 
coding a simpler assembler routine to perform a KMF instruction and see if you 
get an OC1.  If you want to use the APIs, that should also work, even if the 
hardware support isn't there.  

However, if your concern is about System SSL support, then you have to refer 
the System SSL manuals.  I just did a quick search in both the z/OS 1.13 and 
z/OS 2.1 System SSL Programming manuals and found no reference to 'Cipher 
Feedback'.  I found one reference, in a message, about 'Cipher Block Chaining'. 
 And https://www.ietf.org/rfc/rfc5246.txt, the RFC for TLS Protocol V1.2, says 
'All block cipher encryption is done in CBC (Cipher Block Chaining) mode ...'.  
So I don't think CFB is even supported by the SSL protocol.

Greg Boyd
Mainframe Crypto
www.mainframecrypto.com


On Thu, 24 Sep 2015 10:17:13 -0400, Dazzo, Matt <mda...@pch.com> wrote:

>I have searched the archives but not finding the specific answer I need. We 
>have feature CPACF (#3863) on our z10-BC 2098 (zos1.13) but I am told that  
>CFB (Cipher FeedBack) is not enabled on our CPACF. I looked at out HMC 
>Activation profiles and can't determine if CFB feature is enabled but appears 
>crypto is enabled. Can one point me in the right direction to get the info? 
>How is CFB enabled? And how do you determine if it's enabled or not?
>
>I do see this in the TN3270 start up.
>
>System SSL: SHA-1 crypto assist is available System SSL: SHA-224 crypto 
>assist is available System SSL: SHA-256 crypto assist is available 
>System SSL: SHA-384 crypto assist is available System SSL: SHA-512 
>crypto assist is available System SSL: DES crypto assist is available 
>System SSL: DES3 crypto assist is available System SSL: AES 128-bit 
>crypto assist is available System SSL: AES 256-bit crypto assist is 
>available System SSL: ICSF services are not available
>
>Thanks,
>
>Matt Dazzo
>Senior Systems Programmer
>Publishers Clearing House
>
>
>--
>For IBM-MAIN subscribe / signoff / archive access instructions, send 
>email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: CP Assist for Cryptographic Functions (CPACF)

[Dazzo, Matt]

Thanks to all who responded. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Greg Boyd
Sent: Saturday, September 26, 2015 11:57 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: CP Assist for Cryptographic Functions (CPACF)

Cipher Feedack Mode in the hardware was introduced with MSA-4 which came with 
the z196/z114 machines.  That means that these machines (and later) support new 
assembler instructions that prefrom chaining operations:  KMF (Cipher Message 
with CFB (Cipher Feedback Mode)), KMCTR (Cipher Message with Counter) and KMO 
(Cipher Message with OFB (Output Feedback Mode)).

You can read more about these instructions in the Principles of Operations 
manuals.  I don't remember whether these instructions were retrofitted to the 
z10 CPACF hardware.  Although according to IBM's TechDoc 'Cryptographic Support 
for for z/OS V1R10-V1R12 (HCR7780)' at 
https://www.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/FLASH10716, similar 
support was retrofitted to the CEX3C on the z10.

Prior to this hardware technology being available, ICSF supported cipher 
feedback mode.  That is, by specifying the appropriate parm in the rule array, 
ICSF would handle the chaining while using the KM and KMC instructions to 
perform the encryption.  The new instructions provided a) better performance by 
doing the work in hardware instead of relying on software to do the chaining 
and b) some new chaining options.

All that said, do you want to use CFB in your app (using the new instructions)? 
or in an app using the ICSF APIs? or with System SSL (since you reference the 
SSL messages)?  If you want to use the native instructions on a z10, I'd try 
coding a simpler assembler routine to perform a KMF instruction and see if you 
get an OC1.  If you want to use the APIs, that should also work, even if the 
hardware support isn't there.  

However, if your concern is about System SSL support, then you have to refer 
the System SSL manuals.  I just did a quick search in both the z/OS 1.13 and 
z/OS 2.1 System SSL Programming manuals and found no reference to 'Cipher 
Feedback'.  I found one reference, in a message, about 'Cipher Block Chaining'. 
 And https://www.ietf.org/rfc/rfc5246.txt, the RFC for TLS Protocol V1.2, says 
'All block cipher encryption is done in CBC (Cipher Block Chaining) mode ...'.  
So I don't think CFB is even supported by the SSL protocol.

Greg Boyd
Mainframe Crypto
www.mainframecrypto.com


On Thu, 24 Sep 2015 10:17:13 -0400, Dazzo, Matt <mda...@pch.com> wrote:

>I have searched the archives but not finding the specific answer I need. We 
>have feature CPACF (#3863) on our z10-BC 2098 (zos1.13) but I am told that  
>CFB (Cipher FeedBack) is not enabled on our CPACF. I looked at out HMC 
>Activation profiles and can't determine if CFB feature is enabled but appears 
>crypto is enabled. Can one point me in the right direction to get the info? 
>How is CFB enabled? And how do you determine if it's enabled or not?
>
>I do see this in the TN3270 start up.
>
>System SSL: SHA-1 crypto assist is available System SSL: SHA-224 crypto 
>assist is available System SSL: SHA-256 crypto assist is available 
>System SSL: SHA-384 crypto assist is available System SSL: SHA-512 
>crypto assist is available System SSL: DES crypto assist is available 
>System SSL: DES3 crypto assist is available System SSL: AES 128-bit 
>crypto assist is available System SSL: AES 256-bit crypto assist is 
>available System SSL: ICSF services are not available
>
>Thanks,
>
>Matt Dazzo
>Senior Systems Programmer
>Publishers Clearing House
>
>
>--
>For IBM-MAIN subscribe / signoff / archive access instructions, send 
>email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

CP Assist for Cryptographic Functions (CPACF)

[Dazzo, Matt]

I have searched the archives but not finding the specific answer I need. We 
have feature CPACF (#3863) on our z10-BC 2098 (zos1.13) but I am told that  CFB 
(Cipher FeedBack) is not enabled on our CPACF. I looked at out HMC Activation 
profiles and can't determine if CFB feature is enabled but appears crypto is 
enabled. Can one point me in the right direction to get the info? How is CFB 
enabled? And how do you determine if it's enabled or not?

I do see this in the TN3270 start up.

System SSL: SHA-1 crypto assist is available
System SSL: SHA-224 crypto assist is available
System SSL: SHA-256 crypto assist is available
System SSL: SHA-384 crypto assist is available
System SSL: SHA-512 crypto assist is available
System SSL: DES crypto assist is available
System SSL: DES3 crypto assist is available
System SSL: AES 128-bit crypto assist is available
System SSL: AES 256-bit crypto assist is available
System SSL: ICSF services are not available

Thanks,

Matt Dazzo
Senior Systems Programmer
Publishers Clearing House


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Cross-post from mvsoe - FOTS1842 problem renaming PRNG seedfile

[Dazzo, Matt]

We get this error intermittently on zos1.13. From my reading of the IBM Ported 
tools book and some help from Dovetailed a possible solution is to add 
environment variable _ZOS_SSH_PRNG_CMDS_TIMEOUT and increase the time out 
value. For testing purposes I added _ZOS_SSH_PRNG_CMDS_TIMEOUT=2000 to my user 
.profile. I then logoff and log on, enter into omvs and enter the env command 
to see if the variable is set. I do not see that variable in the list 
displayed. Am I adding this correctly? How do I check to see if the new 
variable has been set?

Thanks,
Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Cross-post from mvsoe - FOTS1842 problem renaming PRNG seedfile

[Dazzo, Matt]

Hmmm, I thought it was a hardware feature. tks 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mark Jacobs - Listserv
Sent: Tuesday, April 14, 2015 9:22 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Cross-post from mvsoe - FOTS1842 problem renaming PRNG seedfile

ICSF is a software component of zOS. The latest release, HCR1B00, can be 
ordered from ShopZSeries and installed on your zOS 1.13 environment.

Mark Jacobs

 Dazzo, Matt mailto:00a854d4f854-dmarc-requ...@listserv.ua.edu
 April 14, 2015 at 9:13 AM
 Our box does not have an ICSF, so not an option at this time.

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
 On Behalf Of Mark Jacobs - Listserv
 Sent: Tuesday, April 14, 2015 7:56 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: Cross-post from mvsoe - FOTS1842 problem renaming PRNG 
 seedfile

 You might want to consider upgrading ICSF to HCR77A1 or higher. If you
 do you'll be able to use the hardware based random number generator even
 if your processor doesn't have CryptoExpress cards installed.

 Mark Jacobs



 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
 Mark Jacobs - Listserv mailto:mark.jac...@custserv.com
 April 14, 2015 at 7:56 AM
 You might want to consider upgrading ICSF to HCR77A1 or higher. If you 
 do you'll be able to use the hardware based random number generator 
 even if your processor doesn't have CryptoExpress cards installed.

 Mark Jacobs


 Dazzo, Matt mailto:00a854d4f854-dmarc-requ...@listserv.ua.edu
 April 14, 2015 at 7:51 AM
 We get this error intermittently on zos1.13. From my reading of the 
 IBM Ported tools book and some help from Dovetailed a possible 
 solution is to add environment variable _ZOS_SSH_PRNG_CMDS_TIMEOUT and 
 increase the time out value. For testing purposes I added 
 _ZOS_SSH_PRNG_CMDS_TIMEOUT=2000 to my user .profile. I then logoff and 
 log on, enter into omvs and enter the env command to see if the 
 variable is set. I do not see that variable in the list displayed. Am 
 I adding this correctly? How do I check to see if the new variable has 
 been set?

 Thanks,
 Matt

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


 Please be alert for any emails that may ask you for login information 
 or directs you to login via a link. If you believe this message is a 
 phish or aren't sure whether this message is trustworthy, please send 
 the original message as an attachment to 'phish...@timeinc.com'.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Cross-post from mvsoe - FOTS1842 problem renaming PRNG seedfile

[Dazzo, Matt]

Our box does not have an ICSF, so not an option at this time. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mark Jacobs - Listserv
Sent: Tuesday, April 14, 2015 7:56 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Cross-post from mvsoe - FOTS1842 problem renaming PRNG seedfile

You might want to consider upgrading ICSF to HCR77A1 or higher. If you 
do you'll be able to use the hardware based random number generator even 
if your processor doesn't have CryptoExpress cards installed.

Mark Jacobs


 Dazzo, Matt mailto:00a854d4f854-dmarc-requ...@listserv.ua.edu
 April 14, 2015 at 7:51 AM
 We get this error intermittently on zos1.13. From my reading of the 
 IBM Ported tools book and some help from Dovetailed a possible 
 solution is to add environment variable _ZOS_SSH_PRNG_CMDS_TIMEOUT and 
 increase the time out value. For testing purposes I added 
 _ZOS_SSH_PRNG_CMDS_TIMEOUT=2000 to my user .profile. I then logoff and 
 log on, enter into omvs and enter the env command to see if the 
 variable is set. I do not see that variable in the list displayed. Am 
 I adding this correctly? How do I check to see if the new variable has 
 been set?

 Thanks,
 Matt

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


 Please be alert for any emails that may ask you for login information 
 or directs you to login via a link. If you believe this message is a 
 phish or aren't sure whether this message is trustworthy, please send 
 the original message as an attachment to 'phish...@timeinc.com'.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: John Eells Item

[Dazzo, Matt]

Thanks Kirk, that helps.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Monday, March 09, 2015 3:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: John Eells Item

I don't speak for IBM, but I read the announcements to say:

- z/OS OpenSSH will be a base element in z/OS 2.2, not a separately
orderable product.   It says that it will initially be the same level as
IBM Ported Tools for z/OS 1.3 - OpenSSH, but IBM also makes a SOD about
future enhancements such as support for Kerberos (Windows domain SSO).

To your other question:

Co:Z SFTP uses z/OS OpenSSH for its secure SSH2 connection (whether you
call it IBM Ported Tools for z/OS 1.3 - OpenSSH, or whether you call it
z/OS OpenSSH (a base element of z/OS 2.2).

OpenSSH is an application that uses the z/OS TCP/IP stack.IBM did not
announce that z/OS Communications Server would include OpenSSH.

For more information on z/OS OpenSSH 1.3, see our SHARE presentation from
last week:
https://share.confex.com/share/124/webprogram/Session16736.html


Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Mon, Mar 9, 2015 at 7:15 AM, Dazzo, Matt mda...@pch.com wrote:

 Just to clarify, does the paragraph below mean that the z/OS TCPIP stack
 will support OpenSSH without having ported tools? We are currently using
 Cozbatch but would love to be able to use MVS TCPIP for SSH. Thanks Matt


 z/OS V2.2 is planned to include OpenSSH 6.4p1. This is the same level of
 OpenSSH included in IBM Ported Tools V1.3.0 (5655-M23), announced in
 Software Announcement 215-009, dated January 14, 2015. OpenSSH is intended
 to provide encryption for remote login and file transfer. Also, IBM plans
 to provide future enhancements to the OpenSSH function included in z/OS
 (see the Statements of general direction section).

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of Ed Gould
 Sent: Thursday, March 05, 2015 12:44 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: John Eells Item

 z/OS 2.2 Supports a Variety of Upgrades by John Eells
 The z/OS development team has put together a variety of functions
 meant to leverage new hardware facilities, take better advantage of
 existing ones, and provide...

  http://www.ibmsystemsmag.com/mainframe/trends/whatsnew/2-2-
 favorites/?utm_campaign=ibm-
 enewsutm_medium=emailutm_source=mainframe-Mar4-roundup-2015-
 newverutm_content=exclusive1-headline

 Hopefully this won't split

 Ed

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: John Eells Item

[Dazzo, Matt]

Just to clarify, does the paragraph below mean that the z/OS TCPIP stack will 
support OpenSSH without having ported tools? We are currently using Cozbatch 
but would love to be able to use MVS TCPIP for SSH. Thanks Matt


z/OS V2.2 is planned to include OpenSSH 6.4p1. This is the same level of 
OpenSSH included in IBM Ported Tools V1.3.0 (5655-M23), announced in Software 
Announcement 215-009, dated January 14, 2015. OpenSSH is intended to provide 
encryption for remote login and file transfer. Also, IBM plans to provide 
future enhancements to the OpenSSH function included in z/OS (see the 
Statements of general direction section).

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Ed Gould
Sent: Thursday, March 05, 2015 12:44 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: John Eells Item

z/OS 2.2 Supports a Variety of Upgrades by John Eells
The z/OS development team has put together a variety of functions  
meant to leverage new hardware facilities, take better advantage of  
existing ones, and provide...

 http://www.ibmsystemsmag.com/mainframe/trends/whatsnew/2-2- 
favorites/?utm_campaign=ibm- 
enewsutm_medium=emailutm_source=mainframe-Mar4-roundup-2015- 
newverutm_content=exclusive1-headline

Hopefully this won't split

Ed

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PKI Services for z/OS

[Dazzo, Matt]

I am to the point of testing PKI services, although I am NOT sure I have 
properly configured http servers and pki. I have two HTTP servers running, one 
for ssl and non ssl and one for ssl on port 1443. I have pkiservd running and I 
am to the point in the pki services guide of pointing my browser to 
http://webserver-fully-qualified-domain-name/PKIServ/public-cgi/camain.rexx to 
test pki services. The camain.rexx file is found but a pop up comes up and asks 
if we want to save the file, any idea why this is happening? I was expecting to 
get a PKI services web page? 

Thanks Matt 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Thursday, December 04, 2014 10:33 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

I cannot clear up the confusion, other than to tell you to open a QA PMR with 
IBM asking them, however I will tell you we are using SSL(HTTPS).

Maybe some the confusion comes because it uses both.   We have sslmode turned 
on, and a SSL port assigned, and the redirects in httpd.conf all use them.

We have not yet converted to the apache http server, and are still on the old 
Domino http server.  It is on our docket to complete as our next step is z/OS 
2.2(resumably), and DGW will no longer be available.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Thursday, December 04, 2014 10:22 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

We have zos1.13 zos http server running with no SSL configured. In the PKI 
Services guide (sa22-7693-13) I think there is conflict about SSL requirement. 
Below is text from the guide, first one states required, second one says at 
least non-ssl. Does anyone know for sure? I may not go through the hassle on 
our sand box is it's not necessary. Thanks Matt

pg-12
z/OS HTTP Server must be installed on the same system where PKI Services is 
installed. SSL-enablement is required. If your HTTP server is SSL-enabled, your 
key file can be a RACF key ring, or a key file created by another product

pg-19
PKI Services requires that you have the z/OS HTTP Server installed and 
configured for at least non-SSL page retrieval. 


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Friday, October 31, 2014 7:57 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

We use it here extensively.  
,
1) setup is not horrible, hardest part was getting the HTTP server setup 
correctly.  LDAP is not required.  We have 3 or 4 PKI servers on the mainframe 
due to certificate hierarchies.  Each instance has a PKI address space, and two 
http servers. 
2) don't know.  
3) don't know
4) don't know, we use IBM PKI services on the mainframe.  And, pretty sure it 
is a no charge item.


Ours is architected like this:

ROOT server:
- root pki daemon
- root certificate authority client interface
- root certificate authority Admin interface

Intermediate server:
- Intermediate pki daemon
- intermediate cert auth client interface
- intermediate cert auth admin interface

Intermediate non-prod server:
- Intermediate non-prod pki daemon
- intermediate non-prod cert auth client interface
- intermediate non-prod cert auth admin interface

The root server basically creates one cert in its lifetime.  Most of the work 
occurs in the intermediate server.  Certs created in the intermediate, are 
signed by the root certificate.   As for the http servers, we tried to combine 
client and admin interfaces into the same server, but could never get it to 
work correctly, so we just put up separate instances all of these are on 
different ports.
_
Dave Jousma
Assistant Vice President, Mainframe Engineering david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Thursday, October 30, 2014 3:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: PKI Services for z/OS

We are starting to look at certificate management, I was wondering how many 
folks were using PKI Services for z/OS? At this time I do not have any details 
or security requirements other than web based and runs on z/OS. Hey we are a 
little biased in getting or keeping applications on z/OS.  Following are some 
additional questions if you have the time.

1. How is the install of PKI and setup to do, I read that LDAP is required how 
is that to install?
2. Does a vendor product offer simpler installation and setup

Re: Merry Christmas

[Dazzo, Matt]

Thank you and a Merry Christmas to you and yours.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Scott Ford
Sent: Thursday, December 25, 2014 10:40 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Merry Christmas

Merry Christmas to you and yours from me and my girlshere in New Jersey


Best Regards,
Scott ford
www.identityforge.com
from my IPAD

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PKI Services for z/OS

[Dazzo, Matt]

We have zos1.13 zos http server running with no SSL configured. In the PKI 
Services guide (sa22-7693-13) I think there is conflict about SSL requirement. 
Below is text from the guide, first one states required, second one says at 
least non-ssl. Does anyone know for sure? I may not go through the hassle on 
our sand box is it's not necessary. Thanks Matt

pg-12
z/OS HTTP Server must be installed on the same system where PKI Services is
installed. SSL-enablement is required. If your HTTP server is SSL-enabled, your
key file can be a RACF key ring, or a key file created by another product

pg-19
PKI Services requires that you have the z/OS HTTP Server installed and
configured for at least non-SSL page retrieval. 


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Friday, October 31, 2014 7:57 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

We use it here extensively.  
,
1) setup is not horrible, hardest part was getting the HTTP server setup 
correctly.  LDAP is not required.  We have 3 or 4 PKI servers on the mainframe 
due to certificate hierarchies.  Each instance has a PKI address space, and two 
http servers. 
2) don't know.  
3) don't know
4) don't know, we use IBM PKI services on the mainframe.  And, pretty sure it 
is a no charge item.


Ours is architected like this:

ROOT server:
- root pki daemon
- root certificate authority client interface
- root certificate authority Admin interface

Intermediate server:
- Intermediate pki daemon
- intermediate cert auth client interface
- intermediate cert auth admin interface

Intermediate non-prod server:
- Intermediate non-prod pki daemon
- intermediate non-prod cert auth client interface
- intermediate non-prod cert auth admin interface

The root server basically creates one cert in its lifetime.  Most of the work 
occurs in the intermediate server.  Certs created in the intermediate, are 
signed by the root certificate.   As for the http servers, we tried to combine 
client and admin interfaces into the same server, but could never get it to 
work correctly, so we just put up separate instances all of these are on 
different ports.
_
Dave Jousma
Assistant Vice President, Mainframe Engineering
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Thursday, October 30, 2014 3:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: PKI Services for z/OS

We are starting to look at certificate management, I was wondering how many 
folks were using PKI Services for z/OS? At this time I do not have any details 
or security requirements other than web based and runs on z/OS. Hey we are a 
little biased in getting or keeping applications on z/OS.  Following are some 
additional questions if you have the time.

1. How is the install of PKI and setup to do, I read that LDAP is required how 
is that to install?
2. Does a vendor product offer simpler installation and setup?
3. Does a vendor product offer more features?
4. What vendor products are most common?

Thanks,

Matt


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PKI Services for z/OS

[Dazzo, Matt]

Thanks Dave, I'll probably decide to go SSL at the end of the day.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Thursday, December 04, 2014 10:33 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

I cannot clear up the confusion, other than to tell you to open a QA PMR with 
IBM asking them, however I will tell you we are using SSL(HTTPS).

Maybe some the confusion comes because it uses both.   We have sslmode turned 
on, and a SSL port assigned, and the redirects in httpd.conf all use them.

We have not yet converted to the apache http server, and are still on the old 
Domino http server.  It is on our docket to complete as our next step is z/OS 
2.2(resumably), and DGW will no longer be available.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Thursday, December 04, 2014 10:22 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

We have zos1.13 zos http server running with no SSL configured. In the PKI 
Services guide (sa22-7693-13) I think there is conflict about SSL requirement. 
Below is text from the guide, first one states required, second one says at 
least non-ssl. Does anyone know for sure? I may not go through the hassle on 
our sand box is it's not necessary. Thanks Matt

pg-12
z/OS HTTP Server must be installed on the same system where PKI Services is 
installed. SSL-enablement is required. If your HTTP server is SSL-enabled, your 
key file can be a RACF key ring, or a key file created by another product

pg-19
PKI Services requires that you have the z/OS HTTP Server installed and 
configured for at least non-SSL page retrieval. 


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Friday, October 31, 2014 7:57 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

We use it here extensively.  
,
1) setup is not horrible, hardest part was getting the HTTP server setup 
correctly.  LDAP is not required.  We have 3 or 4 PKI servers on the mainframe 
due to certificate hierarchies.  Each instance has a PKI address space, and two 
http servers. 
2) don't know.  
3) don't know
4) don't know, we use IBM PKI services on the mainframe.  And, pretty sure it 
is a no charge item.


Ours is architected like this:

ROOT server:
- root pki daemon
- root certificate authority client interface
- root certificate authority Admin interface

Intermediate server:
- Intermediate pki daemon
- intermediate cert auth client interface
- intermediate cert auth admin interface

Intermediate non-prod server:
- Intermediate non-prod pki daemon
- intermediate non-prod cert auth client interface
- intermediate non-prod cert auth admin interface

The root server basically creates one cert in its lifetime.  Most of the work 
occurs in the intermediate server.  Certs created in the intermediate, are 
signed by the root certificate.   As for the http servers, we tried to combine 
client and admin interfaces into the same server, but could never get it to 
work correctly, so we just put up separate instances all of these are on 
different ports.
_
Dave Jousma
Assistant Vice President, Mainframe Engineering david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Thursday, October 30, 2014 3:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: PKI Services for z/OS

We are starting to look at certificate management, I was wondering how many 
folks were using PKI Services for z/OS? At this time I do not have any details 
or security requirements other than web based and runs on z/OS. Hey we are a 
little biased in getting or keeping applications on z/OS.  Following are some 
additional questions if you have the time.

1. How is the install of PKI and setup to do, I read that LDAP is required how 
is that to install?
2. Does a vendor product offer simpler installation and setup?
3. Does a vendor product offer more features?
4. What vendor products are most common?

Thanks,

Matt


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy

Archive search problems

[Dazzo, Matt]

I am unable to search the archives because listserv.ua.edu keeps telling me to 
sign in, even though I am already signed in. I even changed my pw and confirmed 
it. But when I go to the archives and try to search I get the sign in screen 
and my pw is not accepted. The results are the same with Chrome and IE. Any 
help is appreciated, thanks.

Thanks,

Matt Dazzo
Senior Systems Programmer
Publishers Clearing House


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Archive search problems

[Dazzo, Matt]

Dave, thanks that's awesome. Is there an index in google for all the listserv 
groups?

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Wednesday, November 26, 2014 10:03 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Archive search problems

In the absence of that, you can see everything here:  

https://groups.google.com/forum/#!forum/bit.listserv.ibm-main

I actually find it easier to use this than the archives.
_
Dave Jousma
Assistant Vice President, Mainframe Engineering
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Wednesday, November 26, 2014 10:00 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Archive search problems

I am unable to search the archives because listserv.ua.edu keeps telling me to 
sign in, even though I am already signed in. I even changed my pw and confirmed 
it. But when I go to the archives and try to search I get the sign in screen 
and my pw is not accepted. The results are the same with Chrome and IE. Any 
help is appreciated, thanks.

Thanks,

Matt Dazzo
Senior Systems Programmer
Publishers Clearing House


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PKI Services for z/OS

[Dazzo, Matt]

Thanks Ken

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Ken Smith
Sent: Monday, November 17, 2014 5:01 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

PKI
allows you to establish a PKI infrastructure and serve as a *certificate
authority* for your internal and external users, *issuing and administering
digital certificates* in accordance with your own organization’s policies.
Your users can use a PKI Services application to request and obtain
certificates through their own Web browsers, while your authorized PKI
administrators approve, modify, or reject these requests through their own
Web browsers.

http://www-03.ibm.com/systems/z/os/zos/features/pki/

ISKLM

delivers keys to Disk and Tape devices for encryption / decryption.  No
other purpose I know of.

I run ISKLM for tape encryption.  Have not used PKI.

Ken

On Mon, Nov 17, 2014 at 10:41 AM, Dazzo, Matt mda...@pch.com wrote:

 Does anyone know what the difference is between IBM(r) Security Key
 Lifecycle Manager for z/OS and the free PKI Services for z/OS?

 Thanks Matt

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of Donald J.
 Sent: Friday, October 31, 2014 8:11 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Re: PKI Services for z/OS

 LDAP would be required if you want to check
 for revoked certificates from PAGENT or CICS.
 LDAP could be somewhere besides z/os though.

 --
   Donald J.
   dona...@4email.net

 On Thu, Oct 30, 2014, at 12:18 PM, Dazzo, Matt wrote:
  We are starting to look at certificate management, I was wondering how
 many folks were using PKI Services for z/OS?
  1. How is the install of PKI and setup to do, I read that LDAP is
 required how is that to install?


 --
 http://www.fastmail.fm - One of many happy users:
   http://www.fastmail.fm/help/overview_quotes.html

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PKI Services for z/OS

[Dazzo, Matt]

Does anyone know what the difference is between IBM(r) Security Key Lifecycle 
Manager for z/OS and the free PKI Services for z/OS?

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Donald J.
Sent: Friday, October 31, 2014 8:11 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PKI Services for z/OS

LDAP would be required if you want to check
for revoked certificates from PAGENT or CICS.
LDAP could be somewhere besides z/os though.

-- 
  Donald J.
  dona...@4email.net

On Thu, Oct 30, 2014, at 12:18 PM, Dazzo, Matt wrote:
 We are starting to look at certificate management, I was wondering how many 
 folks were using PKI Services for z/OS? 
 1. How is the install of PKI and setup to do, I read that LDAP is required 
 how is that to install?


-- 
http://www.fastmail.fm - One of many happy users:
  http://www.fastmail.fm/help/overview_quotes.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

PKI Services for z/OS

[Dazzo, Matt]

We are starting to look at certificate management, I was wondering how many 
folks were using PKI Services for z/OS? At this time I do not have any details 
or security requirements other than web based and runs on z/OS. Hey we are a 
little biased in getting or keeping applications on z/OS.  Following are some 
additional questions if you have the time.

1. How is the install of PKI and setup to do, I read that LDAP is required how 
is that to install?
2. Does a vendor product offer simpler installation and setup?
3. Does a vendor product offer more features?
4. What vendor products are most common?

Thanks,

Matt


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: 3494 tape library and B20 VTS question

[Dazzo, Matt]

Rex, we just completed this using Rockets Tapecopy product, migration went 
flawless. HTH

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Pommier, Rex
Sent: Thursday, October 30, 2014 10:31 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: 3494 tape library and B20 VTS question

Hi all,

We have a 3494 tape library with 3590 drives in it that is back-ending a 
3494-B20 virtual tape library.  We have about 17 TB of data sitting on physical 
3590 tapes in the 3494 as stacked logical volumes from the B20.  Does anybody 
know of any way of getting a list of the logical tapes on a stacked volume 
straight from z/OS?  I know I can go to the physical library and request a tape 
map, but was hoping there is a way to get this directly.  I dug through the 
books I know of and found nothing.

We're looking at the migration effort to get off the 3494 and would like to be 
able to mount a physical 3590 tape once and copy the entire physical tape 
contents back to the VTS for copying to the replacement device (whatever that 
ends up being)

Thanks,

Rex

The information contained in this message is confidential, protected from 
disclosure and may be legally privileged.  If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful.  If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format.  Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reorg SYS1.DDIR?

[Dazzo, Matt]

Our SYS1.DDIR has hit the 123 extent limit. I'd like to reorg this file but 
there is an allocation on it by task DUMPSRV. I am not really sure of the best 
way to handle this, any help is appreciated.? tks Matt


QNAME   RNAME   JOBNAME   DISP  STATUS
--
SYSDSN   / SYS1.DDIRDUMPSRV   SHR   USING

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SFTP Text transfer

[Dazzo, Matt]

Kirk, seems this problem is file related. When I use your supplied lzopts parms 
and a different input text file it formats fine on the server. When I try the 
original file we were trying to 'put' over it does not format correctly on the 
server. The input file seems like a normal text PS file. When looking at the 
input file on MVS in hex the spaces are '40'. Any other thoughts? Thanks Matt  


General Data 
 Management class . . : **None** 
 Storage class  . . . : **None** 
  Volume serial . . . : MVP1FG   
  Device type . . . . : 3390 
 Data class . . . . . : **None** 
  Organization  . . . : PS   
  Record format . . . : FB   
  Record length . . . : 1035 
  Block size  . . . . : 27945
  1st extent tracks . : 5
  Secondary tracks  . : 300  
  Data set name type  :  
  SMS Compressible. . : NO   
 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Friday, May 30, 2014 1:36 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SFTP Text transfer

If you want to specify a hex pad character, then you need to specify:
 pad=0x40
The default pad character is a space in the source codepage (0x40 for
EBCDIC).

See: http://dovetail.com/docs/sftp/options.html#options_general

I'm not sure why you are having a problem... do you have a file name
pattern rule in your profile that is overriding these options?

Here is an example of sending a text file to windows, preserving trailing
spaces and using crlf terminators:

cozsftp lzopts mode=text,notrim,linerule=crlf
cozsftp put //TCPIP.ETC.SERVICES  foo.bar

(file on server)
000: 2320 2020 2020 2020 2020 2020 2020 2020  #
010: 2020 2020 2020 2020 2020 2020 2020 2020
020: 2020 2020 2020 2020 2020 2020 2020 2020
030: 2020 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 2020
050: 0d0a 2320 7376 7473 6320 6368 6720 7465  ..# svtsc chg te
060: 6c6e 6574 206f 6e20 706f 7274 2032 3320  lnet on port 23
070: 746f 206f 7465 6c6e 6574 206f 6e20 706f  to otelnet on po
080: 7274 2032 3320 2020 2020 2020 2020 2020  rt 23
090: 2020 2020 2020 2020 2020 2020 2020 2020
...


Kirk Wolf
Dovetailed Technologies
http://dovetail.com

PS Please consider using our Co:Z SFTP community forum
http://dovetail.com/support.html#forum for questions if you are using the
free Community License.
(Co:Z Enterprise License and Support customers should open a ticket.)


On Fri, May 30, 2014 at 10:59 AM, Dazzo, Matt mda...@pch.com wrote:

 We are using cozbatch for sftp of a text file from the mainframe(client)
 to a windows sftp server. The spaces(hex 40) at the end of the file are
 getting dropped. I thought using the option NOtrim would have kept the
 spaces at the end of the record. Any help is appreciated, thanks.

 I also tried to use the pad option but could not get the format correct.
 cozsftp lzopts mode=text,pad=40
  mode=text   ?pad=40

 cozsftp lzopts mode=text,pad(40)
  mode=text   ?pad(40)



 CD CS_Letters/OSLOS
 lzopts mode=text,NOtrim
 PUT //P.PNPAAW20.NPAA15.NPDO001 mdazzo_junk.txt
 QUIT


 cozsftp lzopts mode=binary,servercp=ISO8859-1,mount
  mode=binary   mount servercp=ISO8859-1
 cozsftp CD CS_Letters/OSLOS
 cozsftp lzopts mode=text,NOtrim
  mode=textNOtrim
 cozsftp lzopts -a
 clientcp=IBM-1047   conddisp=catlg  estsize jeslrecl=80
 jesowner=ST1MAT jesrecfm=f  jesstatus=* loglevel=I
 mode=text   mount   replace
 servercp=ISO8859-1
 smf NOblksize   NObufno NOcopies
 NOdataclas  NOdest  NOdir   NOdisp
 NOdsntype   NOdsorg NOforms NOgdgnt
 NOhold  NOjesblksizeNOjesincsysin   NOjesjobname
 NOjesjobwaitNOlabel NOlike  NOlinerule
 NOlrecl NOmaxcscnt  NOmaxdsndirlevels   NOmaxvol
 NOmgmtclas  NOnorecall  NOoutdesNOoverflow
 NOpad   NOrecfm NOrelease   NOreqexits
 NOreset NOretpd NOsequence  NOshowall
 NOspace NOspin  NOstorclas  NOsysout
 NOtechnique NOtrim  NOtrtab NOtrtch
 NOucountNOunit  NOunixlsNOvol
 NOwriter
 cozsftp PUT //P.PNPAAW20.NPAA15.NPDO001 mdazzo_junk.txt
 Uploading //P.PNPAAW20.NPAA15.NPDO001 to /CS_Letters/OSLOS/mdazzo_junk.txt
 cozsftp QUIT

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send

Re: SFTP Text transfer

[Dazzo, Matt]

Thanks for the help, it's been resolved. I needed options lzopts 
mode=text,linerule=crlf

Thank you.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Friday, May 30, 2014 1:36 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SFTP Text transfer

If you want to specify a hex pad character, then you need to specify:
 pad=0x40
The default pad character is a space in the source codepage (0x40 for
EBCDIC).

See: http://dovetail.com/docs/sftp/options.html#options_general

I'm not sure why you are having a problem... do you have a file name
pattern rule in your profile that is overriding these options?

Here is an example of sending a text file to windows, preserving trailing
spaces and using crlf terminators:

cozsftp lzopts mode=text,notrim,linerule=crlf
cozsftp put //TCPIP.ETC.SERVICES  foo.bar

(file on server)
000: 2320 2020 2020 2020 2020 2020 2020 2020  #
010: 2020 2020 2020 2020 2020 2020 2020 2020
020: 2020 2020 2020 2020 2020 2020 2020 2020
030: 2020 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 2020
050: 0d0a 2320 7376 7473 6320 6368 6720 7465  ..# svtsc chg te
060: 6c6e 6574 206f 6e20 706f 7274 2032 3320  lnet on port 23
070: 746f 206f 7465 6c6e 6574 206f 6e20 706f  to otelnet on po
080: 7274 2032 3320 2020 2020 2020 2020 2020  rt 23
090: 2020 2020 2020 2020 2020 2020 2020 2020
...


Kirk Wolf
Dovetailed Technologies
http://dovetail.com

PS Please consider using our Co:Z SFTP community forum
http://dovetail.com/support.html#forum for questions if you are using the
free Community License.
(Co:Z Enterprise License and Support customers should open a ticket.)


On Fri, May 30, 2014 at 10:59 AM, Dazzo, Matt mda...@pch.com wrote:

 We are using cozbatch for sftp of a text file from the mainframe(client)
 to a windows sftp server. The spaces(hex 40) at the end of the file are
 getting dropped. I thought using the option NOtrim would have kept the
 spaces at the end of the record. Any help is appreciated, thanks.

 I also tried to use the pad option but could not get the format correct.
 cozsftp lzopts mode=text,pad=40
  mode=text   ?pad=40

 cozsftp lzopts mode=text,pad(40)
  mode=text   ?pad(40)



 CD CS_Letters/OSLOS
 lzopts mode=text,NOtrim
 PUT //P.PNPAAW20.NPAA15.NPDO001 mdazzo_junk.txt
 QUIT


 cozsftp lzopts mode=binary,servercp=ISO8859-1,mount
  mode=binary   mount servercp=ISO8859-1
 cozsftp CD CS_Letters/OSLOS
 cozsftp lzopts mode=text,NOtrim
  mode=textNOtrim
 cozsftp lzopts -a
 clientcp=IBM-1047   conddisp=catlg  estsize jeslrecl=80
 jesowner=ST1MAT jesrecfm=f  jesstatus=* loglevel=I
 mode=text   mount   replace
 servercp=ISO8859-1
 smf NOblksize   NObufno NOcopies
 NOdataclas  NOdest  NOdir   NOdisp
 NOdsntype   NOdsorg NOforms NOgdgnt
 NOhold  NOjesblksizeNOjesincsysin   NOjesjobname
 NOjesjobwaitNOlabel NOlike  NOlinerule
 NOlrecl NOmaxcscnt  NOmaxdsndirlevels   NOmaxvol
 NOmgmtclas  NOnorecall  NOoutdesNOoverflow
 NOpad   NOrecfm NOrelease   NOreqexits
 NOreset NOretpd NOsequence  NOshowall
 NOspace NOspin  NOstorclas  NOsysout
 NOtechnique NOtrim  NOtrtab NOtrtch
 NOucountNOunit  NOunixlsNOvol
 NOwriter
 cozsftp PUT //P.PNPAAW20.NPAA15.NPDO001 mdazzo_junk.txt
 Uploading //P.PNPAAW20.NPAA15.NPDO001 to /CS_Letters/OSLOS/mdazzo_junk.txt
 cozsftp QUIT

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Fixcat and/or PSP Buckets?

[Dazzo, Matt]

Exactly what I did. I found that in the PSP bucket any PFT for our FMID's were 
already in the missing fixcat report. So the fixcat report was all that was 
really needed to provide all required PTF's. Thanks to all. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Randy Hoekstra
Sent: Thursday, May 29, 2014 7:34 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Fixcat and/or PSP Buckets?

Belt and suspenders run the FIXCAT, pull the PSP Bucket and match them up -- 
just in case.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Fixcat and/or PSP Buckets?

[Dazzo, Matt]

We may be getting an IBM TS7720 grid and a TS3500 library frame. I ran a fixcat 
report using IBM.DEVICE.TAPE.* to see if there are any PTF's I should put on. 
There were about 9 PTF's that showed up in the report. We are running zos1.13 
on a z10bc-2098

Browsing the TS7700 customer information center it mentions 'refer to PSP 
bucket planning' for the list of applicable maintenance.

Does Fixcat (IBM.DEVICE.TAPE.*) cover all the bases or do I have to be 
concerned with PSP buckets also?

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Fixcat and/or PSP Buckets?

[Dazzo, Matt]

Maybe the question really is, what is the difference between fixcat 
(IBM.DEVICE.TAPE.*) and UPGRADE3957DEVICE?

thanks

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Wednesday, May 28, 2014 10:36 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Fixcat and/or PSP Buckets?

Search IBM LINK for UPDGRADEDEVICE, Where XXX is the official machine 
type.

E.G. Z/10 BC is d/T 2098 so the search would be for UPGRADE2098DEVICE

HTH,
snip
We may be getting an IBM TS7720 grid and a TS3500 library frame. I ran a fixcat 
report using IBM.DEVICE.TAPE.* to see if there are any PTF's I should put on. 
There were about 9 PTF's that showed up in the report. We are running zos1.13 
on a z10bc-2098

Browsing the TS7700 customer information center it mentions 'refer to PSP 
bucket planning' for the list of applicable maintenance.

Does Fixcat (IBM.DEVICE.TAPE.*) cover all the bases or do I have to be 
concerned with PSP buckets also?
/snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Fixcat and/or PSP Buckets?

[Dazzo, Matt]

I pulled the latest holddata before running the fixcat report.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Skeldum, William
Sent: Wednesday, May 28, 2014 11:06 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Fixcat and/or PSP Buckets?

When I expand fixcat IBM.DEVICE,TAPE in my SMPE environment I see the following:
IBM.Device.Tape.TS3500-TapeLibrary-3584
IBM.Device.Tape.TS7700-3957

If you regularly receive holddata (we do it daily) you should be covered.

Bill

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Wednesday, May 28, 2014 8:58 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Fixcat and/or PSP Buckets?

Have no clue. I have always used the PSP buckets and not the FIXCAT info..

snip
Maybe the question really is, what is the difference between fixcat 
(IBM.DEVICE.TAPE.*) and UPGRADE3957DEVICE?
/snip


snip
Search IBM LINK for UPDGRADEDEVICE, Where XXX is the official machine 
type.

E.G. Z/10 BC is d/T 2098 so the search would be for UPGRADE2098DEVICE

HTH,
snip
We may be getting an IBM TS7720 grid and a TS3500 library frame. I ran a fixcat 
report using IBM.DEVICE.TAPE.* to see if there are any PTF's I should put on. 
There were about 9 PTF's that showed up in the report. We are running zos1.13 
on a z10bc-2098

Browsing the TS7700 customer information center it mentions 'refer to PSP 
bucket planning' for the list of applicable maintenance.

Does Fixcat (IBM.DEVICE.TAPE.*) cover all the bases or do I have to be 
concerned with PSP buckets also?

/snip

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information contained in this electronic communication and any document 
attached hereto or transmitted herewith is confidential and intended for the 
exclusive use of the individual or entity named above. If the reader of this 
message is not the intended recipient or the employee or agent responsible for 
delivering it to the intended recipient, you are hereby notified that any 
examination, use, dissemination, distribution or copying of this communication 
or any part thereof is strictly prohibited. If you have received this 
communication in error, please immediately notify the sender by reply e-mail 
and destroy this communication. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Fixcat and/or PSP Buckets?

[Dazzo, Matt]

Thanks Tom, I did pull the FULL report. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Tom Marchant
Sent: Wednesday, May 28, 2014 1:04 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Fixcat and/or PSP Buckets?

On Wed, 28 May 2014 11:22:14 -0400, Dazzo, Matt wrote:

I pulled the latest holddata before running the fixcat report.

Which HOLDDATA did you pull? Only the FULL holddata contains FIXCAT 
information, as documented here:
http://service.software.ibm.com/holdata/390holddata.html


See also:
https://listserv.ua.edu/cgi-bin/wa?A2=ind1312L=ibm-mainP=R37341=ibm-main9=AI=-3J=onX=43B8AC5A56F61BFF77

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: VSAM question/problem

[Dazzo, Matt]

I have a question pertaining to DCB info when doing 'REPRO (IDCAMS) to unload 
it to a flat file'. John specified '(vb/9160/27998)' how is this determined? 
tks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of John Clifford
Sent: Tuesday, May 20, 2014 4:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: VSAM question/problem

Rex,

  Have you tried using REPRO (IDCAMS) to unload it to a flat file
(vb/9160/27998) and see if it goes clean or issues an error message which
may be more informational. If no error, try to repro 'reuse' back over the
file with the unloaded record. Being there are some counts in the splits
field, there has to have been a bunch more records. See if this mini reorg
fixes it.

John Clifford
IBM consultant


On Tue, May 20, 2014 at 2:17 PM, Pommier, Rex rpomm...@sfgmembers.comwrote:

 Hi List,

 We have a VSAM KSDS with 1 record in it that is causing us some heartburn.
  I was able to create a new dataset and REPRO this one into the new one
 successfully, and the new dataset works fine, but I'd like to know what may
 be causing the original to be having problems - and possibly how to fix it.
  It is not open to any online regions, but is used by batch.  A LISTC of
 the dataset shows bogus statistics - even after running a VERIFY against it
 (which came back clean, RC=0).  I ran an EXAMINE against it and got no
 errors:

EXAMINE NAME(LFCT.MQ.BPX.BILLCASE.MASTER)  DATATEST
  IDC01700I INDEXTEST BEGINS
  IDC11773I   1 KEYS PROCESSED ON INDEX LEVEL   1, AVERAGE KEY
 LENGTH: 0.0
  IDC11774I CURRENT INDEX CISIZE IS  1024, RECOMMENDED MINIMUM INDEX CISIZE
 IS  1024
  IDC01724I INDEXTEST COMPLETE - NO ERRORS DETECTED
  IDC01701I DATATEST BEGINS
  IDC01709I DATATEST COMPLETE - NO ERRORS DETECTED
  IDC01708I 1 CONTROL INTERVALS ENCOUNTERED
  IDC01710I DATA COMPONENT CONTAINS 1 RECORDS
  IDC01711I DATA COMPONENT CONTAINS 0 DELETED CONTROL INTERVALS
  IDC01712I MAXIMUM LENGTH DATA RECORD CONTAINS 333 BYTES
  IDC01722I 99 PERCENT FREE SPACE
  IDC0001I FUNCTION COMPLETED, HIGHEST CONDITION CODE WAS 0

 We have 2 VSAM utility programs, VSAMTUNE and VSAMUTIL.  VSAMTUNE says the
 dataset is fine and displays the record:

 Cluster LFCT.MQ.BPX.BILLCASE.MASTERB
 Catalog CATALOG.MVSICF1.VADR111
 Rcd len 00333, rcd RBA 00023000, key length 030, key offset 0.


 VSAMUTIL however, says the dataset is empty.

 THIS DATASET CONTAINS NO RECORDS, USE EDIT TO LOAD


 Unfortunately I don't have any diagnostic codes out of the COBOL program
 that was getting the open error.



 So my question - any idea what could be broken in this dataset to cause
 this kind of problem (bogus stats that I can't fix and some programs not
 being able to open the dataset/find the record in it)?

 TIA for any pointers.

 Rex



 Here's the LISTC of it (with some parts removed to conserve reading
 time..).

 CLUSTER --- LFCT.MQ.BPX.BILLCASE.MASTERB
   IN-CAT --- CATALOG.MVSICF1.VADR111
   HISTORY
 DATASET-OWNER-(NULL) CREATION2013.064
 RELEASE2 EXPIRATION--.000
   ASSOCIATIONS
 DATA-LFCT.MQ.BPX.BILLCASE.MASTERB.DATA
 INDEXLFCT.MQ.BPX.BILLCASE.MASTERB.INDEX
 DATA --- LFCT.MQ.BPX.BILLCASE.MASTERB.DATA
   IN-CAT --- CATALOG.MVSICF1.VADR111
   HISTORY
 DATASET-OWNER-(NULL) CREATION2013.064
 RELEASE2 EXPIRATION--.000
 ACCOUNT-INFO---(NULL)
   PROTECTION-PSWD-(NULL) RACF(NO)
  ASSOCIATIONS
CLUSTER--LFCT.MQ.BPX.BILLCASE.MASTERB
  ATTRIBUTES
KEYLEN30 AVGLRECL2965
 BUFSPACE---41984 CISIZE-20480
RKP0 MAXLRECL9156
 EXCPEXIT--(NULL) CI/CA-37
SHROPTNS(3,3)  SPEED UNIQUE   NOERASE INDEXED
 NOWRITECHK UNORDERED  REUSE
NONSPANNED
  STATISTICS  (* - VALUE MAY BE INCORRECT)
REC-TOTAL--0*SPLITS-CI--3*
  EXCPS---1639*
REC-DELETED--420*SPLITS-CA--0*
  EXTENTS1
REC-INSERTED-163*FREESPACE-%CI--0
 SYSTEM-TIMESTAMP:
REC-UPDATED8*FREESPACE-%CA--0
  X'CD2E94CA07A96504'
REC-RETRIEVED---8375*FREESPC--7577600*
  ALLOCATION
SPACE-TYPE--CYLINDER HI-A-RBA-7577600
SPACE-PRI-10 HI-U-RBA--757760
SPACE-SEC--2
  VOLUME
VOLSERNRS006 PHYREC-SIZE10240
 HI-A-RBA-7577600 EXTENT-NUMBER--1
DEVTYPE--X'3010200F' PHYRECS/TRK5
 HI-U-RBA--757760 EXTENT-TYPEX'40'

Re: OT: another z/OS sunsetted

[Dazzo, Matt]

I'd like to see the Microsoft Application Platform handle 18-20 billion DB io's 
we do daily. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Grinsell, Don
Sent: Wednesday, May 21, 2014 11:18 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: OT: another z/OS sunsetted

Our execs have been listening to these guys.  They gave us a 2016 target date 
as well and the current mainframe staff will not be allowed to participate in 
the process lest we sabotage something.  I'm betting on 5 years and massive 
cost overruns.  We shall see.

https://www.platformmodernization.org/Pages/default.aspx

--
 
Donald Grinsell
State of Montana
406-444-2983
dgrins...@mt.gov

Flame On!
~ Johnny Storm

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of John McKown
Sent: Wednesday, May 21, 2014 6:12 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: OT: another z/OS sunsetted

Sorry, not allowed to say.


On Wed, May 21, 2014 at 7:05 AM, Lance D. Jackson  
ljack...@pandrueassociates.com wrote:

 What are they replacing it with?

 -Original Message-
 From: John McKown [mailto:john.archie.mck...@gmail.com]
 Sent: Wednesday, May 21, 2014 08:01 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: OT: another z/OS sunsetted

 Well, the company that I work for has announced that the z will be 
 gone byMar 2016. And, having heard the plan (which I cannot reveal at 
 present), Iadmit that it _will_ succeed. No, the company is not going 
 out of business!So, although it is not yet critical, if anybody hears 
 about a z/OS sysprogposition in the DFW TX metro-mess area, I'd 
 appreciate a heads up.Unfortunately, I live in Arlington (near the 
 Cowboy  Ranger stadiums), butmost of the z shops that I know of are 
 up north of Dallas. That's a longdrive, through insane traffic.-- 
 There is nothing more pleasant than traveling and meeting new 
 people!Genghis KhanMaranatha! John 
 McKown
 --For IBM-MAIN subscribe / signoff / archive access 
 instructions,send email to lists...@listserv.ua.edu with the message: 
 INFO IBM-MAIN

 --
 For IBM-MAIN subscribe / signoff / archive access instructions, send 
 email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
There is nothing more pleasant than traveling and meeting new people!
Genghis Khan

Maranatha! 
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

IOCDS Write Protected

[Dazzo, Matt]

Attempting to build  a new IOCDSA0 but getting the error below. According to 
msg  ICP408I to correct this issue ' use Disable Write Protection under Options 
on the Input/Output Configuration panel' but exactly where is that and how do I 
change it? Thanks Matt

The current  activation profile on the HMC is A3.



ICP408I IOCDS A0 IS WRITE PROTECTED


Programmer response:   Remove the write protection and rerun the job.
To remove the write protection, use Disable Write Protection under Options
on the Input/Output Configuration panel.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IOCDS Write Protected

[Dazzo, Matt]

Thanks, should have checked the archives first. How would an IOCDS get write 
protected other than a manual process? Thanks

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Elardus Engelbrecht
Sent: Friday, February 21, 2014 12:51 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IOCDS Write Protected

Dazzo, Matt wrote:

Attempting to build  a new IOCDSA0 but getting the error below. According to 
msg  ICP408I to correct this issue ' use Disable Write Protection under 
Options on the Input/Output Configuration panel' but exactly where is that and 
how do I change it? Thanks Matt

The current  activation profile on the HMC is A3.
ICP408I IOCDS A0 IS WRITE PROTECTED

Your question was also posted by you on 2011/02/09 in thread 'HCD Write Error'.

https://groups.google.com/forum/#!msg/bit.listserv.ibm-main/LUR9SmkTdpw/zdO4tE6_JwIJ

Mary Ann Matyaz and others gave good replies. I hope these replies are still 
valid... ;-)

Groete / Greetings
Elardus Engelbrecht

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

MIH Question

[Dazzo, Matt]

We recently migrated from a IBM shark dasd device to a IBM DS8870 device, we 
are zos 1.13 monoplex shop. In the IECIOS000 member was the following entry for 
the shark devices MIH DEV=(2000-2BFF),TIME=02:00. Is there a way to determine 
if an entry is needed and what it should be for the new devices?  The old entry 
was added before my time and I do not know why.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IEF196I Message

[Dazzo, Matt]

That's correct z10bc, and lpar 1 is the only lpar it is used.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of R.S.
Sent: Tuesday, February 18, 2014 11:05 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IEF196I Message

W dniu 2014-02-18 16:29, Dazzo, Matt pisze:
 We are running zos1.13 in a monoplex environment. 1 production lpar and 1 
 sandbox. We do have a couple of shared volumes for the convenience of moving 
 dsn's etc. The 4299 address is NOT a shared volume, it's online to the 
 production lpar and offline to the sandbox. That's the config in IODF. Why 
 would I get this message on the lpar where the device is configured offline 
 and not used?Thanks Matt


 IEF196I IOS071I 4299,**,*MASTER*, START PENDING
 IOS071I 4299,**,*MASTER*, START PENDING 615
 IEF196I IOS071I 4299,**,*MASTER*, START PENDING
 IOS071I 4299,**,*MASTER*, START PENDING 617
 IOS431I DEVICE 4299 RESERVED TO CPU=014E7E2098,LPAR ID=01 619
  SYSTEM=UNKNOWN
Your disk is online and RESERVED to LPAR 01 on machine s/n 014E7E2098.
Is your machine z10BC ?

Check your LPAR ID in HMC reset profile. Each LPAR has it's own unique 
number, called LP ID.
You can also read the number from D M=CPU, but only for current LPAR.

-- 
Radoslaw Skorupka
Lodz, Poland






---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl 
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru 
Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. 
Wedug stanu na dzie 01.01.2014 r. kapita zakadowy mBanku S.A. (w caoci 
wpacony) wynosi 168.696.052 zote.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IEF196I Message

[Dazzo, Matt]

This is the sandbox where it is offline.
RESPONSE=SYS1
 IEE106I 11.27.31 UNITS ALLOCATED 798
 UNITJOBNAME  ASID   JOBNAME  ASID   JOBNAME  ASID   JOBNAME  ASID   
 47BE*MASTER*    XCFAS0006   LLA  001A   BBISS0021   
 47BECATALOG  0027   MVLOGGER 003E   TOM  0043   BBMCAS   0047   
 47BESVOS 0048   ST1MAT   0057   BBVLAS   0058   MBOBCSS  0059   
 47BEST1ABN   0069  

Production system
D U,,ALLOC,4299,1
LOGON
IEE106I 11.26.37 UNITS ALLOCATED 377 
UNITJOBNAME  ASID   JOBNAME  ASID   JOBNAME  ASID   JOBNAME  ASID
4299*MASTER*    *MASTER* 0001   DUMPSRV  0005   XCFAS0006
4299OMVS 000F   LLA  001A   SMS  0021   JE10 0023
4299CATALOG  0027   ZFS  0028   PNPSPS20 002C   PMKEC249 0031
4299PDMHAD10 0033   MKTS015Y 003D   TNPADW41 006F   DP2010   007D
4299NET  0086   RMF  008E   RMFGAT   0097   ST1MAT   00A6
4299DP6005   00C5   AP1MK41  00C6   DP6004   00C8   AP1ND04  00C9
4299AP1MK02  00CA   AP1BL17  00CB   DP6012   00CC   AP1FF24  00CD
4299AP1BL01  00CF   AP1MK40  00D0   AP1FI05  00D1   AP1MK09  00D3
4299DP2002   00D4   DB1004   00D5   MKTS008  00D6   AP1MK48  00D9
4299MKTS015  00DA   DP2005   00DB   AP1MK06  00DD   AP1FF18  00DE
4299AP1MK10  00E0   AP1MK24  00E1   DP2008   00E2   AP1ND15  00E3
4299MKTS007  00E4   DP6007   00E6   AP1MK12  00E7   AP1MK04  00E8
4299AP1MK26  00E9   ST1JRB   00EA   AP1FF10  00EB   ST1ABN   00ED
4299AP1ND07  00EE   MKTS009  00EF   AP1BLC1  00F0   DP6010   00F1
4299AP1FF22  00F2   AP1MK01  00FA   AP1ND06  00FB   
  

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Elardus Engelbrecht
Sent: Tuesday, February 18, 2014 11:14 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IEF196I Message

Dazzo, Matt wrote:

Looks like we are not collecting smf 19 on either system. 

Good, that will help Allan Staller who kindly asked about SMF 19.

RESPONSE=MVS1 
 IEE457I 10.48.44 UNIT STATUS 010 
 UNIT TYPE STATUSVOLSER VOLSTATE  
 4299 3390 A-R   MSTCAT PRIV/RSDNT
 
Groan! Sorry! I should have asked you try D U,,ALLOC,4299,1. Please do that if 
you don't mind, please.

D GRS,C   
ISG343I 10.50.41 GRS STATUS 770   
NO ENQ RESOURCE CONTENTION EXISTS 
NO LATCH CONTENTION EXISTS

Ok. One less thing to worry. I'm sure there is something else to check, but I 
can't think about it.

Groete / Greetings 
Elardus Engelbrecht 

 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IEF196I Message

[Dazzo, Matt]

The AP1*, ST1*and DP* are tso id's allocating SYS1.BRODCAST. Also are jes2 
ckpt, parmlib, security DB, proclibs

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Tuesday, February 18, 2014 11:38 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IEF196I Message

What are all of the AP* jobs allocating?

The first few lines:

UNITJOBNAME  ASID   JOBNAME  ASID   JOBNAME  ASID   JOBNAME  ASID
4299*MASTER*    *MASTER* 0001   DUMPSRV  0005   XCFAS0006
4299OMVS 000F   LLA  001A   SMS  0021   JE10 0023
4299CATALOG  0027   ZFS  0028   PNPSPS20 002C   PMKEC249 0031
4299PDMHAD10 0033   MKTS015Y 003D   TNPADW41 006F   DP2010   007D
4299NET  0086   RMF  008E   RMFGAT   0097   ST1MAT   00A6

seem reasonable (with the exception DP*, P*, M*,  and ST1MAT). The rest seem 
excessive.
What else is on the volume besides the MSTCAT and IODF?
What does RMF say about Device Busy, IO rate and Cache hit rate?

HTH,

snip
IEE106I 11.26.37 UNITS ALLOCATED 377 
UNITJOBNAME  ASID   JOBNAME  ASID   JOBNAME  ASID   JOBNAME  ASID
4299*MASTER*    *MASTER* 0001   DUMPSRV  0005   XCFAS0006
4299OMVS 000F   LLA  001A   SMS  0021   JE10 0023
4299CATALOG  0027   ZFS  0028   PNPSPS20 002C   PMKEC249 0031
4299PDMHAD10 0033   MKTS015Y 003D   TNPADW41 006F   DP2010   007D
4299NET  0086   RMF  008E   RMFGAT   0097   ST1MAT   00A6
4299DP6005   00C5   AP1MK41  00C6   DP6004   00C8   AP1ND04  00C9
4299AP1MK02  00CA   AP1BL17  00CB   DP6012   00CC   AP1FF24  00CD
4299AP1BL01  00CF   AP1MK40  00D0   AP1FI05  00D1   AP1MK09  00D3
4299DP2002   00D4   DB1004   00D5   MKTS008  00D6   AP1MK48  00D9
4299MKTS015  00DA   DP2005   00DB   AP1MK06  00DD   AP1FF18  00DE
4299AP1MK10  00E0   AP1MK24  00E1   DP2008   00E2   AP1ND15  00E3
4299MKTS007  00E4   DP6007   00E6   AP1MK12  00E7   AP1MK04  00E8
4299AP1MK26  00E9   ST1JRB   00EA   AP1FF10  00EB   ST1ABN   00ED
4299AP1ND07  00EE   MKTS009  00EF   AP1BLC1  00F0   DP6010   00F1
4299AP1FF22  00F2   AP1MK01  00FA   AP1ND06  00FB
/snip
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IEF196I Message

[Dazzo, Matt]

Allen, this volume is supposed to be online and used to the lpar you asked 
about. It's the sandbox where the IOS071I 4299,**,*MASTER*, START PENDING 680 
occurred. That is where the volumes is offline and not used but where the 
message appeared. Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Tuesday, February 18, 2014 12:42 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IEF196I Message

Additional thoughts. The JES CHECKPOINT dataset are also possibly a significant 
issue. Especially if you have not customized MINDORM/MAXHOLD in the JES2 
CKPTDEF.

HTH,

snip

The AP1*, ST1*and DP* are tso id's allocating SYS1.BRODCAST. Also are jes2 
ckpt, parmlib, security DB, proclibs
/snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IEF196I Message

[Dazzo, Matt]

Allen, thanks for taking the time to explain. I'll look into MINDORM/MAXHOLD, 
the BROADCAST dsn is something I have wanted to change for a while. Maybe now 
is a good time to finally do something. 

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Tuesday, February 18, 2014 1:22 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IEF196I Message

Not arguing that point.  

All of this conversation stems from the Other Image attempting to contact 
device 4299 and did not get a response in a timely manner. A timely manner is 
defined by the MIH values in IECIOSxx on the other system. This is mostly a 
good thing, but carried to extremes causes this issue.

1) for whatever reason, MVS1 indicates to other images that device 4299 is 
busy. This can come from a variety of sources.
2) The other images MIH is waiting for a response. If this response is not 
received, the MIH causes the Start Pending message to be issued.

From the viewpoint of MVS1:

1) JESCKPT (if not tuned), hangs a never-ending reserve on the CHKPT volume. 
This will cause the other systems to see a continuous device busy and 
eventually, MIH will trip and the Start Pending message will be issued on the 
other image.
2) As previously noted, SMF19 processing will attempt to contact the device, 
regardless of the online/offline status. If the device is marked busy either by 
reserve processing or just general activity, this will also cause the Start 
Pending. Normally this will occur at startup/shutdown time.
3) BROADCAST uses a very old technology and is a known contributor to excessive 
Device Busy. 

In short, when the device is  *very* busy to MVS1, the OTHER SYSTEM(s) will 
tend to generate start pendings.

The solution is to reduce the DEVICE Busy on MVS1 so that it can respond to the 
other image in a timely manner.  The other choice is to live with it.
  
As indicated above, my plan of attack would be to adjust the MINDORM/MAXHOLD 
values in the JES CKPTDEF, followed by relocating datasets and then the SMF 
processing.

HTH,

/snip
Allen, this volume is supposed to be online and used to the lpar you asked 
about. It's the sandbox where the IOS071I 4299,**,*MASTER*, START PENDING 680 
occurred. That is where the volumes is offline and not used but where the 
message appeared. Thanks Matt
snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IEF196I Message

[Dazzo, Matt]

Wondering if this could be related to BMC Autooper. I noticed when I varied 
another volume online to our sandbox a minute later the start pending came up 
for the 4299 addr. Before the start pending message there some BMC messages. 
Anybody have any ideas? Thanks Matt

V 4001,ONLINE
IEE302I 4001 ONLINE  
SVM0021I POOL TABLE REBUILD DUE TO ENF REQUEST   
SVM2046I CONFIGURATION COLLECTION/REFRESH SUCCESSFULLY COMPLETED 
SVO5052W ERROR ENCOUNTERED IN COSSI423: NO VOLUME LEVEL STATISTICS   
EXIST
SVO5053I RC=04, RS=017   
SVM2019W UNABLE TO ACCESS DATA SET COUNTS IN VTOC SCAN MASTER DATA SET   
SVM2042W NO VOLUME LEVEL STATISTICS EXIST
SVM2042W RC=04, RS=017   
SVM2042W SRI VTOCSCAN_VOLSTAT RC=0004, RS=0011   
IEF196I IEF237I 497A ALLOCATED TO SYS00077   
IEF196I IEF285I   SYS1.CMDLIB  KEPT  
IEF196I IEF285I   VOL SER NOS= TZ13P1.   
IEF196I IOS071I 4299,**,*MASTER*, START PENDING  
IOS071I 4299,**,*MASTER*, START PENDING 156  
IST663I CDINIT REQUEST FROM PCH1CDRM FAILED, SENSE=087D0001 158  

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Tuesday, February 18, 2014 1:22 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IEF196I Message

Not arguing that point.  

All of this conversation stems from the Other Image attempting to contact 
device 4299 and did not get a response in a timely manner. A timely manner is 
defined by the MIH values in IECIOSxx on the other system. This is mostly a 
good thing, but carried to extremes causes this issue.

1) for whatever reason, MVS1 indicates to other images that device 4299 is 
busy. This can come from a variety of sources.
2) The other images MIH is waiting for a response. If this response is not 
received, the MIH causes the Start Pending message to be issued.

From the viewpoint of MVS1:

1) JESCKPT (if not tuned), hangs a never-ending reserve on the CHKPT volume. 
This will cause the other systems to see a continuous device busy and 
eventually, MIH will trip and the Start Pending message will be issued on the 
other image.
2) As previously noted, SMF19 processing will attempt to contact the device, 
regardless of the online/offline status. If the device is marked busy either by 
reserve processing or just general activity, this will also cause the Start 
Pending. Normally this will occur at startup/shutdown time.
3) BROADCAST uses a very old technology and is a known contributor to excessive 
Device Busy. 

In short, when the device is  *very* busy to MVS1, the OTHER SYSTEM(s) will 
tend to generate start pendings.

The solution is to reduce the DEVICE Busy on MVS1 so that it can respond to the 
other image in a timely manner.  The other choice is to live with it.
  
As indicated above, my plan of attack would be to adjust the MINDORM/MAXHOLD 
values in the JES CKPTDEF, followed by relocating datasets and then the SMF 
processing.

HTH,

/snip
Allen, this volume is supposed to be online and used to the lpar you asked 
about. It's the sandbox where the IOS071I 4299,**,*MASTER*, START PENDING 680 
occurred. That is where the volumes is offline and not used but where the 
message appeared. Thanks Matt
snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Build Production I/O Definition File - Error

[Dazzo, Matt]

I am getting an error when building a new IODF file, see the error below. To 
test to see if this was a problem with my new iodf work file, I copied the 
active iodf work file to a test iodf work file. Then I did a Build production 
I/O definition file from my copied test file, I got the same error. So it seems 
it's not my new iodf file but maybe something that is existing or a bug. 
Anybody else run into this? What does this mean and how correct or get around 
it? Thanks Matt


/ Sev Msg. ID  Message Text
_ S   CBDA999I Defect(s) detected in IODF ST1MAT.IODFA1.WORK.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Build Production I/O Definition File - Error

[Dazzo, Matt]

No but I did see this but I really did not understand it, I know the trace is 
an HCD profile option but did not see it in the panels under HCD profile 
options. Does this mean I have to enter the command TRACE ON,ID=IODF somewhere? 
or TRACE ON,ID=IODF,REPAIR. Where would these commands be entered? tks

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lizette Koehler
Sent: Tuesday, January 21, 2014 9:05 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Build Production I/O Definition File - Error

Matt,

In the z/OS V1R12.0 Hardware Configuration Definition (HCD) User's Guide
manual, I found the following
http://pic.dhe.ibm.com/infocenter/zos/v1r12/index.jsp?topic=%2Fcom.ibm.zos.r
12.cbdu100%2Fdiodfdu.htm



Use the ID=IODF parameter of the TRACE command to produce an IODF dump. This
command goes through your IODF, checks it for corrupted data, and writes all
records and defects into the trace data set. If you have a consistent IODF,
you must set the LEVEL parameter to LEVEL=128 or higher to get an output.
Otherwise, an output is only shown if the IODF contains defects.

If your IODF has defects, error message CBDA999I 'Defect(s) detected in IODF
xxx' is displayed, and message CBDA099I is written into the message log data
set. In addition, the trace data set records defects with the string
'Error:' followed by the reason. You can locate the reported defects by
searching to that string in the trace data set.

If no defects are detected in the IODF, message CBDA126I 'TRACE command was
accepted' is given.

If you cannot invoke HCD, and therefore, cannot use the TRACE command any
longer, use a JCL stream for producing a dump. Figure 201 is an example of
the JCL stream for producing an IODF dump.

Make changes to the entries according to your installation requirements.
Figure 201. Example: JCL stream for producing an IODF dump

//WAS$IODF JOB '3259,BOX01,S=C','SMITH',MSGLEVEL=(1,1),
// NOTIFY=WAS,CLASS=A,MSGCLASS=Q,REGION=4096K
//PRTVSAM  EXEC PGM=IDCAMS
//INPUTDD  DSNAME=WAS.IODF02.WORK,DISP=SHR
//OUTPUT   DD  DSNAME=WAS.IODF02.DUMP,UNIT=SYSALLDA,
// SPACE=(CYL,(20,10)),
// DCB=(LRECL=125,BLKSIZE=629,RECFM=VBA),
// DISP=(NEW,CATLG)
//SYSPRINT DD  SYSOUT=*
//SYSINDD  *
 PRINT -
   INFILE(INPUT) -
   DUMP -
   OUTFILE(OUTPUT)
/*
//

Have you done this?

Lizette


 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of Dazzo, Matt
 Sent: Tuesday, January 21, 2014 7:00 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Build Production I/O Definition File - Error
 
 I am getting an error when building a new IODF file, see the error below.
To test to
 see if this was a problem with my new iodf work file, I copied the active
iodf work
 file to a test iodf work file. Then I did a Build production I/O
definition file from my
 copied test file, I got the same error. So it seems it's not my new iodf
file but maybe
 something that is existing or a bug. Anybody else run into this? What does
this mean
 and how correct or get around it? Thanks Matt
 
 
 / Sev Msg. ID  Message Text
 _ S   CBDA999I Defect(s) detected in IODF ST1MAT.IODFA1.WORK.
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Build Production I/O Definition File - Error

[Dazzo, Matt]

Lizette, I entered the command TRACE ON,ID=IODF,REPAIR on the HCD command line. 
I then reran the build and the severe message did NOT come back so I guess the 
issue is resolved? Can you explain? tks Matt 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lizette Koehler
Sent: Tuesday, January 21, 2014 9:05 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Build Production I/O Definition File - Error

Matt,

In the z/OS V1R12.0 Hardware Configuration Definition (HCD) User's Guide
manual, I found the following
http://pic.dhe.ibm.com/infocenter/zos/v1r12/index.jsp?topic=%2Fcom.ibm.zos.r
12.cbdu100%2Fdiodfdu.htm



Use the ID=IODF parameter of the TRACE command to produce an IODF dump. This
command goes through your IODF, checks it for corrupted data, and writes all
records and defects into the trace data set. If you have a consistent IODF,
you must set the LEVEL parameter to LEVEL=128 or higher to get an output.
Otherwise, an output is only shown if the IODF contains defects.

If your IODF has defects, error message CBDA999I 'Defect(s) detected in IODF
xxx' is displayed, and message CBDA099I is written into the message log data
set. In addition, the trace data set records defects with the string
'Error:' followed by the reason. You can locate the reported defects by
searching to that string in the trace data set.

If no defects are detected in the IODF, message CBDA126I 'TRACE command was
accepted' is given.

If you cannot invoke HCD, and therefore, cannot use the TRACE command any
longer, use a JCL stream for producing a dump. Figure 201 is an example of
the JCL stream for producing an IODF dump.

Make changes to the entries according to your installation requirements.
Figure 201. Example: JCL stream for producing an IODF dump

//WAS$IODF JOB '3259,BOX01,S=C','SMITH',MSGLEVEL=(1,1),
// NOTIFY=WAS,CLASS=A,MSGCLASS=Q,REGION=4096K
//PRTVSAM  EXEC PGM=IDCAMS
//INPUTDD  DSNAME=WAS.IODF02.WORK,DISP=SHR
//OUTPUT   DD  DSNAME=WAS.IODF02.DUMP,UNIT=SYSALLDA,
// SPACE=(CYL,(20,10)),
// DCB=(LRECL=125,BLKSIZE=629,RECFM=VBA),
// DISP=(NEW,CATLG)
//SYSPRINT DD  SYSOUT=*
//SYSINDD  *
 PRINT -
   INFILE(INPUT) -
   DUMP -
   OUTFILE(OUTPUT)
/*
//

Have you done this?

Lizette


 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
 Behalf Of Dazzo, Matt
 Sent: Tuesday, January 21, 2014 7:00 AM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: Build Production I/O Definition File - Error
 
 I am getting an error when building a new IODF file, see the error below.
To test to
 see if this was a problem with my new iodf work file, I copied the active
iodf work
 file to a test iodf work file. Then I did a Build production I/O
definition file from my
 copied test file, I got the same error. So it seems it's not my new iodf
file but maybe
 something that is existing or a bug. Anybody else run into this? What does
this mean
 and how correct or get around it? Thanks Matt
 
 
 / Sev Msg. ID  Message Text
 _ S   CBDA999I Defect(s) detected in IODF ST1MAT.IODFA1.WORK.
 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Flascopy SE

[Dazzo, Matt]

We currently use flashcopy for backups, control cards below. Processing is 
instantaneous. It establishes the FC relationship, creating  a pointer table, 
including bitmap, for target volume.
COPY FULL   -
   INDDNAME(INVOL1)-
  OUTDDNAME(OUTDD1)   -
   DUMPCONDITIONING-
  FCNOCOPY

Then run backups against the flashed volume

DUMP FULL   -
 INDDNAME(INVOL1)-Flash 
Volume
OUTDDNAME(OUTDD1)   -Backup Tape
OPTIMIZE(4) -   
 Read 1 CYL at a time
CANCELERROR   
Cancel if I/O errors

Then Re-Initializes Flash volumes with ICKDSF (wipes data off and creates 
Indexed VTOC) ready for next weeks backups.


We will be going to flashcopy SE in the near future. From reading is seems all 
I need to add is key word FCSETGTOK(FAIL), indicates flash to fail if the 
storage repository is out of space.

Do we have to initialize flashcopy volumes like previously?
Will we have to change all our current flashcopy jobs or create new ones?

If anyone could speak about their experiences and how we would have to change 
our current process.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IODF Channel Assignment

[Dazzo, Matt]

We have a simple config here, 1 lar and FICON cables run directly to CPU. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mike Schwab
Sent: Wednesday, January 01, 2014 7:19 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: IODF Channel Assignment

The total number of paths must be kept at 256 or less.
With 2 cascading directors:
(LPAR - CNTRL1) * (CNTRL1 - CNTRL2) * (CNTRL2 - DASD).
4 * 8 * 8 would be 256.
With a single director 16 * 16 is possible but not usually needed.


On Tue, Dec 31, 2013 at 8:26 AM, Dazzo, Matt mda...@pch.com wrote:
 We have a new IBM DS8870 that I have to define to the IODF. We are going to 
 have (16) 2107 type LCU's controllers and about 3k total devices defined to 
 those 16 LCU's. We also have 16 FICON channels available to use, I was 
 thinking about defining 8 channels to each LCU.

 We currently have 4 channels defined to each LCU on our existing Shark 
 device. We do not experience any IO delays or contention with this config.

 My experience in this area as you can tell is a little limited. As far as 
 channels are concerned is the motto 'the more the merrier' apply here? Or 
 should I follow the existing standard of 4 channels to each LCU?  Any 
 standard to follow?

 Thanks Matt

 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



-- 
Mike A Schwab, Springfield IL USA
Where do Forest Rangers go to get away from it all?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

IODF Channel Assignment

[Dazzo, Matt]

We have a new IBM DS8870 that I have to define to the IODF. We are going to 
have (16) 2107 type LCU's controllers and about 3k total devices defined to 
those 16 LCU's. We also have 16 FICON channels available to use, I was thinking 
about defining 8 channels to each LCU.

We currently have 4 channels defined to each LCU on our existing Shark device. 
We do not experience any IO delays or contention with this config.

My experience in this area as you can tell is a little limited. As far as 
channels are concerned is the motto 'the more the merrier' apply here? Or 
should I follow the existing standard of 4 channels to each LCU?  Any standard 
to follow?

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: JES2 Proclibs

[Dazzo, Matt]

Thanks all for your input, I will test the options and make a decision. Is 
PDS86 file#182 on the CBT?

tks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mark Zelden
Sent: Monday, December 09, 2013 12:33 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: JES2 Proclibs

On Mon, 9 Dec 2013 11:01:33 -0500, Dazzo, Matt mda...@pch.com wrote:

We are running zos1.13, jes2. I have a production proclib in the jes2 proclib 
search string. This proclib is a pds that is running out of directory blocks. 
There are no  enque's on the proclib except for when someone is working in it. 
Finally the question, can I just create a new larger proclib, copy of the 
members over and then rename the pds's or will JES2 become very unhappy? IPL 
required?

Thanks Matt

This has been covered in the archives, including caveats many times.  
I know I have posted more than a couple of times. 

If you have dynamic PROCLIBs, you can remove / add a new one (copy
old to new etc., volser doesn't matter, delete old from JES2, add new).

If you have JES2 proclibs, do yourself a favor and download and use
PDS86 (or commercial product if you have one) to SIMPLY increase the
directory blocks.   This will move some members to expand the directory
and the PDS doesn't even need to be closed / reopened by JES2.  You
can do this with the dynamic proclibs also as a simple solution.  If you want
to force the reopen (if it makes you feel better), use $TPROCLIB(*). 

Allocating a new one / renaming if the PROCLIB if in JES2... not even
sure that works without a bounce.  The /*JOBPARM trick will reopen
the PROCxx DD, but the extents are already known.  I have always
bounced JES2 when doing this.  I've only used the trick after a compress
of a PROCLIB PDS.  

Also note the trick does nothing if this is a MSTRJCLxx PROCLIB, nor
does bouncing JES2.  So if the proc is started via SUB=MSTR, forget the
rename / trick. 

Also, a previous post mentions no ENQ.  That may or may not be true. 
In my shop I changed the PPT to the ENQ as soon as it was supported to
keep newbies (and even some experienced sysprogs) and bad HSM rules
or DASD mgmt jobs from ever trying to delete or move a PROCLIB.

Finally, you may want to consider PDSE for the future to remove all
the directory / compress considerations PDS PROCLIBs have. 

Cheers,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS  
ITIL v3 Foundation Certified   
mailto:m...@mzelden.com   
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://search390.techtarget.com/ateExperts/
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Missing Fix Report Question

[Dazzo, Matt]

I believe Kurt's theory would be closest to what actually happened. I did pull 
only 1yr of hold data before running the missing fix report. Then when pulling 
down the 1st batch of ptf's I specified the specific ptf's plus pre and corecs. 
Is there a way to determine when I pulled down the second set of PTF's what 
hold data came down with it? The hold data is   in a unix file and is 
unreadable when browsing.

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kurt Quackenbush
Sent: Monday, December 02, 2013 10:50 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Missing Fix Report Question

Here's my theory:  You said you pulled down 1yr of hold data.  Only 
the 2 year HOLDDATA file contains Fix Category HOLDs, therefore, the 
first report you ran didn't use the latest Fix Category HOLDs.  You then 
pulled down and applied the missing PTFs and reran the report, being 
surprised to find new missing PTFs.  How did you obtain the PTFs?  Most 
likely the 2 year HOLDDATA file was delivered with those PTFs, which 
contains Fix Category HOLDs.  When you reran the report, you were 
finally using the latest and greatest HOLDs, hence the additional 
entries in the report.

Kurt Quackenbush -- IBM, SMP/E Development

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Missing Fix Report Question

[Dazzo, Matt]

We are getting a new DS8870 2424-961 device in the near future. I pulled down 
1yr of hold data and ran a missing fixcat report for device
IBM.Device.Disk.DS8000-2107. This produced a report requiring 21 pft's be 
applied. I pulled down and applied the 21 ptf's. I reran the missing fixcat 
report expecting to see no ptf's required. But to my surprise the fixcat report 
produced a list of additional 24 ptf's. What am I missing here, why would the 
fixcat report produce additional ptf requirements? By the way we are running 
zos1.13 at RSU level 0713.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

MGET ERROR

[Dazzo, Matt]

The ftp commands provided by IBM below once worked with zos1.11 but now on 
zos1.13 it does not, can't be 100% sure but I believe that's when it stopped 
working. I did the upgrade from 1.11 to 1.13 so I know there were no changes 
made to the TCPIP config files. I tried adding in keyword SITE LISTSUBDIR  but 
I got the same error.

What I have to do to get the files is modify the commands to cd into SMPPTFIN 
and SMPHOLD and do a get on the file in each folder. What am I missing here? 
tks Matt


cd 2013081959238/PROD
lcd /u/st1mat/IBM/
binary
lmkdir U01302168
lmkdir U01302168/SMPPTFIN
lmkdir U01302168/SMPHOLD
lcd U01302168
mget *  (REPLACE
lcd SMPPTFIN
mget SMPPTFIN/* (REPLACE
lcd ../SMPHOLD
mget SMPHOLD/*  (REPLACE
quit
/*

EZA1736I  cd 2013081959238/PROD
EZA1701I  CWD 2013081959238/PROD
250 CWD command successful.
EZA1460I Command:
EZA1736I  lcd /u/st1mat/IBM/
EZA2581I HFS directory /u/st1mat/IBM/ is the current working directory.
EZA1460I Command:
EZA1736I  binary
EZA1701I  TYPE I
200 Type set to I.
EZA1460I Command:
EZA1736I  lmkdir U01302168
EZA2593I HFS directory /u/st1mat/IBM/U01302168 created.
EZA1460I Command:
EZA1736I  lmkdir U01302168/SMPPTFIN
EZA2593I HFS directory /u/st1mat/IBM/U01302168/SMPPTFIN created.
EZA1460I Command:
EZA1736I  lmkdir U01302168/SMPHOLD
EZA2593I HFS directory /u/st1mat/IBM/U01302168/SMPHOLD created.
EZA1460I Command:
EZA1736I  lcd U01302168
EZA2581I HFS directory /u/st1mat/IBM/U01302168 is the current working directory.
EZA1460I Command:
EZA1736I  mget *  (REPLACE
EZA1701I  TYPE A
200 Type set to A.
EZA1701I  PORT 27,1,39,74,4,141
200 PORT command successful.
EZA1701I  NLST *
150 Opening ASCII mode data connection for file list.
226 Transfer complete.
EZA1701I  TYPE I
200 Type set to I.
EZA1701I  PORT 27,1,39,74,4,142
200 PORT command successful.
EZA1701I  RETR GIMPAF.XML
150 Opening BINARY mode data connection for GIMPAF.XML.
226 Transfer complete.
EZA1617I 2720 bytes transferred in 0.270 seconds.  Transfer rate 10.07 Kbytes/se
EZA1701I  PORT 27,1,39,74,4,143
200 PORT command successful.
EZA1701I  RETR GIMPAF.XSL
150 Opening BINARY mode data connection for GIMPAF.XSL.
226 Transfer complete.
EZA1617I 4800 bytes transferred in 0.320 seconds.  Transfer rate 15.00 Kbytes/se
EZA2554W Get fails: /u/st1mat/IBM/U01302168/SMPHOLD is a directory.
EZA1735I Std Return Code = 22000, Error Code = 00018
EZA1701I  QUIT
221 Goodbye.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: z10 Memory

[Dazzo, Matt]

I'd be very leery of 3rd party vendor hardware support. That was tried here 
once to try and save money, our ATL/VTS device was down for 5 days before they 
admitted they were lost. We had to have IBM come in and save the day, that took 
another 2 days. Hence, the manager is not here any longer, an outage like that 
is not taken too kindly. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Staller, Allan
Sent: Friday, August 09, 2013 2:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: z10 Memory

I don't know about 3rd party support, but if you have minimal storage config 
(32GB) a different chip is used.
The upgrade from 32GB to 32GB requires replacement of *ALL* memory chips and a 
disruptive outage.

HTH,
snip
Since IBM dropped the z10 from marketing, it seems impossible to get anything 
done to the box from them.  Does anyone know if it is possible to acquire 
memory, from a third party, and have it put in the z10 and be actually 
operational?   I'm told everything is done via microcode now and IBM won't even 
update that on z10's...the memory will be there but the microcode isn't set to 
use it.
/snip

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Infoprint Manager

[Dazzo, Matt]

Several years ago there was a desktop tool which I believe was called 
'infoprint manager' (a freebie by the way) that our operations staff used to 
control IBM 6500 printers remotely over IP. When searching for it today there 
are a lot of hits for 'inforprint manager' but I can't find a link for 
downloading the free tool. Does anyone know if this tool is available and where 
I can download it from. Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Infoprint Manager

[Dazzo, Matt]

Of course after sending the help request I found it. For anyone who might be 
interested here is the link. 

http://www.infoprintsolutionscompany.com/internet/dcfdata.nsf/WebR10/P4000128

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Wednesday, July 31, 2013 10:09 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Infoprint Manager

Several years ago there was a desktop tool which I believe was called 
'infoprint manager' (a freebie by the way) that our operations staff used to 
control IBM 6500 printers remotely over IP. When searching for it today there 
are a lot of hits for 'inforprint manager' but I can't find a link for 
downloading the free tool. Does anyone know if this tool is available and where 
I can download it from. Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PDSE Issue

[Dazzo, Matt]

tks Leo

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Leonardo Vaz
Sent: Tuesday, July 02, 2013 3:28 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PDSE Issue

If it is in the linklist, it is not SMSPDSE1 that takes care of this library, 
it is SMSPDSE, meaning that it is possible that you would need to IPL the 
system to have that resolved.

Fortunately, we had issues with PDSE linklist libraries in the past and we 
could use the same old technique to solve the issue by removing and 
re-inserting the library in the linklist and LLA, that released the latch for 
us so I believe it will do it for you too:

- Take that dataset out of LLA * F LLA,UPDATE=xx- Member with 
REMOVE(SYSVIEW.R137.CNM4BLOD.SYS1)

* SETPROG LNKLST,DEFINE,NAME=TEMP1,COPYFROM=CURRENT
* SETPROG LNKLST,DELETE,NAME=TEMP1,DSN=SYSVIEW.R137.CNM4BLOD.SYS1
* SETPROG LNKLST,ADD,NAME=TEMP1,DSN=SYSVIEW.R137.CNM4BLOD.SYS1
* SETPROG LNKLST,ACTIVATE,NAME=TEMP1
* SETPROG LNKLST,UPDATE,JOB=*

I hope this doesn't happen to you on your production LPARs as it did with us. 
After that we removed that library from the linklist to never put it back there 
=]

Regards,
Leo


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Tuesday, July 02, 2013 1:39 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PDSE Issue

Leo, yes

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Leonardo Vaz
Sent: Tuesday, July 02, 2013 12:07 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PDSE Issue

Hello Matt,

Is SYSVIEW.R137.CNM4BLOD.SYS1 in the LINKLIST?

We had a VERY simmilar issue, with the same sysview library, concidence??

Regards,
Leo  

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Tuesday, July 02, 2013 11:47 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: PDSE Issue

Having a PDSE issue, fortunately it's on our sand box which is a monoplex 
system. Could be a good learning opportunity since we have never encountered 
anything like this before. I was attempting to recycle cics and it would not 
come down, unable to cancel the task either. Started fishing and found the 
following below, tried the FREELATCH but no help. I also restarted task PDSE1 
which did not free the latch either. Anything else I can try short of an IPL? 
tks Matt

V SMS,PDSE,ANALYSIS
IGW031I PDSE ANALYSIS  Start of Report(SMSPDSE ) 879
++ Unable to latch ASRBULCH:7FF94DC0
   Latch:7FF94DD8 Holder(006A:00AFF208)
   Holding Started Task:TECHCICS
-data set name-- -vsgt---
SYSVIEW.R137.CNM4BLOD.SYS1   01-SYS002-000614
++ Unable to latch HL1b:7FF67600
   Latch:7FF67610 Holder(006A:00AFF208) IGWLHPRG
   Holding Started Task:TECHCICS
PDSE ANALYSIS  End of Report(SMSPDSE )

VARY SMS,PDSE1,FREELATCH(7FF67610,006A,00AFF208),RETRIES(5)

IGW032I PDSE FREELATCH  Start of Report 889
++ Free latch failed latch:7FF94DD8 is either broken or not a latch
PDSE FREELATCH  End of Report


VARY SMS,PDSE1,FREELATCH(7FF94DD8,006A,00AFF208),RETRIES(5)

IGW032I PDSE FREELATCH  Start of Report 889
++ Free latch failed latch:7FF94DD8 is either broken or not a latch
PDSE FREELATCH  End of Report



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

PDSE Issue

[Dazzo, Matt]

Having a PDSE issue, fortunately it's on our sand box which is a monoplex 
system. Could be a good learning opportunity since we have never encountered 
anything like this before. I was attempting to recycle cics and it would not 
come down, unable to cancel the task either. Started fishing and found the 
following below, tried the FREELATCH but no help. I also restarted task PDSE1 
which did not free the latch either. Anything else I can try short of an IPL? 
tks Matt

V SMS,PDSE,ANALYSIS
IGW031I PDSE ANALYSIS  Start of Report(SMSPDSE ) 879
++ Unable to latch ASRBULCH:7FF94DC0
   Latch:7FF94DD8 Holder(006A:00AFF208)
   Holding Started Task:TECHCICS
-data set name-- -vsgt---
SYSVIEW.R137.CNM4BLOD.SYS1   01-SYS002-000614
++ Unable to latch HL1b:7FF67600
   Latch:7FF67610 Holder(006A:00AFF208) IGWLHPRG
   Holding Started Task:TECHCICS
PDSE ANALYSIS  End of Report(SMSPDSE )

VARY SMS,PDSE1,FREELATCH(7FF67610,006A,00AFF208),RETRIES(5)

IGW032I PDSE FREELATCH  Start of Report 889
++ Free latch failed latch:7FF94DD8 is either broken or not a latch
PDSE FREELATCH  End of Report


VARY SMS,PDSE1,FREELATCH(7FF94DD8,006A,00AFF208),RETRIES(5)

IGW032I PDSE FREELATCH  Start of Report 889
++ Free latch failed latch:7FF94DD8 is either broken or not a latch
PDSE FREELATCH  End of Report



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: PDSE Issue

[Dazzo, Matt]

Leo, yes

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Leonardo Vaz
Sent: Tuesday, July 02, 2013 12:07 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PDSE Issue

Hello Matt,

Is SYSVIEW.R137.CNM4BLOD.SYS1 in the LINKLIST?

We had a VERY simmilar issue, with the same sysview library, concidence??

Regards,
Leo  

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dazzo, Matt
Sent: Tuesday, July 02, 2013 11:47 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: PDSE Issue

Having a PDSE issue, fortunately it's on our sand box which is a monoplex 
system. Could be a good learning opportunity since we have never encountered 
anything like this before. I was attempting to recycle cics and it would not 
come down, unable to cancel the task either. Started fishing and found the 
following below, tried the FREELATCH but no help. I also restarted task PDSE1 
which did not free the latch either. Anything else I can try short of an IPL? 
tks Matt

V SMS,PDSE,ANALYSIS
IGW031I PDSE ANALYSIS  Start of Report(SMSPDSE ) 879
++ Unable to latch ASRBULCH:7FF94DC0
   Latch:7FF94DD8 Holder(006A:00AFF208)
   Holding Started Task:TECHCICS
-data set name-- -vsgt---
SYSVIEW.R137.CNM4BLOD.SYS1   01-SYS002-000614
++ Unable to latch HL1b:7FF67600
   Latch:7FF67610 Holder(006A:00AFF208) IGWLHPRG
   Holding Started Task:TECHCICS
PDSE ANALYSIS  End of Report(SMSPDSE )

VARY SMS,PDSE1,FREELATCH(7FF67610,006A,00AFF208),RETRIES(5)

IGW032I PDSE FREELATCH  Start of Report 889
++ Free latch failed latch:7FF94DD8 is either broken or not a latch
PDSE FREELATCH  End of Report


VARY SMS,PDSE1,FREELATCH(7FF94DD8,006A,00AFF208),RETRIES(5)

IGW032I PDSE FREELATCH  Start of Report 889
++ Free latch failed latch:7FF94DD8 is either broken or not a latch
PDSE FREELATCH  End of Report



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

DASDCALC

[Dazzo, Matt]

So my Win XP work station machine is gone, not my choice. So I am looking for a 
replacement tool for the indispensable DASDCALC tool distributed my Central 
coast software. I use this tool regularly and it makes my life very easy.  I 
cannot seem to get it working on Windows 7 although I read some others have. Of 
course I could use the good old fashion calculator as a means to survive but 
that seems too old fashioned.

Has anyone found a replacement tool or can u provide some tips on how you got 
it working on Win 7.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: DASDCALC

[Dazzo, Matt]

Mark, running Win7 SP1 64 bit

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mark Zelden
Sent: Thursday, February 14, 2013 10:55 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: DASDCALC

On Thu, 14 Feb 2013 10:46:56 -0500, Dazzo, Matt mda...@pch.com wrote:

So my Win XP work station machine is gone, not my choice. So I am looking for 
a replacement tool for the indispensable DASDCALC tool distributed my Central 
coast software. I use this tool regularly and it makes my life very easy.  I 
cannot seem to get it working on Windows 7 although I read some others have. 
Of course I could use the good old fashion calculator as a means to survive 
but that seems too old fashioned.

Has anyone found a replacement tool or can u provide some tips on how you got 
it working on Win 7.


I never re-installed on my work machine when I got a new one last year.
My machine is Win7 SP1 32 bit.  I just did. I right clicked and did install
as administrator and it installed fine and runs fine without having to set any
win-doze compatibility settings for prior versions.  Are you running 64-bit?

Mark 
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: DASDCALC

[Dazzo, Matt]

Install fine, get the following error with starting it. 

ERROR - The version of this file is not compatible with the version of windows. 
Check your computers system information to see whether you need an x86 32 bit 
or x64 bit version of the program. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of John P Kalinich
Sent: Thursday, February 14, 2013 11:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: DASDCALC

What specific error are you getting on the install?

Regards,
John K



From:   Dazzo, Matt mda...@pch.com
To: IBM-MAIN@listserv.ua.edu
Date:   02/14/2013 09:47 AM
Subject:DASDCALC
Sent by:IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu



So my Win XP work station machine is gone, not my choice. So I am looking
for a replacement tool for the indispensable DASDCALC tool distributed my
Central coast software. I use this tool regularly and it makes my life very
easy.  I cannot seem to get it working on Windows 7 although I read some
others have. Of course I could use the good old fashion calculator as a
means to survive but that seems too old fashioned.

Has anyone found a replacement tool or can u provide some tips on how you
got it working on Win 7.

Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: DASDCALC

[Dazzo, Matt]

Me too, it's a little clumsy but it works. Thanks

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mark Pace
Sent: Thursday, February 14, 2013 12:40 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: DASDCALC

I already have the XP mode virtual machine installed in my Win7-64
machine.  I copied the install to the XP vm and ran it there. It works fine
in the XP vm.


On Thu, Feb 14, 2013 at 11:58 AM, Mark Pace pacemainl...@gmail.com wrote:

 Just downloaded and tried on Windows 7-64 bit.  I get the same capability
 error.
 I tried changing the Properties to Run the program in compatibility mode
 Windows XP service pack 3.  No change to the error.


 On Thu, Feb 14, 2013 at 11:48 AM, Miklos Szigetvari 
 miklos.szigetv...@isis-papyrus.com wrote:

 Hi

 Just downloaded  version 1.3.0 from 2006 , it works for me in Windows 7


 On 14.02.2013 16:46, Dazzo, Matt wrote:

 So my Win XP work station machine is gone, not my choice. So I am
 looking for a replacement tool for the indispensable DASDCALC tool
 distributed my Central coast software. I use this tool regularly and it
 makes my life very easy.  I cannot seem to get it working on Windows 7
 although I read some others have. Of course I could use the good old
 fashion calculator as a means to survive but that seems too old fashioned.

 Has anyone found a replacement tool or can u provide some tips on how
 you got it working on Win 7.

 Thanks Matt

 --**--**
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN



 --**--**
 --
 For IBM-MAIN subscribe / signoff / archive access instructions,
 send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




 --
 The postings on this site are my own and don't necessarily represent
 Mainline's positions or opinions

 Mark D Pace
 Senior Systems Engineer
 Mainline Information Systems






-- 
The postings on this site are my own and don't necessarily represent
Mainline's positions or opinions

Mark D Pace
Senior Systems Engineer
Mainline Information Systems

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: SMP Apply Question

[Dazzo, Matt]

Kurt, thanks that's what I decided to do. Too many ptf's to exclude and I 
thought maybe we would use it later at some point. 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kurt Quackenbush
Sent: Friday, January 18, 2013 8:31 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SMP Apply Question

On 1/17/2013 10:56 AM, Dazzo, Matt wrote:
 I have a shared global zone between lpars with targets for each lpar.
 I am applying RSU maint, one lpar has osmf on it and one does not.
 What I would like to do is on one lpar is exclude applying the ptf's
 for the fmids pertaining to osmf but apply all the other ptf's in the
 RSU package I pulled down.  I have looked in the smp commands guide
 on the apply command and saw that the you can't EXCLUDE by FMID? Any
 suggestions on excluding ptf's for certain FMID's?

You're right, you can't EXCLUDE by FMID.  You'll have to exclude 
individual PTFs.

However, why do you want to exclude them?  If z/OSMF is installed in the 
subject LPAR, why not keep the service current and in sync with z/OS, 
even if you aren't running z/OSMF?  You may decide later to run it.  As 
a matter of fact, due to requisites between z/OS and z/OSMF, you may be 
forced to APPLY them anyway.  That is, there may be PTFs in z/OS that 
contain ++IFREQ for PTFs in z/OSMF.

Kurt Quackenbush -- IBM, SMP/E Development

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN